Ballot 138 – Security Information Sharing Working Group

Ballot overview

• Ballot 138 created the Security Information Sharing Working Group.
• The working group was intended to study voluntary information sharing among Forum members about possible enhanced risk from identified individuals, entities, identities, locations, domains, IP addresses, and other data to be determined.
• The working group was also tasked with considering legal limitations, privacy concerns, methods for updating or correcting information, and other factors related to such sharing.
• Deliverables were to include one or more documents offering options to the Forum for voluntary information sharing within the stated scope.
• The working group mandate was set to expire twenty-four months from the date the resolution passes, unless extended by a further ballot.

Ballot outcome

• Voting on Ballot 138 closed on 16 October 2014.
• The Chair received yes votes from Actalis, ANF, Buypass, Certinomis, Chunghwa Telecom, Comodo, DigiCert, Disig, Entrust, GlobalSign, GoDaddy, Izenpe, Kamu Sertifikasyon Merkezi, Logius PKIoverheid, Microsoft, Mozilla, Opentrust, Opera, SECOM, SSC, StartCom, Symantec, Trend Micro, TURKTRUST, TWCA, and WoSign.
• Google abstained.
• The page states that Ballot 138 passed.

Dates

• Discussion start: 2014-10-02
• Discussion end: 2014-10-09
• Voting end: 2014-10-16
• Effective date: 2014-10-16

Applicability and timing

• The working group mandate expiration date applies to the working group created by the ballot and is twenty-four months from the date the resolution passes.
• No separate CA or certificate-type phased compliance dates are stated in the evidence.