Voting period begins: SC094v2: DNSSEC exception in email DCV methods
Dimitris Zacharopoulos (HARICA)
Summary:
After discussions around DNSSEC enforcement [1] [2] [3] for all Domain Validation methods, and with the WG's decision that the e-mail Domain Validation methods are scheduled to be deprecated (SC090), in order to reduce complexity and confusion around the way to enforce DNSSEC checks on the various email service agents, an exception to the DNSSEC enforcement is proposed for those methods.
This version (2) fixes an inconsistency issue raised on the SCWG public list.
More information is available in
this pull
request.
[1]: https://groups.google.com/a/groups.cabforum.org/g/validation/c/zIKy6Qffw3w/m/qYDGYDQLBAAJ
[2]: https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/g4G7WF6uCHo/m/gX2Ek4S-BAAJ
[3]: https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/226_yZ8Lp4c/m/9bJhRHGpAAAJ
The following motion has been proposed by Dimitris Zacharopoulos (HARICA) and endorsed by Roman Fischer (SwissSign) and Adriano Santoni (Actalis).
--- Motion Begins
---
This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates” (“Baseline Requirements”), based on Version 2.1.9.
MODIFY the Baseline Requirements as specified in the following Redline: https://github.com/cabforum/servercert/compare/a9f40a597e45605e499bc73a64aaa1d607bd5b0a.
--- Motion Ends ---
This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:
Discussion (at least 7 days)
- Start time: 2025-12-19 13:00:00 UTC
- End time: on or after 2025-12-26 13:00:00 UTC
Vote for approval (7 days)
- Start time: 2026-01-08 06:15:00 UTC
- End time: 2026-01-15 06:15:00 UTC
Dimitris Zacharopoulos (HARICA)
--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/7e6f337d-2fb9-4a99-8024-0d7dd233bcf5%40harica.gr.
Pedro FUENTES
--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/7e6f337d-2fb9-4a99-8024-0d7dd233bcf5%40harica.gr.
WISeKey SA
Ben Wilson
--
Adam Folsom
Thanks,
Adam Folsom
Sent: Wednesday, January 7, 2026 11:16 PM
To: CA/B Forum Server Certificate WG Public Discussion List <server...@groups.cabforum.org>
Subject: [External][Possible SPAM][Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
蔡家宏(chtsai)
TWCA votes “Yes” on ballot SC-094v2.
Best Regards
蔡家宏 Chya-Hung Tsai
Director
Identification & Certificate Research
Tel: +886-2-2370-8886 ext. 722
Fax: +886-2-2388-6720
Email: cht...@twca.com.tw
10F., No. 85, Yanping South Road,
Taipei 100002, Taiwan(R.O.C.)
https://www.twca.com.tw
From: 'Dimitris Zacharopoulos (HARICA)' via Server Certificate WG (CA/B
Forum) <server...@groups.cabforum.org>
Sent: Thursday, January 8, 2026 2:16 PM
To: CA/B Forum Server Certificate WG Public Discussion List <server...@groups.cabforum.org>
--
Adriano Santoni
Actalis votes "Yes".
Regards.
Yoshihiko Matsuo
Yoshihiko Matsuo(JPRS)
On Thu, 8 Jan 2026 08:16:21 +0200
"'Dimitris Zacharopoulos (HARICA)' via Server Certificate WG (CA/B Forum)" <server...@groups.cabforum.org> wrote:
> Summary:?
> After discussions around DNSSEC enforcement [1] [2] [3] for all Domain Validation methods, and with the WG's decision that the e-mail Domain Validation methods are scheduled to be deprecated (SC090), in order to reduce complexity and confusion around the way to enforce DNSSEC checks on the various email service agents, an exception to the DNSSEC enforcement is proposed for those methods.?
> This version (2) fixes an inconsistency issue raised on the <https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/tuCF_14OGoM/m/BGP9ixonAgAJ>SCWG public list.
> More information is available in this?<https://github.com/cabforum/servercert/pull/637>pull request.
>
> [1]: https://groups.google.com/a/groups.cabforum.org/g/validation/c/zIKy6Qffw3w/m/qYDGYDQLBAAJ?
> [2]: https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/g4G7WF6uCHo/m/gX2Ek4S-BAAJ
> [3]: https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/226_yZ8Lp4c/m/9bJhRHGpAAAJ?
> --- Motion Begins ---
>
> This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates” (“Baseline Requirements”), based on Version 2.1.9.
>
>
>
> --- Motion Ends ---
> This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:
> Discussion (at least 7 days)
> --
> You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org.
郭宗閔
Chunghwa Telecom votes “Yes” on SC-094v2.
