Baseline Requirements (Code Signing)

Ballot CSC-20: Restore Version Reference to EV Guidelines

Ballot CSC-20: Restore Version Reference to EV Guidelines Notice of Review Period This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). A complete Draft Guideline subject of this Review Notice is available here. Ballot for Review:         Ballot CSC-20 …

Read More »

2023-10-05 Minutes of the F2F Code Signing Certificate Working Group

Attendees Adam Jones – (Microsoft), Aleksandra Kurosz – (Asseco Data Systems SA (Certum)), Andrea Holland – (VikingCloud), Arvid Vermote – (GlobalSign), Ashish Dhiman – (GlobalSign), Ben Dewberry – (Keyfactor), Ben Wilson – (Mozilla), Brianca Martin – (Amazon), Bruce Morton – (Entrust), Christophe Bonjean – (GlobalSign), Clemens Wanko – (ACAB Council), Corey Bonnell – (DigiCert), Dave Chin – (CPA Canada/WebTrust), Dean …

Read More »

Ballot CSC-19: Remove TLS BR References

Results of Review Period (Mailing list post is available here.) The IPR review period ended on September 5, 2023 and no exclusion notices were filed. The final documents, with the effective date being 2023-09-05, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for …

Read More »

Ballot CSC-18: Update Revocation Requirements

Results of Review Period (Mailing list post is available here.) The IPR review period ended on June 29, 2023 and no exclusion notices were filed. The final documents, with the effective date being 2023-06-29, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for …

Read More »

Ballot CSC-17: Subscriber Private Key Extension

Notice of Review Period (Mailing list post is available here.) The IPR review period ended on October 28, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-10-28, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for …

Read More »

Ballot CSC-15 – Summer 2022 Cleanup

Results of Review Period (Mailing list post is available here.) The IPR review period ended on September 19, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-09-19, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for …

Read More »

Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework

Results of Review Period (Mailing list post is available here.) The IPR review period ended on June 25, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-06-29, are available here. Summary of Review Ballot for ReviewBallot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 FrameworkStart of Review Period26 May 2022 at 18:00 UTCEnd of Review Period25 June …

Read More »

Ballot CSC-13 – Update to Subscriber Key Protection Requirements

Results of Review Period (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2022-05-09, are available here. Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersCertum (Asseco)DigiCerteMudhraEntrustHARICASectigoSSL.comCertificate ConsumersMicrosoftThe ballot has PASSED. Purpose of the Ballot Update the subscriber private key protection requirements …

Read More »

Ballot CSC-6 – Update to Subscriber Private Key Protection Requirements

Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersDigiCertEntrustGlobalSignHARICASecureTrustCertificate ConsumersMicrosoftThe ballot has FAILED. Purpose of the ballot Update the subscriber private key protection requirements in the Baseline Requirement for the Issuance and Management of Publicly-Trusted Code Signing Certificates v2.7. The following motion has been proposed by Ian McMillan of Microsoft, and endorsed by Tim Hollebeek of DigiCert and …

Read More »

Ballot CSC-12 – CRL Revocation Date Clarification

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-12-03, are available here. Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersCertum (Asseco)DigiCertEntrustE-TUGRAGlobalSignHARICASectigoSSL.comCertificate ConsumersMicrosoftThe ballot has PASSED. Purpose of the Ballot While RFC 5280, section 5.3.2 specifies that …

Read More »