Ballot 81 – Required Format for Amendments to Existing Standards or Requirements

Ballot overview

• Ballot 81 is titled Required Format for Amendments to Existing Standards or Requirements.
• The ballot page states that this ballot was withdrawn.
• The page also says the ballot maintains consistency between the S/MIME Baseline Requirements and the TLS Baseline Requirements with changes introduced by Ballots SC096 and SC097.

Stated changes in the ballot text

• Creates a carve-out of the logging requirements for DNSSEC, stating these are not in scope.
• For audit purposes, change management logging is able to confirm whether the appropriate controls are in effect.
• Sunsets all remaining use of SHA-1 signatures in Certificates and CRLs.
• Notes that most uses of SHA-1 signatures are already deprecated by SC097.
• States that all unexpired Subordinate CA Certificates issuing S/MIME containing the SHA-1 signature algorithm must be revoked.
• States that the proposal does not prohibit the use of SHA-1 to generate issuerKeyHash or issuerNameHash values as required by RFC 5019.
• Includes minor formatting corrections.