Weekly github digest (Server Certificate Working Group)
1,244 views
Skip to first unread message
Infrastructure Bot
Jan 19, 2025, 2:35:28 AM1/19/25
to server...@groups.cabforum.org
Sunday January 19, 2025
Issues
cabforum/servercert (+1/-0/💬9)
1 issues created:
- #569 ACME Disclosure in CPS (by srdavidson) baseline-requirements
5 issues received 9 new comments:
- #569 ACME Disclosure in CPS (2 by github-actions, srdavidson) baseline-requirements
- #547 Phone Contact with Domain Contact -- Is it allowed, or is it not? (2 by dzacharo) baseline-requirements clean-up
- #546 3.2.2.4.4 should probably not end with "... to Domain Contact" (2 by aarongable, dzacharo) baseline-requirements clean-up
- #540 Section 7.1.2.8.8 is redundant (1 by dzacharo) baseline-requirements clean-up
- #533 Clarify BR 3.2.2.4.7 (2 by aarongable, dzacharo) baseline-requirements
Pull requests
cabforum/servercert (+1/-0/💬1)
1 pull requests submitted:
- #568 SC-XXX: Certificate Lifecycle Automation in CPS (by srdavidson)
1 pull requests received 1 new comments:
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (1 by wwadepohl) ballot
Infrastructure Bot
Jan 26, 2025, 2:35:29 AM1/26/25
to server...@groups.cabforum.org
Sunday January 26, 2025
Issues
cabforum/servercert (+1/-0/💬2)
1 issues created:
- #570 Formatting / bullet point issues with WHOIS and MPIC ballots (by timfromdigicert)
1 issues received 2 new comments:
- #570 Formatting / bullet point issues with WHOIS and MPIC ballots (2 by github-actions, hablutzel1)
Infrastructure Bot
Feb 2, 2025, 2:35:08 AM2/2/25
to server...@groups.cabforum.org
Sunday February 02, 2025
Pull requests
cabforum/servercert (+0/-0/💬1)
1 pull requests received 1 new comments:
- #567 SC-XX: Require DNSSEC Validation and Process RFC 8657 CAA Parameters (1 by wthayer)
Infrastructure Bot
Feb 9, 2025, 2:34:39 AM2/9/25
to server...@groups.cabforum.org
Sunday February 09, 2025
Pull requests
cabforum/servercert (+0/-0/💬1)
1 pull requests received 1 new comments:
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (1 by siedenburg2) ballot
Infrastructure Bot
Feb 16, 2025, 2:34:41 AM2/16/25
to server...@groups.cabforum.org
Sunday February 16, 2025
Issues
cabforum/servercert (+0/-2/💬4)
4 issues received 4 new comments:
- #422 Section 4.9.10: Untangle "assigned" vs "reserved" serials, precertificates, and OCSP (1 by dzacharo)
- #361 Workaround for DNS Fragmentation attacks (1 by dzacharo) validation-sc
- #359 Require domain validations to be performed from multiple network perspectives or some other form of BGP hijack mitigation (1 by dzacharo) validation-sc
- #229 BRs: Clarify what "an appropriate way" means for wildcards and gTLDs (1 by dzacharo) enhancement baseline-requirements
2 issues closed:
- #361 Workaround for DNS Fragmentation attacks validation-sc
- #359 Require domain validations to be performed from multiple network perspectives or some other form of BGP hijack mitigation validation-sc
Pull requests
cabforum/servercert (+0/-0/💬10)
2 pull requests received 10 new comments:
- #567 SC-XX: Require DNSSEC Validation and Process RFC 8657 CAA Parameters (1 by dzacharo)
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (9 by aarongable, g5ppc, heutger, rmhrisk, talaikis) ballot
Infrastructure Bot
Feb 23, 2025, 2:35:24 AM2/23/25
to server...@groups.cabforum.org
Sunday February 23, 2025
Pull requests
cabforum/servercert (+1/-0/💬11)
1 pull requests submitted:
- #571 Require DNSSEC for CAA and DCV lookups using an RFC reference. (by birgelee)
1 pull requests received 11 new comments:
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (11 by aarongable, bel9g, g5ppc, heutger, joshkel, wwadepohl) ballot
Infrastructure Bot
Mar 2, 2025, 2:35:37 AM3/2/25
to server...@groups.cabforum.org
Sunday March 02, 2025
Pull requests
cabforum/servercert (+1/-3/💬12)
1 pull requests submitted:
- #572 Rebase SC-084 (by wthayer)
1 pull requests received 12 new comments:
