Baseline Requirements (Code Signing)

Ballot CSC-18: Update Revocation Requirements

Notice of Review Period (Mailing list post is available here.) This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). The complete Draft Guideline subject of this Review Notice is available here. Ballot for Review:         Ballot CSCWG 18 (v2) …

Read More »

Ballot CSC-17: Subscriber Private Key Extension

Notice of Review Period (Mailing list post is available here.) The IPR review period ended on October 28, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-10-28, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for …

Read More »

Ballot CSC-15 – Summer 2022 Cleanup

Results of Review Period (Mailing list post is available here.) The IPR review period ended on September 19, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-09-19, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for …

Read More »

Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework

Results of Review Period (Mailing list post is available here.) The IPR review period ended on June 25, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-06-29, are available here. Summary of Review Ballot for ReviewBallot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 FrameworkStart of Review Period26 May 2022 at 18:00 UTCEnd of Review Period25 June …

Read More »

Ballot CSC-13 – Update to Subscriber Key Protection Requirements

Results of Review Period (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2022-05-09, are available here. Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersCertum (Asseco)DigiCerteMudhraEntrustHARICASectigoSSL.comCertificate ConsumersMicrosoftThe ballot has PASSED. Purpose of the Ballot Update the subscriber private key protection requirements …

Read More »

Ballot CSC-6 – Update to Subscriber Private Key Protection Requirements

Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersDigiCertEntrustGlobalSignHARICASecureTrustCertificate ConsumersMicrosoftThe ballot has FAILED. Purpose of the ballot Update the subscriber private key protection requirements in the Baseline Requirement for the Issuance and Management of Publicly-Trusted Code Signing Certificates v2.7. The following motion has been proposed by Ian McMillan of Microsoft, and endorsed by Tim Hollebeek of DigiCert and …

Read More »

Ballot CSC-12 – CRL Revocation Date Clarification

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-12-03, are available here. Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersCertum (Asseco)DigiCertEntrustE-TUGRAGlobalSignHARICASectigoSSL.comCertificate ConsumersMicrosoftThe ballot has PASSED. Purpose of the Ballot While RFC 5280, section 5.3.2 specifies that …

Read More »

Ballot CSC-11 – Update to log data retention requirements

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-11-03, are available here. Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersCertum (Asseco)DigiCerteMudhraEntrustGlobalSignHARICASectigoSecureTrustCertificate ConsumersMicrosoftThe ballot has PASSED. Purpose of the Ballot Update the log data and retention of …

Read More »

Ballot CSC-9 – Spring 2021 Cleanup and Clarification

IPR Review Results The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 9 September 2021, are available here. Voting Results Voting on Ballot CSC-9 has concluded and the ballot has passed. Below are the results: CAs voting in favor: Actalis, Certum (Asseco), DigiCert, eMudhra, Entrust, GlobalSign, HARICA, Sectigo, SSL.com, SecureTrust …

Read More »

Ballot CSC-10 – WebTrust CSBR v2.0 Audit Criteria

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-09-13, are available here. Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersCertum (Asseco) DigiCerteMudhraEntrustGlobalSignHARICASectigo Certificate ConsumersMicrosoftThe ballot has PASSED. Purpose of the Ballot For Baseline Requirement for the …

Read More »