Ballot 201 – .onion Revisions

Ballot overview

• Ballot 201, .onion Revisions, was a Final Maintenance Guideline ballot in the Server Certificate Working Group.
• The ballot was intended to cure potential problems with Ballot 198 and clarify Appendix F of the EV Guidelines.
• The revision required inclusion of the CAB Forum Tor Service Descriptor Hash extension in the TBSCertificate for .onion issuance.

Voting result

• The ballot page states that the voting period ended and the ballot passed.
• CA voting: 8 yes, 0 no, 4 abstain.
• Browser voting: 3 yes, 0 no, 0 abstain.
• Quorum was met with 15 votes cast, and the approval thresholds for both CA and browser votes were met.
• The page also states that at least one CA Member and one browser Member voted in favor, satisfying adoption requirements.

Normative change

• Appendix F, Section 1 was revised to allow a CA to issue an EV Certificate with .onion in the right-most label of the Domain Name, provided issuance complies with Appendix F.
• The CA MUST include the CAB Forum Tor Service Descriptor Hash in the TBSCertificate.
• The extension format and object identifier were specified in the motion text.
• The ballot text says Ballot 198 did not include a redline against the current Final Maintenance Guidelines and therefore constituted an invalid ballot; as a consequence, no IPR Review Notice is in force for Ballot 198.

Timing stated on the ballot page

• Discussion: May 25, 2017 to June 1, 2017.
• Vote for approval: June 1, 2017 to June 8, 2017.
• If approved, the Chair would initiate a 30-day IPR Review Period by sending an IPR Review Notice.
• If no Exclusion Notices are filed, the ballot becomes effective at the end of the IPR Review Period.