[cabf_validation] CAA Critical Flag Erratum

[Tim Hollebeek]

Added:



https://github.com/timfromdigicert/documents/commit/ca549134a87aa0b3a60c2a93e7d135480453fd74



-Tim



From: Validation <validation-bounces at cabforum.org> On Behalf Of Wayne Thayer 
via Validation
Sent: Monday, March 4, 2019 9:08 AM
To: CA/Browser Forum Validation WG List <validation at cabforum.org>
Subject: [cabf_validation] CAA Critical Flag Erratum



Today someone pointed out [1] that the BRs contain an ambiguity/error in 
section 3.2.2.8, which states:

CAs MUST respect the critical flag and not issue a certificate if they 
encounter an unrecognized property with this flag set.

It should state:

CAs MUST respect the critical flag and not issue a certificate if they 
encounter an unrecognized property tag with this flag set.

Tim: can you add this to your next fixup ballot?

- Wayne

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=1532313

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/validation/attachments/20190312/f25c9837/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4940 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/validation/attachments/20190312/f25c9837/attachment.p7s>