Home » Proceedings » Minutes » 2019-01-10 Minutes for Server Certificate Working Group Teleconference

2019-01-10 Minutes for Server Certificate Working Group Teleconference

Attendees (in alphabetical order)

Ben Wilson (Digicert), Chris Kemmerer (SSL.com), Daymion Reynolds (GoDaddy), Dean Coclin (Digicert), Dimitris Zacharopoulos (HARICA), Doug Beattie (GlobalSign), Fotis Loukos (SSL.com), Frank Corday (Trustwave), Gordon Bock (Microsoft), Inaba Atsushi (GlobalSign), India Donald (US Federal PKI Management Authority), Joanna Fox (GoDaddy), Jos Purvis (Cisco Systems), Li-Chun Chen (Chunghwa Telecom), Marcelo Silva (Visa), Michelle Coon (OATI), Neil Dunbar (TrustCor Systems), Niko Carpenter (Trustwave), Peter Miskovic (Disig), Rich Smith (Sectigo), Robin Alden (Sectigo), Tim Callan (Sectigo), Tim Shirley (Trustwave), Trevoli Ponds-White (Amazon), Wayne Thayer (Mozilla), Wendy Brown (US Federal PKI Management Authority).

Minutes

1. Roll Call

The Chair took attendance

2. Read Antitrust Statement

The Chair read the Antitrust Statement

3. Review Agenda

The Agenda was approved.

4. Application of eMudhra for SCWG Membership

eMudhra was accepted as a Full Member to the SCWG.

5. Validation Subcommittee Update

The Validation SC met last week and discussed the ballot to remove “any other method” from IP address validation methods. A working draft of that ballot has been circulated in the validation mailing list.

The SC also spent some time to discuss ballot SC14 that is currently in discussion period on the public mailing lists.

The SC also begun to work on method 6. They will focus on improving methods for validating domains via a “piece of information” on a web site.

6. NetSec Subcommittee Update

Ben reported that the NetSec Subcommittee will meet after this call. He gave a brief summary of the topics discussed during the previous call.

7. Ballot Status

Ballots in Discussion Period

Ballot SC14: Updated Phone Validation Methods
Dimitris noticed that there is a  possible ambiguity about the voting and whether votes must be sent to the servercert-wg or public list or both, but there is no issue related to the discussion venue of ballots. He recommended that members use the servercert-wg@cabforum.org (the public list of the SCWG) since this ballot affects the SCWG, and avoid double-posting.

Doug sent a version 2 of the ballot that removed the DNS CAA location for phone numbers while waiting for IETF’s confirmation about how to define the property tags. He also replied to a couple of comments and suggested if anyone else has comments or concerns about the ballot, to send a message to the servercert-wg mailing list as soon as possible. Once these are addressed, a version 3 will be created that will hopefully be the final one before voting.

Ballots in Review Period
Ballot SC13: CAA Contact Property and Associated E-mail Validation Methods (Tim H.)
Dimitris mentioned that it was brought to his attention that appendix B of that ballot had a typo in the numbering and mentioned that when we create the final version of the Baseline Requirements, this typo will be corrected and it will be clear so that everyone knows about this editorial change.

Draft Ballots under Consideration


Ballot SC7: Update IP Address Validation Methods (Wayne)No comments were made.

Improvements for Method 6, website control (Tim H.)No comments were made.

8. Any Other Business

None.

9. Next call

January 24, 2019 at 11:00 am Eastern Time.

Adjourned