Regards,
Tsung-Min Kuo
Chunghwa Telecom Co., Ltd.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/486e1a03ab7841c396536523c4d5e445%40twca.com.tw.
本信件可能包含中華電信股份有限公司機密資訊,非指定之收件者,請勿蒐集、處理或利用本信件內容,並請銷毀此信件. 如為指定收件者,應確實保護郵件中本公司之營業機密及個人資料,不得任意傳佈或揭露,並應自行確認本郵件之附檔與超連結之安全性,以共同善盡資訊安全與個資保護責任.
Please be advised that this email message (including any attachments) contains confidential information and may be legally privileged. If you are not the intended recipient, please destroy this message and all attachments from your system and do not further collect, process, or use them. Chunghwa Telecom and all its subsidiaries and associated companies shall not be liable for the improper or incomplete transmission of the information contained in this email nor for any delay in its receipt or damage to your system. If you are the intended recipient, please protect the confidential and/or personal information contained in this email with due care. Any unauthorized use, disclosure or distribution of this message in whole or in part is strictly prohibited. Also, please self-inspect attachments and hyperlinks contained in this email to ensure the information security and to protect personal information.
Christophe Bonjean
GlobalSign votes “Yes” on SC-094v2.
Christophe
From: 'Dimitris Zacharopoulos (HARICA)' via Server Certificate WG (CA/B
Forum) <server...@groups.cabforum.org>
Sent: 08 January 2026 07:16
To: CA/B Forum Server Certificate WG Public Discussion List <server...@groups.cabforum.org>
Subject: [Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
Summary:
--
Tom Zermeno
SSl.com votes “Yes” on SC-094v2.
From: 'Dimitris Zacharopoulos (HARICA)' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Sent: Thursday, January 8, 2026 12:16 AM
To: CA/B Forum Server Certificate WG Public Discussion List <server...@groups.cabforum.org>
Subject: [Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
Summary:
--
Scott Rea
Date: Thursday, 8 January 2026 at 10:16 AM
To: CA/B Forum Server Certificate WG Public Discussion List <server...@groups.cabforum.org>
Subject: [Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
|
CAUTION: This email is originated from outside of the organization. Do not open the links or the attachments unless you recognize the sender and know the content is safe.
|
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/7e6f337d-2fb9-4a99-8024-0d7dd233bcf5%40harica.gr.
Nome Huang
qi_ji...@itrus.com.cn
Date: 2026-01-08 14:16Subject: [Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
Summary:
--
Aaron Poulsen
성지은 Jieun Seong
Date: 2026/01/08 15:26:30
From: "'Dimitris Zacharopoulos (HARICA)' via Server Certificate WG (CA/B Forum)"
To: CA/B Forum Server Certificate WG Public Discussion List
Subject: [Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/7e6f337d-2fb9-4a99-8024-0d7dd233bcf5%40harica.gr.
大野 文彰
SECOM Trust Systems votes YES on Ballot SC094v2.
Best regards,
ONO Fumiaki / 大野 文彰
(Japanese name order: family name first, in uppercase)
SECOM Trust Systems CO., LTD.
From: 'Dimitris Zacharopoulos (HARICA)' via Server Certificate WG (CA/B
Forum) <server...@groups.cabforum.org>
Sent: Thursday, January 8, 2026 3:16 PM
To: CA/B Forum Server Certificate WG Public Discussion List <server...@groups.cabforum.org>
Subject: [Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
Summary:
--
Backman, Antti
//Antti
Date: Thursday, 8. January 2026 at 8.17
To: CA/B Forum Server Certificate WG Public Discussion List <server...@groups.cabforum.org>
Subject: [Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
Entschew, Enrico
D-Trust votes „Yes“ on Ballot SC094v2.
Thanks,
Enrico
--
Kateryna Aleksieieva
Certum votes YES on Ballot SC-094v2
Kind regards,
Kateryna Aleksieieva
--
Tim Hollebeek
Dustin Hollenback
On Jan 7, 2026, at 10:16 PM, 'Dimitris Zacharopoulos (HARICA)' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org> wrote:
--
Wayne Thayer
--
Peter Miškovič
Disig votes „YES“ on ballot „SC094v2: DNSSEC exception in email DCV methods“.
Regards
Peter Miskovic
From: 'Dimitris Zacharopoulos (HARICA)' via Server Certificate WG (CA/B
Forum) <server...@groups.cabforum.org>
Sent: štvrtok 8. januára 2026 7:16
To: CA/B Forum Server Certificate WG Public Discussion List <server...@groups.cabforum.org>
Subject: [Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
Summary:
--
jun....@cybertrust.co.jp
-----Original Message-----
From: 'Dimitris Zacharopoulos (HARICA)' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Subject: [Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
After discussions around DNSSEC enforcement [1] [2] [3] for all Domain Validation methods, and with the WG's decision that the e-mail Domain Validation methods are scheduled to be deprecated (SC090 <https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/d7CYQrbdvyU/m/SSHt8zl3AQAJ> ), in order to reduce complexity and confusion around the way to enforce DNSSEC checks on the various email service agents, an exception to the DNSSEC enforcement is proposed for those methods.
