CAB Forum Certificate Issuers, Certificate Consumers, and Interested Parties Working to Secure the Web
Attendees Andrea Holland, Atsushi Inaba, Ben Wilson, Bruce Morton, Chris Kemmerer, Corey Bonnell, Dean Coclin, Dimitris Zacharopoulo, Ian McMillan, Inigo Barreira, Janet Hines, Joanna Fox, Martijn Katerbarg, Michael Sykes, Sebastian Schulz, Tim Crawford, Tim Hollebeek, Tomas Gustavsson Minutes Minute Taker: Martijn Anti-Trust statementDean read the anti-trust statement Previous MinutesMinutes from October 13th and October 21st are approved. Dean will send …
Read More »Tag Archives: Code Signing
Ballot CSC-12 – CRL Revocation Date Clarification
Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-12-03, are available here. Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersCertum (Asseco)DigiCertEntrustE-TUGRAGlobalSignHARICASectigoSSL.comCertificate ConsumersMicrosoftThe ballot has PASSED. Purpose of the Ballot While RFC 5280, section 5.3.2 specifies that …
Read More »2021-10-21 Minutes of the Code Signing Certificate Working Group
Attendees Andrea Holland, Atushi Inaba, Bruce Morton, Dimitris Zacharopoulos, Ian McMillan, Inigo Barreira, Joanna Fox, Tim Crawford, Tim Hollebeek, Tomas Gustavsson Minutes Minute taker: Tomas Gustavsson * Antitrust statement was read. * Minutes from the meeting on October 7th was approved. Current Ballots Ballot CSC-11 in IPR review through November 3rd. No discussion so far. Corey has put out the …
Read More »2021-10-13 Minutes of the Code Signing Certificate Working Group
Attendees SwissSign (Adrian Mueller), Telia Company (Ali Gholami), SecureTrust (Andrea Holland), Nimbus, Member of ETSI ESI (Arno Fiedler), GlobalSign (Atsushi Inaba), Entrust (Bruce Morton), DigiCert (Corey Bonnell), DigiCert (Dean Coclin), HARICA (Dimitris Zacharopoulos), CPA Canada (Don Sheehy), GlobalSign (Doug Beattie), SSL.com (Dustin Ward), GlobalSign (Eva Van Steenberge), Microsoft (Glaucia Young), GoDaddy (Hong Bui), Microsoft (Ian McMillan), Sectigo (Iñigo Barreira), SecureTrust …
Read More »Ballot CSC-11 – Update to log data retention requirements
Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-11-03, are available here. Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersCertum (Asseco)DigiCerteMudhraEntrustGlobalSignHARICASectigoSecureTrustCertificate ConsumersMicrosoftThe ballot has PASSED. Purpose of the Ballot Update the log data and retention of …
Read More »Ballot CSC-9 – Spring 2021 Cleanup and Clarification
IPR Review Results The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 9 September 2021, are available here. Voting Results Voting on Ballot CSC-9 has concluded and the ballot has passed. Below are the results: CAs voting in favor: Actalis, Certum (Asseco), DigiCert, eMudhra, Entrust, GlobalSign, HARICA, Sectigo, SSL.com, SecureTrust …
Read More »2021-09-09 Minutes of the Code Signing Certificate Working Group
Attendees Atsushi Inaba, Ben Wilson, Bruce Morton, Corey Bonnell, Dean Coclin, Dimitris Zacharopoulos, Iñigo Barreira, Janet Hines, Joanna Fox, Roberto Quiñones, Sebastian Schulz, Tim Hollebeek, Tomas Gustavsson Minutes Dean read the anti-trust statement. Minute-taker: Joanna. Next minute taker: Corey Prior meeting minutes of 26 August 2021 were approved. WordPress steps to update the CSCBRsBen asked for a volunteer webmaster to …
Read More »Ballot CSC-10 – WebTrust CSBR v2.0 Audit Criteria
Results of IPR Review (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2021-09-13, are available here. Results of Voting (Mailing list post is available here.) YesNoAbstainCertificate IssuersCertum (Asseco) DigiCerteMudhraEntrustGlobalSignHARICASectigo Certificate ConsumersMicrosoftThe ballot has PASSED. Purpose of the Ballot For Baseline Requirement for the …
Read More »Ballot CSC-8 v3: Update to Revocation response mechanisms. key protection for EV certificates, and clean-up of 11.2.1 & Appendix B
The voting period for Ballot CSC-8 has ended and the Ballot has Passed. Here are the results: Voting by Certificate Issuers – 7 votes total including abstentions – 6 Yes votes: Certum (Asseco), DigiCert, Entrust, GlobalSign, HARICA, Sectigo – 0 No votes – 1 Abstain: GoDaddy 87% of voting Certificate Issuers voted in favor. Voting by Certificate Consumers – 1 …
Read More »Ballot CSC-7v2: Update to merge EV and Non-EV clauses
Voting has closed on this ballot and the results are as follows: CAs voting in favor (7): Actalis, DigiCert, Entrust, GDCA, GlobalSign, GoDaddy, HARICA CAs opposed: None CAs abstaining: None Certificate Consumers voting in favor (1): MicrosoftCertificate Consumers opposed: NoneCertificate Consumers abstaining: None Therefore the ballot CSC-7 passes. Purpose of the Ballot: The CSC-2 merger of the Code Signing BRs …
Read More »