Home » All CA/Browser Forum Posts » Governance Change Working Group Posts Proposal

Governance Change Working Group Posts Proposal

The Governance Change Working Group has been working on an outline which would be used as input in drafting new bylaws. The group has taken into account member discussions from various CA/B Forum face to face meetings, phone calls and working group meetings.

This group was originally chartered by Ballot 165 in April 2016 and has been meeting bi-weekly since then.

Linked here is the outline for which we are seeking comments, suggestions, recommendations (and criticism) from members and the public at large. Comments are due back by Friday, February 17th 2017. The public may comment by either sending to a current member (who will then re-post the comments to the public list) or by sending an email to questions @ cabforum.org. [NOTE: The public cannot reply or send to public @ cabforum.org]. The final outline will also be posted here:

Once we finalize the outline, the working group will begin drafting new bylaws. Hence it is important that we get agreement on this outline. Please don’t wait until the last day to submit comments as the group will continue meeting bi-weekly to review them as they come in.

Thank you! Dean Coclin and Ben Wilson

Co-chairs of the Governance Change Working Group

Latest releases

Server Certificate Requirements
SC095v3: Clean-up 2025 - Apr 2, 2026

Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.13 - Ballot SMC015v2 - Mar 28, 2026

This ballot introduces requirements that a CA or RA must follow to rely upon a Mobile Drivers License (mDL) to provide evidence for the authentication of individual identity. It allows the use of mDL that conform to ISO/IEC 18013-5 and which may be verified by the CA or RA in conformance with ISO/IEC 18013-7. The CA or RA shall only accept mDL from an Issuing Authority that is legally authorized by the relevant government or jurisdiction to issue driving licenses. The draft also aligns the subsections of 3.2.4.2 (Validation of individual identity) to correspond more closely with those in 3.2.4.1 (Attribute collection of individual identity). It also includes minor editorial corrections. SMC015v2 was updated to remove an additional reference to the superceded ETSI EN 319 403. This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Ben Wilson (Mozilla) and Scott Rea (eMudhra).

Network and Certificate System Security Requirements
Version 2.0.5 (Ballot NS-008) - Jul 9, 2025