Home » All CA/Browser Forum Posts » 2021-09-16 Minutes of the CA/Browser Forum Teleconference

2021-09-16 Minutes of the CA/Browser Forum Teleconference

Attendees

Ali Gholami (Telia), Amanda Mendieta (Apple), Andrea Holland (SecureTrust), Ben Wilson (Mozilla), Brittany Randall (GoDaddy), Bruce Morton (Entrust), Chris Kemmerer (SSL.com), Clint Wilson (Apple), Corey Bonnell (Digicert), Dean Coclin (Digicert), Doug Beattie (GlobalSign), Dustin Hollenback (Microsoft), Fumihiko Yoneda (Japan Registry Services), Hazhar Ismail (MSC Trustgate), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Joanna Fox (TrustCor Systems), Johnny Reading (GoDaddy), Jos Purvis (Cisco Systems), Kati Davids (GoDaddy), Mads Henriksveen (Buypass AS), Marcelo Silva (Visa), Natalia Kotliarsky (SecureTrust), Paul van Brouwershaven (Entrust), Peter Miskovic (Disig), Rebecca Kelley (Apple), Ryan Sleevi (Google), Stephen Davidson (Digicert), Tadahiko Ito (SECOM Trust Systems), Tobias Josefowitz (Opera Software AS), Trevoli Ponds-White (Amazon), Tyler Myers (GoDaddy), Vijayakumar (Vijay) Manjunatha (eMudhra), Wayne Thayer (Mozilla), Yoshiro Yoneya (Japan Registry Services)

Minutes

Jos Purvis read the anti-trust statement The agenda was reviewed. No changes.

Minutes of the August 19th call were approved. Minutes for September 2nd call have not been submitted yet.

Forum Infrastructure Subcommittee Update: The update was provided by Jos Purvis. A meeting was held on the 8th of September. Discussions around updating the ballot pages on the website. Ben has adjusted the display to show the ballots from each working group separately. The group discussed content tagging to help with automated updates and a process for publishing to the website. The bylaws could use some clarity in this area and the group plans to propose updates.

Code Signing Certificate Working Group Update: Bruce Morton provided the update. Corey Bonnell will be the webmaster for the group and a discussion on training to use WordPress will be provided by Ben Wilson. Ballots CSCWG 9 and 10 have passed the IPR process. A new ballot on log retention is coming, being proposed by Ian from Microsoft. The group is working on moving the CS BRs to Pandoc and RFC 3647 format. A discussion on “invalidity date” occurred on the list.

S/MIME Working Group Update: Stephen Davidson provided the update. The group is making good progress on the cert profiles, having worked on mailbox, organization, sponsored individuals, and now personal individuals. The group discussed the Key Usage Data Encipherment field which legacy profiles may be using, hence amendments are being made to the profile. Lastly, there was an inquiry from a certificate consumer on information from CAs issuing certs with ECC S/MIME usage. Stephen will do a survey to get that information.

Fall F2F meeting: Dean reminded everyone to register for the meeting. There are 48 registrations as of today.

No other business, meeting adjourned. Next call on September 30th.

Latest releases

Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.7 - Ballot SMC09 - Nov 25, 2024

This ballot includes updates for the following: • Require pre-linting of leaf end entity Certificates starting September 15, 2025 • Require WebTrust for Network Security for audits starting after April 1, 2025 • Clarify that multiple certificatePolicy OIDs are allowed in end entity certificates • Clarify use of organizationIdentifer references • Update of Appendix A.2 Natural Person Identifiers This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Clint Wilson (Apple) and Martijn Katerbarg (Sectigo).

Network and Certificate System Security Requirements
v2.0 - Ballot NS-003 - Jun 26, 2024

Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35