[cabf_validation] Changes discussed at the F2F

[Corey Bonnell]

Hi Dustin,

Apologies, I must have overlooked that one. I think we can resolve alongside
punting the prohibition on keyAgreement for ECDSA until v2.

 

Jos and I were able to import the profiles ballot text into the servercert
repo in the "profiles" branch:
https://github.com/cabforum/servercert/pull/373. We can use this to
collaborate on these edits.

 

Thanks,
Corey

 

From: Dustin Hollenback <Dustin.Hollenback at microsoft.com> 
Sent: Wednesday, July 13, 2022 2:28 PM
To: Corey Bonnell <Corey.Bonnell at digicert.com>; CABforum3
<validation at cabforum.org>
Subject: RE: Changes discussed at the F2F

 

Hi Corey,

 

We had also agreed to defer the prohibition of dataEncipherment until v2.

 

Thank you,

 

 

Dustin

 

From: Validation <validation-bounces at cabforum.org
<mailto:validation-bounces at cabforum.org> > On Behalf Of Corey Bonnell via
Validation
Sent: Wednesday, July 13, 2022 5:54 AM
To: CABforum3 <validation at cabforum.org <mailto:validation at cabforum.org> >
Subject: [EXTERNAL] [cabf_validation] Changes discussed at the F2F

 

Hello,

I reviewed the minutes of the F2F and identified these four areas/topics
that were discussed and require changes to the current draft document:

 

* Top-level effective date for new profile

* Allow for previous version of the profile until new effective date

* Defer prohibition on keyAgreement in ECDSA certs until v2

* Add carve-out for multiple DC attributes (GRID)

* Update subject attribute validation requirements to not require 3.2.2.4
validation for those fields whose validation steps are documented in the BRs

 

If there's any items that were missed or if you know of additional items
that we should address, please respond to this email or raise them on the
call tomorrow.

 

Thanks,

Corey

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/validation/attachments/20220713/f3d11741/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4990 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/validation/attachments/20220713/f3d11741/attachment.p7s>