CA/Browser Forum posts
Posts by author Corey Bonnell
2022-03-10 Minutes of the Code Signing Certificate Working Group
March 10, 2022 by Corey BonnellAttendees Atsushi Inaba – GlobalSign, Bruce Morton – Entrust, Corey Bonnell – DigiCert, Dean Coclin – DigiCert, Dimitris Zacharopoulos – HARICA, Ian McMillan – Microsoft, Inigo Barreira – Sectigo, Joanna Fox – TrustCor, Martin Katerberg – Sectigo, Michael Sykes – SSL.com, Mohit Kumar – GlobalSign, Roberto Quinones – Intel, Tim Hollebeek – DigiCert, Tomas Gustavsson Minutes Antitrust statement: read by Dean. Minutes: Approval of minutes from F2F on hold until people can review.
March 10, 2022 by Corey BonnellAttendees Atsushi Inaba – GlobalSign, Bruce Morton – Entrust, Corey Bonnell – DigiCert, Dean Coclin – DigiCert, Dimitris Zacharopoulos – HARICA, Ian McMillan – Microsoft, Inigo Barreira – Sectigo, Joanna Fox – TrustCor, Martin Katerberg – Sectigo, Michael Sykes – SSL.com, Mohit Kumar – GlobalSign, Roberto Quinones – Intel, Tim Hollebeek – DigiCert, Tomas Gustavsson Minutes Antitrust statement: read by Dean. Minutes: Approval of minutes from F2F on hold until people can review.
Ballot CSC-6 – Update to Subscriber Private Key Protection Requirements
March 2, 2022 by Corey BonnellResults of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers DigiCert, Entrust, GlobalSign, HARICA, SecureTrust Certificate Consumers Microsoft The ballot has FAILED. Purpose of the ballot Update the subscriber private key protection requirements in the Baseline Requirement for the Issuance and Management of Publicly-Trusted Code Signing Certificates v2.7. The following motion has been proposed by Ian McMillan of Microsoft, and endorsed by Tim Hollebeek of DigiCert and Bruce Morton of Entrust.
March 2, 2022 by Corey BonnellResults of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers DigiCert, Entrust, GlobalSign, HARICA, SecureTrust Certificate Consumers Microsoft The ballot has FAILED. Purpose of the ballot Update the subscriber private key protection requirements in the Baseline Requirement for the Issuance and Management of Publicly-Trusted Code Signing Certificates v2.7. The following motion has been proposed by Ian McMillan of Microsoft, and endorsed by Tim Hollebeek of DigiCert and Bruce Morton of Entrust.
2022-02-10 Minutes of the Code Signing Certificate Working Group
February 10, 2022 by Corey BonnellAttendees Andrea Holland – SecureTrust, Atsushi Inaba – GlobalSign, Bruce Morton – Entrust, Corey Bonnell – DigiCert, Dean Coclin – DigiCert, Dimitris Zacharopoulos – HARICA, Ian McMillan – Microsoft, Inigo Barreira – Sectigo, Roberto Quinones – Intel, Tim Crawford – WebTrust Minutes Chris Kemmerer “volunteered” by Dean Coclin as minute taker. Antitrust statement: read by Corey. Minutes: discussion regarding minutes from Jan 27 2022 call: Dimitris observed that the minutes submitted are perhaps too detailed, easier to digest if summarized.
February 10, 2022 by Corey BonnellAttendees Andrea Holland – SecureTrust, Atsushi Inaba – GlobalSign, Bruce Morton – Entrust, Corey Bonnell – DigiCert, Dean Coclin – DigiCert, Dimitris Zacharopoulos – HARICA, Ian McMillan – Microsoft, Inigo Barreira – Sectigo, Roberto Quinones – Intel, Tim Crawford – WebTrust Minutes Chris Kemmerer “volunteered” by Dean Coclin as minute taker. Antitrust statement: read by Corey. Minutes: discussion regarding minutes from Jan 27 2022 call: Dimitris observed that the minutes submitted are perhaps too detailed, easier to digest if summarized.
