Re: [Servercert-wg] Timeline for compromised key blocking

2024-05-10 Thread Clint Wilson via Servercert-wg
Hi Aaron, This seems reasonable to me. It might also be worth adding a similar timeline to 6.1.1.5.(1) so that, under a circumstance in which the Debian-weak-keys repo is updated, there is some amount of time for CAs to ensure their own systems are also updated. Since that repo is under the

Re: [Servercert-wg] Ballot SC-74 - Clarify CP/CPS structure according to RFC 3647

2024-05-10 Thread Tim Hollebeek via Servercert-wg
Yes, I’m under no illusions I got it right on the first try, and alternative approaches might be better. -Tim From: Clint Wilson Sent: Friday, May 10, 2024 2:20 PM To: Tim Hollebeek ; ServerCert CA/BF Cc: Roman Fischer Subject: Re: [Servercert-wg] Ballot SC-74 - Clarify CP/CPS

Re: [Servercert-wg] Ballot SC-74 - Clarify CP/CPS structure according to RFC 3647

2024-05-10 Thread Clint Wilson via Servercert-wg
Hi Tim, > On May 10, 2024, at 8:52 AM, Tim Hollebeek via Servercert-wg > wrote: > > Whether the comparison should be case sensitive or not is not a question of > how “strict” the linter should be, but what the requirements are. Linters > MUST NOT make their own determinations as to what the

Re: [Servercert-wg] Ballot SC-74 - Clarify CP/CPS structure according to RFC 3647

2024-05-10 Thread Dimitris Zacharopoulos (HARICA) via Servercert-wg
On 10/5/2024 6:52 μ.μ., Tim Hollebeek via Servercert-wg wrote: Whether the comparison should be case sensitive or not is not a question of how “strict” the linter should be, but what the requirements are.  Linters MUST NOT make their own determinations as to what the requirements are, and

Re: [Servercert-wg] Ballot SC-74 - Clarify CP/CPS structure according to RFC 3647

2024-05-10 Thread Tim Hollebeek via Servercert-wg
Whether the comparison should be case sensitive or not is not a question of how “strict” the linter should be, but what the requirements are. Linters MUST NOT make their own determinations as to what the requirements are, and SHOULD highlight cases like this where ambiguity may be present.

Re: [Servercert-wg] Ballot SC-74 - Clarify CP/CPS structure according to RFC 3647

2024-05-10 Thread Roman Fischer via Servercert-wg
Hi Wendy, I would definitely go for c) because the documents are overall not standardized enough to do any kind of automatic parsing where a) or b) would maybe help. Rgds Roman From: Servercert-wg On Behalf Of Wendy Brown - QT3LB-C via Servercert-wg Sent: Donnerstag, 9. Mai 2024 16:58 To:

Re: [Servercert-wg] [Voting Begins] Ballot SC-74 - Clarify CP/CPS structure according to RFC 3647

2024-05-10 Thread xiulei--- via Servercert-wg
GDCA votes NO on Ballot SC-74. Thanks. From: Dimitris Zacharopoulos (HARICA) via Servercert-wg Date: 2024-05-05 16:24 To: CA/B Forum Server Certificate WG Public Discussion List Subject: [Servercert-wg] [Voting Begins] Ballot SC-74 - Clarify CP/CPS structure according to RFC 3647 Voting begins

Re: [Servercert-wg] [Voting Begins] Ballot SC-74 - Clarify CP/CPS structure according to RFC 3647

2024-05-10 Thread BILGEM KSM
Kamu SM votes "No" on Ballot SC-74. Tuğba ÖZCAN Head Of e-Signature Technologies Department TÜBİTAK/BİLGEM/Kamu SM Çamlıca Mahallesi 408. Cadde No: 136 C Blok 5. Kat Yenimahalle/Ankara Dahili:8543 tugba.oz...@tubitak.gov.tr Kimden: "CA" Kime: "Dimitris Zacharopoulos,

Re: [Servercert-wg] [Voting Begins] Ballot SC-74 - Clarify CP/CPS structure according to RFC 3647

2024-05-10 Thread Yoshihiko Matsuo via Servercert-wg
JPRS votes NO to Ballot SC-74. On 2024/05/05 17:24, Dimitris Zacharopoulos (HARICA) via Servercert-wg wrote: Voting begins for ballot SC-74. SC-74 - Clarify CP/CPS structure according to RFC 3647 Summary The TLS Baseline Requirements require in section 2.2 that: /"The Certificate