CA/Browser Forum posts
2023-12-14 Minutes of the Code Signing Certificate Working Group
December 14, 2023 by Corey BonnellAttendees Andrea Holland (VikingCloud), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Ian McMillan (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Martijn Katerbarg (Sectigo), Mohit Kumar (GlobalSign), Richard Kisley (IBM), Roberto Quionones (Intel), Rollin Yu (TrustAsia), Scott Rea (eMudhra), Tim Crawford (CPA Canada/WebTrust), Tim Hollebeek (DigiCert) Minutes Bruce read the note well. Minutes of the November 30th meeting were not approved as they were just sent out. Signing Service Ballot Bruce mentioned that Ian wanted to reduce the audit requirements for non-CA signing services.
December 14, 2023 by Corey BonnellAttendees Andrea Holland (VikingCloud), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Ian McMillan (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Martijn Katerbarg (Sectigo), Mohit Kumar (GlobalSign), Richard Kisley (IBM), Roberto Quionones (Intel), Rollin Yu (TrustAsia), Scott Rea (eMudhra), Tim Crawford (CPA Canada/WebTrust), Tim Hollebeek (DigiCert) Minutes Bruce read the note well. Minutes of the November 30th meeting were not approved as they were just sent out. Signing Service Ballot Bruce mentioned that Ian wanted to reduce the audit requirements for non-CA signing services.
Ballot SMC04: Addition of ETSI TS 119 411-6 to audit standards
December 8, 2023 by Stephen DavidsonThe Intellectual Property Review (IPR) period for Ballot SMC04 (Addition of ETSI TS 119 411-6 to audit standards) has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of December 8, 2023. The new S/MIME BR have also been published to the CABF public website in accordance with the Bylaws. Intellectual Property Review: Notice of Review Period – BALLOT SMC04 This Review Notice is sent pursuant to Section 4.
December 8, 2023 by Stephen DavidsonThe Intellectual Property Review (IPR) period for Ballot SMC04 (Addition of ETSI TS 119 411-6 to audit standards) has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of December 8, 2023. The new S/MIME BR have also been published to the CABF public website in accordance with the Bylaws. Intellectual Property Review: Notice of Review Period – BALLOT SMC04 This Review Notice is sent pursuant to Section 4.
Minutes of the F2F 60 Meeting in Portsmouth, NH, USA, 3-5 October 2023 – SCWG (4 October)
December 7, 2023 by Iñigo BarreiraServer Cert Working GroupDate: October 4, 2023 Minute Taker: Kiran Tummala (Microsoft) Revocation: The current rules in place were established about a decade ago, and much has changed since then, especially in terms of certificate volumes and crt.sh. Often, revocation appears to be a cosmetic issue, and there’s a sense that it does a disservice to both subscribers and relying parties. Creating unnecessary crises is not beneficial. There’s a strong desire to update the rule.
December 7, 2023 by Iñigo BarreiraServer Cert Working GroupDate: October 4, 2023 Minute Taker: Kiran Tummala (Microsoft) Revocation: The current rules in place were established about a decade ago, and much has changed since then, especially in terms of certificate volumes and crt.sh. Often, revocation appears to be a cosmetic issue, and there’s a sense that it does a disservice to both subscribers and relying parties. Creating unnecessary crises is not beneficial. There’s a strong desire to update the rule.
2023-10-26 Minutes of the Server Certificate Working Group
December 7, 2023 by Iñigo BarreiraAttendance Aaron Poulsen – (Amazon), Abhishek Bhat – (eMudhra), Adam Jones – (Microsoft), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Brianca Martin – (Amazon), Brittany Randall – (GoDaddy), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Corey Rasmussen – (OATI), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Eva Vansteenberge – (GlobalSign), Inaba Atsushi – (GlobalSign), Janet Hines – (VikingCloud), Kiran Tummala – (Microsoft), Lynn Jeun – (Visa), Mads Henriksveen – (Buypass AS), Martijn Katerbarg – (Sectigo), Michelle Coon – (OATI), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Paul van Brouwershaven – (Entrust), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Rollin Yu – (TrustAsia Technologies Inc), Scott Rea – (eMudhra), Stephen Davidson – (DigiCert), Tadahiko Ito – (SECOM Trust Systems), Thomas Zermeno – (SSL.
