Ballot 113 – Revision to QIIS in EV Guidelines(passes)

Ballot overview

• Ballot 113 revised Section 11.10.5 of the EV Guidelines, which defines Qualified Independent Information Source (QIIS).
• The ballot says the previous QIIS definition did not accurately capture current CA practices and could be read to prohibit use of sources such as Dun & Bradstreet and Hoovers.
• The proposal consolidated and clarified the QIIS verification requirements for CAs.

Voting and adoption

• The review period commenced immediately at 2300 UTC on 30 December 2013 and closed on 6 January 2014.
• Voting ended on 13 January 2014.
• Quorum was 6, and 21 votes were cast: 20 by CAs and 1 by browsers.
• Twenty votes were in favor, Izenpe abstained, and the ballot passed.

What changed in Section 11.10.5

• The revised text defines a QIIS as a regularly updated, publicly available database generally recognized as a dependable and accurate source for certain information.
• A database qualifies if the CA determines that:
  • industries other than the certificate industry rely on it for accurate location, contact, or other information, and
  • the provider updates its data at least annually.
• The CA must use a documented process to check the database’s accuracy and ensure its data is acceptable, including reviewing the provider’s terms of use.
• The CA must not use data that it knows is self-reported and not verified by the QIIS as accurate.
• Databases in which the CA, its owners, affiliated companies, Registration Authorities, or subcontractors have a controlling interest or ownership/beneficial interest do not qualify.

Effective date

• The motion states: Effective immediately.
• The EV Guidelines document history lists Ballot 113 as adopted and effective on 13 Jan 2014.