VOTING PERIOD Begins | SC-088v3: DNS TXT Record with Persistent Value DCV Method
Michael Slaughter
The purpose of this ballot is to add section 3.2.2.4.22 "DNS TXT Record with Persistent Value" as a new domain control validation method in the Baseline Requirements for TLS Server Certificates. This method enables domain owners to establish account-scoped DNS validation records that can be reused across multiple certificate issuances, eliminating the need to update DNS records for each certificate renewal while maintaining equivalent security to existing DNS-based validation methods.
MotionThe following motion has been proposed by Michael Slaughter (Amazon Trust Services) and endorsed by Chris Clements (Google Chrome), Ryan Dickson (Google Chrome), Tim Hollebeek (Digicert) and Martijn Katerbarg (Sectigo).
You can view the Github pull request representing this ballot here.
Motion BeginsMODIFY the "Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates" ("TLS Baseline Requirements") based on Version 2.1.7 as specified in the following redline:
- https://github.com/cabforum/servercert/compare/b6a014d4aee244c019ef6ca41667045cdbfefb81...dc7fd7f1dd586fb9e23375f2c8d4afcc7c832130
This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:
Discussion (at least 7 days)- Start time: September 23, 2025 21:30 UTC
- End time: October 2, 2025 15:44:59 UTC
- Start time: October 2, 2025 15:45:00 UTC
- End time: October 9, 2025 15:45:00 UTC
Aaron Poulsen
Ben Wilson
--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/19b0f61d-2a73-42af-9174-39b77591f042n%40groups.cabforum.org.
黃晟(orca)
TWCA votes 'Yes' on ballot SC-088v3.
--
Entschew, Enrico
D-Trust votes „YES“ on ballot SC-088v3.
Thanks,
Enrico
--
Marco Schambach
IdenTrust votes “Yes” on SC-088v3
Marco S.
TrustID Program Manager
--
Scott Rea
eMudhra votes YES on SC-088v3
From:
'Michael Slaughter' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Date: Thursday, 2 October 2025 at 9:44
AM
To: Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Subject: [Servercert-wg] VOTING PERIOD Begins | SC-088v3: DNS TXT Record with Persistent Value DCV Method
|
CAUTION: This email is originated from outside of the organization. Do not open the links or the attachments unless you recognize the sender and know the content is safe. |
--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
servercert-w...@groups.cabforum.org.
To view this discussion visit
https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/19b0f61d-2a73-42af-9174-39b77591f042n%40groups.cabforum.org.
大野 文彰
SECOM Trust Systems votes YES on Ballot SC-088v3.
Best regards,
ONO Fumiaki / 大野 文彰
SECOM Trust Systems CO., LTD.
(Japanese name order: family name first, in uppercase)
From: 'Michael Slaughter' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Sent: Friday, October 3, 2025 12:44 AM
To: Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
--
飯田 義朗
ある意味これってDNSのCAA資源レコード全否定とも私には読めたのですが、
CAAのRFCを出したSectigoやLet's Encryptらはどう反応しているんですかね...
--
iida
Sent: Monday, October 6, 2025 1:53 PM
To: server...@groups.cabforum.org
Subject: RE: [Servercert-wg] VOTING PERIOD Begins | SC-088v3: DNS TXT Record with Persistent Value DCV Method
SECOM Trust Systems votes YES on Ballot SC-088v3.
Best regards,
Sent: Friday, October 3, 2025 12:44 AM
To: Server Certificate WG (CA/B Forum)
Subject: [Servercert-wg] VOTING PERIOD Begins | SC-088v3: DNS TXT Record with Persistent Value DCV Method
SC-088v3: DNS TXT Record with Persistent Value DCV Method
飯田 義朗
I make a mistake. Please ignore.
--
iida
Yoshihiko Matsuo
Yoshihiko Matsuo(JPRS)
On Thu, 2 Oct 2025 08:44:14 -0700 (PDT)
"'Michael Slaughter' via Server Certificate WG (CA/B Forum)" <server...@groups.cabforum.org> wrote:
> SC-088v3:?DNS TXT Record with Persistent Value DCV Method
>
>
> Purpose of Ballot
> The purpose of this ballot is to add section 3.2.2.4.22 "DNS TXT Record with Persistent Value" as a new domain control validation method in the Baseline Requirements for TLS Server Certificates. This method enables domain owners to establish account-scoped DNS validation records that can be reused across multiple certificate issuances, eliminating the need to update DNS records for each certificate renewal while maintaining equivalent security to existing DNS-based validation methods.
