2023-09-14 Minutes of the CA/Browser Forum Teleconference
Minutes prepared by Janet Hines – VikingCloud.
Attendance
Aaron Gable – (Let’s Encrypt), Aaron Poulsen – (Amazon), Abhishek Bhat – (eMudhra), Adam Jones – (Microsoft), Adrian Mueller – (SwissSign), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Chris Clements – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Corey Rasmussen – (OATI), Daryn Wright – (GoDaddy), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Enrico Entschew – (D-TRUST), Fumi Yoneda – (Japan Registry Services), Hannah Sokol – (Microsoft), Inaba Atsushi – (GlobalSign), Jos Purvis – (Fastly), Keshava Nagaraju – (eMudhra), Lynn Jeun – (Visa), Mads Henriksveen – (Buypass AS), Marcelo Silva – (Visa), Martijn Katerbarg – (Sectigo), Michelle Coon – (OATI), Mrugesh Chandarana – (IdenTrust), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Paul van Brouwershaven – (Entrust), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Rollin Yu – (TrustAsia Technologies, Inc.), Ryan Dickson – (Google), Scott Rea – (eMudhra), Stephen Davidson – (DigiCert), Tadahiko Ito – (SECOM Trust Systems), Thomas Zermeno – (SSL.com), Tobias Josefowitz – (Opera Software AS), Wayne Thayer – (Fastly), Yoshihiko Matsuo – (Japan Registry Services).** **
Minutes
- Note-well: Dimitris read the note-well. There were no changes to the agenda..
- Approval of minutes:
Minutes from the August 31 Teleconference were not distributed yet.
- SCWG – Corey Bonnell
Iñigo and Kiran were not on the call to give the SCWG update. Corey gave a quick update from the last validation subcommittee teleconference:
- Q Misell’s presentation on ACME for Onion/Tor was given. They have a draft right now with the IETF. Discussion continues on the mailing list and GitHub.
- Work was continued on the ‘Applicant’ and ‘Applicant Representative’ analysis. We have circled back and are working on lower priority list.
- Next meeting will talk about F2F items for discussion.
- Some progress on the EV Guidelines conversion.
- CSCWG – Bruce Morton
- Ballot for removal of the SSL BR references has cleared IPR review and the new CS BR has been published.
- Discussed signing service ballot update. Most of the text is done waiting on some review around prior comments.
- Decided to postpone discussion around high risk until Microsoft investigates it.
- Talked about TSA and timestamping and had recurring conversation on whether our charter covers that. We do think that our charter covers this. We may want to make some charter changes.
- Next meeting will talk about F2F items for discussion.
- SMIME WG – Stephen Davidson
- SMIME BRs are effective as of about two weeks ago.
- Now looking at the auditability of services.
- Clarification and errata ballot in the next few months.
- Discussions of interest are around pseudonyms, organization identifiers at the state level and how various CAs are handling this. There may be F2F discussion around the organization identifiers.
- Forum Infrastructure Subcommittee – Jos Purvis
- No meeting last week.
- Currently trying to investigate the Gmail bounces.
- NetSec WG – Clint Wilson
- Spent time on a mapping document between current network security requirements 1.7 and a branch.
- SCWG Charter Update – Ben Wilson
- Discussions happen at the corresponding working group level before getting passed up to the forum level. This discussion could go either place.
- Working on some language and trying to address concerns. There is one endorser so far and looking for one more.
- Draft Agenda for F2F 60
- Draft agenda is on the wiki.
- Thanks to Paul and Doug for putting this agenda together.
- The goal is trying to get all the forum discussion topics on day 1, but had to move a little bit to day 2.
- Adding an hour of open mic for bringing up new issues that are of interest.
- Added Q&A times after the Root Program updates and Auditor updates.
- Want to approve the final agenda at the next meeting.
- Separation of Forum and SCWG bi-weekly Teleconference
Survey questions were sent out and haven’t received any feedback.
- Any Other Business
No other business.
- Next Meeting – September 28, 2023
- Adjourned