All CA/Browser Forum Posts on CA/Browser Forum

Ballot SC102: EV Domain Reuse and Validity Alignment

Tue, 14 Jul 2026 00:00:00 +0000

Voting Results

Certificate Issuers

19 votes in total:

Ballot SC0101v2: Clarify Authorization Domain Names

Wed, 01 Jul 2026 00:00:00 +0000

Voting Results

Certificate Issuers

27 votes in total:

2026-06-18 Minutes of the Forum

Thu, 18 Jun 2026 00:00:00 +0000

Minutes:

CA/B Forum plenary Meeting - June 18, 2026

1. Roll Call – from recording

2. Read note-well

The note-well was read by Dimitris in prior session.

2026-06-18 Minutes of the Server Certificate Working Group

Thu, 18 Jun 2026 00:00:00 +0000

Minutes:

Roll Call – from recording

We also had the following persons present:

Naresh Charugundla (Microsoft), Rajeev Mohindra (Microsoft), Logan Mabe (Microsoft) who were not registered in the Member’s tool.

Read note-well

The note-well was read by Dimitris.

Review of Agenda

The Agenda as provided on list prior to the call (see above).

Minutes

June 4, 2026 (Draft minutes were distributed on 2026-06-16) – are Approved

Membership Applications

No current Applications to review.

Ballot Status

SC101v2 (https://github.com/cabforum/servercert/pull/627) Clarify Authorization Domain Names (Aaron Gable)

Ballot moved to V2 with substantive change being effective date in 3.2.2.5.3. A couple of other editorial updates also. Expected to go to discussion period tomorrow.

2026-06-17 Minutes of the S/MIME Certificate Working Group

Wed, 17 Jun 2026 00:00:00 +0000

Minutes of SMCWG

June 17, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

Ballot CSC-32: Make a Reserved Policy OID mandatory

Tue, 16 Jun 2026 00:00:00 +0000

The Intellectual Property Review (IPR) period for Ballot CSC-32 (Ballot CSC-32: Make a Reserved Policy OID mandatory) has completed.

No IPR Exclusion Notices were filed, and the ballot is adopted as of November 17, 2025.

The new CSC BRs v3.10.0 have been published to the CABF public website in accordance with the Bylaws: https://cabforum.org/uploads/CA-Browser-Forum-CSCBR-3.11.0.pdf

IPR Review of Ballot CSC-32: Make a Reserved Policy OID mandatory

This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice is attached to this email.

Ballot SMC017v2: Increase Minimum RSA CA Key Size

Tue, 16 Jun 2026 00:00:00 +0000

[IPR Review] Ballot SMC017v2: Increase Minimum RSA CA Key Size

This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.4). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice may be found at https://cabforum.org/uploads/CA-Browser-Forum-SMIMEBR-1.0.15-Redline.pdf.

Summary of Review

Ballot for Review: Ballot SMC017v2: Increase Minimum RSA CA Key Size

2026-06-04 Minutes of the Forum

Thu, 04 Jun 2026 00:00:00 +0000

Minutes:

