CA/Browser Forum posts
Posts by tag Ballot
Ballot SC-77: Update WebTrust Audit name in Section 8.4 and References
September 2, 2024 by Iñigo BarreiraVoting Results Certificate Issuers 22 votes total, with no abstentions: 22 Issuers voting YES: Amazon, Buypass, Chunghwa Telecom, CommScope, DigiCert, eMudhra, Entrust, Fastly, GlobalSign, GoDaddy, HARICA, IdenTrust, iTrusChina, Izenpe, JPRS, OISTE, SECOM, Sectigo, SSL.com, TrustAsia, TWCA, VikingCloud 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 3 votes total, with no abstentions: 3 Consumers voting YES: Apple, Google, Mozilla 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.3(6) requires:
September 2, 2024 by Iñigo BarreiraVoting Results Certificate Issuers 22 votes total, with no abstentions: 22 Issuers voting YES: Amazon, Buypass, Chunghwa Telecom, CommScope, DigiCert, eMudhra, Entrust, Fastly, GlobalSign, GoDaddy, HARICA, IdenTrust, iTrusChina, Izenpe, JPRS, OISTE, SECOM, Sectigo, SSL.com, TrustAsia, TWCA, VikingCloud 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 3 votes total, with no abstentions: 3 Consumers voting YES: Apple, Google, Mozilla 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.3(6) requires:
Ballot SC-67 v3: Require domain validation and CAA checks to be performed from multiple Network Perspectives Corroboration
August 5, 2024 by Iñigo BarreiraVoting Results Certificate Issuers 22 votes total, with no abstentions: 22 Issuers voting YES: Actalis, Buypass, Certum (Asseco), Chunghwa Telecom, D-TRUST, DigiCert, Disig, eMudhra, Entrust, Fastly, GlobalSign, HARICA, IdenTrust, Izenpe, JPRS, Let’s Encrypt / ISRG, OISTE, SECOM, Sectigo, SSL.com, Telia Company, TrustAsia 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 4 votes total, with no abstentions: 3 Consumers voting YES: Apple, Google, Mozilla, Opera 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
August 5, 2024 by Iñigo BarreiraVoting Results Certificate Issuers 22 votes total, with no abstentions: 22 Issuers voting YES: Actalis, Buypass, Certum (Asseco), Chunghwa Telecom, D-TRUST, DigiCert, Disig, eMudhra, Entrust, Fastly, GlobalSign, HARICA, IdenTrust, Izenpe, JPRS, Let’s Encrypt / ISRG, OISTE, SECOM, Sectigo, SSL.com, Telia Company, TrustAsia 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 4 votes total, with no abstentions: 3 Consumers voting YES: Apple, Google, Mozilla, Opera 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
Ballot SC-75: Pre-sign linting
August 5, 2024 by Iñigo BarreiraVoting Results Certificate Issuers 25 votes total, with no abstentions: 25 Issuers voting YES: Actalis, Buypass, Certum (Asseco), Chunghwa Telecom, D-TRUST, DigiCert, Disig, eMudhra, Fastly, GlobalSign, GoDaddy, HARICA, IdenTrust, iTrusChina, JPRS, Kamu SM, Let’s Encrypt / ISRG, OISTE, SECOM, Sectigo, SwissSign, Telia Company, TrustAsia, TWCA, VikingCloud 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 3 votes total, with no abstentions: 3 Consumers voting YES: Apple, Google, Mozilla 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
August 5, 2024 by Iñigo BarreiraVoting Results Certificate Issuers 25 votes total, with no abstentions: 25 Issuers voting YES: Actalis, Buypass, Certum (Asseco), Chunghwa Telecom, D-TRUST, DigiCert, Disig, eMudhra, Fastly, GlobalSign, GoDaddy, HARICA, IdenTrust, iTrusChina, JPRS, Kamu SM, Let’s Encrypt / ISRG, OISTE, SECOM, Sectigo, SwissSign, Telia Company, TrustAsia, TWCA, VikingCloud 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 3 votes total, with no abstentions: 3 Consumers voting YES: Apple, Google, Mozilla 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates
July 15, 2024 by Stephen DavidsonThe Intellectual Property Review (IPR) period for Ballot SMC08 (Deprecate Legacy Generation Profiles and Minor Updates) has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of August 29, 2024. The new S/MIME BR v.1.0.6 have been published to the CABF public website in accordance with the Bylaws: https://cabforum.org/uploads/CA-Browser-Forum-SMIMEBR-1.0.6.pdf IPR Review of Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates This Review Notice is sent pursuant to Section 4.