2022-01-27 Minutes of the Code Signing Certificate Working Group
January 27, 2022 by Corey BonnellAttendees Andrea Holland – SecureTrust , Ashish Dhiman – GlobalSign, Atsushi Inaba – GlobalSign, Bruce Morton – Entrust, Corey Bonnell – DigiCert, Dean Coclin – DigiCert, Dimitris Zacharopoulos – HARICA, Ian McMillan – Microsoft, Inigo Barreira – Sectigo, Jeff Ward – WebTrust, Karina Sirota – Microsoft, Kiran Tummala – Microsoft, Michael Sykes – SSL.com, Mohit Kumar – GlobalSign, Tim Crawford – WebTrust, Tim Hollebeek – DigiCert Minutes Minutes of January 13th 2022 approved.
January 27, 2022 by Corey BonnellAttendees Andrea Holland – SecureTrust , Ashish Dhiman – GlobalSign, Atsushi Inaba – GlobalSign, Bruce Morton – Entrust, Corey Bonnell – DigiCert, Dean Coclin – DigiCert, Dimitris Zacharopoulos – HARICA, Ian McMillan – Microsoft, Inigo Barreira – Sectigo, Jeff Ward – WebTrust, Karina Sirota – Microsoft, Kiran Tummala – Microsoft, Michael Sykes – SSL.com, Mohit Kumar – GlobalSign, Tim Crawford – WebTrust, Tim Hollebeek – DigiCert Minutes Minutes of January 13th 2022 approved.
2022-01-13 Minutes of the Code Signing Certificate Working Group
January 13, 2022 by Corey BonnellAttendees Andrea Holland, Atsushi Inaba, Bruce Morton, Corey Bonnell, Dean Coclin, Dimitris Zacharopoulos, Ian McMillan, Inigo Barreira, Janet Hines, Joanna Fox, Michael Sykes, Roberto Quinones, Tim Hollebeek, Tomas Gustavsson Minutes The Antitrust statement was read. Minutes from the prior meeting on December 16, 2021 were approved CSC-6 Subscriber Private Key Protection Ian thought he had sent the draft to the list before the holidays but it was determined that was not the case.
January 13, 2022 by Corey BonnellAttendees Andrea Holland, Atsushi Inaba, Bruce Morton, Corey Bonnell, Dean Coclin, Dimitris Zacharopoulos, Ian McMillan, Inigo Barreira, Janet Hines, Joanna Fox, Michael Sykes, Roberto Quinones, Tim Hollebeek, Tomas Gustavsson Minutes The Antitrust statement was read. Minutes from the prior meeting on December 16, 2021 were approved CSC-6 Subscriber Private Key Protection Ian thought he had sent the draft to the list before the holidays but it was determined that was not the case.
2022-01-06 Minutes of the CA/Browser Forum Teleconference
January 6, 2022 by Corey BonnellAttendees Adam Jones (Microsoft), Adrian Mueller (SwissSign), Andrea Holland (SecureTrust), Ben Wilson (Mozilla), Bruce Morton (Entrust), Chris Kemmerer (SSL.com), Clint Wilson (Apple), Corey Bonnell (Digicert), Dean Coclin (Digicert), Dimitris Zacharopoulos (HARICA), Doug Beattie (GlobalSign), Dustin Hollenback (Microsoft), Enrico Entschew (D-TRUST), Fumihiko Yoneda (Japan Registry Services), Hazhar Ismail (MSC Trustgate Sdn Bhd), Inaba Atsushi (GlobalSign), Israr Ahmed (E-tugra), Joanna Fox (TrustCor Systems), Johnny Reading (GoDaddy), Jos Purvis (Cisco Systems), Karina Sirota (Microsoft), Kati Davids (GoDaddy), Mads Henriksveen (Buypass AS), Marcelo Silva (Visa), Martijn Katerbarg (Sectigo), Niko Carpenter (SecureTrust), Peter Miskovic (Disig), Rae Ann Gonzales (GoDaddy), Rebecca Kelley (Apple), Ryan Dickson (Google), Stephen Davidson (Digicert), Tadahiko Ito (SECOM Trust Systems), Tim Hollebeek (Digicert), Trevoli Ponds-White (Amazon), Tyler Myers (GoDaddy), Vijayakumar (Vijay) Manjunatha (eMudhra), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Yoshiro Yoneya (Japan Registry Services)