Attendees

Aaron Gable (Let’s Encrypt), Aaron Poulsen (SSL.com), Adam Folson (IdenTrust), Adriano Santoni (Actalis S.p.A.), Alexandros Afentoulis (HARICA), Alvin Wang (SHECA), Andrea Holland (IdenTrust), Antti Backman (Telia Company), Arman Asemani (Apple), Ben Wilson (Mozilla), Chad Dandar (Cisco Systems), Chris Clements (Google), Clint Wilson (Apple), Cynethia Brown (US Federal PKI Management Authority), Daryn Wright (Apple), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Dustin Hollenback (Apple), Eamon Zhang (TrustAsia), Eleftheria Theologou (HARICA), Enrico Entschew (D-TRUST), Eric Hampshire (Cisco Systems), Georgy Sebastian (Amazon), Grace Cimaszewski (Grace Cimaszewski (Private Person)), Gregory Tomko (GlobalSign), Gurleen Grewal (Google), Hazhar Ismail (MSC Trustgate Sdn Bhd), Henry Birge-Lee (Henry Birge-Lee (Private person)), Hogeun Yoo (NAVER Cloud Trust Services), Inaba Atsushi (GlobalSign), India Donald (US Federal PKI Management Authority), Jan Smith (US Federal PKI Management Authority), Jinhwan Shin (CPA Canada/WebTrust), Joe DeBlasio (Google), John Mason (Microsoft), Johnny Reading (GoDaddy), Joseph Cigin (Joseph Cigin (Private Person)), Jos Purvis (Fastly), Josselin Allemandou (Certigna (DHIMYOTIS)), Jun Okura (Cybertrust Japan), Karina Sirota (Microsoft), Kateryna Aleksieieva (Asseco Data Systems SA (Certum)), Kiran Tummala (Apple), Li-Chun Chen (Chunghwa Telecom), Lilia Dubko (CPA Canada/WebTrust), Lucy Buecking (IdenTrust), Mads Henriksveen (Buypass AS), Mahua Chaudhuri (Microsoft), Marijn Nagelkerke (360 Browser), Mark Gamache (Mark Gamache (Private Person)), Mark Nelson (IdenTrust), Martijn Katerbarg (Sectigo), Masaru Sakamoto (Cybertrust Japan), Masatoshi Shigaki (CPA Canada/WebTrust), Matthew McPherrin (Let’s Encrypt), Michelle Coon (OATI), Mrugesh Chandarana (IdenTrust), Nate Smith (GoDaddy), Nick France (Sectigo), Nome Huang (TrustAsia), Ono Fumiaki (SECOM Trust Systems), Paul van Brouwershaven (Entrust), Paul van Brouwershaven (Digitorus), Pekka Lahtiharju (Telia Company), Peter Miskovic (Disig), Rebecca Kelly (SSL.com), Rob Brady (SGNR, LLC), Rob Stradling (Sectigo), Rob White (GoDaddy), Rollin Yu (TrustAsia), Roman Fischer (SwissSign), Sándor Szőke (Microsec), Sandy Balzer (SwissSign), Scott Rea (eMudhra), Sean Huang (TWCA), Sven Rajala (Keyfactor), Tadahiko Ito (SECOM Trust Systems), Tathan Thacker (IdenTrust), Thomas Connelly (US Federal PKI Management Authority), Thomas Zermeno (SSL.com), Tim Callan (Sectigo), Tim Crawford (CPA Canada/WebTrust), Tobias Josefowitz (Opera Software AS), Trevoli Ponds-White (Amazon), Tsung-Min Kuo (Chunghwa Telecom), Vikas Khanna (Microsoft), Vinay Kumar (OATI), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Zhao Kuisen (NovaVanguard Technology Co., Ltd.)

2026-06-04 Minutes of the Server Certificate Working Group

Thu, 04 Jun 2026 00:00:00 +0000

Minutes:

Dimitris leading the meeting and taking minutes
Dimitris read the note-well.
No changes were requested for the agenda.
Minutes approval
- May 21, 2026 - these minutes were distributed on 2026-05-21. The minutes were approved.
Next call: June 18, 2026

Attendees

2026-06-03 Minutes of the S/MIME Certificate Working Group

Wed, 03 Jun 2026 00:00:00 +0000

Minutes of SMCWG

June 3, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

Ballot SC087v2: Registration Number Improvement for EV Certificates

Wed, 03 Jun 2026 00:00:00 +0000

Voting Results

Certificate Issuers

18 votes in total:

2026-05-21 Minutes of the Forum

Thu, 21 May 2026 00:00:00 +0000

Minutes:

Meeting Metadata

Meeting Title: CA/Browser Forum Date: 21 May 2026
Chair: Dimitris Zacharopoulos
Minutes Taken By: Wayne Thayer

1. Begin Recording - Roll Call

2. Reading of Note-well

The Note-Well was read

2026-05-21 Minutes of the Server Certificate Working Group

Thu, 21 May 2026 00:00:00 +0000

Minutes:

1. Begin Recording - Roll Call

Meeting called to order by Dimitris Zacharopoulos.

