Ballot SC077: Update WebTrust Audit name in Section 8.4 and References

Ballot overview

• Ballot SC077 updates the WebTrust audit name in Section 8.4 and References.
• The ballot proposes a Final Maintenance Guideline for the TLS Baseline Requirements.
• The motion modifies the Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates based on Version 2.0.5.
• The change allows a CA to be audited against either:
  • WebTrust Principles and Criteria for Certification Authorities – SSL Baseline with Network Security, or
  • WebTrust Principles and Criteria for Certification Authorities – SSL Baseline and WebTrust Principles and Criteria for Certification Authorities – Network Security.

Voting and adoption

• Certificate Issuers: 22 votes total, all YES, no NO votes, no abstentions.
• Certificate Consumers: 3 votes total, all YES, no NO votes, no abstentions.
• The ballot met the Bylaw 2.3(6) voting requirements for both categories.
• The quorum was 14 and this requirement was met.
• The ballot page states that the ballot was adopted and current status is passed.

Review period and IPR notice

• The review period started on 2 September 2024 at 11:30 UTC.
• The review period ended on 2 October 2024 at 11:30 UTC.
• The IPR notice says members with Essential Claims to exclude must submit a written Notice to Exclude Essential Claims before the end of the Review Period.
• The supplied evidence does not state that any exclusion notices were filed.

Compliance impact

• The ballot changes Section 8.4 so that CAs may use either of two WebTrust audit criteria sets.
• The evidence does not provide a separate compliance deadline beyond the ballot adoption and the review period.
• The linked BR artifact shows Version 2.0.6 and includes historical effective dates for earlier requirements, but no new effective date for this ballot is stated in the supplied evidence.