CA/Browser Forum posts
Posts by tag Code Signing
2024-02-08 Minutes of the Code Signing Certificate Working Group
February 8, 2024 by Corey BonnellAttendees Abhishek Bhat (eMudhra), Ben Dewberry (Keyfactor), Brianca Martin (Amazon), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Ian McMillan (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Keshava Nagaraju (eMudhra), Mohit Kumar (GlobalSign), Richard Kisley (IBM), Scott Rea (eMudhra), Thomas Zermeno (SSL.com) Minutes Dean read the note well. Meeting minutes for January 25th meeting were approved. Import EVG references into CSBRs Dimitris gave status update for removing references to EVGs.
February 8, 2024 by Corey BonnellAttendees Abhishek Bhat (eMudhra), Ben Dewberry (Keyfactor), Brianca Martin (Amazon), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Ian McMillan (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Keshava Nagaraju (eMudhra), Mohit Kumar (GlobalSign), Richard Kisley (IBM), Scott Rea (eMudhra), Thomas Zermeno (SSL.com) Minutes Dean read the note well. Meeting minutes for January 25th meeting were approved. Import EVG references into CSBRs Dimitris gave status update for removing references to EVGs.
2024-01-25 Minutes of the Code Signing Certificate Working Group
January 25, 2024 by Corey BonnellAttendees Atsushi Inaba, Bhat Abhishek, Brianca Martin, Bruce Morton, Corey Bonnell, Dean Coclin, Ian McMillan, Inigo Barreira, Janet Hines, Keshava N, Lucy Buecking, Martijn Katerbarg, Mohit Kumar, Richard Kisley, Scott Rea, Thomas Zermeno, Tim Crawford, Tim Hollebeek, Trevoli Ponds-White Minutes Roll Call Completed by Dean Antitrust reminder Completed by Dean Approve prior meeting minutes – Jan 11th Meeting Minutes from 2024/01/11 sent out on 2024/01/12, Approved Ballot CSC-21 Signing Service: Status In IPR until 2024/02/18 Ballot CSC-22 Proposed High Risk Ballot: Status In IPR until 2024/02/18 Proposed ballot Remove EV Guideline References status Work done by Dimitris to pull in the necessary text from the EV Guidelines and ready for feedback in https://github.
January 25, 2024 by Corey BonnellAttendees Atsushi Inaba, Bhat Abhishek, Brianca Martin, Bruce Morton, Corey Bonnell, Dean Coclin, Ian McMillan, Inigo Barreira, Janet Hines, Keshava N, Lucy Buecking, Martijn Katerbarg, Mohit Kumar, Richard Kisley, Scott Rea, Thomas Zermeno, Tim Crawford, Tim Hollebeek, Trevoli Ponds-White Minutes Roll Call Completed by Dean Antitrust reminder Completed by Dean Approve prior meeting minutes – Jan 11th Meeting Minutes from 2024/01/11 sent out on 2024/01/12, Approved Ballot CSC-21 Signing Service: Status In IPR until 2024/02/18 Ballot CSC-22 Proposed High Risk Ballot: Status In IPR until 2024/02/18 Proposed ballot Remove EV Guideline References status Work done by Dimitris to pull in the necessary text from the EV Guidelines and ready for feedback in https://github.
Ballots CSC-21 and CSC-22
January 17, 2024 by Corey BonnellRESULTS OF REVIEW PERIOD The IPR review period ended on February 28, 2024 and no exclusion notices were filed. The final documents, with the effective date being 2024-02-28, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice are available here for CSC-21 and here for CSC-22, in red-line draft format.
January 17, 2024 by Corey BonnellRESULTS OF REVIEW PERIOD The IPR review period ended on February 28, 2024 and no exclusion notices were filed. The final documents, with the effective date being 2024-02-28, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice are available here for CSC-21 and here for CSC-22, in red-line draft format.