January 6, 2022 by Corey BonnellAttendees Adam Jones (Microsoft), Adrian Mueller (SwissSign), Andrea Holland (SecureTrust), Ben Wilson (Mozilla), Bruce Morton (Entrust), Chris Kemmerer (SSL.com), Clint Wilson (Apple), Corey Bonnell (Digicert), Dean Coclin (Digicert), Dimitris Zacharopoulos (HARICA), Doug Beattie (GlobalSign), Dustin Hollenback (Microsoft), Enrico Entschew (D-TRUST), Fumihiko Yoneda (Japan Registry Services), Hazhar Ismail (MSC Trustgate Sdn Bhd), Inaba Atsushi (GlobalSign), Israr Ahmed (E-tugra), Joanna Fox (TrustCor Systems), Johnny Reading (GoDaddy), Jos Purvis (Cisco Systems), Karina Sirota (Microsoft), Kati Davids (GoDaddy), Mads Henriksveen (Buypass AS), Marcelo Silva (Visa), Martijn Katerbarg (Sectigo), Niko Carpenter (SecureTrust), Peter Miskovic (Disig), Rae Ann Gonzales (GoDaddy), Rebecca Kelley (Apple), Ryan Dickson (Google), Stephen Davidson (Digicert), Tadahiko Ito (SECOM Trust Systems), Tim Hollebeek (Digicert), Trevoli Ponds-White (Amazon), Tyler Myers (GoDaddy), Vijayakumar (Vijay) Manjunatha (eMudhra), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Yoshiro Yoneya (Japan Registry Services)
2021-12-16 Minutes of the Code Signing Certificate Working Group
December 16, 2021 by Corey BonnellAttendees Andrea Holland, Atsushi Inaba, Bruce Morton, Corey Bonnell, Dean Coclin, Ian McMillan, Inigo Barreira, Janet Hines, Joanna Fox, Michael Sykes, Roberto Quinones, Tim Hollebeek Minutes Antitrust Statement was read by Bruce Morton. Approved minutes from previous Dec 2, 2021 meeting. Ballot CSC-6 (Subscriber Private Key Protection) Ian shared the final discussion feedback and changes. Added the definition of Hardware Crypto Module: A tamper-resistant device with a cryptography processor used for the specific purpose of protecting the lifecycle of cryptographic keys (generating, managing, processing, and storing).
December 16, 2021 by Corey BonnellAttendees Andrea Holland, Atsushi Inaba, Bruce Morton, Corey Bonnell, Dean Coclin, Ian McMillan, Inigo Barreira, Janet Hines, Joanna Fox, Michael Sykes, Roberto Quinones, Tim Hollebeek Minutes Antitrust Statement was read by Bruce Morton. Approved minutes from previous Dec 2, 2021 meeting. Ballot CSC-6 (Subscriber Private Key Protection) Ian shared the final discussion feedback and changes. Added the definition of Hardware Crypto Module: A tamper-resistant device with a cryptography processor used for the specific purpose of protecting the lifecycle of cryptographic keys (generating, managing, processing, and storing).
2021-12-02 Minutes of the Code Signing Certificate Working Group
December 2, 2021 by Corey BonnellAttendees Andrea Holland, Atsushi Inaba, Bruce Morton, Chris Kemmerer, Correy Bonnell, Dean Coclin, Dimitris Zacharopoulos, Ian McMillan, Inigo Barreira, Janet Hines, Joanna Fox, Kiran Tummala, Michael Sykes, Sebastian Schulz, Tim Crawford, Tim Hollebeek Minutes Approved minutes from previous Nov 18, 2021 meeting Discussion regarding SC-50 from Server Working Group Bruce Morton suggests dropping SC-50 (Ballot is concerned with removal of 4.1.1) Ian McMillan concurs with no other objections regarding SC-50 Ballot CSC-12 Revocation date verification ballot currently under IPR review; period ends Dec 03, 2021 Plan is push out latest version of CSBR’s Dec 03, 2021 afternoon Ballot CSC-6 11.
