<div dir="ltr">Firmaprofesional votes "YES" on Ballot SC10 Establishing the Network Security Subcommittee of the SCWG<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><table style="font-family:arial;font-size:small"><tbody><tr><td><br></td><td style="color:rgb(153,153,153)"><p><font face="Arial"><b>Chema López González<br>Director Área de Innovación, Cumplimiento y Tecnología<br>AC Firmaprofesional S.A.<br></b></font></p></td></tr><tr><td><br></td><td><br><span style="color:rgb(153,153,153);font-family:Arial">Av. Torre Blanca, 57.</span> <br><font color="#999999" style="color:rgb(153,153,153)"><span style="font-family:Arial">Edificio ESADECREAPOLIS - Local M2</span><br></font><blockquote style="padding:0px;border-style:none;margin:0px 0px 0px 40px"></blockquote><span style="color:rgb(153,153,153);font-family:Arial"><div style="text-align:-webkit-auto">08173 Sant Cugat del Vallès. Barcelona.</div></span><div style="text-align:-webkit-auto"><font color="#999999">Tel: </font><a value="+34934774245" style="color:rgb(17,85,204)">93.477.42.45</a><font color="#999999"> /</font><font color="#3333ff"> <a style="color:rgb(17,85,204)">666.429.224</a></font></div></td></tr></tbody></table><br style="font-family:arial;font-size:small"><div style="font-family:arial;font-size:small">El contenido de este mensaje y de sus anexos es confidencial. Si no es el destinatario, le hacemos saber que está prohibido utilizarlo, divulgarlo y/o copiarlo sin tener la autorización correspondiente. Si ha recibido este mensaje por error, le agradeceríamos que lo haga saber inmediatamente al remitente y que proceda a destruir el mensaje.</div></div></div></div></div></div></div></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr">El mié., 3 oct. 2018 a las 18:46, Peter Miškovič via Servercert-wg (<<a href="mailto:servercert-wg@cabforum.org">servercert-wg@cabforum.org</a>>) escribió:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Disig votes "YES" on Ballot SC10 Establishing the Network Security Subcommittee of the SCWG<br>
<br>
Regards<br>
Peter<br>
<br>
<br>
-----Original Message-----<br>
From: Servercert-wg <<a href="mailto:servercert-wg-bounces@cabforum.org" target="_blank">servercert-wg-bounces@cabforum.org</a>> On Behalf Of <a href="mailto:servercert-wg-request@cabforum.org" target="_blank">servercert-wg-request@cabforum.org</a><br>
Sent: Thursday, September 20, 2018 6:03 PM<br>
To: <a href="mailto:servercert-wg@cabforum.org" target="_blank">servercert-wg@cabforum.org</a><br>
Subject: Servercert-wg Digest, Vol 3, Issue 52<br>
<br>
Send Servercert-wg mailing list submissions to<br>
<a href="mailto:servercert-wg@cabforum.org" target="_blank">servercert-wg@cabforum.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://cabforum.org/mailman/listinfo/servercert-wg" rel="noreferrer" target="_blank">http://cabforum.org/mailman/listinfo/servercert-wg</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:servercert-wg-request@cabforum.org" target="_blank">servercert-wg-request@cabforum.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:servercert-wg-owner@cabforum.org" target="_blank">servercert-wg-owner@cabforum.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific than "Re: Contents of Servercert-wg digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Ballot SC10 ? Establishing the Network Security Subcommittee<br>
of the SCWG (Dimitris Zacharopoulos)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Thu, 20 Sep 2018 19:02:24 +0300<br>
From: Dimitris Zacharopoulos <<a href="mailto:jimmy@it.auth.gr" target="_blank">jimmy@it.auth.gr</a>><br>
To: CA/B Forum Server Certificate WG Public Discussion List<br>
<<a href="mailto:servercert-wg@cabforum.org" target="_blank">servercert-wg@cabforum.org</a>><br>
Subject: [Servercert-wg] Ballot SC10 ? Establishing the Network<br>
Security Subcommittee of the SCWG<br>
Message-ID: <<a href="mailto:ebb8b7d6-4310-bc7e-7e16-258d6e9bf8ef@it.auth.gr" target="_blank">ebb8b7d6-4310-bc7e-7e16-258d6e9bf8ef@it.auth.gr</a>><br>
Content-Type: text/plain; charset="utf-8"; Format="flowed"<br>
<br>
<br>
*Purpose of Ballot*<br>
<br>
The Network Security Working Group of the CA/Browser Forum expired on June 19, 2018 under the terms of Ballot 203 which established the Working Group. The Server Certificate Working Group wishes to establish a Network Security Subcommittee pursuant to Bylaws 5.3.1(e).<br>
<br>
The following motion has been proposed by Dimitris Zacharopoulos of HARICA and endorsed by Tim Hollebeek of DigiCert and Wayne Thayer of Mozilla.<br>
<br>
*<br>
*<br>
<br>
*--- MOTION BEGINS ---*<br>
<br>
The Server Certificate Working Group hereby establishes the *Network <br>
Security Subcommittee* as an official Subcommittee.<br>
<br>
*1. Mission: *To improve security policies and practices for Certificate <br>
Management Systems encoded in the guidelines maintained by the SCWG.<br>
<br>
*<br>
2. End Date: *This Subcommittee shall continue until it is dissolved by <br>
a vote of the SCWG<br>
<br>
*3. Deliverables: *The Network Security Subcommittee shall propose <br>
ballots to the SCWG to improve the minimal security standards within the <br>
mission defined above This includes modifying the existing Network and <br>
Certificate System Security Requirements (NCSSR) or to create new <br>
