Home » Code Signing » Baseline Requirements (Code Signing)

Category Archives: Baseline Requirements (Code Signing)

Ballot CSC-17: Subscriber Private Key Extension

Notice of Review Period This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). The complete Draft Guideline subject of this Review Notice is available here. Ballot for Review: Ballot CSCWG-17 Start of Review Period: September 27, 2022 at ... Read More »

Ballot CSC-15 – Summer 2022 Cleanup

Results of Review Period (Mailing list post is available here.) The IPR review period ended on September 19, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-09-19, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for ... Read More »

Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework

Results of Review Period (Mailing list post is available here.) The IPR review period ended on June 25, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-06-29, are available here. Summary of Review Ballot for Review Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework Start of Review Period 26 May 2022 at 18:00 ... Read More »

Ballot CSC-13 – Update to Subscriber Key Protection Requirements

Results of Review Period (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2022-05-09, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco)DigiCerteMudhraEntrustHARICASectigoSSL.com Certificate Consumers Microsoft The ballot has PASSED. Purpose of the Ballot ... Read More »

Ballot CSC-6 – Update to Subscriber Private Key Protection Requirements

Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers DigiCertEntrustGlobalSignHARICASecureTrust Certificate Consumers Microsoft The ballot has FAILED. Purpose of the ballot Update the subscriber private key protection requirements in the Baseline Requirement for the Issuance and Management of Publicly-Trusted Code Signing Certificates v2.7. The following motion has been proposed by Ian McMillan of Microsoft, and ... Read More »

Ballot CSC-12 – CRL Revocation Date Clarification

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-12-03, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco)DigiCertEntrustE-TUGRAGlobalSignHARICASectigoSSL.com Certificate Consumers Microsoft The ballot has PASSED. Purpose of the Ballot ... Read More »

Ballot CSC-11 – Update to log data retention requirements

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-11-03, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco)DigiCerteMudhraEntrustGlobalSignHARICASectigoSecureTrust Certificate Consumers Microsoft The ballot has PASSED. Purpose of the Ballot ... Read More »

Ballot CSC-9 – Spring 2021 Cleanup and Clarification

IPR Review Results The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 9 September 2021, are available here. Voting Results Voting on Ballot CSC-9 has concluded and the ballot has passed. Below are the results: CAs voting in favor: Actalis, Certum (Asseco), DigiCert, eMudhra, Entrust, GlobalSign, HARICA, Sectigo, SSL.com, SecureTrust ... Read More »

Ballot CSC-10 – WebTrust CSBR v2.0 Audit Criteria

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-09-13, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco) DigiCerteMudhraEntrustGlobalSignHARICASectigo Certificate Consumers Microsoft The ballot has PASSED. Purpose of the ... Read More »

Ballot CSC-8 v3: Update to Revocation response mechanisms. key protection for EV certificates, and clean-up of 11.2.1 & Appendix B

The voting period for Ballot CSC-8 has ended and the Ballot has Passed. Here are the results: Voting by Certificate Issuers – 7 votes total including abstentions – 6 Yes votes: Certum (Asseco), DigiCert, Entrust, GlobalSign, HARICA, Sectigo – 0 No votes – 1 Abstain: GoDaddy 87% of voting Certificate Issuers voted in favor. Voting by Certificate Consumers – 1 ... Read More »