Home » Proceedings » Ballots » Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework

Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework

Notice of IPR Review Period

(Mailing list post is available here.)

This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for two Final Maintenance Guidelines. The complete Draft Maintenance Guidelines that are the subject of this Review Notice are available, both in red-line and changes-accepted draft format.

Summary of Review

Ballot for ReviewBallot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework
Start of Review Period26 May 2022 at 18:00 UTC
End of Review Period25 June 2022 at 18:00 UTC

Members with any Essential Claim(s) to exclude must forward a written Notice to Exclude Essential Claims to the Working Group Chair (email to dean.coclin@digicert.com ) and also submit a copy to the CA/B Forum public mailing list (email to cscwg-public@cabform.org ) before the end of the Review Period.

For details, please see the current version of the CA/Browser Forum Intellectual Property Rights Policy. 

Results of Voting

YesNoAbstain
Certificate IssuersActalis
Certum (Asseco)
DigiCert
eMudhra
Entrust
GlobalSign
HARICA
SSL.com
SecureTrust
Sectigo
Certificate ConsumersMicrosoft
The ballot has PASSED.

Purpose of the Ballot

RFC 3647 defines a standard framework for outlining the obligations of participants in a PKI. Following the recommended framework as specified in RFC 3647 allows for easier comparison of “The Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” with other policy documents, most notably work products of other CA/Browser Forum working groups and individual Certification Authority Certificate Policies and Certification Practice Statements. This ballot restates all existing obligations and requirements that are contained in The Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” in the outline recommended by RFC 3647.

The following motion has been proposed by Corey Bonnell of DigiCert and endorsed by Ian McMillan of Microsoft and Dimitris Zacharopoulos of HARICA.

Motion

This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” version 2.8 by replacing the entirely of the content of the document with the attached document.