CA/Browser Forum
Home » All CA/Browser Forum Posts » 2024-07-11 Minutes of the Code Signing Certificate Working Group

2024-07-11 Minutes of the Code Signing Certificate Working Group

Attendees

Atsushi INABA - GlobalSign, Brian Winters - IdenTrust, Bruce Morton - Entrust, Corey Bonnell -DigiCert, Dean Coclin-DigiCert (checked in to start meeting call), Ian McMillan Microsoft, Inigo Barreira - Sectigo, Rebecca Kelley - SSL.com, Scott Rea - eMudhra, Thomas Zermeno - SSL.com, Tim Crawford - BDO, Wangmo Tenzing

Minutes

  1. Roll Call
    • Completed by Bruce
  2. Antitrust reminder
    • Completed by Bruce
  3. Approve prior meeting minutes – June 13th and June 27th (Brianca)
    • Minutes are not available for review and approval
    • Pushed to next meeting
  4. IPR review: CSC-25 Remove EV Guideline References (Dimitris)
    • Ballot has passed and IPR period set to complete on August 1, 2024
  5. IPR review: CSC-26 Time-stamp Requirements update (Martijn)
    • Ballot has passed and IPR period set to complete on August 1, 2024
  6. Simplifying EV (Tim)
    • Tim was not available on the call (pushing to next meeting)
    • No progress has been made currently, but CSC-25 completion will simplify this effort
  7. Other business
    • Ian volunteered to provide draft language for reducing the signing certificate max validity from 39 months to 15 months as previously discussed by the group
    • Draft to be shared in next meeting
    • No other business
  8. Next meeting – July 25th
  9. Adjourn
Latest releases
Server Certificate Requirements
SC-081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods - May 21, 2025

BR v2.1.5

Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.10 - Ballot SMC012 - Jul 2, 2025

Introduces a new method for validation of mailbox control, using ACME for S/MIME as defined in RFC 8823: Extensions to Automatic Certificate Management Environment for End-User S/MIME Certificates.

Network and Certificate System Security Requirements
Version 2.0.5 (Ballot NS-008) - Jul 9, 2025

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).