Ballot FORUM 20v2 – Amend Code Signing Certificate Working Group Charter
January 13, 2024 by Dimitris ZacharopoulosThe voting period for Ballot FORUM-020 v.2 - Amend Code Signing Certificate Working Group Charter has ended and the Ballot has Passed. Here are the results: Voting by Certificate Issuers 23 votes total including abstentions 11 Yes votes: CFCA, eMudhra, Entrust, Fastly, GDCA, GoDaddy, HARICA, IdenTrust, Sectigo, SSL.com, Viking Cloud 1 No votes: DigiCert 0 Abstain: 92% of voting Certificate Issuers voted in favor Voting by Certificate Consumers 1 votes total including abstentions
January 13, 2024 by Dimitris ZacharopoulosThe voting period for Ballot FORUM-020 v.2 - Amend Code Signing Certificate Working Group Charter has ended and the Ballot has Passed. Here are the results: Voting by Certificate Issuers 23 votes total including abstentions 11 Yes votes: CFCA, eMudhra, Entrust, Fastly, GDCA, GoDaddy, HARICA, IdenTrust, Sectigo, SSL.com, Viking Cloud 1 No votes: DigiCert 0 Abstain: 92% of voting Certificate Issuers voted in favor Voting by Certificate Consumers 1 votes total including abstentions
2023-12-14 Minutes of the Code Signing Certificate Working Group
December 14, 2023 by Corey BonnellAttendees Andrea Holland (VikingCloud), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Ian McMillan (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Martijn Katerbarg (Sectigo), Mohit Kumar (GlobalSign), Richard Kisley (IBM), Roberto Quionones (Intel), Rollin Yu (TrustAsia), Scott Rea (eMudhra), Tim Crawford (CPA Canada/WebTrust), Tim Hollebeek (DigiCert) Minutes Bruce read the note well. Minutes of the November 30th meeting were not approved as they were just sent out. Signing Service Ballot Bruce mentioned that Ian wanted to reduce the audit requirements for non-CA signing services.
December 14, 2023 by Corey BonnellAttendees Andrea Holland (VikingCloud), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Ian McMillan (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Martijn Katerbarg (Sectigo), Mohit Kumar (GlobalSign), Richard Kisley (IBM), Roberto Quionones (Intel), Rollin Yu (TrustAsia), Scott Rea (eMudhra), Tim Crawford (CPA Canada/WebTrust), Tim Hollebeek (DigiCert) Minutes Bruce read the note well. Minutes of the November 30th meeting were not approved as they were just sent out. Signing Service Ballot Bruce mentioned that Ian wanted to reduce the audit requirements for non-CA signing services.
2023-11-16 Minutes of the Code Signing Certificate Working Group
November 16, 2023 by Corey BonnellAttendeesAndrea Holland – (VikingCloud), Ben Dewberry – (Keyfactor), Brianca Martin – (Amazon), Bruce Morton – (Entrust), Corey Bonnell – (DigiCert), Dimitris Zacharopoulos – (HARICA), Eva Vansteenberge – (GlobalSign), Ian McMillan – (Microsoft), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Janet Hines – (VikingCloud), Martijn Katerbarg – (Sectigo), Mohit Kumar – (GlobalSign), Richard Kisley – (IBM), Roberto Quionones – (Intel), Rollin Yu – (TrustAsia Technologies Inc), Scott Rea – (eMudhra), Tim Crawford – (CPA Canada/WebTrust)
November 16, 2023 by Corey BonnellAttendeesAndrea Holland – (VikingCloud), Ben Dewberry – (Keyfactor), Brianca Martin – (Amazon), Bruce Morton – (Entrust), Corey Bonnell – (DigiCert), Dimitris Zacharopoulos – (HARICA), Eva Vansteenberge – (GlobalSign), Ian McMillan – (Microsoft), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Janet Hines – (VikingCloud), Martijn Katerbarg – (Sectigo), Mohit Kumar – (GlobalSign), Richard Kisley – (IBM), Roberto Quionones – (Intel), Rollin Yu – (TrustAsia Technologies Inc), Scott Rea – (eMudhra), Tim Crawford – (CPA Canada/WebTrust)
2023-11-02 Minutes of the Code Signing Certificate Working Group
November 2, 2023 by Corey BonnellAttendees Dean Coclin – DigiCert Atsushi Inaba – GlobalSign Ben Dewberry – Keyfactor Bianca Martin – Amazon Bruce Morton – Entrust Eva Vansteenberge – GlobalSign Inigo Barreira – Sectigo Janet Hines – VikingCloud Richard Kisley – IBM Scott Rea – eMudhra Robert Quinones – Intel Tim Crawford – CPA Canada/WebTrust Mohit Kumar – GlobalSign Minutes Assign Minute taker (start recording) Brianca Martin Roll call Completed by Dean Antitrust Compliance Statement
November 2, 2023 by Corey BonnellAttendees Dean Coclin – DigiCert Atsushi Inaba – GlobalSign Ben Dewberry – Keyfactor Bianca Martin – Amazon Bruce Morton – Entrust Eva Vansteenberge – GlobalSign Inigo Barreira – Sectigo Janet Hines – VikingCloud Richard Kisley – IBM Scott Rea – eMudhra Robert Quinones – Intel Tim Crawford – CPA Canada/WebTrust Mohit Kumar – GlobalSign Minutes Assign Minute taker (start recording) Brianca Martin Roll call Completed by Dean Antitrust Compliance Statement
Ballot CSC-20: Restore Version Reference to EV Guidelines
October 30, 2023 by Corey BonnellBallot CSC-20: Restore Version Reference to EV GuidelinesNotice of Review Period The IPR review period ended on December 7, 2023 and no exclusion notices were filed. The final documents, with the effective date being 2023-12-07, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). A complete Draft Guideline subject of this Review Notice is available here.
