CA/Browser Forum posts
2023-08-02 Minutes of the S/MIME Certificate Working Group
August 2, 2023 by Stephen DavidsonMinutes of SMCWG August 2, 2023 These are the Approved Minutes of the Teleconference described in the subject of this message. Corrections and clarifications where needed are encouraged by reply. Attendees Adrian Mueller – (SwissSign), Andrea Holland – (VikingCloud), Ashish Dhiman – (GlobalSign), Bruce Morton – (Entrust), Cade Cairns – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Don Sheehy – (CPA Canada/WebTrust), Enrico Entschew – (D-TRUST), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Janet Hines – (VikingCloud), Judith Spencer – (CertiPath), Li-Chun Chen – (Chunghwa Telecom), Marco Schambach – (IdenTrust), Morad Abou Nasser – (TeleTrust), Nome Huang – (TrustAsia Technologies, Inc.
August 2, 2023 by Stephen DavidsonMinutes of SMCWG August 2, 2023 These are the Approved Minutes of the Teleconference described in the subject of this message. Corrections and clarifications where needed are encouraged by reply. Attendees Adrian Mueller – (SwissSign), Andrea Holland – (VikingCloud), Ashish Dhiman – (GlobalSign), Bruce Morton – (Entrust), Cade Cairns – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Don Sheehy – (CPA Canada/WebTrust), Enrico Entschew – (D-TRUST), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Janet Hines – (VikingCloud), Judith Spencer – (CertiPath), Li-Chun Chen – (Chunghwa Telecom), Marco Schambach – (IdenTrust), Morad Abou Nasser – (TeleTrust), Nome Huang – (TrustAsia Technologies, Inc.
Ballot CSC-19: Remove TLS BR References
August 1, 2023 by Corey BonnellResults of Review Period (Mailing list post is available here.) The IPR review period ended on September 5, 2023 and no exclusion notices were filed. The final documents, with the effective date being 2023-09-05, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). A complete Draft Guideline subject of this Review Notice is available here.
August 1, 2023 by Corey BonnellResults of Review Period (Mailing list post is available here.) The IPR review period ended on September 5, 2023 and no exclusion notices were filed. The final documents, with the effective date being 2023-09-05, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). A complete Draft Guideline subject of this Review Notice is available here.
Minutes of the F2F 59 Meeting in Redmond, WA, USA, 6-8 June 2023 – Validation SC (8 June)
July 21, 2023 by Iñigo BarreiraValidation SubcommitteeDate: June 08, 2023 Minute Taker: Michael Slaughter (Amazon Trust Services) Validation WG Chair: Corey Bonnell (DigiCert) Introduction Corey proposed not performing another roll-call. – No Objections Corey proposed approving the minutes from 5/18 Validation Sub-Committee sent by Chris Clements . – No Objections Corey provided update on progress made since Spring 2023. Corey recapped the discussion on issues with current language in EV Guidelines surrounding acceptable registration sources to address concerns raised by Pedro Fuentes about the suitability of QGISs to provide registration/incorporation information .
July 21, 2023 by Iñigo BarreiraValidation SubcommitteeDate: June 08, 2023 Minute Taker: Michael Slaughter (Amazon Trust Services) Validation WG Chair: Corey Bonnell (DigiCert) Introduction Corey proposed not performing another roll-call. – No Objections Corey proposed approving the minutes from 5/18 Validation Sub-Committee sent by Chris Clements . – No Objections Corey provided update on progress made since Spring 2023. Corey recapped the discussion on issues with current language in EV Guidelines surrounding acceptable registration sources to address concerns raised by Pedro Fuentes about the suitability of QGISs to provide registration/incorporation information .
Minutes of the F2F 59 Meeting in Redmond, WA, USA, 6-8 June 2023 – SCWG (8 June)
July 21, 2023 by Iñigo BarreiraMeeting of the Server Certificate Working GroupThursday, 8 June 2023 – CA/B Forum Meeting (Day 3) Server Certificate Working Group Meeting Presentation by: Inigo Barreira (Sectigo) Minutes: Tim Callan (Sectigo) Attendance onsite: Ben Wilson (Mozilla), Nitesh Bakliwal (Microsoft), Karina Sirota (Microsoft), Tahmina Ahmad (Microsoft), Hannah Sokol (Microsoft), John Sarapata (Google Trust Services), Paul (Entrust), Bruce Morton (Entrust), Arno Fiedler (ETSI ESI), An Yin (iTrust China), Tadahiko Ito (Secom), Corey Bonell (Digicert), Wayne Thayer (Fastly), Romain Delval (Certigna), Josselin Allemandou (Certigna), Scott Rea (eMudhra), Thomas Zermeno (SSL.
