2022-08-18 Minutes of the Server Certificate Working Group
Attendees
Aaron Poulsen (Amazon), Adam Jones (Microsoft), Adrian Mueller (SwissSign), Andrea Holland (SecureTrust), Ben Wilson (Mozilla), Bruce Morton (Entrust), Chris Clements (Google), Chris Kemmerer (SSL.com), Clint Wilson (Apple), Corey Bonnell (Digicert), David Kluge (Google), Dustin Hollenback (Microsoft), Fumi Yoneda (Japan Registry Services), Hazhar Ismail (MSC Trustgate Sdn Bhd), Inaba Atsushi (GlobalSign), Jamie Mackey (US Federal PKI Management Authority), Janet Hines (SecureTrust), Joanna Fox (TrustCor Systems), Johnny Reading (GoDaddy), Jos Purvis (Fastly), Karina Sirota (Microsoft), Kiran Tummala (Microsoft), Li-Chun Chen (Chunghwa Telecom), Mads Henriksveen (Buypass AS), Martijn Katerbarg (Sectigo), Michael Guenther (SwissSign), Michelle Coon (OATI), Rebecca Kelley (Apple), Roman Fischer (SwissSign), Ryan Dickson (Google), Tadahiko Ito (SECOM Trust Systems), Tobias Josefowitz (Opera Software AS), Trevoli Ponds-White (Amazon), Tyler Myers (GoDaddy), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Yoshiro Yoneya (Japan Registry Services)
Minutes
1. Read Antitrust Statement
Jos Purvis read the antitrust statement.
2. Review Agenda
No changes were made to the agenda.
3. Approval of Minutes from Last Teleconference
The minutes from the 4-August call were approved without changes.
4. Validation Subcommittee Update
Corey Bonnell said that the subcommittee met last Thursday. They spent most of the time reviewing the “on deck” section of the subcommittee’s backlog. A number of items were reprioritized. The discussion then moved to a proposed relaxation of the key usage requirements for end-entity certificates in the new profiles ballot, and how to represent something that is likely to be forbidden in the future. Finally, the group discussed two EV cleanup items proposed by Bruce Morton and agreed to move forward with them. Next week the subcommittee is planning to continue work on profiles and move on to some of the new work at the next meeting.
5. Ballot Status
Ballots in Discussion Period
- None
Ballots in Voting Period
- None
Ballots in Review Period
- None
Draft Ballots Under Consideration
- Revival of Debian Weak Keys
Chris Kemmerer said that consensus has been reached on the language and he is seeking endorsers to move the ballot forward.
- SLO/Response for CRL & OCSP Responses
David Kluge said that not as much progress has been made as hoped. There was some discussion in the past week that now needs to be incorporated into the ballot. Would also like to extend the ballot beyond SLOs for revocation into other areas of the BRs.
6. Any Other Business
- Interested Party Review
Jos said that NENA – the 911 association – has requested participation as an Interested Party. They are a standards organization for 911 (the North American emergency services telephone number). Jos said that he had confirmed the requestor’s authority to sign the IPR agreement.
Tobias Josefowitz asked if we can get confirmation from someone other than the requestor themself?
Jos said that it is reasonable to ask the requestor to forward a confirmation email from an officer to provide proof of their binding authority.
- CRL Reason Codes
Ben Wilson said that he had sent an email to the list about revocation reason codes. Ben requested feedback on the proposal. It is not in the form of a ballot yet, but Ben is seeking endorsers.
7. Roll Call
Clint Wilson read the roll.
8. Next call: 1-September 2022 at 11AM Eastern
Adjourn; Immediately convene meeting of CA Browser Forum (same call)