This version (2) fixes an inconsistency issue raised on the SCWG public list <https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/tuCF_14OGoM/m/BGP9ixonAgAJ> .
More information is available in this pull request <https://github.com/cabforum/servercert/pull/637> .
[1]: https://groups.google.com/a/groups.cabforum.org/g/validation/c/zIKy6Qffw3w/m/qYDGYDQLBAAJ
[2]: https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/g4G7WF6uCHo/m/gX2Ek4S-BAAJ
[3]: https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/226_yZ8Lp4c/m/9bJhRHGpAAAJ
The following motion has been proposed by Dimitris Zacharopoulos (HARICA) and endorsed by Roman Fischer (SwissSign) and Adriano Santoni (Actalis).
--- Motion Begins ---
This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates” (“Baseline Requirements”), based on Version 2.1.9.
--- Motion Ends ---
This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:
Discussion (at least 7 days)
* End time: on or after 2025-12-26 13:00:00 UTC
Vote for approval (7 days)
* End time: 2026-01-15 06:15:00 UTC
--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/7e6f337d-2fb9-4a99-8024-0d7dd233bcf5%40harica.gr <https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/7e6f337d-2fb9-4a99-8024-0d7dd233bcf5%40harica.gr?utm_medium=email&utm_source=footer> .
Alvin Wang
Summary:
After discussions around DNSSEC enforcement [1] [2] [3] for all Domain Validation methods, and with the WG's decision that the e-mail Domain Validation methods are scheduled to be deprecated (SC090), in order to reduce complexity and confusion around the way to enforce DNSSEC checks on the various email service agents, an exception to the DNSSEC enforcement is proposed for those methods.
This version (2) fixes an inconsistency issue raised on the SCWG public list.
More information is available in this pull request.
[1]: https://groups.google.com/a/groups.cabforum.org/g/validation/c/zIKy6Qffw3w/m/qYDGYDQLBAAJ
[2]: https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/g4G7WF6uCHo/m/gX2Ek4S-BAAJ
[3]: https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/226_yZ8Lp4c/m/9bJhRHGpAAAJ
The following motion has been proposed by Dimitris Zacharopoulos (HARICA) and endorsed by Roman Fischer (SwissSign) and Adriano Santoni (Actalis).
--- Motion Begins ---
This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates” (“Baseline Requirements”), based on Version 2.1.9.
MODIFY the Baseline Requirements as specified in the following Redline: https://github.com/cabforum/servercert/compare/a9f40a597e45605e499bc73a64aaa1d607bd5b0a.
--- Motion Ends ---
This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:
Discussion (at least 7 days)
- Start time: 2025-12-19 13:00:00 UTC
- End time: on or after 2025-12-26 13:00:00 UTC
Vote for approval (7 days)
- Start time: 2026-01-08 06:15:00 UTC
Josselin ALLEMANDOU
Certigna votes “YES” on Ballot SC-094 v2.
Josselin.
De : 'Dimitris Zacharopoulos (HARICA)' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Envoyé : jeudi 8 janvier 2026 07:16
À : CA/B Forum Server Certificate WG Public Discussion List <server...@groups.cabforum.org>
Objet : [Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
⚠ FR : Ce message provient de l'extérieur de l'organisation. N'ouvrez pas de liens ou de pièces jointes à moins que vous ne sachiez que le contenu est fiable. ⚠
--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
servercert-w...@groups.cabforum.org.
To view this discussion visit
https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/7e6f337d-2fb9-4a99-8024-0d7dd233bcf5%40harica.gr.
sde...@godaddy.com
GoDaddy votes Yes on Ballot SC094v2.
Regards,
Steven
From:
'Dimitris Zacharopoulos (HARICA)' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Date: Thursday, January 8, 2026 at 1:16 AM
To: CA/B Forum Server Certificate WG Public Discussion List <server...@groups.cabforum.org>
Subject: [Servercert-wg] Voting period begins: SC094v2: DNSSEC exception in email DCV methods
Summary: After discussions around DNSSEC enforcement [1] [2] [3] for all Domain Validation methods, and with the WG's decision that the e-mail Domain Validation methods are scheduled to be deprecated (SC090), in order to reduce complexity and
ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender
This message came from outside your organization.
ZjQcmQRYFpfptBannerEnd