October 30, 2023 by Corey BonnellBallot CSC-20: Restore Version Reference to EV GuidelinesNotice of Review Period The IPR review period ended on December 7, 2023 and no exclusion notices were filed. The final documents, with the effective date being 2023-12-07, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). A complete Draft Guideline subject of this Review Notice is available here.
2023-10-19 Minutes of the Code Signing Certificate Working Group
October 19, 2023 by Corey BonnellAttendees Aaron Poulsen – Amazon Trust Services Andrea Holland – VikingCloud Atsushi INABA – GlobalSign Bruce Morton – Entrust Corey Bonnell Dean Coclin-DigiCert Dimitris Zacharopoulos (HARICA) Ian McMillan – Microsoft Janet Hines – VikingCloud Richard Kisley – IBM Mohit Kumar – GlobalSign Rollin Yu – TrustAsia Scott Rea – eMudhra Tim Crawford – BDO/WebTrust Minutes Assign Minute taker (start recording) Ian McMillan Roll call Completed by Dean Antitrust Compliance Statement
October 19, 2023 by Corey BonnellAttendees Aaron Poulsen – Amazon Trust Services Andrea Holland – VikingCloud Atsushi INABA – GlobalSign Bruce Morton – Entrust Corey Bonnell Dean Coclin-DigiCert Dimitris Zacharopoulos (HARICA) Ian McMillan – Microsoft Janet Hines – VikingCloud Richard Kisley – IBM Mohit Kumar – GlobalSign Rollin Yu – TrustAsia Scott Rea – eMudhra Tim Crawford – BDO/WebTrust Minutes Assign Minute taker (start recording) Ian McMillan Roll call Completed by Dean Antitrust Compliance Statement
2023-10-05 Minutes of the F2F Code Signing Certificate Working Group
October 5, 2023 by Corey BonnellAttendeesAdam Jones – (Microsoft), Aleksandra Kurosz – (Asseco Data Systems SA (Certum)), Andrea Holland – (VikingCloud), Arvid Vermote – (GlobalSign), Ashish Dhiman – (GlobalSign), Ben Dewberry – (Keyfactor), Ben Wilson – (Mozilla), Brianca Martin – (Amazon), Bruce Morton – (Entrust), Christophe Bonjean – (GlobalSign), Clemens Wanko – (ACAB Council), Corey Bonnell – (DigiCert), Dave Chin – (CPA Canada/WebTrust), Dean Coclin – (DigiCert), Don Sheehy – (CPA Canada/WebTrust), Doug Beattie – (GlobalSign), Ellie Lu – (TrustAsia Technologies, Inc.
October 5, 2023 by Corey BonnellAttendeesAdam Jones – (Microsoft), Aleksandra Kurosz – (Asseco Data Systems SA (Certum)), Andrea Holland – (VikingCloud), Arvid Vermote – (GlobalSign), Ashish Dhiman – (GlobalSign), Ben Dewberry – (Keyfactor), Ben Wilson – (Mozilla), Brianca Martin – (Amazon), Bruce Morton – (Entrust), Christophe Bonjean – (GlobalSign), Clemens Wanko – (ACAB Council), Corey Bonnell – (DigiCert), Dave Chin – (CPA Canada/WebTrust), Dean Coclin – (DigiCert), Don Sheehy – (CPA Canada/WebTrust), Doug Beattie – (GlobalSign), Ellie Lu – (TrustAsia Technologies, Inc.