Home » CA / Browser Forum News

CA / Browser Forum News

CA / Browser Forum News, Press Releases, Correspondence, and other PKI Industry News

May 29, 2014

The U.S. Department of Commerce, National Institute of Standards and technology (NIST) has released for public comment its second draft Reference Certificate Policy for Publicly Trusted Certification Authorities (NISTIR 7924).

** April 11, 2011**

CA / Browser Forum announces release and availability of Public Comment Draft of “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” – Announcement-Baseline_Requirements

March 2011

CA / Browser Forum announces support of Electronic Frontier Foundation’s SSL Observatory – EFF_SSL_Observatory

Latest releases

Server Certificate Requirements
SC100: DNSSEC Clarification and Consolidation - Sep 7, 2026

Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.16 - Ballot SMC018 - Sep 29, 2026

This ballot implements the requirements of CCADB Policy Section 6.3 relating to cross-certificates into the S/MIME BR effective immediately. The ballot also specifies that effective July 1, 2027 id-kp-emailProtection (mandatory) and the id-kp-clientAuth (optional) are the only extKeyUsage (EKU) permitted in both Subordinate CA Certificates and Subscriber Certificates. Finally, the ballot clarifies in the Definitions that Legacy Generation profiles were deprecated effective July 15, 2025. This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Dustin Hollinback (Apple) and Ashish Dhiman (GlobalSign)

Network and Certificate System Security Requirements
Version 2.0.5 (Ballot NS-008) - Jul 9, 2025