[cabf_validation] Draft Ballot to Remove IP "Any Other Method" Validation (SC7)

[Tim Hollebeek]

I’ll endorse.

 

-Tim

 

From: Validation <validation-bounces at cabforum.org> On Behalf Of Wayne Thayer via Validation
Sent: Friday, January 18, 2019 1:16 PM
To: Jacob Hoffman-Andrews <jsha at letsencrypt.org>
Cc: CA/Browser Forum Validation WG List <validation at cabforum.org>
Subject: Re: [cabf_validation] Draft Ballot to Remove IP "Any Other Method" Validation (SC7)

 

Sort of. Tim said that DigiCert has used it in the past. No other CAs spoke up on the call. Also, when we asked this question last February, GlobalSign said that they use this method. Given that this method is defined in the current BRs, I don't think leaving it in this ballot makes the situation worse, so I'm inclined to stick with that approach.

 

Also, can I get one more endorser for this ballot (so far I have Doug)?

 

Thanks,

 

Wayne

 

On Fri, Jan 18, 2019 at 11:02 AM Jacob Hoffman-Andrews <jsha at letsencrypt.org <mailto:jsha at letsencrypt.org> > wrote:

On Fri, Jan 18, 2019 at 9:43 AM Wayne Thayer <wthayer at mozilla.com <mailto:wthayer at mozilla.com> > wrote:

keep (for now) the reverse-lookup method despite you concerns being shared by others. The intent of this ballot is to replace "any other method" with explicit methods that are in use today, and we believe that the reverse-lookup method is in use.

 

This makes sense, but do we have a list of CAs that currently use reverse-lookup? I'd like to be clear about whether we know specific CAs use this or are just being cautious to avoid failing the ballot at the last minute if someone pops up saying they use it.

 

Thanks,

Jacob 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/validation/attachments/20190123/d1799c3d/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4940 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/validation/attachments/20190123/d1799c3d/attachment.p7s>