December 7, 2023 by Iñigo BarreiraAttendance Aaron Poulsen – (Amazon), Abhishek Bhat – (eMudhra), Adam Jones – (Microsoft), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Brianca Martin – (Amazon), Brittany Randall – (GoDaddy), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Corey Rasmussen – (OATI), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Eva Vansteenberge – (GlobalSign), Inaba Atsushi – (GlobalSign), Janet Hines – (VikingCloud), Kiran Tummala – (Microsoft), Lynn Jeun – (Visa), Mads Henriksveen – (Buypass AS), Martijn Katerbarg – (Sectigo), Michelle Coon – (OATI), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Paul van Brouwershaven – (Entrust), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Rollin Yu – (TrustAsia Technologies Inc), Scott Rea – (eMudhra), Stephen Davidson – (DigiCert), Tadahiko Ito – (SECOM Trust Systems), Thomas Zermeno – (SSL.
2023-09-28 Minutes of the Server Certificate Working Group
December 7, 2023 by Iñigo BarreiraAttendance Aaron Gable (Let’s Encrypt), Aaron Poulsen (Amazon), Abhishek Bhat (eMudhra), Adam Clark (Visa), Adam Jones (Microsoft), Adrian Mueller (SwissSign), Andrea Holland (VikingCloud), Ben Wilson (Mozilla), Bilal Ashraf (SSL.com), Brianca Martin (Amazon), Bruce Morton (Entrust), Clint Wilson (Apple), Corey Bonnell (DigiCert), Corey Rasmussen (OATI), Daryn Wright (GoDaddy), Dean Coclin (DigiCert), Dustin Hollenback (Microsoft), Fumi Yoneda (Japan Registry Services), Hannah Sokol (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Jos Purvis (Fastly), Jozef Nigut (Disig), Keshava Nagaraju (eMudhra), Li-Chun Chen (Chunghwa Telecom), Lynn Jeun (Visa), Mads Henriksveen (Buypass AS), Martijn Katerbarg (Sectigo), Michelle Coon (OATI), Nargis Mannan (VikingCloud), Nate Smith (GoDaddy), Nicol So (CommScope), Paul van Brouwershaven (Entrust), Pedro Fuentes (OISTE Foundation), Rebecca Kelley (Apple), RIch Smith (DigiCert), Roman Fischer (SwissSign), Scott Rea (eMudhra), Tadahiko Ito (SECOM Trust Systems), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Yoshihiko Matsuo (Japan Registry Services)
December 7, 2023 by Iñigo BarreiraAttendance Aaron Gable (Let’s Encrypt), Aaron Poulsen (Amazon), Abhishek Bhat (eMudhra), Adam Clark (Visa), Adam Jones (Microsoft), Adrian Mueller (SwissSign), Andrea Holland (VikingCloud), Ben Wilson (Mozilla), Bilal Ashraf (SSL.com), Brianca Martin (Amazon), Bruce Morton (Entrust), Clint Wilson (Apple), Corey Bonnell (DigiCert), Corey Rasmussen (OATI), Daryn Wright (GoDaddy), Dean Coclin (DigiCert), Dustin Hollenback (Microsoft), Fumi Yoneda (Japan Registry Services), Hannah Sokol (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Jos Purvis (Fastly), Jozef Nigut (Disig), Keshava Nagaraju (eMudhra), Li-Chun Chen (Chunghwa Telecom), Lynn Jeun (Visa), Mads Henriksveen (Buypass AS), Martijn Katerbarg (Sectigo), Michelle Coon (OATI), Nargis Mannan (VikingCloud), Nate Smith (GoDaddy), Nicol So (CommScope), Paul van Brouwershaven (Entrust), Pedro Fuentes (OISTE Foundation), Rebecca Kelley (Apple), RIch Smith (DigiCert), Roman Fischer (SwissSign), Scott Rea (eMudhra), Tadahiko Ito (SECOM Trust Systems), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Yoshihiko Matsuo (Japan Registry Services)
2023-12-7 Minutes of the Server Certificate Working Group