July 21, 2023 by Iñigo BarreiraMeeting of the Server Certificate Working GroupThursday, 8 June 2023 – CA/B Forum Meeting (Day 3) Server Certificate Working Group Meeting Presentation by: Inigo Barreira (Sectigo) Minutes: Tim Callan (Sectigo) Attendance onsite: Ben Wilson (Mozilla), Nitesh Bakliwal (Microsoft), Karina Sirota (Microsoft), Tahmina Ahmad (Microsoft), Hannah Sokol (Microsoft), John Sarapata (Google Trust Services), Paul (Entrust), Bruce Morton (Entrust), Arno Fiedler (ETSI ESI), An Yin (iTrust China), Tadahiko Ito (Secom), Corey Bonell (Digicert), Wayne Thayer (Fastly), Romain Delval (Certigna), Josselin Allemandou (Certigna), Scott Rea (eMudhra), Thomas Zermeno (SSL.
2023-07-06 Minutes of the Server Certificate Working Group
July 20, 2023 by Iñigo BarreiraServer Certificate Working Group Meeting July 6, 2023Attendees Iñigo: For the attendance, Rich Smith of Digicert and Daryn of GoDaddy joined the call. Abdul Hakeem Putra – (MSC Trustgate Sdn Bhd), Abhishek Bhat – (eMudhra), Adam Jones – (Microsoft), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Brianca Martin – (Amazon), Chris Clements – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Corey Rasmussen – (OATI), Daryn Wright – (GoDaddy), Dimitris Zacharopoulos – (HARICA), Dustin Hollenback – (Microsoft), Enrico Entschew – (D-TRUST), Eva Vansteenberge – (GlobalSign), Fumi Yoneda – (Japan Registry Services), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Janet Hines – (VikingCloud), Jos Purvis – (Fastly), Keshava Nagaraju – (eMudhra), Lynn Jeun – (Visa), Mads Henriksveen – (Buypass AS), Marcelo Silva – (Visa), Marco Schambach – (IdenTrust), Martijn Katerbarg – (Sectigo), Michelle Coon – (OATI), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Paul van Brouwershaven – (Entrust), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), RIch Smith – (DigiCert), Rollin Yu – (TrustAsia Technologies, Inc.
July 20, 2023 by Iñigo BarreiraServer Certificate Working Group Meeting July 6, 2023Attendees Iñigo: For the attendance, Rich Smith of Digicert and Daryn of GoDaddy joined the call. Abdul Hakeem Putra – (MSC Trustgate Sdn Bhd), Abhishek Bhat – (eMudhra), Adam Jones – (Microsoft), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Brianca Martin – (Amazon), Chris Clements – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Corey Rasmussen – (OATI), Daryn Wright – (GoDaddy), Dimitris Zacharopoulos – (HARICA), Dustin Hollenback – (Microsoft), Enrico Entschew – (D-TRUST), Eva Vansteenberge – (GlobalSign), Fumi Yoneda – (Japan Registry Services), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Janet Hines – (VikingCloud), Jos Purvis – (Fastly), Keshava Nagaraju – (eMudhra), Lynn Jeun – (Visa), Mads Henriksveen – (Buypass AS), Marcelo Silva – (Visa), Marco Schambach – (IdenTrust), Martijn Katerbarg – (Sectigo), Michelle Coon – (OATI), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Paul van Brouwershaven – (Entrust), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), RIch Smith – (DigiCert), Rollin Yu – (TrustAsia Technologies, Inc.
