Home » All CA/Browser Forum Posts » 2024-06-27 Minutes of the Code Signing Certificate Working Group

2024-06-27 Minutes of the Code Signing Certificate Working Group

Agenda

Roll Call
Antitrust reminder
Minutes
Ballots
Membership
Other business
Next meeting - July 11th
Adjourn

Attendees

Dean Coclin (DigiCert), Atsushi INABA (GlobalSign), Brian Winters (IdenTrust), Brianca Martin (Amazon), Corey Bonnell (DigiCert), Inigo Barriera (Sectigo), Mohit Kumar (GlobalSign), Wangmo Tenzing (Interested Party), Rebecca Kelley (SSL.com)

Minutes

Dean Coclin read the Antitrust policy.

Minute taker is Brianca Martin.
Prior meeting minutes: Approved F2F-New Delhi minutes that were sent on June 19th with one typo corrected, added an attendee, Scott Ray. Approved May 16th minutes that were sent on May 19th.

Ballots

CSC-25 passed - Removing EV Guidelines References. Chair to send the document with a 30-day IPR review period.
CSC-26 passed - Time Stamping Update. Chair to send a notice that the ballot passed and send the document with a 30-day IPR review period.

Membership: None.

Meeting adjourned. Next meeting July 11th.

Latest releases

Server Certificate Requirements
SC-081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods - May 21, 2025

BR v2.1.5

Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.9 - Ballot SMC011 - May 14, 2025

This ballot allows the option to use a European Unique Identifier (EUID) as a Registration Reference in the NTR Registration Scheme. The EUID uniquely identifies officially-registered organizations, Legal Entities, and branch offices within the European Union or the European Economic Area. The EUID is specified in chapter 9 of the Annex contained in the Implementing Regulation (EU) 2021/1042 which describes rules for the application of Directive (EU) 2017/1132 “relating to certain aspects of company law (codification)”. The ballot also includes several editorial corrections, (e.g., reordering of References and regrouping of information from Appendix A to Section 7.1.4.2.2 (d)). This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Adrian Mueller (SwissSign) and Adriano Santoni (Actalis).

Network and Certificate System Security Requirements
v2.0 - Ballot NS-003 - Jun 26, 2024

Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35