CA/Browser Forum
Home » All CA/Browser Forum Posts » 2023-04-27 Minutes of the CA/Browser Forum Teleconference

2023-04-27 Minutes of the CA/Browser Forum Teleconference

Attendees:

Aaron Gable – (Let’s Encrypt), Adam Jones – (Microsoft), Adrian Mueller – (SwissSign), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Chris Clements – (Google), Clint Wilson – (Apple), Daryn Wright – (GoDaddy), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Ellie Lu – (TrustAsia Technologies, Inc.), Fumi Yoneda – (Japan Registry Services), Hogeun Yoo – (NAVER Cloud), Inigo Barreira – (Sectigo), Jamie Mackey – (US Federal PKI Management Authority), Janet Hines – (VikingCloud), Joanna Fox – (TrustCor Systems), Jos Purvis – (Fastly), Karina Sirota – (Microsoft), Marco Schambach – (IdenTrust), Martijn Katerbarg – (Sectigo), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Ryan Dickson – (Google), Sissel Hoel – (Buypass AS), Sooyoung Eo – (NAVER Cloud), Stephen Davidson – (DigiCert), Tadahiko Ito – (SECOM Trust Systems), Thomas Zermeno – (SSL.com), Tim Hollebeek – (DigiCert), Tobias Josefowitz – (Opera Software AS), Tsung-Min Kuo – (Chunghwa Telecom), Wendy Brown – (US Federal PKI Management Authority), Yoshiro Yoneya – (Japan Registry Services).

Topic: Code Signing Cert WG

  • Have ballot almost done
  • Did not discuss
  • Did not discuss removing ssl BRs
  • Independent of forum IEFT is working on removing – it is in progress key attestation

Topic: SMIME Cert WG

  • Going through proposed text and clarifications for an errata ballot
  • In implementation CAs have expresses enterprise As are constrained to issue identity certificates only to email domains only under their control – that to issue to external they should be using mailbox validated.
  • MAY 10th! – Presentation on open source Linter from Digicert including lints for SMIME baseline requirements

Topic: Forum infra sub committee

  • Reviewed status on wiki migration
  • Next is dev mail server to test upgrades and integrations with
  • Next is Github updates

Topic: Net Sec WG

  • Redline of Net Sec requirements, 3 topic areas need separated into ballots
  • Sec requirements for Root Cas air gapped systems
  • Intro paragraphs to explain each section and making sure the sections match the goal
  • Desired Outcomes
  • Working on ballot for incorporating CCM into NSRs
  • Cloud Security Alliance – changes will impact everyone so will be worked widely due to impact.
  • Question on timeline – Estimate is first ballot on Air gapped netsec in 6 weeks

Topic: Bylaws changes

  • Github has several open issues tagged with bylaws tag.
  • Ben Wilson addressed the Bylaws items.
  • Added to Bylaws 2.5 branch for upcoming ballot
  • Tim is working on election changes to get everything in in the next 2 weeks.

Topic: Registration for F2F 59

  • Use the link and register for in person or online.
  • Agenda – Paul is working to include everything out of the ordinary
  • Question about in person attendee limits, noted the wiki info needs updated
  • Question about hotel information available.
Latest releases
Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.7 - Ballot SMC09 - Nov 25, 2024

This ballot includes updates for the following: • Require pre-linting of leaf end entity Certificates starting September 15, 2025 • Require WebTrust for Network Security for audits starting after April 1, 2025 • Clarify that multiple certificatePolicy OIDs are allowed in end entity certificates • Clarify use of organizationIdentifer references • Update of Appendix A.2 Natural Person Identifiers This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Clint Wilson (Apple) and Martijn Katerbarg (Sectigo).

Network and Certificate System Security Requirements
v2.0 - Ballot NS-003 - Jun 26, 2024

Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).