[cabf_validation] Changes discussed at the F2F

Corey Bonnell Corey.Bonnell at digicert.com
Wed Jul 13 21:52:19 UTC 2022

Hi Dustin,

Apologies, I must have overlooked that one. I think we can resolve alongside
punting the prohibition on keyAgreement for ECDSA until v2.


Jos and I were able to import the profiles ballot text into the servercert
repo in the "profiles" branch:
https://github.com/cabforum/servercert/pull/373. We can use this to
collaborate on these edits.




From: Dustin Hollenback <Dustin.Hollenback at microsoft.com> 
Sent: Wednesday, July 13, 2022 2:28 PM
To: Corey Bonnell <Corey.Bonnell at digicert.com>; CABforum3
<validation at cabforum.org>
Subject: RE: Changes discussed at the F2F


Hi Corey,


We had also agreed to defer the prohibition of dataEncipherment until v2.


Thank you,





From: Validation <validation-bounces at cabforum.org
<mailto:validation-bounces at cabforum.org> > On Behalf Of Corey Bonnell via
Sent: Wednesday, July 13, 2022 5:54 AM
To: CABforum3 <validation at cabforum.org <mailto:validation at cabforum.org> >
Subject: [EXTERNAL] [cabf_validation] Changes discussed at the F2F



I reviewed the minutes of the F2F and identified these four areas/topics
that were discussed and require changes to the current draft document:


* Top-level effective date for new profile

* Allow for previous version of the profile until new effective date

* Defer prohibition on keyAgreement in ECDSA certs until v2

* Add carve-out for multiple DC attributes (GRID)

* Update subject attribute validation requirements to not require
validation for those fields whose validation steps are documented in the BRs


If there's any items that were missed or if you know of additional items
that we should address, please respond to this email or raise them on the
call tomorrow.





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/validation/attachments/20220713/f3d11741/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4990 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/validation/attachments/20220713/f3d11741/attachment.p7s>

More information about the Validation mailing list