4 ms·
I know this thread is over, but it's important to understand that it's the browsers who have all the power in CABF and they were the drivers behind this change.
by hackcoughgasp 1y ago
I know this thread is over, but it's important to understand that it's the browsers who have all the power in CABF and they were the drivers behind this change. Apple proposed it and Google voted yes within minutes of the voting period opening. It was unanimous among CAs too (with 5 abstentions), and nobody really disagrees with it, but it was the browsers who started the initiative now.
The article links to the vote thread: https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/bvWh5RN6tYI https://groups.google.com/a/groups.cabforum.org/g/servercert...
And here's the CABF discussion before the vote: https://github.com/cabforum/servercert/pull/553/commits/69cea5473f20e6ea518dbec8ac549d88f8a35830 https://github.com/cabforum/servercert/pull/553/commits/69ce...
- nickf 1y agoIt wasn't just the browsers. Some CAs supported this for a long time, and even directly endorsed the ballot. You're not wrong about the browsers having 'the power', but then again - they are the representatives of billions of relying parties, so it's expected.