Ballot CSC-17: Subscriber Private Key Extension

Notice of Review Period

(Mailing list post is available here.)

The IPR review period ended on October 28, 2022 and no exclusion notices were filed.

The final documents, with the effective date being 2022-10-28, are available here.

This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). The complete Draft Guideline subject of this Review Notice is available here.

Ballot for Review: Ballot CSCWG-17

Start of Review Period: September 27, 2022 at 5:00pm Eastern Time

End of Review Period: October 27, 2022 at 5:00pm Eastern Time

Please forward a written notice to exclude Essential Claims to the Forum and Working Group Chair by email to dean.coclin@digicert.com and a copy to the CA/B Forum CSCWG public mailing list cscwg-public@cabforum.org before the end of the Review Period. See current version of CA/Browser Forum Intellectual Property Rights Policy for details.

Results of Voting

YesNoAbstain
Certificate IssuersDigiCert
eMudhra
Entrust
GlobalSign
Sectigo
SecureTrust
HARICA
Certificate ConsumersMicrosoft
This ballot has PASSED.

Purpose of the Ballot

This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates“ version 3.1 according to the attached redline which includes the change of the effective date of November 15, 2021, to June 1, 2023, subscriber key protection and verification requirements in the following sections:

  • Section 6.2.7.4.1 Subscriber Private Key protection
  • Section 6.2.7.4.2 Subscriber Private Key verification
  • Section 1.2.2 Relevant Dates

The change to extend the effective date for these sections regarding subscriber private key protection is to provide approximately 1 year of time from the public announcement of the requirement change for all effected parties to implement the changes.

The following motion has been proposed by Ian McMillan of Microsoft and endorsed by Tim Hollebeek of DigiCert and Bruce Morton of Entrust.

Motion

This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” version 3.1 by replacing the entirely of the content of the document with the attached document.

Check Also

Ballot SC58 – Require distributionPoint in sharded CRLs

Voting Results Certificate Issuers 19 votes total, with no abstentions: 19 Issuers voting YES: TrustCor, …