Ballot CSC-17: Subscriber Private Key Extension
Notice of Review Period
(Mailing list post is available here.)
The IPR review period ended on October 28, 2022 and no exclusion notices were filed.
The final documents, with the effective date being 2022-10-28, are available here.
This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). The complete Draft Guideline subject of this Review Notice is available here.
Ballot for Review: Ballot CSCWG-17
Start of Review Period: September 27, 2022 at 5:00pm Eastern Time
End of Review Period: October 27, 2022 at 5:00pm Eastern Time
Please forward a written notice to exclude Essential Claims to the Forum and Working Group Chair by email to and a copy to the CA/B Forum CSCWG public mailing list cscwg-public@cabforum.org before the end of the Review Period. See current version of CA/Browser Forum Intellectual Property Rights Policy for details.
Results of Voting
| Yes | No | Abstain | |
|---|---|---|---|
| Certificate Issuers | DigiCert, eMudhra, Entrust, GlobalSign, Sectigo, SecureTrust | HARICA | |
| Certificate Consumers | Microsoft |
This ballot has PASSED.
Purpose of the Ballot
This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates“ version 3.1 according to the attached redline which includes the change of the effective date of November 15, 2021, to June 1, 2023, subscriber key protection and verification requirements in the following sections:
- Section 6.2.7.4.1 Subscriber Private Key protection
- Section 6.2.7.4.2 Subscriber Private Key verification
- Section 1.2.2 Relevant Dates
The change to extend the effective date for these sections regarding subscriber private key protection is to provide approximately 1 year of time from the public announcement of the requirement change for all effected parties to implement the changes.
The following motion has been proposed by Ian McMillan of Microsoft and endorsed by Tim Hollebeek of DigiCert and Bruce Morton of Entrust.
Motion
This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” version 3.1 by replacing the entirely of the content of the document with the attached document.