Right. We do not want to allow blanket or undisclosed exceptions to the CA/Browser Forum rules, so a generic carve out would do more harm than good. If anyone is aware of local laws that are a challenge for BR compliance, they SHOULD, and in some cases, MUST, bring them to the attention of the Forum so we can take appropriate action.
-Tim From: Servercert-wg <[email protected]> On Behalf Of Dimitris Zacharopoulos (HARICA) via Servercert-wg Sent: Tuesday, January 16, 2024 4:19 AM To: Pedro FUENTES <[email protected]>; CA/B Forum Server Certificate WG Public Discussion List <[email protected]> Subject: Re: [Servercert-wg] [EXTERNAL]- Ballot SC-68: Allow VATEL and VATXI for organizationIdentifier On 16/1/2024 10:17 π.μ., Pedro FUENTES wrote: I just wonder if this change could have been made in a more generic way, so it could be applied in other similar cases, where there’s a conflict between the BR and the applicable laws. It cannot, because for those "unknown" (to the CA/B Forum) cases, the provisions of 9.16.3 of the BRs or 8.1 of EVG must be followed. Dimitris. On 16 Jan 2024, at 09:07, Dimitris Zacharopoulos (HARICA) via Servercert-wg <mailto:[email protected]> <[email protected]> wrote: Purpose of the Ballot The EV Guidelines have strict rules in the organizationIdentifier values and require the country code of all currently-allowed Registration Schemes (NTR, VAT, PSD) to follow the ISO 3166-1 for the 2-letter country prefix. The organizationIdentifier language mainly came from ETSI EN 319 412-1 and then the SCWG made several modifications. However, there is an exception for Greece specifically for the VAT Registration Scheme that is aligned with Article 215 of Council Directive 2006/112/EC that allows Greece to use the country prefix "EL". In practice, Greece uses the prefix "EL" to identify itself next to the VAT number of all Legal Entities registered/incorporated/established in Greece, and all other European Countries use this prefix to identify Greek VAT numbers. This can easily be verified in the VIES VAT number validation website where Greece is listed as"EL". There is also Council Directive 2020/1756 <https://url.avanan.click/v2/___https:/urldefense.proofpoint.com/v2/url?u=https-3A__data.europa.eu_eli_dir_2020_1756_oj&d=DwMDaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=pLBg9yEYzZz6uGZ9yTalH54RHu_MZI1Ch37wv852wbXGmCvaFVFIS9xQyNGMqk_D&s=LSOTJmv9nz1vtYcg288tr66dvFEjYa7S7orq6hR7ey4&e=___.YXAzOmRpZ2ljZXJ0OmE6bzplMGViOTIyZjIwMDAwZWFhYjFhMDM3OGMwNDhjNmQ2Mzo2OmVmM2M6Y2ZkMDcyZGNiMGUxZDIwNWVkMzNlZjVmM2UxZjcwM2VhZmJhMzNkMTY3ZDMzMTdmNTMyN2U2NTlmYWIzNzJmZjpoOkY> amending Directive 2006/112/EC that requires the prefix "XI" for the identification of taxable persons in Northern Ireland. This pull request proposes updates to the EV Guidelines to allow those additional prefixes. It also fixes some formatting issues. The following motion has been proposed by Dimitris Zacharopoulos of HARICA and endorsed by Ben Wilson of Mozilla and Corey Bonnell of Digicert. MOTION BEGINS This ballot modifies the “Guidelines for the Issuance and Management of Extended Validation Certificates” (“EV Guidelines”), based on Version 1.8.0. MODIFY the EV Guidelines as specified in the following Redline: * https://url.avanan.click/v2/___https://github.com/cabforum/servercert/compare/da89d0e9700c6dd89a8263526addc39f472bf54c___.YXAzOmRpZ2ljZXJ0OmE6bzplMGViOTIyZjIwMDAwZWFhYjFhMDM3OGMwNDhjNmQ2Mzo2OjY1YjM6YzZmMTYzYjAwZTNhNjY1NzRmZTk5MDhiY2I3MTVlMWZmNmQ0OTEwNDc4YWFiNzQ4ZmQ4NzE3ZGY1NWFjYzA1Yzp0OkY. MOTION ENDS The procedure for this ballot is as follows: Start time (8:00 UTC) End time (8:00 UTC) Discussion (at least 7 days) 2024-01-16 on or after 2024-01-23 Expected Vote for approval (7 days) TBD TBD _______________________________________________ Servercert-wg mailing list [email protected] <mailto:[email protected]> https://urldefense.proofpoint.com/v 2/url?u=https-3A__lists.cabforum.org_mailman_listinfo_servercert-2Dwg&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=pLBg9yEYzZz6uGZ9yTalH54RHu_MZI1Ch37wv852wbXGmCvaFVFIS9xQyNGMqk_D&s=Vm2EaWVVK5hktalPWfpaS6K3L6BSOHUzRDydq3_HyJI&e= WISeKey SA Pedro Fuentes CSO - Trust Services Manager Office: + 41 (0) 22 594 30 00 Mobile: + 41 (0) 791 274 790 Address: Avenue Louis-Casaï 58 | 1216 Cointrin | Switzerland Stay connected with <https://url.avanan.click/v2/___http:/www.wisekey.com___.YXAzOmRpZ2ljZXJ0OmE6bzplMGViOTIyZjIwMDAwZWFhYjFhMDM3OGMwNDhjNmQ2Mzo2Ojc2ZWI6N2RkY2UyNWNjYWY3ZmVjMDQ4OTY3MzFhN2VkMzc1YjJiZDBjMmQzYTIzNzFiYzA1MzRiN2I0M2FkN2Y2YzY2YzpoOkY> WISeKey THIS IS A TRUSTED MAIL: This message is digitally signed with a WISeKey identity. If you get a mail from WISeKey please check the signature to avoid security risks CONFIDENTIALITY: This email and any files transmitted with it can be confidential and it’s intended solely for the use of the individual or entity to which they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. If you have received this email in error please notify the sender DISCLAIMER: WISeKey does not warrant the accuracy or completeness of this message and does not accept any liability for any errors or omissions herein as this message has been transmitted over a public network. Internet communications cannot be guaranteed to be secure or error-free as information may be intercepted, corrupted, or contain viruses. Attachments to this e-mail are checked for viruses; however, we do not accept any liability for any damage sustained by viruses and therefore you are kindly requested to check for viruses upon receipt.
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Servercert-wg mailing list [email protected] https://lists.cabforum.org/mailman/listinfo/servercert-wg
