Ballot 75 – NameConstraints Criticality Flag

Ballot overview

• Ballot 75, NameConstraints Criticality Flag, is marked Passed on the ballot page.
• The motion was made by Kathleen Wilson and endorsed by Steve Roylance and Adam Langley.
• The ballot changes the Subordinate CA Certificate section in both the Baseline Requirements Appendix B and EV Guidelines Appendix B.

Required text change

• Delete the sentence stating that all other fields and extensions MUST be set in accordance to RFC 5280.
• Replace it with new language for F. nameConstraints (optional).
• If nameConstraints is present, the extension SHOULD be marked critical.
• All other fields and extensions MUST still be set in accordance to RFC 5280.
• Non-critical Name Constraints are allowed as an exception to RFC 5280 until the extension is supported by Application Software Suppliers whose software is used by a substantial portion of Relying Parties worldwide.

Timing stated on the ballot page

• The motion begins effective immediately.
• The ballot review period begins at 21:00 UTC on May 25, 2012.
• The ballot review period closes at 21:00 UTC on June 1, 2012.
• The voting period starts immediately after the review period unless the motion is withdrawn.
• The voting period closes at 21:00 UTC on June 8, 2012.

Compliance date

• The ballot text states effective immediately, so the compliance date is the motion start date.
• The ballot page does not provide any additional phased applicability by CA type or certificate type.