Ballot 53 – Contract Signer Self-Asserted Authority

Ballot overview

• Ballot 53, Contract Signer Self-Asserted Authority, is marked as Passed on the ballot page.
• The motion was made by Jay Schiavo and endorsed by Ben Wilson and Bruce Morton.
• The ballot applies to the Server Certificate Working Group.

What changed

• Section 10.7.1(2): remove the requirement that the CA verify, through a source other than the Contract Signer, that the Contract Signer is expressly authorized.
• Section 10.7.1(2): replace it with a requirement that the CA verify that the Contract Signer is authorized.
• Section 10.7.3: add a new subsection allowing the CA to rely on the Contract Signer’s signing authority if the CA verifies the Contract Signer is an employee or agent of the Applicant and obtains a duly executed representation or warranty containing specified acknowledgments.
• Appendix K: add a sample Contract Signer’s Representation/Warranty.

Timing

• The ballot review period begins at 2100 UTC on 28 Sep 2010 and closes at 2100 UTC on 5 Oct 2010.
• Unless withdrawn during review, the voting period starts immediately afterward and closes at 2100 UTC on 12 Oct 2010.
• The motion text says the erratum begins effective immediately.

Compliance impact

• CAs may rely on a Contract Signer’s authority by obtaining the specified representation or warranty, provided the CA verifies the Contract Signer is an employee or agent of the Applicant.
• The sample warranty states that the Contract Signer represents authority to sign Subscriber Agreements and approve EV Certificate requests on the Applicant’s behalf, among other acknowledgments.
• The ballot text does not provide a separate delayed compliance date beyond the effective immediately language.