July 15, 2024 by Stephen DavidsonThe Intellectual Property Review (IPR) period for Ballot SMC08 (Deprecate Legacy Generation Profiles and Minor Updates) has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of August 29, 2024. The new S/MIME BR v.1.0.6 have been published to the CABF public website in accordance with the Bylaws: https://cabforum.org/uploads/CA-Browser-Forum-SMIMEBR-1.0.6.pdf IPR Review of Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates This Review Notice is sent pursuant to Section 4.
Ballots CSC-25 and CSC-26
July 1, 2024 by Corey BonnellRESULTS OF REVIEW PERIOD CSC-25 Ballot CSC 25: Import EV Guidelines into the Code Signing Baseline Requirements The Intellectual Property Review (IPR) period for Ballot CSC25: Import EV Guidelines into the Code Signing Baseline Requirements has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of Aug 1, 2024. The new Code Signing BRs will be published to the CABF public website in accordance with the Bylaws.
July 1, 2024 by Corey BonnellRESULTS OF REVIEW PERIOD CSC-25 Ballot CSC 25: Import EV Guidelines into the Code Signing Baseline Requirements The Intellectual Property Review (IPR) period for Ballot CSC25: Import EV Guidelines into the Code Signing Baseline Requirements has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of Aug 1, 2024. The new Code Signing BRs will be published to the CABF public website in accordance with the Bylaws.
Ballot SC-73: Compromised and weak keys
June 7, 2024 by Iñigo BarreiraVoting Results Certificate Issuers 23 votes total, with no abstentions: 23 Issuers voting YES: Actalis, Certum (Asseco), CFCA, CommScope, D-TRUST, Disig, Entrust, Fastly, GDCA, GlobalSign, GoDaddy, HARICA, iTrusChina, JPRS, Let’s Encrypt / ISRG, SECOM, Sectigo, SSL.com, SwissSign, Telia Company, TrustAsia, TWCA, VikingCloud 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 1 votes total, with no abstentions: 1 Consumers voting YES: Mozilla 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
June 7, 2024 by Iñigo BarreiraVoting Results Certificate Issuers 23 votes total, with no abstentions: 23 Issuers voting YES: Actalis, Certum (Asseco), CFCA, CommScope, D-TRUST, Disig, Entrust, Fastly, GDCA, GlobalSign, GoDaddy, HARICA, iTrusChina, JPRS, Let’s Encrypt / ISRG, SECOM, Sectigo, SSL.com, SwissSign, Telia Company, TrustAsia, TWCA, VikingCloud 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 1 votes total, with no abstentions: 1 Consumers voting YES: Mozilla 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
Ballot CSC-24 - Timestamping Private Key Protection
May 29, 2024 by Corey BonnellResults of Voting Yes No Abstain Certificate Issuers DigiCert, Entrust, Globalsign, HARICA, IdenTrust, Sectigo Certificate Consumers There were not enough Certificate Consumer votes to pass the ballot. Therefore, the ballot FAILS. Purpose of the Ballot This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates“ version 3.7 in order to clarify language regarding Timestamp Authority Private Key Protection. The main goals of this ballot are to:
May 29, 2024 by Corey BonnellResults of Voting Yes No Abstain Certificate Issuers DigiCert, Entrust, Globalsign, HARICA, IdenTrust, Sectigo Certificate Consumers There were not enough Certificate Consumer votes to pass the ballot. Therefore, the ballot FAILS. Purpose of the Ballot This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates“ version 3.7 in order to clarify language regarding Timestamp Authority Private Key Protection. The main goals of this ballot are to:
Ballot SMC07: Align Logging Requirement and Key Escrow clarification
May 24, 2024 by Stephen DavidsonThe Intellectual Property Review (IPR) period for Ballot SMC07 (Align Logging Requirement and Key Escrow clarification) has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of July 15, 2024. The new S/MIME BR v.1.0.5 have been published to the CABF public website in accordance with the Bylaws: https://cabforum.org/uploads/CA-Browser-Forum-SMIMEBR-1.0.5.pdf IPR Review of Ballot SMC07: Align Logging Requirement and Key Escrow clarification This Review Notice is sent pursuant to Section 4.