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (12 by MarkJaroski, g5ppc, grgpw, heutger, rmhrisk, robstradling) ballot
3 pull requests merged:
- #566 SC-084: DNS Labeled With ACME Account ID Challenge ballot
- #572 Rebase SC-084
- #561 SC-083: Winter 2024-2025 Cleanup Ballot ballot
Infrastructure Bot
Mar 9, 2025, 3:35:11 AM3/9/25
to server...@groups.cabforum.org
Sunday March 09, 2025
Issues
cabforum/servercert (+1/-0/💬1)
1 issues created:
- #574 Fix 1.2.2 table heading formatting (by wthayer) baseline-requirements clean-up
1 issues received 1 new comments:
- #574 Fix 1.2.2 table heading formatting (1 by github-actions) baseline-requirements clean-up
Pull requests
cabforum/servercert (+1/-0/💬1)
1 pull requests submitted:
- #573 SC-XX: Sunset the Inclusion of Address and Routing Parameter Area Names (by CBonnell)
1 pull requests received 1 new comments:
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (1 by booth-f) ballot
Infrastructure Bot
Mar 16, 2025, 3:35:04 AM3/16/25
to server...@groups.cabforum.org
Sunday March 16, 2025
Issues
cabforum/servercert (+1/-0/💬3)
1 issues created:
- #575 Application of RFC 6818 (by barrini)
1 issues received 3 new comments:
- #575 Application of RFC 6818 (3 by CBonnell, barrini, github-actions) baseline-requirements
Pull requests
cabforum/servercert (+0/-0/💬3)
1 pull requests received 3 new comments:
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (3 by hmilkovi, lseltzer, rpedrica) ballot
Infrastructure Bot
Mar 23, 2025, 3:35:05 AM3/23/25
to server...@groups.cabforum.org
Sunday March 23, 2025
Issues
cabforum/servercert (+2/-0/💬2)
2 issues created:
- #578 NIST P-256, P-384, ... still considered secure? SafeCurves disregarded? (by agowa)
- #577 Clarify if CAA records have to be validated for reverse lookup and "ipaddress" certificates (by agowa)
2 issues received 2 new comments:
- #578 NIST P-256, P-384, ... still considered secure? SafeCurves disregarded? (1 by github-actions)
- #577 Clarify if CAA records have to be validated for reverse lookup and "ipaddress" certificates (1 by github-actions)
Infrastructure Bot
Mar 30, 2025, 3:34:55 AM3/30/25
to server...@groups.cabforum.org
Sunday March 30, 2025
Issues
cabforum/servercert (+0/-19/💬4)
2 issues received 4 new comments:
- #267 BRs: Make nameConstraints critical (3 by a-h, robstradling) enhancement baseline-requirements profiles-future
- #243 Missing "No stipulation" (1 by dzacharo) editorial baseline-requirements clean-up
19 issues closed:
- #272 BRs: Clarify "a separate validation for that FQDN" editorial baseline-requirements clean-up
- #273 BRs: Section 3.2.2.4.7 is missing indenting for the list editorial baseline-requirements clean-up
- #370 CP/CPS updates at least every 365 days enhancement baseline-requirements clean-up backlog
- #387 TLS BR Section 8.4 reference to triennial audit enhancement baseline-requirements clean-up
- #463 Extra parenthesis in 7.1.2.7.4 Organization Validated baseline-requirements clean-up
- #465 Incorrect reference in TLS BRs section 7.1 baseline-requirements clean-up
- #481 "trusted roles" in 5.2.2 is not capitalized baseline-requirements clean-up
- #498 extKeyUsage criticality in the Root CA Certificate Profile Extension Table (Clean-Up Ballot Candidate) baseline-requirements clean-up
- #502 Remove extraneous "for either" in 3.2.2.4.7 baseline-requirements clean-up
- #523 Update all "http" to "https" in the TLS BRs baseline-requirements clean-up
- #529 Update reference related to ETSI TS 102 042 baseline-requirements clean-up
- #530 Update reference related to FIPS 186-4 clean-up
- #531 Update reference related to ISO 21188:2006 clean-up
- #538 CA Certificate Certificate Policies use of Profile baseline-requirements clean-up
- #539 One or more Reserved Certificate Policy Identifier baseline-requirements clean-up
- #541 Undefined term "Eligible Audit Scheme" in Section 8.2 clean-up definitions-candidate
