CA/Browser Forum
Home » All CA/Browser Forum Posts » 2024-01-25 Minutes of the Code Signing Certificate Working Group

2024-01-25 Minutes of the Code Signing Certificate Working Group

Attendees

Atsushi Inaba, Bhat Abhishek, Brianca Martin, Bruce Morton, Corey Bonnell, Dean Coclin, Ian McMillan, Inigo Barreira, Janet Hines, Keshava N, Lucy Buecking, Martijn Katerbarg, Mohit Kumar, Richard Kisley, Scott Rea, Thomas Zermeno, Tim Crawford, Tim Hollebeek, Trevoli Ponds-White

Minutes

  1. Roll Call
    • Completed by Dean
  2. Antitrust reminder
    • Completed by Dean
  3. Approve prior meeting minutes – Jan 11th
    • Meeting Minutes from 2024/01/11 sent out on 2024/01/12, Approved
  4. Ballot CSC-21 Signing Service: Status
    • In IPR until 2024/02/18
  5. Ballot CSC-22 Proposed High Risk Ballot: Status
    • In IPR until 2024/02/18
  6. Proposed ballot Remove EV Guideline References status
  7. Proposed ballot CSCWG charter update status
    • Completed at the Forum level, and merged.
  8. Proposed ballot for Time-stamp Requirements update.
  9. Other business
    • Membership application from Troy Anderson, Common Crypto Authority as an Interested Party
      • No objections for adding as an Interested Party
    • Next F2F Discussion Topics?
      • Most folks will attend virtually
      • To discuss at next meeting on 2024/02/08
      • Group to bring item ideas for the F2F
      • Consider Certificate Transparency & simplifying EV code signing
      • Consider making the session at the F2F shorter (currently on Tuesday night at 11:30pm ET, 8:30pm PT)
  10. Next meeting – February 8th
  11. Adjourn
Latest releases
Server Certificate Requirements
SC-089: Mass Revocation Planning - Aug 26, 2025

Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.12 - Ballot SMC014 - Oct 13, 2025

This ballot introduces requirements that a Certificate Issuer MUST deploy DNSSEC validation back to the IANA DNSSEC root trust anchor on all DNS queries associated with CAA record lookups performed by the Primary Network Perspective, effective March 15, 2026. The ballot is intended to maintain consistency in the S/MIME Baseline Requirements with the requirements of Ballot SC-085 which implemented identical requirements in the TLS Baseline Requirements. Note: SC-085 also introduced requirements in TLS Baseline Requirements for the use of DNSSEC in domain control validation. These requirements are automatically adopted in the S/MIME BR by the email domain control methods that include a normative reference to section 3.2.2.4 of the TLS Baseline Requirements. The draft also includes minor corrections to web links in the text. This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Client Wilson (Apple) and Ashish Dhiman (GlobalSign).

Network and Certificate System Security Requirements
Version 2.0.5 (Ballot NS-008) - Jul 9, 2025

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).