Ballot 217 – Sunset RFC 2527

Ballot overview

• Ballot 217, Sunset RFC 2527, was a Server Certificate Working Group ballot.
• The ballot passed.
• It was intended to sunset the use of RFC 2527 and require RFC 3647-based structure for CP/CPS disclosures.

What changed

• For the Baseline Requirements, Section 2.2 was revised so that:
  • The CA must publicly disclose its Certificate Policy and/or Certification Practice Statement online on a 24x7 basis.
  • The CA must publicly disclose business practices to the extent required by the selected audit scheme.
  • Effective as of 31 May 2018, the CP/CPS must be structured in accordance with RFC 3647.
  • Before 31 May 2018, the CP/CPS may be structured in accordance with either RFC 2527 or RFC 3647.
  • The CP/CPS must include all material required by RFC 3647, or by RFC 2527 if structured that way.
• For the EV Guidelines, Section 8.2.2 was revised similarly so that:
  • The CA must publicly disclose its Certificate Policy and/or Certification Practice Statement online on a 24x7 basis.
  • The CA must publicly disclose business practices to the extent required by the selected audit scheme.
  • Effective as of 31 May 2018, the CP/CPS must be structured in accordance with RFC 3647.
  • Before 31 May 2018, the CP/CPS may be structured in accordance with either RFC 2527 or RFC 3647.
  • The CP/CPS must include all material required by RFC 3647, or by RFC 2527 if structured that way.

Voting and approval

• Voting by CAs: 15 yes votes, 0 no votes, 0 abstain.
• Voting by browsers: 4 yes votes, 0 no votes, 0 abstain.
• Quorum was met.
• The approval thresholds were met for both CAs and browsers.
• At least one CA member and one browser member voted in favor.

Timing

• Discussion period: 2017-12-07 22:00:00 UTC to 2017-12-14 22:00:00 UTC.
• Voting period: 2017-12-14 22:00:00 UTC to 2017-12-21 22:00:00 UTC.
• The ballot page states the voting period had ended when the results were posted.
• The motion text gives 31 May 2018 as the effective date for the RFC 3647 requirement.