CAB Forum Certification Authorities, Web Browsers, and Interested Parties Working to Secure the Web

Ballot 146 – Convert Baseline Requirements to RFC 3647 Framework Voting has closed on Ballot 146, “Convert Baseline Requirements” Among CAs, there were 18 YES votes, 1 NO vote and 2 Abstentions Among Browsers, there was 1 YES vote and 1 Abstention Therefore, the ballot passes. Here are  Version 1.3.0 and a helpful Conversion Table —————————————- The Certificate Policy Review Working ... Read More »

Minutes of CA-Browser Forum Meeting – 2 April 2015 Attendees: Atsushi Inaba (Globalsign), Ben Wilson (Digicert), Bruce Morton (Entrust), Burak Kalkan (TurkTrust), Davut Tokgöz (e-Tugra), Doug Beattie (Globalsign), Eddy Nigg (Startcom), Gervase Markham (Mozilla), Jeremy Rowley (Digicert), Kirk Hall (Trend Micro), Moudrick Dadashov (SSC), Patrick Tronnier (OATI), Rick Andrews (Symantec), Ryan Sleevi (Google), Wayne Thayer (GoDaddy). Antitrust Statement was read. ... Read More »

Voting on Ballot 148, Issuer Field Correction, closed on 2 April 2015. We received 13 YES votes from CAs, 0 NO votes and 0 Abstentions We received 1 YES vote from Browsers, 0 NO votes and 0 Abstentions Therefore the ballot passes. Several votes were received after the ballot closed and were not counted.  Full details are on the ballot ... Read More »

Minutes of March 19th CA/B Forum Meeting Attendees: Dean Coclin (Symantec), Tyler Myers (GoDaddy), Tim Shirley (Trustwave), Doug Beattie (GlobalSign), Patrick Tronnier (OATI),  Kirk Hall (Trend Micro), Ben Wilson (DigiCert), Robin Alden (Comodo), Mads Henriksveen (BuyPass), Billy VanCannon (Trustwave), Tim Hollebeek (Trustwave), Atilla Biler (TurkTrust), Volkan Nergiz (TurkTrust), Eddy Nigg (Startcom), Jeremy Rowley (DigiCert), Atsushi Inaba (GlobalSign), Wayne Thayer (GoDaddy), ... Read More »

Meeting 34 Minutes Attending at various times over 3 days: Dean Coclin (Symantec), Kirk Hall (Trend Micro), Wayne Thayer (GoDaddy), Robin Alden (Comodo), Michael Whittam (Comodo), Arno Fiedler (representing ETSI), Iñigo Barreira (IZENPE), Rashmi Tabada (Symantec), Tim Hollebeek (Trustwave), Li-Chun Chen (Chunghwa Telecom), Doug Beattie (Globalsign), Atsushi Inaba (Globalsign), Robert Ikeoka (E&Y), Ryan Sleevi (Google), Billy VanCannon (Trustwave), Bruce Morton (Entrust), ... Read More »

Minutes of March 5, 2015 Attendees: Dean Coclin (Symantec), Doug Beattie (GlobalSign), Kirk Hall (Trend Micro), Bruce Morton (Entrust), Rick Andrews (Symantec), Ben Wilson (DigiCert), Robin Alden (Comodo), Mads Henriksveen (BuyPass), Billy VanCannon (Trustwave), Chris (didn’t catch last name) (Trustwave), Tim Hollebeek (Trustwave), Cornelia Enke (SwissSign), Atilla Biler (TurkTrust), Gerv Markham (Mozilla), Jeremy Rowley (DigiCert), Atsushi Inaba (GlobalSign), Kubra Zeray ... Read More »

Attendees: Dean Coclin (Symantec), Doug Beattie (GlobalSign), Kirk Hall (Trend Micro), Bruce Morton (Entrust), Rick Andrews (Symantec), Ben Wilson (DigiCert), Eddy Nigg (Startcom), Volkan Nergiz (TurkTrust), Robin Alden (Comodo), Mads Henriksveen (BuyPass), Tim Shirley (Trustwave), Wayne Thayer (GoDaddy), Cornelia Enke (SwissSign), Atilla Biler (TurkTrust), Gerv Markham (Mozilla), Jeremy Rowley (DigiCert), Atsushi Inaba (GlobalSign), Sissel Hoel (BuyPass), Kubra Zeray (TurkTrust), Davut ... Read More »

Ballot 145 – Operational Existence for Government Entities Reason Because government entities aren’t operating as businesses, they are often not listed with a QIIS, especially immediately after the entity is created by either statute or order. The legal existence of these entities is verifiable through a QGIS, but this source in many countries (especially Arabic and African countries) does not ... Read More »

Ballot 144 – Validation Rules for .onion Names – passed with 6 Yes votes, 2 No votes and 13 Abstentions from the CAs and 3 Yes votes from the browsers. Detailed results are on the Forum’s ballot tracker (Ballot Results – Vote Tally at the bottom of the Ballots page on the Forum’s wiki). Ballot 144 reads as follows: Applicants ... Read More »

Ballot 143 – Formalization of Validation Working Group Reason In order to address validation issues and inconsistencies in both the SSL Baseline Requirements and the EV Guidelines, the CAB Forum has held an informal working group previously referred to as the Extended Validation Working Group now known as the Validation Working Group, would like to modify its scope to include ... Read More »