CA/Browser Forum
Home » All CA/Browser Forum Posts » 2023-04-27 Minutes of the CA/Browser Forum Teleconference

2023-04-27 Minutes of the CA/Browser Forum Teleconference

Attendees:

Aaron Gable – (Let’s Encrypt), Adam Jones – (Microsoft), Adrian Mueller – (SwissSign), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Chris Clements – (Google), Clint Wilson – (Apple), Daryn Wright – (GoDaddy), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Ellie Lu – (TrustAsia Technologies, Inc.), Fumi Yoneda – (Japan Registry Services), Hogeun Yoo – (NAVER Cloud), Inigo Barreira – (Sectigo), Jamie Mackey – (US Federal PKI Management Authority), Janet Hines – (VikingCloud), Joanna Fox – (TrustCor Systems), Jos Purvis – (Fastly), Karina Sirota – (Microsoft), Marco Schambach – (IdenTrust), Martijn Katerbarg – (Sectigo), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Ryan Dickson – (Google), Sissel Hoel – (Buypass AS), Sooyoung Eo – (NAVER Cloud), Stephen Davidson – (DigiCert), Tadahiko Ito – (SECOM Trust Systems), Thomas Zermeno – (SSL.com), Tim Hollebeek – (DigiCert), Tobias Josefowitz – (Opera Software AS), Tsung-Min Kuo – (Chunghwa Telecom), Wendy Brown – (US Federal PKI Management Authority), Yoshiro Yoneya – (Japan Registry Services).

Topic: Code Signing Cert WG

  • Have ballot almost done
  • Did not discuss
  • Did not discuss removing ssl BRs
  • Independent of forum IEFT is working on removing – it is in progress key attestation

Topic: SMIME Cert WG

  • Going through proposed text and clarifications for an errata ballot
  • In implementation CAs have expresses enterprise As are constrained to issue identity certificates only to email domains only under their control – that to issue to external they should be using mailbox validated.
  • MAY 10th! – Presentation on open source Linter from Digicert including lints for SMIME baseline requirements

Topic: Forum infra sub committee

  • Reviewed status on wiki migration
  • Next is dev mail server to test upgrades and integrations with
  • Next is Github updates

Topic: Net Sec WG

  • Redline of Net Sec requirements, 3 topic areas need separated into ballots
  • Sec requirements for Root Cas air gapped systems
  • Intro paragraphs to explain each section and making sure the sections match the goal
  • Desired Outcomes
  • Working on ballot for incorporating CCM into NSRs
  • Cloud Security Alliance – changes will impact everyone so will be worked widely due to impact.
  • Question on timeline – Estimate is first ballot on Air gapped netsec in 6 weeks

Topic: Bylaws changes

  • Github has several open issues tagged with bylaws tag.
  • Ben Wilson addressed the Bylaws items.
  • Added to Bylaws 2.5 branch for upcoming ballot
  • Tim is working on election changes to get everything in in the next 2 weeks.

Topic: Registration for F2F 59

  • Use the link and register for in person or online.
  • Agenda – Paul is working to include everything out of the ordinary
  • Question about in person attendee limits, noted the wiki info needs updated
  • Question about hotel information available.
Latest releases
Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.6 - Ballot SMC08 - Aug 29, 2024

This ballot sets a date by which issuance of certificates following the Legacy generation profiles must cease. It also includes the following minor updates: Pins the domain validation procedures to v 2.0.5 of the TLS Baseline Requirements while the ballot activity for multi-perspective validation is concluded, and the SMCWG determines its corresponding course of action; Updates the reference for SmtpUTF8Mailbox from RFC 8398 to RFC 9598; and Small text corrections in the Reference section

Network and Certificate System Security Requirements
v2.0 - Ballot NS-003 - Jun 26, 2024

Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).