Ballot 89 – Publish Recommendations for the Processing of EV SSL Certificates v.2(passes)

Ballot overview

• Ballot 89 authorizes publication of Recommendations for the Processing of Extended Validation SSL Certificates, v. 2.0.
• The ballot page states that voting on Ballot 89 closed and that Ballot 89 passes.
• The motion says the words Proposed Draft will be removed from the document on the CA/Browser Forum website upon adoption.

Timing stated in the evidence

• The ballot review period comes into effect on 3 January 2014 at 2100 UTC.
• The ballot review period closes on 10 January 2014 at 2100 UTC.
• The voting period starts immediately after the review period and closes on 17 January 2014 at 2100 UTC.
• The linked PDF is dated January 2, 2014 and is version 2.0.

What the recommendations cover

• The document gives recommendations for application software suppliers that process or display EV certificates.
• It describes how root store managers should identify EV CSPs and EV certificates.
• It recommends notification, agreement, process description, communication, schedule, membership posting, and software verification steps for root-embedding programs.
• It recommends protection of CSP public-key integrity.
• It requires certificate verification software to validate certificates under RFC 5280 Section 6.
• It says user agents must not grant EV treatment when path validation fails or when an EV certificate is known to be revoked.
• It says certificate verification software must verify the EV policy identifier and support revocation checking using CRL and OCSP.
• It includes guidance on certificate contents, cryptographic algorithms and minimum key sizes, and EV treatment behavior.
• It also includes security considerations and text equivalents for EV OIDs in subject distinguished name fields.

Ballot result details

• Ten members voted in favor: Buypass, Comodo, D-TRUST, DigiCert, GoDaddy, Izenpe, SSC, Symantec, Trend Micro, and Opera.
• Mozilla abstained.
• There were none opposed.
• The page states that Ballot 89 passes.