Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework
Results of Review Period
(Mailing list post is available here.)
The IPR review period ended on June 25, 2022 and no exclusion notices were filed.
The final documents, with the effective date being 2022-06-29, are available here.
Summary of Review
| Ballot for Review | Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework |
| Start of Review Period | 26 May 2022 at 18:00 UTC |
| End of Review Period | 25 June 2022 at 18:00 UTC |
Members with any Essential Claim(s) to exclude must forward a written Notice to Exclude Essential Claims to the Working Group Chair (email to ) and also submit a copy to the CA/B Forum public mailing list (email to ) before the end of the Review Period.
For details, please see the current version of the CA/Browser Forum Intellectual Property Rights Policy.
Results of Voting
| Yes | No | Abstain | |
|---|---|---|---|
| Certificate Issuers | ActalisCertum (Asseco), DigiCert, eMudhra, Entrust, GlobalSign, HARICA, SSL.com, SecureTrust | Sectigo | |
| Certificate Consumers | Microsoft |
The ballot has PASSED.
Purpose of the Ballot
RFC 3647 defines a standard framework for outlining the obligations of participants in a PKI. Following the recommended framework as specified in RFC 3647 allows for easier comparison of “The Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” with other policy documents, most notably work products of other CA/Browser Forum working groups and individual Certification Authority Certificate Policies and Certification Practice Statements. This ballot restates all existing obligations and requirements that are contained in The Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” in the outline recommended by RFC 3647.
The following motion has been proposed by Corey Bonnell of DigiCert and endorsed by Ian McMillan of Microsoft and Dimitris Zacharopoulos of HARICA.
Motion
This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” version 2.8 by replacing the entirely of the content of the document with the attached document.