2026-02-12 Minutes of the Forum
Minutes:
CA/B Forum plenary Meeting - February 12, 2026
Notes by: Janet Hines (VikingCloud)
Attendees
- Adam Folson (IdenTrust)
- Adriano Santoni (Actalis S.p.A.)
- Antti Backman (Telia Company)
- Ben Wilson (Mozilla)
- Chris Clements (Google)
- Clint Wilson (Apple)
- Corey Bonnell (DigiCert)
- Corey Rasmussen (OATI)
- Daryn Wright (Apple)
- Dean Coclin (DigiCert)
- Dimitris Zacharopoulos (HARICA)
- Dustin Hollenback (Apple)
- Enrico Entschew (D-TRUST)
- Eric Kramer (Sectigo)
- Gurleen Grewal (Google)
- Hazhar Ismail (MSC Trustgate Sdn Bhd)
- Inaba Atsushi (GlobalSign)
- Iñigo Barreira (Sectigo)
- Janet Hines (VikingCloud)
- Jeanette Snook (Visa)
- Jeff Ward (CPA Canada/WebTrust)
- Johnny Reading (GoDaddy)
- Jos Purvis (Fastly)
- Julie Olson (GlobalSign)
- Jun Okura (Cybertrust Japan)
- Karina Sirota (Microsoft)
- Karolina Ruszczyńska (Asseco Data Systems SA (Certum))
- Lilia Dubko (CPA Canada/WebTrust)
- Lucy Buecking (IdenTrust)
- Luis Cervantes (SSL.com)
- Mahua Chaudhuri (Microsoft)
- Marco Schambach (IdenTrust)
- Martijn Katerbarg (Sectigo)
- Masaru Sakamoto (Cybertrust Japan)
- Michelle Coon (OATI)
- Nate Smith (GoDaddy)
- Nome Huang (TrustAsia)
- Ono Fumiaki (SECOM Trust Systems)
- Pedro Fuentes (OISTE Foundation)
- Peter Miskovic (Disig)
- Raffaela Achermann (SwissSign)
- Rebecca Kelly (SSL.com)
- Roman Fischer (SwissSign)
- Ryan Dickson (Google)
- Sándor Szőke (Microsec)
- Sandy Balzer (SwissSign)
- Scott Rea (eMudhra)
- Sean Huang (TWCA)
- Stephen Davidson (DigiCert)
- Steven Deitte (GoDaddy)
- Sven Rajala (Keyfactor)
- Tadahiko Ito (SECOM Trust Systems)
- Tathan Thacker (IdenTrust)
- Tim Callan (Sectigo)
- Tobias Josefowitz (Opera Software AS)
- Trevoli Ponds-White (Amazon)
- Wayne Thayer (Fastly)
- Wendy Brown (US Federal PKI Management Authority)
- Wiktoria Więckowska (Asseco Data Systems SA (Certum)).
Minutes
Begin Recording - Roll Call
- Read note-well - Note-well read by Dimitris in the SCWG call
Review of Agenda
- No changes
Approval of minutes
- January 15, 2026 minutes were approved.
- January 29, 2026 have yet to be distributed.
Server Certificate Working Group update (Dimitris)
- General Ballot discussions
- Cleanup ballot: It was decided to cancel voting process to fix an incorrect RFC reference.
- Validation Working Group (Corey) - Had guest speaker - CAA parameters ballot (Wayne) - Needs a second endorser. - CAA Security Draft RFC at the IETF - Defines a new CAA record type called security - Domain owner wants to use only DCV methods that can be cryptographically verified. - ADN Improvement ballot (Aaron and Jacob) - Discussion around various scenarios where following CNAMEs may or may not be allowed. On mailing list for discussion.
Code Signing Certificate Working Group update (Martijn)
- Migration to a single profile (OV and EV Code Signing)
- Microsoft working on a proposal to remove the phone validation.
S/MIME Certificate Working Group update (Stephen)
- SMC-015 - [Discussion Period] - Use of mobile driver’s license for automation of validation of identity and removal of outdated ETSI EN-319403. [EN-319403-1 was the replacement]
- SMC-016 - Implement the TLS Ballots (DNSSEC logging removed out of scope and SHA-1 complete removal)
- SMTP to SMTP authentication which is typically done by TLS clientAuth/serverAuth certificates. Trying to gather data on this situation’s impact to the email ecosystem. May add this to the F2F discussion.
NetSec Working Group update (Clint)
- Discussion on an approach that Miguel had put together for using NIST framework with the controls to update the NetSec requirements.
Definitions and Glossary Working Group (Tim C.)
- No update
Forum Infrastructure Subcommittee update (Jos)
- Instructions for forms with QR to record the F2F in person attendance.
- CLA and guidelines for GitHub contributions (Ben working on this)
- Backlog grooming
- Added a backlog item to do a full review of the website, put up a change in Git or pass along to a member of the committee.
- One area is the About pages. Ben deleted out of date materials on some. Resources pages are out of date as well.
- Going to a monthly meeting calendar.
Any Other Business
- Please sign up for the F2F!
- All groups should be thinking about their agenda for the F2F and place it in the wiki.
- IPR Revision: Ben needs feedback via a straw poll. - New member comes in they have 45-days to file an exclusion notice on a draft guideline; but it is not clear about existing guidelines. - Question: Do we go with the vague existing policy of any guideline (existing and new) verses only draft guidelines - Should send to the legal folks to review this in the IPR subcommittee.
- Add an IPR agenda item for the next few meetings.
Next call
Feb 26, 2026
Adjourn