2023-07-20 Minutes of the CA/Browser Forum Teleconference
July 20, 2023 by Ben WilsonMinutes prepared by Andrea Holland (VikingCloud). CAB Forum Meeting: July 20, 2023 Attendance Aaron Gable – (Let’s Encrypt), Aaron Poulsen – (Amazon), Abdul Hakeem Putra – (MSC Trustgate Sdn Bhd), Abhishek Bhat – (eMudhra), Adam Clark – (Visa), Adam Jones – (Microsoft), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Chris Clements – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Daryn Wright – (GoDaddy), Dean Coclin – (DigiCert), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Eva Vansteenberge – (GlobalSign), Fumi Yoneda – (Japan Registry Services), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Jamie Mackey – (US Federal PKI Management Authority), Joanna Fox – (TrustCor Systems), Jos Purvis – (Fastly), Lynn Jeun – (Visa), Marcelo Silva – (Visa), Marco Schambach – (IdenTrust), Michelle Coon – (OATI), Miguel Sanchez – (Google), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Rollin Yu – (TrustAsia Technologies, Inc.
July 20, 2023 by Ben WilsonMinutes prepared by Andrea Holland (VikingCloud). CAB Forum Meeting: July 20, 2023 Attendance Aaron Gable – (Let’s Encrypt), Aaron Poulsen – (Amazon), Abdul Hakeem Putra – (MSC Trustgate Sdn Bhd), Abhishek Bhat – (eMudhra), Adam Clark – (Visa), Adam Jones – (Microsoft), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Chris Clements – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Daryn Wright – (GoDaddy), Dean Coclin – (DigiCert), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Eva Vansteenberge – (GlobalSign), Fumi Yoneda – (Japan Registry Services), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Jamie Mackey – (US Federal PKI Management Authority), Joanna Fox – (TrustCor Systems), Jos Purvis – (Fastly), Lynn Jeun – (Visa), Marcelo Silva – (Visa), Marco Schambach – (IdenTrust), Michelle Coon – (OATI), Miguel Sanchez – (Google), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Rollin Yu – (TrustAsia Technologies, Inc.
2023-07-19 Minutes of the S/MIME Certificate Working Group
July 19, 2023 by Stephen DavidsonMinutes of SMCWG July 19, 2023 These are the Approved Minutes of the Teleconference described in the subject of this message. Corrections and clarifications where needed are encouraged by reply. Attendees Adrian Mueller – (SwissSign), Andreas Henschel – (D-TRUST), Ashish Dhiman – (GlobalSign), Ben Wilson – (Mozilla), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Dimitris Zacharopoulos – (HARICA), Don Sheehy – (CPA Canada/WebTrust), Eva Vansteenberge – (GlobalSign), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Judith Spencer – (CertiPath), Li-Chun Chen – (Chunghwa Telecom), Marco Schambach – (IdenTrust), Morad Abou Nasser – (TeleTrust), Mrugesh Chandarana – (IdenTrust), Nome Huang – (TrustAsia Technologies, Inc.
July 19, 2023 by Stephen DavidsonMinutes of SMCWG July 19, 2023 These are the Approved Minutes of the Teleconference described in the subject of this message. Corrections and clarifications where needed are encouraged by reply. Attendees Adrian Mueller – (SwissSign), Andreas Henschel – (D-TRUST), Ashish Dhiman – (GlobalSign), Ben Wilson – (Mozilla), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Dimitris Zacharopoulos – (HARICA), Don Sheehy – (CPA Canada/WebTrust), Eva Vansteenberge – (GlobalSign), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Judith Spencer – (CertiPath), Li-Chun Chen – (Chunghwa Telecom), Marco Schambach – (IdenTrust), Morad Abou Nasser – (TeleTrust), Mrugesh Chandarana – (IdenTrust), Nome Huang – (TrustAsia Technologies, Inc.
