[cabf_validation] Change to EV 9.2.7

[Mark B. Cooper]

I suspect defining the place of business as being the legally registered location of the business would be a more accurate and descriptive term. This would be easier to verify in D&B records as well as other sources. "a place" of business is going to be much harder for issuers to verify as a business may have many locations that aren't necessarily registered with entities.

-Mark

Mark B. Cooper
President & Founder
PKI Solutions Inc.
www.pkisolutions.com
Telephone: +1 971 231 5523

From: Validation [mailto:validation-bounces at cabforum.org] On Behalf Of Rick Andrews via Validation
Sent: Wednesday, March 1, 2017 3:48 PM
To: CA/Browser Forum Validation WG List <validation at cabforum.org>
Cc: Rick Andrews <Rick_Andrews at symantec.com>
Subject: Re: [cabf_validation] Change to EV 9.2.7

Jeremy,

"This field MUST contain the address of the physical location of the Subject's Place of Business." What does "the" mean here? Many businesses have multiple physical locations. Should it be "a" instead? Should we clarify that it doesn't have to be the physical location of the server(s) hosting the certificate?

-Rick

From: Validation [mailto:validation-bounces at cabforum.org] On Behalf Of Jeremy Rowley via Validation
Sent: Wednesday, February 22, 2017 11:30 PM
To: CA/Browser Forum Validation WG List <validation at cabforum.org<mailto:validation at cabforum.org>>
Cc: Jeremy Rowley <jeremy.rowley at digicert.com<mailto:jeremy.rowley at digicert.com>>
Subject: Re: [cabf_validation] Change to EV 9.2.7

I've created this as ballot 191. Do we have a second endorser?

Ballot 191 - Clarify Place of Business Information Field Inclusion

The current EV Guidelines are not clear on what address information is required in a certificate. This ballot clarifies the requirements.

--Motion Begins--

A. Modify Section 9.2.7 as follows:

'''9.2.7. Subject Physical Address of Place of Business Field'''

Certificate fields:

Number and street: subject:streetAddress (OID: 2.5.4.9)

City or town: subject:localityName (OID: 2.5.4.7)

State or province (where applicable): subject:stateOrProvinceName (OID: 2.5.4.8)

Country: subject:countryName (OID: 2.5.4.6)

Postal code: subject:postalCode (OID: 2.5.4.17)

Required/Optional: --(City, state, and country - Required; Street and postal code - Optional)-- __As stated in Section 7.1.4.2.2 d, e, f, g and h of the Baseline Requirements__

Contents: This field MUST contain the address of the physical location of the Subject's Place of Business.

--Motion Ends--

From: Validation [mailto:validation-bounces at cabforum.org] On Behalf Of Bruce Morton via Validation
Sent: Wednesday, January 25, 2017 12:51 PM
To: CA/Browser Forum Validation WG List <validation at cabforum.org<mailto:validation at cabforum.org>>
Cc: Bruce Morton <Bruce.Morton at entrustdatacard.com<mailto:Bruce.Morton at entrustdatacard.com>>
Subject: [cabf_validation] Change to EV 9.2.7

To deal with the Require/Optional requirement or the Place of Business, I propose a simple change which will make the EV Guidelines consistent with the Baseline Requirements.

The EV Guidelines currently state:
9.2.7. Subject Physical Address of Place of Business Field
Certificate fields:
Number and street: subject:streetAddress (OID: 2.5.4.9)
City or town: subject:localityName (OID: 2.5.4.7)
State or province (where applicable): subject:stateOrProvinceName (OID: 2.5.4.8)
Country: subject:countryName (OID: 2.5.4.6)
Postal code: subject:postalCode (OID: 2.5.4.17)
Required/Optional: City, state, and country - Required; Street and postal code - Optional
Contents: This field MUST contain the address of the physical location of the Subject's Place of Business.

To address the Required/Optional issue, I propose the following change.
9.2.7. Subject Physical Address of Place of Business Field
Certificate fields:
Number and street: subject:streetAddress (OID: 2.5.4.9)
City or town: subject:localityName (OID: 2.5.4.7)
State or province (where applicable): subject:stateOrProvinceName (OID: 2.5.4.8)
Country: subject:countryName (OID: 2.5.4.6)
Postal code: subject:postalCode (OID: 2.5.4.17)
Required/Optional: As stated in Section 7.1.4.2.2 d, e, f, g and h of the Baseline Requirements
Contents: This field MUST contain the address of the physical location of the Subject's Place of Business.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/validation/attachments/20170302/11318db8/attachment.html>