Voting Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

[Qais Al Hajri]

Ballot NS-010 is proposed by Qais Al Hajri (Microsoft) and endorsed by Trevoli Ponds-White (Amazon), Andrea Holland (IdenTrust), and Tim Hollebeek (DigiCert).

Purpose of Ballot

This ballot proposes the following changes to the NCSSRs:

Structural changes

 - New Section 1 "CA Infrastructure Inventory": the inventory requirement ("The CA MUST define an inventory of its CA Infrastructure") is separated into its own top-level section for clarity and emphasis.

 - Section renumbering - all subsequent sections bumped by one:

     Section 1 to Section 2 (CA Infrastructure and Network Boundary Control Configuration)

     Section 2 to Section 3 (Access Control)

     Section 3 to Section 4 (Monitoring, Logging, Auditing, and Incident Response)

     Section 4 to Section 5 (Vulnerability Management)

 - Cross-references updated: all internal section references and anchor links updated to reflect the new numbering.

Removal of expired effective dates

 - Removed "Prior to 12-Nov-2025 / Effective 12-Nov-2025" transition language (the date is now past).

 - Consolidated vulnerability-management applicability: replaced the phased SHOULD/MUST language (expired 15-Apr-2026) with a single MUST statement.

External reference update

 - Updated the NIST reference in Section 3.2.5 from "NIST 800-63B Revision 3 Appendix A" to "NIST SP 800-63B Revision 4 Appendix A".

Motion

The following motion has been proposed by Qais Al Hajri (Microsoft) and endorsed by Trevoli Ponds-White (Amazon), Andrea Holland (IdenTrust), and Tim Hollebeek (DigiCert).

You can view and comment on the Github pull request representing this ballot here.

Motion begins

This ballot modifies the "Network and Certificate System Security Requirements," based on version 2.0.5, as shown in the immutable redline: https://github.com/cabforum/netsec/compare/3c98854b95b1bcaf0525db6e9c06908aa1999814...fde959546c1223fa6b3bc937b77740aa4af1a5fb

Motion ends

Discussion (at least 7 days)

• Start time: Tuesday, June 30, 2026 17:00:00 UTC (2026-06-30T17:00:00Z)
• End time: on or after Tuesday,  July 7, 2026 17:00:00 UTC (2026-07-07T17:00:00Z)

Vote for approval (7 days)

• Start time: Tuesday, July 7, 2026 17:00:00 UTC (2026-07-07T17:00:00Z)
• End time: Tuesday, July 14, 2026 17:00:00 UTC (2026-07-14T17:00:00Z)

If the Initial Vote passes, a 30-day IPR Review Period will follow per Bylaws Section 2.4 and the IPR Policy.

Thanks, 

Qais Al Hajri

[Dustin Hollenback]

Apple votes “yes” on NS-010. 

On Jul 7, 2026, at 10:13 AM, 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org> wrote:



--
You received this message because you are subscribed to the Google Groups "NetSec WG - Public (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to netsec+un...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/netsec/CHAPR00MB3037AA879D722F7268C8AE4DE8F02%40CHAPR00MB3037.namprd00.prod.outlook.com.

[Scott Rea]

eMudhra votes YES on Ballot NS-010

From: 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Date: Tuesday, 7 July 2026 at 11:13 AM
To: 'Ben Wilson' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Subject: [netsec] Voting Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

CAUTION: This email is originated from outside of the organization. Do not open the links or the attachments unless you recognize the sender and know the content is safe.

--
You received this message because you are subscribed to the Google Groups "NetSec WG - Public (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to netsec+un...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/netsec/CHAPR00MB3037AA879D722F7268C8AE4DE8F02%40CHAPR00MB3037.namprd00.prod.outlook.com.

Disclaimer: The email and its contents hold confidential information and are intended for the person or entity to which it is addressed. If you are not the intended recipient, please note that any distribution or copying of this email is strictly prohibited as per Company Policy, you are requested to notify the sender and delete the email and associated attachments with it from your system.

[Karina Sirota Goodley]

Microsoft votes yes on NS-010.

[Michael Guenther]

SwissSign votes yes on 'NS-010'

 

Mike

 

From: 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Sent: Tuesday, July 7, 2026 7:13 PM
To: 'Ben Wilson' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Subject: [netsec] Voting Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

 

Ballot NS-010 is proposed by Qais Al Hajri (Microsoft) and endorsed by Trevoli Ponds-White (Amazon), Andrea Holland (IdenTrust), and Tim Hollebeek (DigiCert).