December 7, 2023 by Iñigo BarreiraAttendance Aaron Gable – (Let’s Encrypt) Aaron Poulsen – (Amazon) Adam Jones – (Microsoft) Alison Wang – (TrustAsia) Andrea Holland – (VikingCloud) Ben Wilson – (Mozilla) Brianca Martin – (Amazon) Brittany Randall – (GoDaddy) Chris Clements – (Google) Corey Bonnell – (DigiCert) Dean Coclin – (DigiCert) Dimitris Zacharopoulos – (HARICA) Enrico Entschew – (D-TRUST) Inigo Barreira – (Sectigo) Kiran Tummala – (Microsoft) Lynn Jeun – (Visa) Mads Henriksveen – (Buypass AS) Marcelo Silva – (Visa) Marco Schambach – (IdenTrust) Martijn Katerbarg – (Sectigo) Michelle Coon – (OATI) Mrugesh Chandarana – (IdenTrust) Nargis Mannan – (VikingCloud) Nate Smith – (GoDaddy) Nicol So – (CommScope) Nome Huang – (TrustAsia) Paul van Brouwershaven – (Entrust) Pedro Fuentes – (OISTE Foundation) Peter Miskovic – (Disig) Rebecca Kelley – (Apple) Rollin Yu – (TrustAsia) Scott Rea – (eMudhra) Stephen Davidson – (DigiCert) Steven Deitte – (GoDaddy) Tadahiko Ito – (SECOM Trust Systems) Tobias Josefowitz – (Opera Software AS) Trevoli Ponds-White – (Amazon) Wayne Thayer – (Fastly) Yoshihiko Matsuo – (Japan Registry Services) Agenda The following meeting minutes are approved:
December 7, 2023 by Iñigo BarreiraAttendance Aaron Gable – (Let’s Encrypt) Aaron Poulsen – (Amazon) Adam Jones – (Microsoft) Alison Wang – (TrustAsia) Andrea Holland – (VikingCloud) Ben Wilson – (Mozilla) Brianca Martin – (Amazon) Brittany Randall – (GoDaddy) Chris Clements – (Google) Corey Bonnell – (DigiCert) Dean Coclin – (DigiCert) Dimitris Zacharopoulos – (HARICA) Enrico Entschew – (D-TRUST) Inigo Barreira – (Sectigo) Kiran Tummala – (Microsoft) Lynn Jeun – (Visa) Mads Henriksveen – (Buypass AS) Marcelo Silva – (Visa) Marco Schambach – (IdenTrust) Martijn Katerbarg – (Sectigo) Michelle Coon – (OATI) Mrugesh Chandarana – (IdenTrust) Nargis Mannan – (VikingCloud) Nate Smith – (GoDaddy) Nicol So – (CommScope) Nome Huang – (TrustAsia) Paul van Brouwershaven – (Entrust) Pedro Fuentes – (OISTE Foundation) Peter Miskovic – (Disig) Rebecca Kelley – (Apple) Rollin Yu – (TrustAsia) Scott Rea – (eMudhra) Stephen Davidson – (DigiCert) Steven Deitte – (GoDaddy) Tadahiko Ito – (SECOM Trust Systems) Tobias Josefowitz – (Opera Software AS) Trevoli Ponds-White – (Amazon) Wayne Thayer – (Fastly) Yoshihiko Matsuo – (Japan Registry Services) Agenda The following meeting minutes are approved:
2023-12-06 Minutes of the S/MIME Certificate Working Group
December 6, 2023 by Stephen DavidsonMinutes of SMCWG December 6, 2023 These are the Approved Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply. Attendees Adrian Mueller – (SwissSign), Alison Wang – (TrustAsia), Andrea Holland – (VikingCloud), Andreas Henschel – (D-TRUST), Ashish Dhiman – (GlobalSign), Ben Wilson – (Mozilla), Bruce Morton – (Entrust), Cade Cairns – (Google), Christophe Bonjean – (GlobalSign), Corey Bonnell – (DigiCert), Dimitris Zacharopoulos – (HARICA), Don Sheehy – (CPA Canada/WebTrust), Inaba Atsushi – (GlobalSign), Marco Schambach – (IdenTrust), Martijn Katerbarg – (Sectigo), Mrugesh Chandarana – (IdenTrust), Nome Huang – (TrustAsia), Rebecca Kelley – (Apple), Renne Rodriguez – (Apple), Rollin Yu – (TrustAsia), Russ Housley – (Vigil Security LLC), Stephen Davidson – (DigiCert), Tadahiko Ito – (SECOM Trust Systems), Thomas Zermeno – (SSL.
December 6, 2023 by Stephen DavidsonMinutes of SMCWG December 6, 2023 These are the Approved Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply. Attendees Adrian Mueller – (SwissSign), Alison Wang – (TrustAsia), Andrea Holland – (VikingCloud), Andreas Henschel – (D-TRUST), Ashish Dhiman – (GlobalSign), Ben Wilson – (Mozilla), Bruce Morton – (Entrust), Cade Cairns – (Google), Christophe Bonjean – (GlobalSign), Corey Bonnell – (DigiCert), Dimitris Zacharopoulos – (HARICA), Don Sheehy – (CPA Canada/WebTrust), Inaba Atsushi – (GlobalSign), Marco Schambach – (IdenTrust), Martijn Katerbarg – (Sectigo), Mrugesh Chandarana – (IdenTrust), Nome Huang – (TrustAsia), Rebecca Kelley – (Apple), Renne Rodriguez – (Apple), Rollin Yu – (TrustAsia), Russ Housley – (Vigil Security LLC), Stephen Davidson – (DigiCert), Tadahiko Ito – (SECOM Trust Systems), Thomas Zermeno – (SSL.
