CA/Browser Forum
Home » All CA/Browser Forum Posts » 2024-02-01 Minutes of the CA/Browser Forum Teleconference

2024-02-01 Minutes of the CA/Browser Forum Teleconference

Meeting of the CA/Browser Forum

February 1, 2024

1. Roll Call Aaron Gable - (Let’s Encrypt), Aaron Poulsen - (Amazon), Abhishek Bhat - (eMudhra), Adam Jones - (Microsoft), Andrea Holland - (VikingCloud), Antti Backman - (Telia Company), Ben Wilson - (Mozilla), Bindi Davé - (DigiCert), Brianca Martin - (Amazon), Bruce Morton - (Entrust), Chris Clements - (Google), Clint Wilson - (Apple), Corey Bonnell - (DigiCert), Corey Rasmussen - (OATI), David Kluge - (Google), Dean Coclin - (DigiCert), Dimitris Zacharopoulos - (HARICA), Doug Beattie - (GlobalSign), Dustin Hollenback - (Microsoft), Enrico Entschew - (D-TRUST), Fumi Yoneda - (Japan Registry Services), Inaba Atsushi - (GlobalSign), Inigo Barreira - (Sectigo), Jos Purvis - (Fastly), Karina Sirota - (Microsoft), Keshava Nagaraju - (eMudhra), Mads Henriksveen - (Buypass AS), Marco Schambach - (IdenTrust), Martijn Katerbarg - (Sectigo), Michelle Coon - (OATI), Miguel Sanchez - (Google), Nargis Mannan - (VikingCloud), Nate Smith - (GoDaddy), Naveen Kumar - (eMudhra), Nicol So - (CommScope), Nome Huang - (TrustAsia), Paul van Brouwershaven - (Entrust), Peter Miskovic - (Disig), Rebecca Kelley - (Apple), RIch Smith - (DigiCert), Rollin Yu - (TrustAsia), Roman Fischer - (SwissSign), Scott Rea - (eMudhra), Sissel Hoel - (Buypass AS), Stephen Davidson - (DigiCert), Tadahiko Ito - (SECOM Trust Systems), Thomas Zermeno - (SSL.com), Tim Hollebeek - (DigiCert), Tobias Josefowitz - (Opera Software AS), Trevoli Ponds-White - (Amazon), Wayne Thayer - (Fastly), Wendy Brown - (US Federal PKI Management Authority), Yashwanth TM - (eMudhra), Yoshihiko Matsuo - (Japan Registry Services).

Dimitris commenced the Forum teleconference, checking changes to the roll call.

Inigo gave overview of Server Cert WG ballot status.

Bruce Morton gave overview of Code Signing WG. He described two ballots in IPR (signing service and high risk). Working on ballot for timestamping language improvement. Dimitris is working on EVG mapping to CSBR.

Stephen Davidson gave overview of S/MIME Cert WG, noting that SMC05 on CAA would exit IPR on February 16 and the WG would move to the clarifications ballot SMC06 shortly thereafter, which has been much discussed. Dimitris asked if there was a rule for when ballots were bundled vs single issue. Stephen noted that in general the SMCWG would focus on a regular cadence of ballots, and only have standalone ones on major changes such as adoption of CAA.

Jos Purvis gave update on Infrastructure WG work including important updates to the email server. He also described the website proposal from Paul, for which it seems there is general support. The WG is discussing what a switch would entail.

Clint Wilson gave overview of the NetSec WG, which includes ongoing review of the proposed edits, with recent conversations focusing on MFA and multiparty control.

Dimitris discussed the New Delhi F2F agenda, which is on the wiki, and welcomed additional topics from members. Tim reminded chairs that it’s useful to summarise their WG’s work since last F2F and roadmap for near future.

On any other business, Paul noted that he’d like to move over to the new website as soon as possible if there is no objection to avoid maintenance of two platforms. There was discussion regarding transition and it was agreed that the Infrastructure WG would make the required decisions and keep the Forum informed.

Next call is February 15, 2024. Meeting adjourned.

Latest releases
Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.7 - Ballot SMC09 - Nov 25, 2024

This ballot includes updates for the following: • Require pre-linting of leaf end entity Certificates starting September 15, 2025 • Require WebTrust for Network Security for audits starting after April 1, 2025 • Clarify that multiple certificatePolicy OIDs are allowed in end entity certificates • Clarify use of organizationIdentifer references • Update of Appendix A.2 Natural Person Identifiers This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Clint Wilson (Apple) and Martijn Katerbarg (Sectigo).

Network and Certificate System Security Requirements
v2.0 - Ballot NS-003 - Jun 26, 2024

Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).