[Servercert-wg] [Voting Begins] Ballot SC-75 v3 - Pre-sign linting
Jozef Nigut
Jozef.Nigut at disig.sk
Wed Jun 26 08:17:52 UTC 2024
Disig votes "yes" on ballot SC-75v3 Pre-sign linting.
Regards
Jozef Nigut
From: Servercert-wg <servercert-wg-bounces at cabforum.org> On Behalf Of Dimitris
Zacharopoulos (HARICA) via Servercert-wg
Sent: Wednesday, June 19, 2024 12:13 PM
To: CA/B Forum Server Certificate WG Public Discussion List
<servercert-wg at cabforum.org>
Subject: [Servercert-wg] [Voting Begins] Ballot SC-75 v3 - Pre-sign linting
Voting begins for this ballot.
SC-75 v3 Pre-sign linting
Summary
There have been numerous compliance incidents publicly disclosed by CAs in
which they failed to comply with the technical requirements described in
standards associated with the issuance and management of publicly-trusted TLS
Certificates. However, the industry has developed open-source tools, linters,
that are free to use and can help CAs avoid certificate misissuance. Using
such linters before issuing a precertificate from a Publicly-Trusted CA
(pre-issuance linting) can prevent the mis-issuance in a wide variety of
cases.
The following motion has been proposed by Dimitris Zacharopoulos of HARICA and
endorsed by Corey Bonnell of Digicert and Ben Wilson of Mozilla.
You can view the GitHub pull request representing this ballot here
<https://github.com/cabforum/servercert/pull/518> .
Motion Begins
MODIFY the "Baseline Requirements for the Issuance and Management of
Publicly-Trusted TLS Server Certificates" based on Version 2.0.5 as specified
in the following redline:
*
https://github.com/cabforum/servercert/compare/20af1b271f2b689344ae353d3e78dc6b772199db...d809c41bc063109e15d46bfe1b5ad6403d823381
Motion Ends
This ballot proposes a Final Maintenance Guideline. The procedure for approval
of this ballot is as follows:
Discussion (at least 7 days)
* Start time: 2024-06-12 06:30:00 UTC
* End time: on or after 2024-06-19 06:30:00 UTC
Vote for approval (7 days)
* Start time: 2024-06-19 10:00:00 UTC
* End time: 2024-06-26 10:00:00 UTC
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240626/69d55135/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5825 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240626/69d55135/attachment-0001.p7s>
More information about the Servercert-wg
mailing list