May 24, 2024 by Stephen DavidsonThe Intellectual Property Review (IPR) period for Ballot SMC07 (Align Logging Requirement and Key Escrow clarification) has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of July 15, 2024. The new S/MIME BR v.1.0.5 have been published to the CABF public website in accordance with the Bylaws: https://cabforum.org/uploads/CA-Browser-Forum-SMIMEBR-1.0.5.pdf IPR Review of Ballot SMC07: Align Logging Requirement and Key Escrow clarification This Review Notice is sent pursuant to Section 4.
Ballot NS-003: Restructure the NCSSRs
April 9, 2024 by Clint WilsonIPR Review of Ballot NS-003: Restructure the NCSSRs This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice is: https://cabforum.org/posts/2024/2024-05-06-NSWG-Ballot-NS-003/CA-Browser-Forum-NCSSR-2.0-redline.pdf Summary of Review Ballot for Review: Ballot NS-003: Restructure the NCSSRs Start of Review Period: 6 May 2024 18:00 UTC End of Review Period: 5 June 2024 18:00 UTC Exclusion Notices Members with any Essential Claim(s) to exclude must forward a written Notice to Exclude Essential Claims to the Working Group Chair (email to clintw at apple.
April 9, 2024 by Clint WilsonIPR Review of Ballot NS-003: Restructure the NCSSRs This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice is: https://cabforum.org/posts/2024/2024-05-06-NSWG-Ballot-NS-003/CA-Browser-Forum-NCSSR-2.0-redline.pdf Summary of Review Ballot for Review: Ballot NS-003: Restructure the NCSSRs Start of Review Period: 6 May 2024 18:00 UTC End of Review Period: 5 June 2024 18:00 UTC Exclusion Notices Members with any Essential Claim(s) to exclude must forward a written Notice to Exclude Essential Claims to the Working Group Chair (email to clintw at apple.
Ballot CSC-23 - Marking the EV Code Signing Guidelines SUPERCEDED
March 26, 2024 by Corey BonnellThe final documents, with the effective date being 2024-03-26, are available here. Results of Voting Yes No Abstain Certificate Issuers Actalis, Asseco (Certum), DigiCert, Entrust, Globalsign, HARICA, IdenTrust, Sectigo, SSL.com Certificate Consumers Microsoft Purpose of the Ballot As agreed at the F2F#61 meeting, this is a ballot to mark the “Guidelines For The Issuance And Management Of Extended Validation Code Signing Certificates” as superceded. The following motion has been proposed by Dimitris Zacharopoulos of HARICA and endorsed by Scott Rea of eMudhra and Martijn Katerbarg of Sectigo.
March 26, 2024 by Corey BonnellThe final documents, with the effective date being 2024-03-26, are available here. Results of Voting Yes No Abstain Certificate Issuers Actalis, Asseco (Certum), DigiCert, Entrust, Globalsign, HARICA, IdenTrust, Sectigo, SSL.com Certificate Consumers Microsoft Purpose of the Ballot As agreed at the F2F#61 meeting, this is a ballot to mark the “Guidelines For The Issuance And Management Of Extended Validation Code Signing Certificates” as superceded. The following motion has been proposed by Dimitris Zacharopoulos of HARICA and endorsed by Scott Rea of eMudhra and Martijn Katerbarg of Sectigo.