Ballot 84 – ISO 3166-1 User-assigned codes

Ballot overview

• Ballot 84 – ISO 3166-1 User-assigned codes was posted on the CA/Browser Forum site.
• The page states that this ballot was withdrawn.

Result and impact

• Because the ballot was withdrawn, it never became normative.
• No compliance date applies.

Content described on the page

• The ballot is described as maintaining consistency between the S/MIME Baseline Requirements and the TLS Baseline Requirements with changes introduced by Ballots SC096 and SC097.
• The page says the ballot:
  • Creates a carve-out of the logging requirements for DNSSEC, stating these are not in scope.
  • Notes that, for audit purposes, change management logging can confirm whether the appropriate controls are in effect.
  • Sunsets remaining use of SHA-1 signatures in Certificates and CRLs.
  • States that most uses of SHA-1 signatures are already deprecated by SC097.
  • Requires revocation of all unexpired Subordinate CA Certificates issuing S/MIME containing the SHA-1 signature algorithm.
  • Does not prohibit use of SHA-1 to generate issuerKeyHash or issuerNameHash values as required by RFC 5019.
  • Includes minor formatting corrections.