Ballot CSC-19: Remove TLS BR References

Results of Review Period

(Mailing list post is available here.)

The IPR review period ended on September 5, 2023 and no exclusion notices were filed.

The final documents, with the effective date being 2023-09-05, are available here.

This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). A complete Draft Guideline subject of this Review Notice is available here.

Ballot for Review:         Ballot CSC-19

Start of Review Period:         August 1, 2023 at 11:00am Eastern Time

End of Review Period:         September 1, 2023 at 11:00am Eastern Time

Please forward a written notice to exclude Essential Claims to the Forum and Working Group Chair by email to dean.coclin@digicert.com and a copy to the CA/B Forum CSCWG public mailing list cscwg-public@cabforum.org before the end of the Review Period. See current version of CA/Browser Forum Intellectual Property Rights Policy for details.  

Results of Voting

  Yes No Abstain
Certificate Issuers DigiCert Entrust GDCA GlobalSign HARICA    
Certificate Consumers Microsoft    
This ballot has PASSED.

Purpose of the Ballot

This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates“ version 3.3 in order to remove references pointing the Baseline Requirements for Publicly-Trusted TLS Certificates (“TLS BRs”). The main goals of this ballot are to:

  1. Remove dependencies with the “TLS BRs” that are decided in a different CA/B Forum Working Group
  2. Remove ambiguity about which exact requirements are applicable to Code Signing Issuers and Time-stamping Authorities

The following motion has been proposed by Dimitris Zacharopoulos of HARICA and endorsed by Martijn Katerbarg of Sectigo and Tim Hollebeek of Digicert.

Motion

This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” (“Code Signing Baseline Requirements”) based on version 3.3. MODIFY the Code Signing Baseline Requirements as specified in the following redline: https://github.com/cabforum/code-signing/pull/16/files#diff-51665fed103b76d89fc3da15cf88817d58602089

Check Also

2023-08-10 Minutes of the Code Signing Certificate Working Group

Attendees: Abhishek Bhat (eMudhra), Andrea Holland (VikingCloud), Ben Dewberry (Keyfactor), Brianca Martin (Amazon), Corey Bonnell …