Ballot 108 – Defining the Scope of the Baseline Requirements

Ballot overview

• Ballot 108, Defining the Scope of the Baseline Requirements, proposed an amendment to Section 1 of the Baseline Requirements.
• The ballot page is marked Withdrawn.

Proposed scope language

• The Baseline Requirements were described as a subset of the requirements a Certification Authority must meet to issue Publicly Trusted Certificates.
• The requirements were stated to apply only to relevant events occurring on or after the Effective Date, except where explicitly stated otherwise.
• The text said the requirements address only certificates intended for authenticating servers accessible through the Internet.
• It listed covered certificates as:
  • root certificates included in a browser trust store
  • subordinate CA certificates signed by one of those root certificates
  • end-entity certificates that either lack an Extended Key Usage extension or contain one or more of these EKUs:
    • Server Authentication
    • anyExtendedKeyUsage
    • Netscape Server Gated Cryptography
    • Microsoft Server Gated Cryptography
• The motion also stated that the requirements do not address:
  • all issues relevant to issuance and management of Publicly-Trusted Certificates
  • future areas such as code signing, S/MIME, time-stamping, VoIP, IM, and Web services, except as may be covered in future versions
  • certificates used by enterprises operating their own internal PKI when the root certificate is not distributed by any Application Software Supplier
• The motion said the CA/Browser Forum may update the Requirements over time, including to add more formal and comprehensive audit requirements for delegated functions.

Process dates stated on the page

• The review period was to commence on 2013-07-30 and close on 2013-08-06.
• Unless withdrawn during the review period, the voting period would start immediately thereafter and close on 2013-08-13.

Outcome

• The ballot page explicitly says Withdrawn, so it never became normative.