Ballot 111 – Accelerate Max Certificate Lifetime Reduction Timetable

Overview

• Ballot 111 proposes accelerating the maximum certificate lifetime reduction timetable in the Baseline Requirements.
• The motion was made by Gervase Markham of Mozilla and endorsed by Eddy Nigg of StartCom and Ryan Hurst of Globalsign.
• The stated rationale is to take advantage of the de facto deprecation of SHA-1 in the Web PKI and its 1 January 2017 retirement, with the goal of a more agile certificate ecosystem.

Proposed Changes

• Effective immediately, the ballot would alter the Baseline Requirements.
• Section 9.4.1 would be updated by changing both occurrences of 1 April 2015 to 1 April 2014.
• The Relevant Compliance Dates table on page ii would be updated by changing 2015-04-01 to 2014-04-01 in the appropriate line.

Ballot Process Dates

• The ballot review period starts immediately upon posting on Tuesday 26 November 2013.
• The review period closes at 2200 UTC on Tuesday 5 December 2013.
• Unless withdrawn or modified during review, voting starts immediately after the review period.
• Voting closes at 2200 UTC on Tuesday, 12 December 2013.
• If modified during voting for reasons other than minor typographical corrections, the ballot is deemed withdrawn.

Voting Rules

• Votes must be cast by posting an on-list reply to the thread.
• A yes vote must clearly indicate yes.
• A no vote must clearly indicate no.
• An abstention must clearly indicate abstain.
• Unclear responses are not counted.
• The latest vote from any representative of a voting member before the close of voting is counted.
• For adoption, at least two thirds of CA-category votes cast and more than one half of browser-category votes cast must be in favor.
• Quorum is 6 members, and at least 6 members must participate for the vote to be valid.

Outcome Status From Supplied Evidence

• The supplied evidence shows the ballot text and process rules, but does not provide the voting outcome or any IPR status.