CAB Forum Certificate Issuers, Certificate Consumers, and Interested Parties Working to Secure the Web
Results of Review Period
(Mailing list post is available here.)
The IPR review period ended on September 5, 2023 and no exclusion notices were filed.
The final documents, with the effective date being 2023-09-05, are available here.
This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). A complete Draft Guideline subject of this Review Notice is available here.
Ballot for Review: Ballot CSC-19
Start of Review Period: August 1, 2023 at 11:00am Eastern Time
End of Review Period: September 1, 2023 at 11:00am Eastern Time
Please forward a written notice to exclude Essential Claims to the Forum and Working Group Chair by email to dean.coclin@digicert.com and a copy to the CA/B Forum CSCWG public mailing list cscwg-public@cabforum.org before the end of the Review Period. See current version of CA/Browser Forum Intellectual Property Rights Policy for details.
Results of Voting
| Yes | No | Abstain | |
| Certificate Issuers | DigiCert Entrust GDCA GlobalSign HARICA | ||
| Certificate Consumers | Microsoft |
Purpose of the Ballot
This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates“ version 3.3 in order to remove references pointing the Baseline Requirements for Publicly-Trusted TLS Certificates (“TLS BRs”). The main goals of this ballot are to:
- Remove dependencies with the “TLS BRs” that are decided in a different CA/B Forum Working Group
- Remove ambiguity about which exact requirements are applicable to Code Signing Issuers and Time-stamping Authorities
The following motion has been proposed by Dimitris Zacharopoulos of HARICA and endorsed by Martijn Katerbarg of Sectigo and Tim Hollebeek of Digicert.
Motion
This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” (“Code Signing Baseline Requirements”) based on version 3.3. MODIFY the Code Signing Baseline Requirements as specified in the following redline: https://github.com/cabforum/code-signing/pull/16/files#diff-51665fed103b76d89fc3da15cf88817d58602089