requirements, guidelines, or best practices. Among other activities, the <br>
Network Security Subcommittee shall perform security analysis on typical <br>
CA Management Systems offering options to the Server Certificate Working <br>
Group for establishing minimal security standards. Risk analysis will <br>
also be used to provide a better understanding of threats and <br>
vulnerabilities in Certificate Management Systems. This process can be <br>
used to provide better reasoning and justification of existing or future <br>
security guidelines.<br>
<br>
*4. Participation: *Any member of the SCWG is eligible and may declare <br>
their participation in theNetwork Security Subcommittee by requesting to <br>
be added to the mailing list.<br>
<br>
*5. Chair: *Ben Wilson**shall be the initial Chair of the Network <br>
Security Subcommittee.The Subcommittee may change its Chair from time to <br>
time by consensus of the Members participating in the Subcommittee or by <br>
voting method chosen by the Members by consensus.<br>
<br>
*6. Communication: *Subcommittee communications and documents shall be <br>
posted on mailing-lists where the mail-archives are publicly accessible, <br>
and the Subcommittee shall publish minutes of its meetings.<br>
<br>
*7. Effect of SCWG Charter or Forum Bylaws Amendment for Subcommittees: <br>
*In the event the SCWG Charter or the Forum Bylaws is amended to add <br>
general rules governing Chartered Working Group Subcommittees and how <br>
they operate (?General Rules?), the provisions of the General Rules <br>
shall take precedence over this charter.<br>
<br>
*--- MOTION ENDS ---*<br>
<br>
The procedure for approval of this ballot is as follows:<br>
<br>
*Ballot SC10 ? Establishing the Network Security Subcommittee of the SCWG* <br>
<br>
*Start time (22:00 UTC)*<br>
<br>
<br>
<br>
*End time (22:00 UTC)*<br>
<br>
Discussion (7 days)<br>
<br>
<br>
<br>
20 September 2018<br>
<br>
<br>
<br>
27 September 2018<br>
<br>
Vote for approval (7 days)<br>
<br>
<br>
<br>
27 September 2018<br>
<br>
<br>
<br>
4 October 2018<br>
<br>
<br>
Additional Information (not part of Ballot)<br>
<br>
*Bylaws v1.9*<br>
<br>
<br>
*5.3.1 Formation of Chartered Working Groups*<br>
<br>
(e) CWGs may establish any number of subcommittees within its own <br>
Working Group to address any of such CWG?s business (each, a <br>
?Subcommittee?). A CWG-created Subcommittee needs to be approved by the <br>
CWG itself according to the approval process set forth in the CWG <br>
charter, but approval of the Forum is not necessary. Subcommittees must <br>
exist under an approved CWG.<br>
<br>
<br>
*Ballot 203: Formation of Network Security Working Group (v2)*<br>
<br>
Purpose of Ballot: To form a Network Security Working Group to <br>
re-evaluate the CAB Forum's Network Security Guidelines.<br>
<br>
The following motion has been proposed by Gervase Markham of Mozilla and <br>
endorsed by Jeremy Rowley of DigiCert?and Moudrick Dadashov of SSC:<br>
<br>
-- MOTION BEGINS ?<br>
<br>
In accordance with Section 5.3 of the CA/B Forum Bylaws, the chartering <br>
of a new Working Group requires a ballot. This ballot charters the <br>
Network Security Working Group.<br>
<br>
The CAB Forum's Network Security Guidelines were adopted in August 2012 <br>
but have not been updated since. Significant doubts have been raised as <br>
to their fitness for purpose in 2017. Therefore, the Working Group?s <br>
charter will be as follows:<br>
<br>
Scope<br>
<br>
1. Consider options for revising, replacing or scrapping the Network <br>
Security Guidelines.<br>
<br>
Deliverables<br>
<br>
1. A report with one or more proposals for the future of the Network <br>
Security Guidelines.<br>
<br>
2. For proposals involving replacement, details of the availability and <br>
applicability of the proposed alternative, and what modifications if any <br>
would be needed to it in order to make it suitable for use.<br>
<br>
3. For proposals involving revision, details of the revisions that are <br>
deemed necessary and how the document will be kept current in the future.<br>
<br>
4. For proposals involving scrapping, an explanation of why this is <br>
preferable to either of the other two options.<br>
<br>
5. If there are multiple proposals, optionally a recommendation as to <br>
which one to pursue and an associated timeline.<br>
<br>
6. A form of ballot or ballots to implement any recommendations.<br>
<br>
Expiry<br>
<br>
The Working Group shall expire once the deliverables have been <br>
completed, or on 2018-06-19, whichever happens first.?The expiry date <br>
given above shall be automatically postponed by 1 year on 2018-05-19 <br>
("postponement date") and each anniversary of the postponement date <br>
thereafter unless three or more members separately or jointly request on <br>
the Public Mail List, within one month prior to a particular <br>
postponement date, that expiry of this Working Group not be postponed in <br>
that instance.<br>
<br>
-- MOTION ENDS --<br>
<br>
_______________________________________________<br>
Servercert-wg mailing list<br>
<a href="mailto:Servercert-wg@cabforum.org" target="_blank">Servercert-wg@cabforum.org</a><br>
<a href="http://cabforum.org/mailman/listinfo/servercert-wg" rel="noreferrer" target="_blank">http://cabforum.org/mailman/listinfo/servercert-wg</a><br>
</blockquote></div>