2025-11-20 Minutes of the Server Certificate Working Group
Dimitris read the note well.
Meeting minutes for November 6th were approved.
Dimitris provided the current ballot status (as indicated in agenda).
The status for ballots under consideration was provided by various members:
Corey said SC-87 will be moving again soon now that SC-86 passed.
Rich said that there are a few aspects that are being discussed on the ADN ballot and will revert soon. Aaron said there was good discussion on the validation call last week. Since then, the draft ballot has been updated to allow CNAME-then-prune for DNS-based validation and increase readability using tables.
Martijn said that Aaron and Corey provided feedback on the revocation requirements improvement ballot. He asked for more reviews.
Clint said that he’s waiting for the queue of ballots to be processed before proceeding with the “validation method in certificates” ballot. He said that he is still considering feedback from Corey.
Dimitris said he will circulate a ballot next week for discussion to exempt DNSSEC validation for email-based validation methods, as discussed on the mailing list and at the F2F. He said that there are already two endorsers. Aaron asked if the ballot will also exempt CNAME lookups from DNSSEC validation for email-based validation. Dimitris said that DNSSEC validation in this case is fine. The intent of the ballot is only exempt MX record lookups from DNSSEC validation.
Dimitris said that the Asseco team has been working on the 2025 cleanup ballot. He said he will follow up with the Asseco team on next steps.
Dimitris said that it’s not necessary to sequence ballots and it is possible to have multiple ballots running at the same time.
There is no other business.
Meeting adjourned.
Attendees
Aaron Gable (Let’s Encrypt), Adam Jones (Microsoft), Adriano Santoni (Actalis S.p.A.), Alvin Wang (SHECA), Antti Backman (Telia Company), Ben Wilson (Mozilla), Brianca Martin (Amazon), Chris Clements (Google), Clint Wilson (Apple), Corey Bonnell (DigiCert), Cynethia Brown (US Federal PKI Management Authority), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Dustin Hollenback (Apple), Enrico Entschew (D-TRUST), Hogeun Yoo (NAVER Cloud Trust Services), Inaba Atsushi (GlobalSign), Iñigo Barreira (Sectigo), Jeanette Snook (Visa), Jeff Ward (CPA Canada/WebTrust), Jos Purvis (Fastly), Jun Okura (Cybertrust Japan), Lilia Dubko (CPA Canada/WebTrust), Lucy Buecking (IdenTrust), Luis Cervantes (SSL.com), Lynn Jeun (Visa), Mahua Chaudhuri (Microsoft), Marco Schambach (IdenTrust), Martijn Katerbarg (Sectigo), Matthew McPherrin (Let’s Encrypt), Michelle Coon (OATI), Nargis Mannan (VikingCloud), Nate Smith (GoDaddy), Nome Huang (TrustAsia), Ono Fumiaki (SECOM Trust Systems), Paul van Brouwershaven (Entrust), Peter Miskovic (Disig), Rebecca Kelly (SSL.com), Rich Smith (DigiCert), Rollin Yu (TrustAsia), Roman Fischer (SwissSign), Ryan Dickson (Google), Sandy Balzer (SwissSign), Scott Rea (eMudhra), Sean Huang (TWCA), Stephen Davidson (DigiCert), Steven Deitte (GoDaddy), Sven Rajala (Keyfactor), Tathan Thacker (IdenTrust), Tobias Josefowitz (Opera Software AS), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Wiktoria Więckowska (Asseco Data Systems SA (Certum)), Yamian Quintero (Microsoft)