2026-05-20 Minutes of the S/MIME Certificate Working Group

Wed, 20 May 2026 00:00:00 +0000

Minutes of SMCWG

May 20, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

Ballot SC098v2: Process RFC 8657 CAA Parameters

Wed, 13 May 2026 00:00:00 +0000

Voting Results

Certificate Issuers

23 votes in total:

2026-05-07 Minutes of the Forum

Thu, 07 May 2026 00:00:00 +0000

Minutes:

1. Begin Recording - Roll Call

2. Reading of Note-well

The Note-Well was read

2026-05-07 Minutes of the Server Certificate Working Group

Thu, 07 May 2026 00:00:00 +0000

Minutes:

Meeting Title: CA/Browser Forum SCWG Teleconference

Date: 7 May 2026

Chair: Dimitris Zacharopoulos

Minutes Taken By: Lynn Jeun

1. Begin Recording - Roll Call

Meeting called to order by Dimitris Zacharopoulos.

2026-05-06 Minutes of the S/MIME Certificate Working Group

Wed, 06 May 2026 00:00:00 +0000

Minutes of SMCWG

May 6, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

Ballot SMC017: Increase Minimum RSA CA Key Size

Wed, 29 Apr 2026 00:00:00 +0000

Ballot SMC017: Increase Minimum RSA CA Key Size

Ballot SMC017 was withdrawn on May 12, 2026.

Ballot SMC017: Increase Minimum RSA CA Key Size

Summary:

This ballot increases the minimum RSA key size for Root and Subordinate CA certificates in the S/MIME BRs from 2048 to 4096 bits for keys created on or after September 15, 2026, while retaining the 2048-bit minimum for Subscriber certificates.

2026-04-23 Minutes of the Forum

Thu, 23 Apr 2026 00:00:00 +0000

Minutes:

Final Minutes for CA/B Forum Plenary Meeting - April 23, 2026

Attendees

Aaron Gable (ISRG), Adam Folsom (IdenTrust), Antti Backman (Telia Company), Antti Backman (Telia Company), Antti Backman (Telia Company), Antti Backman (Telia Company), Atsushi INABA (GlobalSign), Ben Wilson (Mozilla), Benjamin (ChungHwa Telecom), Chris Clements (Google Chrome), Clint Wilson (Apple), Corey Bonnell (DigiCert), Daryn Wright (Apple), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Dustin Hollenback (Apple), Enrico Entschew (D-Trust), Greg Tomko (GlobalSign), Gurleen Grewal (GTS), Hazhar Ismail (MSC Trustgate), Hogeun Yoo (NAVER Cloud Trust Services), Inigo Barreira (Sectigo), Jaime Hablutzel (WISekey), Janet Hines (SSL.com), Jeff Ward (Aprio), Johnny Reading (GoDaddy), Jos Purvis (Fastly), Jun Okura (Cybertrust), Karolina Ruszczynska (Certum), Kateryna Aleksieieva (Certum by Asseco), Lilia Dubko (CPA Canada), Lucy Buecking (IdenTrust), Luis Osses (Amazon Trust Services), Mahua Chaudhuri (Microsoft), Martijn Katerbarg (Sectigo), Matthew McPherrin (ISRG), Michelle Coon (OATI), Mrugesh Chandarana (IdenTrust), Nate Smith (GoDaddy), Nome Huang (TrustAsia), ONO Fumiaki (SECOM), Peter Miskovic (Disig), Rob White (GoDaddy), Rollin Yu (TrustAsia), Roman Fischer (SwissSign), Sándor Szöke (Microsec), Scott Rea (eMudhra), Sean Huang (TWCA), Stephen Davidson (DigiCert), Tadahiko ITO (SECOM), Thomas Zermeno (SSL.com), Tim Callan (Sectigo), Tobias Josefowitz (Opera), Trevoli Ponds-White (Amazon Trust Services), Tsung-Min Kuo (Chunghwa Telecom), Wayne Thayer (Fastly)

2026-04-23 Minutes of the Server Certificate Working Group

Thu, 23 Apr 2026 00:00:00 +0000

Minutes:

