[cabf_validation] Change in liability for EV certificates

Kirk Hall Kirk.Hall at entrustdatacard.com
Thu Jun 1 10:24:52 MST 2017


Here are two versions of what we discussed today.  Peter and Ben - do you want to take this and run with it?  You can create a draft ballot and put up for discussion on the next call June 8...


Version 1 - Aggregate Limit per EV Certificate Only

18. Liability and Indemnification

CAs MAY limit their liability as described in Section 18 of the Baseline Requirements except that a CA MAY NOT limit its liability to Subscribers or Relying Parties for legally recognized and provable claims to a monetary amount less than two thousand US dollars per Subscriber or Relying Party per EV Certificate.  CA MAY limit their aggregate liability to all Subscribers and Relying Parties for all claims per EV Certificate to an amount not less than $100,000

A CA's indemnification obligations and a Root CA's obligations with respect to subordinate CAs are set forth in the Baseline Requirements.


Version 2 - Aggregate Limit per EV Certificate and All EV Certificates Issued in 12 Month Period

18. Liability and Indemnification

CAs MAY limit their liability as described in Section 18 of the Baseline Requirements except that a CA MAY NOT limit its liability to Subscribers or Relying Parties for legally recognized and provable claims to a monetary amount less than two thousand US dollars per Subscriber or Relying Party per EV Certificate.  CA MAY limit their aggregate liability to all Subscribers and Relying Parties (1) for all claims arising from or relating to a single EV Certificate to an amount not less than $100,000, and (2) for all claims arising from or relating to all EV Certificates issued during any 12 month period to an amount not less than $5,000,000.

A CA's indemnification obligations and a Root CA's obligations with respect to subordinate CAs are set forth in the Baseline Requirements.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/validation/attachments/20170601/8088c33e/attachment.html>


More information about the Validation mailing list