Ballot 100 – Extend Deadline – OCSP Good Response

Ballot overview

• Ballot 100, titled Extend Deadline – OCSP Good Response, is identified as a Server Certificate Working Group ballot.
• The ballot page states that this ballot was withdrawn.

Content described on the page

• The page text says the ballot was intended to extend the deadline related to OCSP Good Response.
• The page also contains a block of text describing a ballot that maintains consistency between the S/MIME Baseline Requirements and the TLS Baseline Requirements, including changes introduced by Ballots SC096 and SC097.
• That described proposal includes:
  • A carve-out of logging requirements for DNSSEC, stating these are not in scope.
  • A note that change management logging can confirm whether appropriate controls are in effect.
  • Sunsetting remaining use of SHA-1 signatures in Certificates and CRLs.
  • A requirement that all unexpired Subordinate CA Certificates issuing S/MIME containing the SHA-1 signature algorithm must be revoked.
  • A statement that the proposal does not prohibit use of SHA-1 to generate issuerKeyHash or issuerNameHash values as required by RFC 5019.
  • Minor formatting corrections.

Outcome

• The ballot was withdrawn and therefore did not become normative.