Home » Code Signing » Baseline Requirements (Code Signing)

Category Archives: Baseline Requirements (Code Signing)

Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework

Notice of IPR Review Period (Mailing list post is available here.) This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for two Final Maintenance Guidelines. The complete Draft Maintenance Guidelines that are the subject of this Review Notice are available, both in red-line and changes-accepted draft format. Summary of Review Ballot for Review Ballot CSC-14 – Convert Code ... Read More »

Ballot CSC-13 – Update to Subscriber Key Protection Requirements

Results of Review Period (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2022-05-09, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco)DigiCerteMudhraEntrustHARICASectigoSSL.com Certificate Consumers Microsoft The ballot has PASSED. Purpose of the Ballot ... Read More »

Ballot CSC-6 – Update to Subscriber Private Key Protection Requirements

Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers DigiCertEntrustGlobalSignHARICASecureTrust Certificate Consumers Microsoft The ballot has FAILED. Purpose of the ballot Update the subscriber private key protection requirements in the Baseline Requirement for the Issuance and Management of Publicly-Trusted Code Signing Certificates v2.7. The following motion has been proposed by Ian McMillan of Microsoft, and ... Read More »

Ballot CSC-12 – CRL Revocation Date Clarification

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-12-03, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco)DigiCertEntrustE-TUGRAGlobalSignHARICASectigoSSL.com Certificate Consumers Microsoft The ballot has PASSED. Purpose of the Ballot ... Read More »

Ballot CSC-11 – Update to log data retention requirements

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-11-03, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco)DigiCerteMudhraEntrustGlobalSignHARICASectigoSecureTrust Certificate Consumers Microsoft The ballot has PASSED. Purpose of the Ballot ... Read More »

Ballot CSC-9 – Spring 2021 Cleanup and Clarification

IPR Review Results The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 9 September 2021, are available here. Voting Results Voting on Ballot CSC-9 has concluded and the ballot has passed. Below are the results: CAs voting in favor: Actalis, Certum (Asseco), DigiCert, eMudhra, Entrust, GlobalSign, HARICA, Sectigo, SSL.com, SecureTrust ... Read More »

Ballot CSC-10 – WebTrust CSBR v2.0 Audit Criteria

Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-09-13, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco) DigiCerteMudhraEntrustGlobalSignHARICASectigo Certificate Consumers Microsoft The ballot has PASSED. Purpose of the ... Read More »

Ballot CSC-8 v3: Update to Revocation response mechanisms. key protection for EV certificates, and clean-up of 11.2.1 & Appendix B

The voting period for Ballot CSC-8 has ended and the Ballot has Passed. Here are the results: Voting by Certificate Issuers – 7 votes total including abstentions – 6 Yes votes: Certum (Asseco), DigiCert, Entrust, GlobalSign, HARICA, Sectigo – 0 No votes – 1 Abstain: GoDaddy 87% of voting Certificate Issuers voted in favor. Voting by Certificate Consumers – 1 ... Read More »

Ballot CSC-7v2: Update to merge EV and Non-EV clauses

Voting has closed on this ballot and the results are as follows: CAs voting in favor (7): Actalis, DigiCert, Entrust, GDCA, GlobalSign, GoDaddy, HARICA CAs opposed: None CAs abstaining: None Certificate Consumers voting in favor (1): MicrosoftCertificate Consumers opposed: NoneCertificate Consumers abstaining: None Therefore the ballot CSC-7 passes. Purpose of the Ballot: The CSC-2 merger of the Code Signing BRs ... Read More »