December 2, 2021 by Corey BonnellAttendees Andrea Holland, Atsushi Inaba, Bruce Morton, Chris Kemmerer, Correy Bonnell, Dean Coclin, Dimitris Zacharopoulos, Ian McMillan, Inigo Barreira, Janet Hines, Joanna Fox, Kiran Tummala, Michael Sykes, Sebastian Schulz, Tim Crawford, Tim Hollebeek Minutes Approved minutes from previous Nov 18, 2021 meeting Discussion regarding SC-50 from Server Working Group Bruce Morton suggests dropping SC-50 (Ballot is concerned with removal of 4.1.1) Ian McMillan concurs with no other objections regarding SC-50 Ballot CSC-12 Revocation date verification ballot currently under IPR review; period ends Dec 03, 2021 Plan is push out latest version of CSBR’s Dec 03, 2021 afternoon Ballot CSC-6 11.
2021-11-18 Minutes of the Code Signing Certificate Working Group
November 18, 2021 by Corey BonnellAttendees Andrea Holland, Atsushi Inaba, Bruce Morton, Chris Kemmerer, Correy Bonnell, Dimitris Zacharopoulos, Ian McMillan, Inigo Barreira, Kiran Tummala, Sebastian Schulz, Tim Hollebeek Minutes Minutes of the previous Meeting were approved Discussion regarding SC-50 from Server Working Group – Ballot is concerned with removal of 4.1.1 – Discussion is postponed until any changes are required Ballot CSC-12 – Ballot has passed, in IPR review through 3rd December Ballot CSC-6 – Effective date is set to Sep 1st 2022 based on reccuring feedback from the group
November 18, 2021 by Corey BonnellAttendees Andrea Holland, Atsushi Inaba, Bruce Morton, Chris Kemmerer, Correy Bonnell, Dimitris Zacharopoulos, Ian McMillan, Inigo Barreira, Kiran Tummala, Sebastian Schulz, Tim Hollebeek Minutes Minutes of the previous Meeting were approved Discussion regarding SC-50 from Server Working Group – Ballot is concerned with removal of 4.1.1 – Discussion is postponed until any changes are required Ballot CSC-12 – Ballot has passed, in IPR review through 3rd December Ballot CSC-6 – Effective date is set to Sep 1st 2022 based on reccuring feedback from the group
2021-11-04 Minutes of the Code Signing Certificate Working Group
November 4, 2021 by Corey BonnellAttendees Andrea Holland, Atsushi Inaba, Ben Wilson, Bruce Morton, Chris Kemmerer, Corey Bonnell, Dean Coclin, Dimitris Zacharopoulo, Ian McMillan, Inigo Barreira, Janet Hines, Joanna Fox, Martijn Katerbarg, Michael Sykes, Sebastian Schulz, Tim Crawford, Tim Hollebeek, Tomas Gustavsson Minutes Minute Taker: Martijn Anti-Trust statement Dean read the anti-trust statement Previous Minutes Minutes from October 13th and October 21st are approved. Dean will send them out to the public list SC-50 – Remove the requirements of 4.
November 4, 2021 by Corey BonnellAttendees Andrea Holland, Atsushi Inaba, Ben Wilson, Bruce Morton, Chris Kemmerer, Corey Bonnell, Dean Coclin, Dimitris Zacharopoulo, Ian McMillan, Inigo Barreira, Janet Hines, Joanna Fox, Martijn Katerbarg, Michael Sykes, Sebastian Schulz, Tim Crawford, Tim Hollebeek, Tomas Gustavsson Minutes Minute Taker: Martijn Anti-Trust statement Dean read the anti-trust statement Previous Minutes Minutes from October 13th and October 21st are approved. Dean will send them out to the public list SC-50 – Remove the requirements of 4.