--

[Pedro FUENTES]

OISTE votes yes on 'NS-010'

To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/netsec/ZR0P278MB049232DB38C0BECC5785E5C190FF2%40ZR0P278MB0492.CHEP278.PROD.OUTLOOK.COM.

WISeKey SA

Pedro Fuentes
CSO - Trust Services Manager
Office: + 41 (0) 22 594 30 00
Mobile: + 41 (0) 791 274 790

Address: Avenue Louis-Casaï 58 | 1216 Cointrin | Switzerland

Stay connected with WISeKey

THIS IS A TRUSTED MAIL: This message is digitally signed with a WISeKey identity. If you get a mail from WISeKey please check the signature to avoid security risks

CONFIDENTIALITY: This email and any files transmitted with it can be confidential and it’s intended solely for the use of the individual or entity to which they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. If you have received this email in error please notify the sender

DISCLAIMER: WISeKey does not warrant the accuracy or completeness of this message and does not accept any liability for any errors or omissions herein as this message has been transmitted over a public network. Internet communications cannot be guaranteed to be secure or error-free as information may be intercepted, corrupted, or contain viruses. Attachments to this e-mail are checked for viruses; however, we do not accept any liability for any damage sustained by viruses and therefore you are kindly requested to check for viruses upon receipt.

[Tugba ÖZCAN (BILGEM KSM)]

Kamu SM votes 'YES' on Ballot NS-010

   

 

Tuğba ÖZCAN
TÜBİTAK BİLGEM

Kamu Sertifikasyon Merkezi/E-İmza Teknolojileri Birim Yöneticisi

tugba...@tubitak.gov.tr, +90 262 648 18 18 - 8543

bilgem.tubitak.gov.tr | Sorumluluk Reddi                 

   

---

Kimden: "'Qais Al Hajri' via NetSec WG - Public (CA/B Forum)" <net...@groups.cabforum.org>
Kime: "'Ben Wilson' via NetSec WG - Public (CA/B Forum)" <net...@groups.cabforum.org>
Gönderilenler: 7 Temmuz Salı 2026 20:13:08
Konu: [netsec] Voting Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

⚠ Kurum Dışı E-posta!!! Bu e-posta TÜBİTAK dışından gönderilmiştir. Gönderenin kimliğinden emin değilseniz ekleri açmayınız, bağlantılara tıklamayınız ve kişisel bilgilerinizi paylaşmayınız. Şüpheli olduğunu düşündüğünüz e-postaları Oltalama Raporlama Sistemi üzerinden raporlayabilirsiniz.

--

--

[Nome Huang]

TrustAsia votes “Yes” on ballot NS-010.

[Jozef Nigut]

Disig  votes 'YES' on Ballot NS-010

 

Jozef

From: 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>

Sent: Tuesday, July 7, 2026 7:13 PM

--

[Tim Hollebeek]

DigiCert votes YES on NS-010.

---

From: 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>

Sent: Tuesday, July 7, 2026 1:13 PM

To: 'Ben Wilson' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Subject: [netsec] Voting Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

[Ben Wilson]

Mozilla votes "yes" on Ballot NS-010.

--

[Inigo Barreira]

Sectigo votes yes

 

De: 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Enviado el: martes, 7 de julio de 2026 19:13
Para: 'Ben Wilson' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Asunto: [netsec] Voting Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

 

Ballot NS-010 is proposed by Qais Al Hajri (Microsoft) and endorsed by Trevoli Ponds-White (Amazon), Andrea Holland (IdenTrust), and Tim Hollebeek (DigiCert). Purpose of Ballot This ballot proposes the following changes to the NCSSRs: Structural

ZjQcmQRYFpfptBannerStart

This Message Is From an External Sender This message came from outside your organization.     Report Suspicious    ‌

ZjQcmQRYFpfptBannerEnd

--

[Brittany Randall]

GoDaddy votes "Yes" to NS-010.

Thanks,

Brittany Randall

---

From: 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Sent: Tuesday, July 7, 2026 10:13 AM
To: 'Ben Wilson' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Subject: [netsec] Voting Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

Ballot NS-010 is proposed by Qais Al Hajri (Microsoft) and endorsed by Trevoli Ponds-White (Amazon), Andrea Holland (IdenTrust), and Tim Hollebeek (DigiCert). Purpose of Ballot This ballot proposes the following changes to the NCSSRs: Structural

ZjQcmQRYFpfptBannerStart

This Message Is From an External Sender

This message came from outside your organization.