- #550 Incorrect capitalization of RFC2119 key word in Section 4.9.7 (nitpick) clean-up
- #556 MPIC - Clarify that only methods specified need to utilize MPIC, not all methods clean-up
- #557 MPIC - Clarify when a CA is or is not allowed to issue clean-up
Pull requests
cabforum/servercert (+1/-0/💬4)
1 pull requests submitted:
- #579 Require DNSSEC for CAA and DCV Lookups (by birgelee)
2 pull requests received 4 new comments:
- #579 SC-085: Require DNSSEC for CAA and DCV Lookups (3 by birgelee, dzacharo) baseline-requirements ballot
- #571 Require DNSSEC for CAA and DCV lookups using an RFC reference. (1 by birgelee)
Infrastructure Bot
Apr 6, 2025, 3:35:00 AM4/6/25
to server...@groups.cabforum.org
Sunday April 06, 2025
Issues
cabforum/servercert (+0/-5/💬10)
10 issues received 10 new comments:
- #578 NIST P-256, P-384, ... still considered secure? SafeCurves disregarded? (1 by jrchamp)
- #486 Support the dns-account-01 ACME challenge (1 by CBonnell) validation-sc
- #467 Improve EVG 11.13, 11.8.4, and 14.1.3 to clarify that automatic issuance is permitted (1 by CBonnell) ev-guidelines validation-sc
- #448 CAA checking for Onion Domain Names (1 by CBonnell) validation-sc
- #364 Standardize State and Province names (1 by CBonnell) validation-sc
- #363 Analyze JOI disclosures resulting from ballot SC30 (1 by CBonnell) validation-sc
- #355 Create non-exhaustive list of Registration agencies used by CAs for EV JOI (1 by CBonnell) validation-sc
- #354 Permit the inclusion of LEIs in Subject fields (1 by CBonnell) validation-sc
- #351 Peter's registrar challenge-response validation method ("Method new" in validation summit document) (1 by CBonnell) validation-sc
- #326 Validity period for Technically Constrained Sub-CA and validation period for Domain Namespace (1 by CBonnell) enhancement baseline-requirements validation-sc
5 issues closed:
- #364 Standardize State and Province names validation-sc
- #363 Analyze JOI disclosures resulting from ballot SC30 validation-sc
- #351 Peter's registrar challenge-response validation method ("Method new" in validation summit document) validation-sc
- #243 Missing "No stipulation" editorial baseline-requirements clean-up
- #486 Support the dns-account-01 ACME challenge validation-sc
Pull requests
cabforum/servercert (+0/-0/💬1)
1 pull requests received 1 new comments:
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (1 by heutger) ballot
Infrastructure Bot
Apr 13, 2025, 3:35:03 AM4/13/25
to server...@groups.cabforum.org
Sunday April 13, 2025
Issues
cabforum/servercert (+2/-0/💬4)
2 issues created:
- #582 Incorrect link to TBRs in recommended CPS language (by hablutzel1)
- #580 Update Section 4.9.1.1 to explicitly reference CAA violations (by ryancdickson) clean-up
3 issues received 4 new comments:
- #582 Incorrect link to TBRs in recommended CPS language (1 by github-actions)
- #580 Update Section 4.9.1.1 to explicitly reference CAA violations (2 by github-actions, srdavidson) clean-up
- #267 BRs: Make nameConstraints critical (1 by robstradling) enhancement baseline-requirements profiles-future
Infrastructure Bot
Apr 20, 2025, 3:35:39 AM4/20/25
to server...@groups.cabforum.org
Sunday April 20, 2025
Pull requests
cabforum/servercert (+0/-0/💬1)
1 pull requests received 1 new comments:
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (1 by k-kyle) ballot
Infrastructure Bot
Apr 27, 2025, 9:01:37 AM4/27/25
to server...@groups.cabforum.org
Sunday April 27, 2025
Issues
cabforum/servercert (+0/-0/💬1)
1 issues received 1 new comments:
- #153 Clarify validation requirements for .arpa (1 by enygren) baseline-requirements validation-sc
Pull requests
cabforum/servercert (+0/-0/💬5)
4 pull requests received 5 new comments:
- #586 Web trust audits update (1 by dzacharo)
- #585 Create SECURITY.md (1 by dzacharo)
- #579 SC-085: Require DNSSEC for CAA and DCV Lookups (2 by birgelee, xiaohuilam) baseline-requirements ballot
