[cabf_validation] Agenda

[Doug Beattie]

Ryan provided this link to navigate to the proposed certificate profile
Google Sheet:

*	https://wiki.cabforum.org/validation

 

I made some edits to the Root CA and the Distinguished Names sheets by
adding some columns which I'd recommend we use over the ones Ryan quickly
specified.

 

Perhaps the most "dramatic" recommendation is to split complicated compound
requirements which are currently stated like this:

MUST contain the Subject's locality information as verified under Section
3.2.2.1. If the subject:countryName field specifies the ISO 3166-1
user-assigned code of XX in accordance with Section 7.1.4.2.2(g), the
localityName field MAY contain the Subject's locality and/or state or
province information as verified under Section 3.2.2.1.

 

Into 2 statements (columns):

1.	Is this a required or optional field and how to you tell?
2.	Validation rules for when it is present

 

So the above would be something like:

Required/Optional:

Required if subject verified under Section 3.2.2.1
Optional when Country code = XX

 

Validation rules:

The Subject's locality information as verified under Section 3.2.2.1



If I got this right, this is so much easier to interpret.

 

Comments?

 

 

 

 

From: Validation <validation-bounces at cabforum.org> On Behalf Of Tim
Hollebeek via Validation
Sent: Thursday, April 9, 2020 10:21 AM
To: CABforum3 <validation at cabforum.org>
Subject: [cabf_validation] Agenda

 

 

1.	Start recording, anti-trust, assign minute-taker
2.	Status update on disclosure of information sources
3.	Continue discussion of certificate profile skeleton

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/validation/attachments/20200409/2bb7f20c/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5701 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/validation/attachments/20200409/2bb7f20c/attachment-0001.p7s>