Ballot NS-006: Fix 1.2.2 encrypted connections scoping

Result and purpose

• Ballot NS-006: Fix 1.2.2 encrypted connections scoping was proposed to refine changes in NS-005 based on feedback from the 2024-10 face to face meeting regarding TLS connections to and within CA infrastructure.
• The ballot modifies Network and Certificate System Security Requirements (NCSSRs) version 2.0 (as referenced on the ballot page).

Key requirement changes described in the ballot materials

• For connections inbound to the CA, allow exceptions for formal specifications that conflict.
• For connections within the CA, change to SHOULD.

Effective date and applicability (from the provided draft text)

• The requirements state:
  • Prior to 2025-03-12, the CA SHALL adhere to these Requirements or Version 1.7 of the Network and Certificate System Security Requirements.
  • Effective 2025-03-12, the CA SHALL adhere to these Requirements.
• The draft text also states an effective-date basis tied to completion of a 30-day IPR review without filing any Exclusion Notices.

IPR review and voting outcome (from the ballot page)

• The ballot page states the voting period has ended and the Ballot has Passed.
• The ballot page lists voting results showing 100% Yes votes among Certificate Consumers and Certificate Issuers, and states bylaws requirements were MET and quorum was 7 for this ballot.