> Motion
> You can view the Github pull request representing this ballot?<https://github.com/cabforum/servercert/pull/608>here.?
> Motion Begins
> MODIFY the "Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates" ("TLS Baseline Requirements") based on Version 2.1.7? as specified in the following redline:
> <https://github.com/cabforum/servercert/compare/b6a014d4aee244c019ef6ca41667045cdbfefb81...dc7fd7f1dd586fb9e23375f2c8d4afcc7c832130><https://github.com/cabforum/servercert/compare/b6a014d4aee244c019ef6ca41667045cdbfefb81...dc7fd7f1dd586fb9e23375f2c8d4afcc7c832130>
> - <https://github.com/cabforum/servercert/compare/b6a014d4aee244c019ef6ca41667045cdbfefb81...dc7fd7f1dd586fb9e23375f2c8d4afcc7c832130>https://github.com/cabforum/servercert/compare/b6a014d4aee244c019ef6ca41667045cdbfefb81...dc7fd7f1dd586fb9e23375f2c8d4afcc7c832130
> This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:
> Discussion (at least 7 days)
> - End time: October 2, 2025 15:44:59 UTC
> - End time: October 9, 2025 15:45:00 UTC
> --
> You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org.
Ryan Dickson
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/20251006195329.0775.F0379974%40jprs.co.jp.
Pedro FUENTES
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/CADEW5O9tuWru87YvULOWweCN1bZzW57v%3DO5CHqZXBYO2kZ0Gmg%40mail.gmail.com.
WISeKey SA
Wayne Thayer
--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org.
sde...@godaddy.com
GoDaddy votes Yes on Ballot SC-088v3.
Cheers,
Steven Deitte
From:
'Michael Slaughter' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Date: Thursday, October 2, 2025 at 11:44 AM
To: Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Subject: [Servercert-wg] VOTING PERIOD Begins | SC-088v3: DNS TXT Record with Persistent Value DCV Method
SC-088v3: DNS TXT Record with Persistent Value DCV Method Purpose of Ballot The purpose of this ballot is to add section 3. 2. 2. 4. 22 "DNS TXT Record with Persistent Value" as a new domain control validation method in the Baseline Requirements
ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender
This message came from outside your organization.
ZjQcmQRYFpfptBannerEnd
--
Corey Bonnell
Backman, Antti
Telia votes ’Yes’ on ballot SC-088v3.
//Antti
From: 'Michael Slaughter' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Date: Thursday, 2. October 2025 at 18.44
To: Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
--
Doug Beattie
GlobalSign votes yes on Ballot SC-088v3
From: 'Michael Slaughter' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Sent: Thursday, October 2, 2025 5:44 PM
To: Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
--
Tom Zermeno
SSL.com votes “Yes” on SC-088v3.
From: 'Michael Slaughter' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Sent: Thursday, October 2, 2025 10:44 AM
To: Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
--
Romain DELVAL
Certigna votes "Yes" on SC-088v3
Romain DELVAL
De : 'Michael Slaughter' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Envoyé : jeudi 2 octobre 2025 17:44
À : Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Objet : [Servercert-wg] VOTING PERIOD Begins | SC-088v3: DNS TXT Record with Persistent Value DCV Method
⚠ FR : Ce message provient de l'extérieur de l'organisation. N'ouvrez pas de liens ou de pièces jointes à moins que vous ne sachiez que le contenu est fiable. ⚠
--
郭宗閔
Chunghwa Telecom votes yes on Ballot SC-088v3
Best regards,
Chunghwa Telecom Co., Ltd.,
Tsung-Min Kuo
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/SEZPR03MB6593AEFFCAFA8213C57116C9F0E0A%40SEZPR03MB6593.apcprd03.prod.outlook.com.
本信件可能包含中華電信股份有限公司機密資訊,非指定之收件者,請勿蒐集、處理或利用本信件內容,並請銷毀此信件. 如為指定收件者,應確實保護郵件中本公司之營業機密及個人資料,不得任意傳佈或揭露,並應自行確認本郵件之附檔與超連結之安全性,以共同善盡資訊安全與個資保護責任.
Please be advised that this email message (including any attachments) contains confidential information and may be legally privileged. If you are not the intended recipient, please destroy this message and all attachments from your system and do not further collect, process, or use them. Chunghwa Telecom and all its subsidiaries and associated companies shall not be liable for the improper or incomplete transmission of the information contained in this email nor for any delay in its receipt or damage to your system. If you are the intended recipient, please protect the confidential and/or personal information contained in this email with due care. Any unauthorized use, disclosure or distribution of this message in whole or in part is strictly prohibited. Also, please self-inspect attachments and hyperlinks contained in this email to ensure the information security and to protect personal information.
