Ballot 80 – Response for Non-Issued Certificates

Overview

• Ballot 80 is titled Response for Non-Issued Certificates.
• The ballot page states that the ballot passed.
• The motion was made by Yngve Pettersen and endorsed by Ben Wilson and Carsten Dahlenkamp.

Requirement added to the Baseline Requirements

• A new section 13.2.6, Response for non-issued certificates, is inserted at the end of section 13.2 of the Baseline Requirements.
• If an OCSP responder receives a request for the status of a certificate that has not been issued, the responder SHOULD NOT respond with a good status.
• The CA SHOULD monitor the responder for such requests as part of its security response procedures.
• Starting 1 August 2013, OCSP responders MUST NOT respond with a good status for such certificates.

Timing stated in the motion

• The ballot review period comes into effect at 21:00 UTC on 19 July 2012 and closes at 21:00 UTC on 26 July 2012.
• Unless the motion is withdrawn during the review period, the voting period starts immediately thereafter and closes at 21:00 UTC on 2 August 2012.
• The motion text also includes Effective 1 Feb 2013 before the erratum text.