Begin Recording - Roll Call

Recording started

2026-04-22 Minutes of the S/MIME Certificate Working Group

Wed, 22 Apr 2026 00:00:00 +0000

Minutes of SMCWG

April 22, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

Ballot SC099: Improve Recording of Validation Method

Sat, 18 Apr 2026 00:00:00 +0000

Voting Results

Certificate Issuers

29 votes in total:

2026-04-09 Minutes of the Forum

Thu, 09 Apr 2026 00:00:00 +0000

Minutes:

Attendees

Tadahiko ITO-SECOM, Wayne Thayer, Luis Cervantes (SSL.com), Luis Osses (Amazon Trust Services), Mahua Chaudhuri (Microsoft), Sandy Balzer - SwissSign, Michael Slaughter (Amazon Trust Services), Sean Huang (TWCA), Janet Hines - SSL.com, Rebecca Kelley - SSL, Karolina Ruszczynska - Certum, Greg Tomko (GlobalSign), Jozef Nigut - Disig, Sándor SZŐKE, dr. (Microsec), Enrico Entschew/ D-Trust, Ben Wilson - Mozilla, Adam Folsom, Dustin Hollenback, Kateryna Aleksieieva (Certum by Asseco), Tobias Josefowitz (Opera), Inigo Barreira, Jos Purvis (Fastly), Dean, Trevoli Ponds-White [Amazon Trust Services], wendy brown - FPKIMA, Stephen Davidson (DigiCert), Peter Miskovic - Disig, Scott Rea - eMudhra, Roman Fischer - SwissSign, Paul van Brouwershaven (Digitorus), [WISeKey] Jaime Hablutzel, Rich Smith (DigiCert), Aaron Gable (ISRG), Steven Deitte - GoDaddy, Lucy Buecking - IdenTrust, Nome Huang-TrustAsia, Chad Dandar, Atsushi INABA - GlobalSign, Hogeun Yoo - NAVER Cloud Trust Services, Clint Wilson, Corey Bonnell [DigiCert], ONO Fumiaki - SECOM Trust Systems, Nate Smith - GoDaddy, Jeff Ward (Aprio), Georgy Sebastian(AWS), Lilia Dubko, Cynetheia Brown(FPKIMA), Rollin Yu - TrustAsia, Alvin.Wang(SHECA), Antti Backman - Telia Company, Tim Callan (Sectigo), Chunghwa Telecom / Tsung-Min Kuo

2026-04-09 Minutes of the Server Certificate Working Group

Thu, 09 Apr 2026 00:00:00 +0000

Minutes:

Meeting Logistics

Wayne Thayer leading the Meeting as Dimitris is not available.
Minute taker: Sandy Balzer
Wayne Thayer read the note-well.
No changes were requested for the agenda.
Minutes approval
February 26, 2026 - these Draft minutes have not been distributed yet
F2F#67 March 10, 2026 - Draft minutes have not been distributed yet, compilation pending. Participants reminded to upload missing notes and presentations to Etherpad / provide to chairs.
Final minutes do March 26, 2026 (Draft minutes were distributed on 2026-03-31) No objections and minutes approved.

Membership Applications

Ballot FORUM-037 – Adopt IPR Policy v. 1.4 and Associated Documents

Thu, 09 Apr 2026 00:00:00 +0000

Ballot FORUM-037 - Adopt IPR Policy v. 1.4 and Associated Documents

Voting Results

The voting period for Forum-037 Adopt IPR Policy v1.4 and Associated Documents has completed. The ballot has: PASSED

2026-04-08 Minutes of the S/MIME Certificate Working Group

Wed, 08 Apr 2026 00:00:00 +0000

Minutes of SMCWG

April 8, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

2026-03-26 Minutes of the Forum

Thu, 26 Mar 2026 00:00:00 +0000

Minutes:

CA/B Forum plenary Meeting - March 26, 2026

Minutes

Begin Recording - Roll Call

Recording started
Read note-well
- Read the note-well at SCWG prior

Review of Agenda

No changes

Approval of minutes

February 26th (Martijn) - (Draft minutes have not been distributed yet)
Please submit F2F minutes on Etherpad.