Ballot SC-063 v4: Make OCSP Optional, Require CRLs, and Incentivize Automation
July 14, 2023 by Iñigo BarreiraVoting Results Certificate Issuers 29 votes total, with no abstentions: 28 Issuers voting YES: Amazon, Buypass, Certum, CFCA, Chunghwa Telecom, D-Trust, Digicert, Disig, eMudhra, Entrust, Fastly, GDCA, Globalsign, GoDaddy, HARICA, Izenpe, JPRS, Kamu SM, LE, NAVER, OISTE, SECOM, Sectigo, SSL.com, Swisssign, TWCA, Telia, Viking Cloud 1 Issuers voting NO: Certinomis 0 Issuers ABSTAIN Certificate Consumers 3 votes total, with no abstentions: 3 Consumers voting YES: Google, Mozilla, Apple 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
July 14, 2023 by Iñigo BarreiraVoting Results Certificate Issuers 29 votes total, with no abstentions: 28 Issuers voting YES: Amazon, Buypass, Certum, CFCA, Chunghwa Telecom, D-Trust, Digicert, Disig, eMudhra, Entrust, Fastly, GDCA, Globalsign, GoDaddy, HARICA, Izenpe, JPRS, Kamu SM, LE, NAVER, OISTE, SECOM, Sectigo, SSL.com, Swisssign, TWCA, Telia, Viking Cloud 1 Issuers voting NO: Certinomis 0 Issuers ABSTAIN Certificate Consumers 3 votes total, with no abstentions: 3 Consumers voting YES: Google, Mozilla, Apple 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
Ballot SC-59v2: Weak key guidance
July 14, 2023 by Iñigo BarreiraVoting Results Certificate Issuers 19 votes total: 4 Issuers voting YES: Disig, Harica, Sectigo, SSL.com 14 Issuers voting NO: Buypass, CFCA, Chunghwa Telecom, D-Trust, Digicert, eMudhra, Entrust, Fastly, Globalsign, JPRS, LE, SECOM, Swisssign, Viking Cloud 1 Issuers ABSTAIN: OISTE Certificate Consumers 3 votes total: 2 Consumers voting YES: Apple, Mozilla 0 Consumers voting NO 1 Consumer ABSTAIN: Google Bylaws Requirements Bylaw 2.3(6) requires: In order for a ballot to be adopted by the Forum, two‐thirds (2/3) or more of the votes cast by the Voting Members in the Certificate Issuer category must be in favour of the ballot.
July 14, 2023 by Iñigo BarreiraVoting Results Certificate Issuers 19 votes total: 4 Issuers voting YES: Disig, Harica, Sectigo, SSL.com 14 Issuers voting NO: Buypass, CFCA, Chunghwa Telecom, D-Trust, Digicert, eMudhra, Entrust, Fastly, Globalsign, JPRS, LE, SECOM, Swisssign, Viking Cloud 1 Issuers ABSTAIN: OISTE Certificate Consumers 3 votes total: 2 Consumers voting YES: Apple, Mozilla 0 Consumers voting NO 1 Consumer ABSTAIN: Google Bylaws Requirements Bylaw 2.3(6) requires: In order for a ballot to be adopted by the Forum, two‐thirds (2/3) or more of the votes cast by the Voting Members in the Certificate Issuer category must be in favour of the ballot.
2023-07-13 Minutes of the Code Signing Certificate Working Group
July 13, 2023 by Corey BonnellAttendeesAndrea Holland (VikingCloud), Atsushi INABA (GlobalSign), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Inigo Barreira (Sectigo), Mohit Kumar (GlobalSign), Scott Rea (eMudhra), Tim Crawford (BDO/WebTrust) Minutes1 item on agenda today (since Bruce and Ian are away) – removal of BR references, and which is the correct version of X.509 to be used. Dimitris to lead discussion. Ballot: CSC 19 Latest comments from Tim have been cleared, if no other concerns or objections, discussion period will start on Monday (17 July) No concerns raised over content, but procedural concern raised over discussion being held during summer holiday period If quorum is not achieved for vote (due to holiday period impact), a new ballot will be submitted with a new number (same content) Still waiting on feedback from Microsoft in respect to X.
July 13, 2023 by Corey BonnellAttendeesAndrea Holland (VikingCloud), Atsushi INABA (GlobalSign), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Inigo Barreira (Sectigo), Mohit Kumar (GlobalSign), Scott Rea (eMudhra), Tim Crawford (BDO/WebTrust) Minutes1 item on agenda today (since Bruce and Ian are away) – removal of BR references, and which is the correct version of X.509 to be used. Dimitris to lead discussion. Ballot: CSC 19 Latest comments from Tim have been cleared, if no other concerns or objections, discussion period will start on Monday (17 July) No concerns raised over content, but procedural concern raised over discussion being held during summer holiday period If quorum is not achieved for vote (due to holiday period impact), a new ballot will be submitted with a new number (same content) Still waiting on feedback from Microsoft in respect to X.