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (1 by abraxasuser) ballot
Infrastructure Bot
May 4, 2025, 3:35:20 AM5/4/25
to server...@groups.cabforum.org
Sunday May 04, 2025
Issues
cabforum/servercert (+2/-0/💬5)
2 issues created:
- #589 Update Section 7.2 to specify a serial number MUST NOT appear on a CRL more than once (by ryancdickson)
- #588 Sunset 7.1.2.4 - Technically Constrained Precertificate Signing CA Certificate Profile (by ryancdickson)
2 issues received 5 new comments:
- #589 Update Section 7.2 to specify a serial number MUST NOT appear on a CRL more than once (4 by CBonnell, GreatAmus, XolphinMartijn, github-actions)
- #588 Sunset 7.1.2.4 - Technically Constrained Precertificate Signing CA Certificate Profile (1 by github-actions)
Pull requests
cabforum/servercert (+1/-0/💬2)
1 pull requests submitted:
- #587 SC-87: Registration Number Improvement for EV Certificates (by CBonnell)
1 pull requests received 2 new comments:
- #579 SC-085: Require DNSSEC for CAA and DCV Lookups (2 by CBonnell, geegeea) baseline-requirements ballot
Infrastructure Bot
May 11, 2025, 3:35:37 AM5/11/25
to server...@groups.cabforum.org
Sunday May 11, 2025
Issues
cabforum/servercert (+1/-0/💬3)
1 issues created:
- #590 Remove CA-specific EV Policy OIDs from EV Guidelines (by BenWilson-Mozilla)
1 issues received 3 new comments:
- #590 Require CABF EV Policy OID in EV Guidelines (3 by BenWilson-Mozilla, github-actions, robstradling) ev-guidelines
Pull requests
cabforum/servercert (+0/-0/💬4)
2 pull requests received 4 new comments:
- #579 SC-085: Require DNSSEC for CAA and DCV Lookups (1 by birgelee) baseline-requirements ballot
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (3 by ScottHelme, heutger) ballot
Infrastructure Bot
May 18, 2025, 3:35:56 AM5/18/25
to server...@groups.cabforum.org
Sunday May 18, 2025
Issues
cabforum/servercert (+1/-0/💬7)
1 issues created:
- #592 Remove older Relevant Dates from Guidelines (by dzacharo) clean-up
6 issues received 7 new comments:
- #592 Remove older Relevant Dates from Guidelines (1 by github-actions) clean-up
- #404 Create a domain validation method that uses SVCB/HTTPS DNS RRs (1 by CBonnell) validation-sc
- #400 "Certificate request" - Revisit usage (2 by CBonnell, aarongable) validation-sc
- #384 Prohibit the inclusion of dataEncipherment and keyAgreement KU bits (1 by CBonnell) validation-sc profiles-future
- #356 Ensure CAs are collecting sufficient data to investigate CAA errors (1 by CBonnell) validation-sc
- #153 Clarify validation requirements for .arpa (1 by peterthomassen) baseline-requirements validation-sc
Pull requests
cabforum/servercert (+3/-3/💬5)
3 pull requests submitted:
- #594 Fix table formatting (by dzacharo)
- #593 Fix SC-081 workflow (by wthayer)
- #591 Sync with BRs 2.1.4 (by dzacharo)
3 pull requests received 5 new comments:
- #579 SC-085: Require DNSSEC for CAA and DCV Lookups (1 by geegeea) baseline-requirements ballot
- #573 SC-86: Sunset the Inclusion of Address and Routing Parameter Area Names (1 by peterthomassen)
- #553 SC-081: Introduce Schedule of Reducing Validity and Data Reuse Periods (3 by Viajaz, heutger, wthayer) ballot
3 pull requests merged:
Infrastructure Bot
May 25, 2025, 3:37:28 AM5/25/25
to server...@groups.cabforum.org
Sunday May 25, 2025
Pull requests
cabforum/servercert (+1/-2/💬0)
1 pull requests submitted:
- #595 Fix formatting in 3.2.2.9 (by dzacharo)
2 pull requests merged:
Infrastructure Bot
Jun 1, 2025, 3:37:20 AM6/1/25
to server...@groups.cabforum.org
Sunday June 01, 2025
Issues
cabforum/servercert (+2/-0/💬2)
2 issues created:
- #597 Revisit High Risk language (by CBonnell)
- #596 Clarify TLD validation requirements (by CBonnell) validation-sc
2 issues received 2 new comments:
- #597 Revisit High Risk language (1 by github-actions)
- #596 Clarify TLD validation requirements (1 by github-actions) validation-sc
Reply all
Reply to author
Forward
0 new messages