Minutes of the F2F 60 Meeting in Portsmouth, NH, USA, 3-5 October 2023 – Validation SC (4 October)
December 4, 2023 by Iñigo BarreiraValidation SubcommitteeDate: October 4, 2023 Minute Taker: Clint Wilson (Apple) Validation WG Chair: Corey Bonnell (DigiCert) Prior Meeting Minutes approved Agenda Report on validation-sc progress since F2F #59 (5 minutes) Presentation of results from the domain validation threat modeling tiger team (1 hour to 1 hour and 15 minutes, led by Michael @ ATS) Presentation on MPDV/MPIC (30-45 minutes, led by Ryan & Chris @ Chrome) (Time permitting) backlog grooming
December 4, 2023 by Iñigo BarreiraValidation SubcommitteeDate: October 4, 2023 Minute Taker: Clint Wilson (Apple) Validation WG Chair: Corey Bonnell (DigiCert) Prior Meeting Minutes approved Agenda Report on validation-sc progress since F2F #59 (5 minutes) Presentation of results from the domain validation threat modeling tiger team (1 hour to 1 hour and 15 minutes, led by Michael @ ATS) Presentation on MPDV/MPIC (30-45 minutes, led by Ryan & Chris @ Chrome) (Time permitting) backlog grooming
Ballot SC-066 v4: Fall 2023 Clean up
November 24, 2023 by Iñigo BarreiraVoting Results Certificate Issuers 24 votes total, with no abstentions: 24 Issuers voting YES: Actalis, Amazon, Buypass, Chunghwa Telecom, D-Trust, Digicert, Disig, eMudhra, Entrust, Fastly, GDCA, Globalsign, GoDaddy, HARICA, iTrusChina, Izenpe, JPRS, LE, OISTE, SECOM, Sectigo, SSL.com, Swisssign and Telia 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 4 votes total, with no abstentions: 4 Consumers voting YES: Google, Mozilla, Apple and Opera 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
November 24, 2023 by Iñigo BarreiraVoting Results Certificate Issuers 24 votes total, with no abstentions: 24 Issuers voting YES: Actalis, Amazon, Buypass, Chunghwa Telecom, D-Trust, Digicert, Disig, eMudhra, Entrust, Fastly, GDCA, Globalsign, GoDaddy, HARICA, iTrusChina, Izenpe, JPRS, LE, OISTE, SECOM, Sectigo, SSL.com, Swisssign and Telia 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 4 votes total, with no abstentions: 4 Consumers voting YES: Google, Mozilla, Apple and Opera 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
2023-11-16 Minutes of the Code Signing Certificate Working Group
November 16, 2023 by Corey BonnellAttendeesAndrea Holland – (VikingCloud), Ben Dewberry – (Keyfactor), Brianca Martin – (Amazon), Bruce Morton – (Entrust), Corey Bonnell – (DigiCert), Dimitris Zacharopoulos – (HARICA), Eva Vansteenberge – (GlobalSign), Ian McMillan – (Microsoft), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Janet Hines – (VikingCloud), Martijn Katerbarg – (Sectigo), Mohit Kumar – (GlobalSign), Richard Kisley – (IBM), Roberto Quionones – (Intel), Rollin Yu – (TrustAsia Technologies Inc), Scott Rea – (eMudhra), Tim Crawford – (CPA Canada/WebTrust)
November 16, 2023 by Corey BonnellAttendeesAndrea Holland – (VikingCloud), Ben Dewberry – (Keyfactor), Brianca Martin – (Amazon), Bruce Morton – (Entrust), Corey Bonnell – (DigiCert), Dimitris Zacharopoulos – (HARICA), Eva Vansteenberge – (GlobalSign), Ian McMillan – (Microsoft), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Janet Hines – (VikingCloud), Martijn Katerbarg – (Sectigo), Mohit Kumar – (GlobalSign), Richard Kisley – (IBM), Roberto Quionones – (Intel), Rollin Yu – (TrustAsia Technologies Inc), Scott Rea – (eMudhra), Tim Crawford – (CPA Canada/WebTrust)