Baseline Requirements (Code Signing)

Ballot CSC-20: Restore Version Reference to EV Guidelines Notice of Review Period This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). A complete Draft Guideline subject of this Review Notice is available here. Ballot for Review:         Ballot CSC-20 …

Attendees Adam Jones – (Microsoft), Aleksandra Kurosz – (Asseco Data Systems SA (Certum)), Andrea Holland – (VikingCloud), Arvid Vermote – (GlobalSign), Ashish Dhiman – (GlobalSign), Ben Dewberry – (Keyfactor), Ben Wilson – (Mozilla), Brianca Martin – (Amazon), Bruce Morton – (Entrust), Christophe Bonjean – (GlobalSign), Clemens Wanko – (ACAB Council), Corey Bonnell – (DigiCert), Dave Chin – (CPA Canada/WebTrust), Dean …

Results of Review Period (Mailing list post is available here.) The IPR review period ended on September 5, 2023 and no exclusion notices were filed. The final documents, with the effective date being 2023-09-05, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for …

Results of Review Period (Mailing list post is available here.) The IPR review period ended on June 29, 2023 and no exclusion notices were filed. The final documents, with the effective date being 2023-06-29, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for …

Notice of Review Period (Mailing list post is available here.) The IPR review period ended on October 28, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-10-28, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for …

Results of Review Period (Mailing list post is available here.) The IPR review period ended on September 19, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-09-19, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for …

Results of Review Period (Mailing list post is available here.) The IPR review period ended on June 25, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-06-29, are available here. Summary of Review Ballot for ReviewBallot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 FrameworkStart of Review Period26 May 2022 at 18:00 UTCEnd of Review Period25 June …

Results of Review Period (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2022-05-09, are available here. Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersCertum (Asseco)DigiCerteMudhraEntrustHARICASectigoSSL.comCertificate ConsumersMicrosoftThe ballot has PASSED. Purpose of the Ballot Update the subscriber private key protection requirements …

Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersDigiCertEntrustGlobalSignHARICASecureTrustCertificate ConsumersMicrosoftThe ballot has FAILED. Purpose of the ballot Update the subscriber private key protection requirements in the Baseline Requirement for the Issuance and Management of Publicly-Trusted Code Signing Certificates v2.7. The following motion has been proposed by Ian McMillan of Microsoft, and endorsed by Tim Hollebeek of DigiCert and …

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-12-03, are available here. Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersCertum (Asseco)DigiCertEntrustE-TUGRAGlobalSignHARICASectigoSSL.comCertificate ConsumersMicrosoftThe ballot has PASSED. Purpose of the Ballot While RFC 5280, section 5.3.2 specifies that …