Home » Code Signing

Category Archives: Code Signing

Ballot CSC-12 – CRL Revocation Date Clarification

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-12-03, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco)DigiCertEntrustE-TUGRAGlobalSignHARICASectigoSSL.com Certificate Consumers Microsoft The ballot has PASSED. Purpose of the Ballot ... Read More »

Ballot CSC-11 – Update to log data retention requirements

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-11-03, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco)DigiCerteMudhraEntrustGlobalSignHARICASectigoSecureTrust Certificate Consumers Microsoft The ballot has PASSED. Purpose of the Ballot ... Read More »

Ballot CSC-9 – Spring 2021 Cleanup and Clarification

IPR Review Results The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 9 September 2021, are available here. Voting Results Voting on Ballot CSC-9 has concluded and the ballot has passed. Below are the results: CAs voting in favor: Actalis, Certum (Asseco), DigiCert, eMudhra, Entrust, GlobalSign, HARICA, Sectigo, SSL.com, SecureTrust ... Read More »

Ballot CSC-10 – WebTrust CSBR v2.0 Audit Criteria

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-09-13, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco) DigiCerteMudhraEntrustGlobalSignHARICASectigo Certificate Consumers Microsoft The ballot has PASSED. Purpose of the ... Read More »

Ballot CSC-8 v3: Update to Revocation response mechanisms. key protection for EV certificates, and clean-up of 11.2.1 & Appendix B

The voting period for Ballot CSC-8 has ended and the Ballot has Passed. Here are the results: Voting by Certificate Issuers – 7 votes total including abstentions – 6 Yes votes: Certum (Asseco), DigiCert, Entrust, GlobalSign, HARICA, Sectigo – 0 No votes – 1 Abstain: GoDaddy 87% of voting Certificate Issuers voted in favor. Voting by Certificate Consumers – 1 ... Read More »

Ballot CSC-7v2: Update to merge EV and Non-EV clauses

Voting has closed on this ballot and the results are as follows: CAs voting in favor (7): Actalis, DigiCert, Entrust, GDCA, GlobalSign, GoDaddy, HARICA CAs opposed: None CAs abstaining: None Certificate Consumers voting in favor (1): MicrosoftCertificate Consumers opposed: NoneCertificate Consumers abstaining: None Therefore the ballot CSC-7 passes. Purpose of the Ballot: The CSC-2 merger of the Code Signing BRs ... Read More »

Ballot 158 – Adoption of Code Signing Baseline Requirements

Voting on Ballot 158 (Code Signing BRs) closed on 17 December 2015.   The results are as follows: In the CA category, 17 CAs voted YES, 1 voted NO and 3 Abstained In the Browser category, 2 browsers voted YES, 3 browsers voted NO and none Abstained Therefore the ballot fails. Detailed results can be seen here: https://docs.google.com/spreadsheets/d/1FBsMZjlzyvK3mFR1u4qMqvZwlI86yJ-v0am1pCBo8uI/edit#gid=4   After a ... Read More »

Forum Releases Final Code Signing Baseline Requirements for Vote

The Code Signing Working Group of the CA/Browser Forum announces the ballot of the final draft of the Code Signing Baseline Requirements. This version takes into account comments received in the first and second rounds of public review, comments from WebTrust auditors, and an additional three months of editing by the Working Group. Code Signing Requirements 2015-11-19 This is ballot 158 ... Read More »

CA/B Forum Releases Code Signing Baseline Requirements – Final Draft for Public Exposure

The Code Signing Working Group of the CA/Browser Forum announces the final draft of the Code Signing Baseline Requirements. This version takes into account comments received in the first round of public review as well as comments from WebTrust auditors. Additional changes/corrections were incorporated by the working group over the past 3 months.  Baseline requirements for codesigning – Feb 4 ... Read More »

CA/Browser Forum Releases Code Signing Baseline Requirements Public Comment Draft

In 2013, the CA/Browser Forum voted to create a Code Signing Working Group whose sole purpose was to come up with a set of Baseline Requirements for the issuance of Code Signing Certificates. The result of that effort is the: Baseline Requirements for Code Signing Certificates, Public Comment Draft (doc) Baseline Requirements for Code Signing Certificates, Public Comment Draft (pdf) ... Read More »