Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework

Results of Review Period

(Mailing list post is available here.)

The IPR review period ended on June 25, 2022 and no exclusion notices were filed.

The final documents, with the effective date being 2022-06-29, are available here.

Summary of Review

Ballot for ReviewBallot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework
Start of Review Period26 May 2022 at 18:00 UTC
End of Review Period25 June 2022 at 18:00 UTC

Members with any Essential Claim(s) to exclude must forward a written Notice to Exclude Essential Claims to the Working Group Chair (email to dean.coclin@digicert.com ) and also submit a copy to the CA/B Forum public mailing list (email to cscwg-public@cabform.org ) before the end of the Review Period.

For details, please see the current version of the CA/Browser Forum Intellectual Property Rights Policy. 

Results of Voting

YesNoAbstain
Certificate IssuersActalis
Certum (Asseco)
DigiCert
eMudhra
Entrust
GlobalSign
HARICA
SSL.com
SecureTrust
Sectigo
Certificate ConsumersMicrosoft
The ballot has PASSED.

Purpose of the Ballot

RFC 3647 defines a standard framework for outlining the obligations of participants in a PKI. Following the recommended framework as specified in RFC 3647 allows for easier comparison of “The Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” with other policy documents, most notably work products of other CA/Browser Forum working groups and individual Certification Authority Certificate Policies and Certification Practice Statements. This ballot restates all existing obligations and requirements that are contained in The Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” in the outline recommended by RFC 3647.

The following motion has been proposed by Corey Bonnell of DigiCert and endorsed by Ian McMillan of Microsoft and Dimitris Zacharopoulos of HARICA.

Motion

This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” version 2.8 by replacing the entirely of the content of the document with the attached document.

Check Also

2023-08-10 Minutes of the Code Signing Certificate Working Group

Attendees: Abhishek Bhat (eMudhra), Andrea Holland (VikingCloud), Ben Dewberry (Keyfactor), Brianca Martin (Amazon), Corey Bonnell …