Ballot 30 – Reserved Domain Names

Ballot overview

• Ballot 30 – Reserved Domain Names in the Server Certificate Working Group.
• The ballot page is marked Failed.
• The motion proposed errata to the Guidelines, including changes to domain name certificate requirements, EV certificate use obligations, and WHOIS-based domain verification.

Proposed changes

• Section 6(a)(2) would be replaced to require at least one subjectAlternativeName:dNSName entry associated with the subject’s server(s).
• Each dNSName entry would have to be a fully qualified domain name verified under Section 18.
• The asterisk wildcard character would not be allowed.
• The subject commonName field would be optional but recommended, limited to one instance, and if present would have to match a verified fully qualified domain name in a subjectAlternativeName:dNSName field.
• Section 12(b)(4) would be replaced to add EV Certificate use obligations, including installation only on server(s) accessible at a listed domain name and use only in compliance with applicable laws, authorized company business, and the Subscriber Agreement.
• Section 18(b)(1)(A) would be replaced to allow WHOIS inquiry or contact with the domain registrar, with a response indicating the applicant or a parent/subsidiary company is the registered entity.

Dates stated in the ballot

• The review period would begin at 2100 UTC on 24 July 2009 and close at 2100 UTC on 31 July 2009.
• If not withdrawn during review, voting would start immediately afterward and close at 2100 UTC on 7 Aug 2009.
• The motion said the Guidelines would be amended effective 90 days following ratification of the ballot.

Outcome

• The ballot page explicitly labels the ballot as Failed, so it never became normative.
• No compliance date is applicable because the ballot failed.