-
Notifications
You must be signed in to change notification settings - Fork 125
Description
RDAP is supported for the purposes of domain validation in the TLS BRs and, broadly speaking, is seen as at least equivalent to WHOIS (really, superior). The TBRs are already clear on the appropriate use of both WHOIS and RDAP.
However, the EVGs limit Section 3.2.2.14.1 to the use of WHOIS for the purpose of reusing prior authentication and verification of an Applicant's right to use a Domain Name. This should be updated to clarify that RDAP can be used in the same way WHOIS has been used historically, within this section.
The Applicant's right to use the specified Domain Name under Section 3.2.2.7, provided that the CA verifies that the WHOIS record or RDAP registry data still shows the same registrant as when the CA verified the specified Domain Name for the initial EV Certificate.