Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

o be permitted for at least >>> some time. >>> >>> >>> >>> I’m wondering whether it’s feasible to create a “infrastructure >>> certificate" profile in the BRs that can allow for the continued issuance >>> of these types of

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

;>> >>>> >>>> >>>> I’m wondering whether it’s feasible to create a “infrastructure >>>> certificate" profile in the BRs that can allow for the continued issuance >>>> of these types of certificates while also establishing

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

cates while also establishing some guard rails. Do >> you happen to know whether these certificates share a profile that is >> roughly like one another? I personally haven’t used CA software that >> exhibits this “automatic issuance” behavior, so I’ll lean on others who do >>

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

ertificates while also establishing some guard rails. Do > you happen to know whether these certificates share a profile that is > roughly like one another? I personally haven’t used CA software that > exhibits this “automatic issuance” behavior, so I’ll lean on others who do > have experi

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

;> >> Thanks, >> >> Corey >> >> >> >> From: Wendy Brown - QT3LB-C > <mailto:wendy.br...@gsa.gov>> >> Sent: Friday, July 21, 2023 8:24 AM >> To: Corey Bonnell > <mailto:corey.bonn...@digicert.com>> >> Cc: CA/B Forum Serve

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

uly 21, 2023 8:24 AM To: Corey Bonnell mailto:corey.bonn...@digicert.com>> Cc: CA/B Forum Server Certificate WG Public Discussion List mailto:servercert-wg@cabforum.org>> Subject: Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot Corey - not according to some C

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

- QT3LB-C > *Sent:* Friday, July 21, 2023 8:24 AM > *To:* Corey Bonnell > *Cc:* CA/B Forum Server Certificate WG Public Discussion List < > servercert-wg@cabforum.org> > *Subject:* Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot > > > > Corey - > >

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

ho do have experience. Thanks, Corey From: Wendy Brown - QT3LB-C Sent: Friday, July 21, 2023 8:24 AM To: Corey Bonnell Cc: CA/B Forum Server Certificate WG Public Discussion List Subject: Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot Corey - not according to so

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

PM > *To:* Corey Bonnell ; CA/B Forum Server > Certificate WG Public Discussion List > *Subject:* Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot > > > > I would not like to see #3 exclusion for Root CAs removed > > > > Some CA products when a new CA

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

Certificate WG Public Discussion List Subject: Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot I would not like to see #3 exclusion for Root CAs removed Some CA products when a new CA is established, automatically create some internal certificates that are necessary

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

I would not like to see #3 exclusion for Root CAs removed Some CA products when a new CA is established, automatically create some internal certificates that are necessary for the operation of the CA including possibly a key pair used to sign audit logs with a certificate signed by the Root CA

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

nnell via Servercert-wg Enviado el: miércoles, 19 de julio de 2023 16:17 Para: CA/B Forum Server Certificate WG Public Discussion List < <mailto:servercert-wg@cabforum.org> servercert-wg@cabforum.org> Asunto: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot CAUTION

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. <https://nam04.safelinks.protection.outlook.com/?url=https

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

cussion List < <mailto:servercert-wg@cabforum.org> servercert-wg@cabforum.org> Asunto: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

a Servercert-wg Enviado el: miércoles, 19 de julio de 2023 16:17 Para: CA/B Forum Server Certificate WG Public Discussion List < <mailto:servercert-wg@cabforum.org> servercert-wg@cabforum.org> Asunto: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot CAUTION: This email

Re: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

16:17 Para: CA/B Forum Server Certificate WG Public Discussion List Asunto: [Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content

[Servercert-wg] Draft ballot SC-XX: Profiles cleanup ballot

Hello, While adding support for SC-62 linting for TLS certificates in pkilint, a few issues were identified with the current language in section 6 and 7 of the BRs. To address these issues, I created a draft ballot on Github. The draft ballot text can be viewed here: