Code Signing Working Group – Meeting Minutes

Date: 11 December

1. Antitrust Reminder (Note Well)

The Note Well was read

2. Review of Agenda

3. Approval of Minutes

November 13th Meeting Minutes were approved Face-to-Face (F2F) Meeting Minutes were approved

4. Discussion Topics

4.1 SC-Alignment Ballot – Microsoft OCSP Concerns

• No Microsoft representatives were present on the call.
• No updates were observed on the mailing list regarding Microsoft’s OCSP-related concerns.
• Topic tabled until Microsoft provides an update.

4.2 Post-Quantum Cryptography (PQC)

• The topic remains on the agenda at the request of Brianca (Amazon)
• Discussion noted that progress is largely dependent on Microsoft’s platform direction and support.

4.3 Code Signing – Next Steps (Single Profile)

• Identified consolidation into a single code signing profile (merging Code Signing and EV Code Signing) as a major project for the coming year.
• A working branch tracking proposed updates to the Code Signing Baseline Requirements (CSBRs) has been created
• Rewrite and review CSBR sections incrementally (approximately one section per month).

5. Any Other Business

None

6. Adjourn

7. Next Meeting

Date: 8 January

Attendees

Brian Winters (IdenTrust), Inaba Atsushi (GlobalSign), Iñigo Barreira (Sectigo), Martijn Katerbarg (Sectigo), Nome Huang (TrustAsia), Scott Rea (eMudhra), Thomas Zermeno (SSL.com), Wiktoria Więckowska (Asseco Data Systems SA (Certum))