 

ZjQcmQRYFpfptBannerEnd

[蔡家宏(chtsai)]

TWCA votes 'YES' on Ballot NS-010

 

 

Best Regards

 

蔡家宏 Chya-Hung Tsai

Director

Identification & Certificate Research
Tel: +886-2-2370-8886 ext. 722
Fax: +886-2-2388-6720
Email: cht...@twca.com.tw

10F., No. 85, Yanping South Road,

Taipei 100002, Taiwan(R.O.C.)
https://www.twca.com.tw

 

 

From: 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Sent: Wednesday, July 8, 2026 1:13 AM
To: 'Ben Wilson' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Subject: [netsec] Voting Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

 

Ballot NS-010 is proposed by Qais Al Hajri (Microsoft) and endorsed by Trevoli Ponds-White (Amazon), Andrea Holland (IdenTrust), and Tim Hollebeek (DigiCert).

--

[Christophe Bonjean]

GlobalSign votes “Yes” on ballot NS-010.

 

Christophe

 

From: 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Sent: 07 July 2026 19:13
To: 'Ben Wilson' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Subject: [netsec] Voting Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

 

Ballot NS-010 is proposed by Qais Al Hajri (Microsoft) and endorsed by Trevoli Ponds-White (Amazon), Andrea Holland (IdenTrust), and Tim Hollebeek (DigiCert).

--

[Backman, Antti]

Telia votes ’Yes’ on Ballot NS-010

//Antti

---

Lähettäjä: 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Lähetetty: Tuesday, 07 July 2026 20:13:08
Vastaanottaja: 'Ben Wilson' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Aihe: [netsec] Voting Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

 

Caution: This is an external email. Stop, assess and verify. Please take care when clicking links or opening attachments! When in doubt, report it using “report phishing” function.

--

You received this message because you are subscribed to the Google Groups "NetSec WG - Public (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to netsec+un...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/netsec/CHAPR00MB3037AA879D722F7268C8AE4DE8F02%40CHAPR00MB3037.namprd00.prod.outlook.com.

This email may contain information which is privileged or protected against unauthorized disclosure or communication. If you are not the intended recipient, please notify the sender and delete this message and any attachments from your system without producing, distributing or retaining copies thereof or disclosing its contents to any other person.

Telia Company processes emails and other files that may contain personal data in accordance with Telia Company’s Privacy Policy.

[Kateryna Aleksieieva]

Certum votes YES on Ballot NS-010

Kind regards,

Kateryna Aleksieieva

--

[陳立群]

Chunghwa Telecom votes YES on Ballot NS-010

 

 Thank you.

 

       Li-Chun Chen

To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/netsec/DU0PR10MB726430F80E763CCE24907CE181F92%40DU0PR10MB7264.EURPRD10.PROD.OUTLOOK.COM.

本信件可能包含中華電信股份有限公司機密資訊,非指定之收件者,請勿蒐集、處理或利用本信件內容,並請銷毀此信件. 如為指定收件者,應確實保護郵件中本公司之營業機密及個人資料,不得任意傳佈或揭露,並應自行確認本郵件之附檔與超連結之安全性,以共同善盡資訊安全與個資保護責任.
Please be advised that this email message (including any attachments) contains confidential information and may be legally privileged. If you are not the intended recipient, please destroy this message and all attachments from your system and do not further collect, process, or use them. Chunghwa Telecom and all its subsidiaries and associated companies shall not be liable for the improper or incomplete transmission of the information contained in this email nor for any delay in its receipt or damage to your system. If you are the intended recipient, please protect the confidential and/or personal information contained in this email with due care. Any unauthorized use, disclosure or distribution of this message in whole or in part is strictly prohibited. Also, please self-inspect attachments and hyperlinks contained in this email to ensure the information security and to protect personal information.

[Adam Fiock]

SSL.com votes “Yes” on NS-010.

 

From: 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Sent: Tuesday, July 7, 2026 12:13 PM
To: 'Ben Wilson' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Subject: [netsec] Voting Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

 

Ballot NS-010 is proposed by Qais Al Hajri (Microsoft) and endorsed by Trevoli Ponds-White (Amazon), Andrea Holland (IdenTrust), and Tim Hollebeek (DigiCert).

--

[Trevoli Ponds-White]

Amazon Trust Services votes yes