Dimitris Zacharopoulos (HARICA)
Peter Miškovič
Disig votes „Yes“ on ballot SC-088v3: DNS TXT Record with Persistent Value DCV Method.
Regards
Peter Miskovic
From: 'Michael Slaughter' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Sent: štvrtok 2. októbra 2025 17:44
To: Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
--
Janet Hines
VikingCloud votes ‘YES ‘on Ballot SC-088v3.
From: 'Michael Slaughter' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Date: Thursday, October 2, 2025 at 11:44 AM
To: Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Subject: [Servercert-wg] VOTING PERIOD Begins | SC-088v3: DNS TXT Record with Persistent Value DCV Method
Caution: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.
--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
servercert-w...@groups.cabforum.org.
To view this discussion visit
https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/19b0f61d-2a73-42af-9174-39b77591f042n%40groups.cabforum.org.
Company Registration Details
VikingCloud is the registered business name of Sysxnet Limited. Sysxnet Limited is registered in Ireland under company registration number 147176 and its registered office is at 1st Floor, Block 71a, The Plaza, Park West Business Park, Dublin 12, Ireland.
Email Disclaimer
The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. It may contain confidential or legally privileged information. If you are not the intended
recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us
immediately by responding to this email and then delete it from your system. Sysxnet Limited is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt..
Martijn Katerbarg
Date: Thursday, 2 October 2025 at 17:44
To: Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Chad Dandar (cdandar)
Cisco votes “YES” on ballot SC-088v3
Chad Dandar
Cisco
From: 'Michael Slaughter' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Sent: Thursday, October 2, 2025 8:44 AM
To: Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Subject: [Servercert-wg] VOTING PERIOD Begins | SC-088v3: DNS TXT Record with Persistent Value DCV Method
SC-088v3: DNS TXT Record with Persistent Value DCV Method
qi_ji...@itrus.com.cn
Nome Huang
TrustAsia votes "Yes" on SC-088v3
Alvin Wang
Wojciech Trapczyński
Certum votes YES on Ballot SC-088v3.
jun....@cybertrust.co.jp
-----Original Message-----
From: 'Michael Slaughter' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Sent: Friday, October 3, 2025 12:44 AM
Subject: [Servercert-wg] VOTING PERIOD Begins | SC-088v3: DNS TXT Record with Persistent Value DCV Method
SC-088v3: DNS TXT Record with Persistent Value DCV Method
Purpose of Ballot
The purpose of this ballot is to add section 3.2.2.4.22 "DNS TXT Record with Persistent Value" as a new domain control validation method in the Baseline Requirements for TLS Server Certificates. This method enables domain owners to establish account-scoped DNS validation records that can be reused across multiple certificate issuances, eliminating the need to update DNS records for each certificate renewal while maintaining equivalent security to existing DNS-based validation methods.
Motion
The following motion has been proposed by Michael Slaughter (Amazon Trust Services) and endorsed by Chris Clements (Google Chrome), Ryan Dickson (Google Chrome), Tim Hollebeek (Digicert) and Martijn Katerbarg (Sectigo).
Motion Begins
MODIFY the "Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates" ("TLS Baseline Requirements") based on Version 2.1.7 as specified in the following redline:
<https://github.com/cabforum/servercert/compare/b6a014d4aee244c019ef6ca41667045cdbfefb81...dc7fd7f1dd586fb9e23375f2c8d4afcc7c832130>
* <https://github.com/cabforum/servercert/compare/b6a014d4aee244c019ef6ca41667045cdbfefb81...dc7fd7f1dd586fb9e23375f2c8d4afcc7c832130> https://github.com/cabforum/servercert/compare/b6a014d4aee244c019ef6ca41667045cdbfefb81...dc7fd7f1dd586fb9e23375f2c8d4afcc7c832130
Motion Ends
This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:
Discussion (at least 7 days)
* End time: October 2, 2025 15:44:59 UTC
Vote for approval (7 days)
* End time: October 9, 2025 15:45:00 UTC
--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/19b0f61d-2a73-42af-9174-39b77591f042n%40groups.cabforum.org <https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/19b0f61d-2a73-42af-9174-39b77591f042n%40groups.cabforum.org?utm_medium=email&utm_source=footer> .