Server Certificate Working Group update (Dimitris)

Went over face-to-face agenda and ballot updates at 02/26 meeting
Face-to-face minutes are being compiled yet
Capturing BR version at DCV time. Working Group opined that requirement should be replaced with something else - Aaron Gable to propose the change (aligned with expectations of: Proper documentation, accountability, change management).
CP/CPS Content Consistency - gave examples where they were vague vs explicit. More explicit leads to more chances of falling into non-compliance and having to revoke. Captured the CA/B Forum expectations and how to proceed forward with improvements.
Revocation Timelines and CP/CPS consistency - alternative proposal to have CAs document which areas are allowed to have more flexibility and have a different revocation timeline (or no revocation at all as long as it is stricter than the BRs) - will be sent in F2F minutes.
Availability of resources such as CRL distribution points; repository; OCSP URLs; etc. Rules are vague now. CAs might implement settings to prevent abuse and DOS attacks (geolocation blocking, etc). Feedback to be captured in F2F meeting minutes and then see what next steps are based on that feedback.
Validation Subcommittee - Corey Bonnell
- ADN Ballot updates - Reached consensus, ballot should be about ready to go after some minor updates.
- Scott Rae presented on making more concrete guidance on Reliable Data Sources. Scott to create draft ballot proposal.
- DNSSEC - whether or not you have to check whether or not domain zone was secured with DNSSEC if one of the domain’s parents was not. If you know the parent was not, you do not have to check the child because you know it was not. May be ballot language drafted for this.

Code Signing Certificate Working Group update (Martijn)

Face-to-Face presentation by Karina for Microsoft’s vision for code-signing working group and ecosystem. Proposals to make it more available for individual developers and make it open source as well. Increase strength for authentication validation and remove human factor.

S/MIME Certificate Working Group update (Stephen)

SMC015 MDL Ballot will come out of IPR 03/27/2026. New SMIME BR to be posted after.
SMC016 Equivalence Ballot with SCWG now in voting through next week.
Ongoing discussion on two items
- Moving forward with a ballot to increase the minimum RSA key size for SMIME Sub-CAs - draft link is out.
- Potential changes to Root Program policies and how those impact SMIME BRs or SMIME CAs and what they may need to do going forward. Included in SMIME meeting minutes.

NetSec Working Group update (Clint)

Met Tuesday, 03/24.
NetSec Modernization Work - Determined Miguel will work on proposal for first steps of modernization effort.
Cloud Services Logging/Infrastructure use - CoreyB to update his proposal for next meeting in two weeks.

Definitions and Glossary Working Group (Tim H.)

No Update.

Forum Infrastructure Subcommittee update (Jos)

Ben Wilson provided update:
- Updating text of CA/B Forum website - request for volunteers.

IPR Subcommittee (Ben)

Received call from member of IPR Review Subcommittee - section 4.5 of IPR Policy and new participants and whether they had the rights to raise historic claims or not. Ben reviewing to ensure proper response. If no change, will close discussion on 03/31. if changes needed, will release version 2 for 7 day review period. Let Ben know of comments so he can batch it at the same time.

Any Other Business

F2F Meeting Schedule:
- 2026
  1. Vienna, Austria - September 22-24 - eMuhdra (Location to be confirmed) Registration is open on website now
- 2027
  1. Scottsdale, AZ - Spring 2027 - Sectigo
  2. Switzerland - Fall 2027 - SwissSign
- 2028
  1. Shanghai, China - Spring 2028 - TrustAsia (tentative)
  2. Thessaloniki, GR (or Identrust) - Fall 2028 - HARICA (tentative) or Identrust

Next call

April 9th

2026-03-26 Minutes of the Server Certificate Working Group

Thu, 26 Mar 2026 00:00:00 +0000

Minutes:

Server Cert Working Group – 032626

Begin Recording - Roll Call

Recording started

2026-03-25 Minutes of the S/MIME Certificate Working Group

Wed, 25 Mar 2026 00:00:00 +0000

Minutes of SMCWG

March 25, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.