CA/Browser Forum

CA/Browser Forum posts

Posts by tag Code Signing

    Ballot CSC-24 - Timestamping Private Key Protection
    May 29, 2024 by Corey BonnellResults of Voting Yes No Abstain Certificate Issuers DigiCert, Entrust, Globalsign, HARICA, IdenTrust, Sectigo Certificate Consumers There were not enough Certificate Consumer votes to pass the ballot. Therefore, the ballot FAILS. Purpose of the Ballot This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates“ version 3.7 in order to clarify language regarding Timestamp Authority Private Key Protection. The main goals of this ballot are to:
    2024-05-02 Minutes of the Code Signing Certificate Working Group
    May 2, 2024 by Corey BonnellAttendees Andrea Holland (VikingCloud), Atsushi INABA (GlobalSign), Brian Winters (IdenTrust), Brianca Martin (Amazon), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Dimitris (HARICA), Ian McMillan (Microsoft), Inigo Barreira (Sectigo), Janet Hines (VikingCloud), Janet Hines (VikingCloud), Marco Schambach (IdenTrust), Martijn Katerbarg (Sectigo), Mohit Kumar (GlobalSign), Rebecca Kelley (SSL.com), Richard Kisley (IBM), Scott Rea (eMudhra), Thomas Zermeno (SSL.com), Tim Hollebeek (DigiCert), Wangmo Tenzing (Wangmo Tenzing) Minute-taker: Brian Winters Minutes AntiTrust Reminder read by Dean Coclin.
    2024-04-18 Minutes of the Code Signing Certificate Working Group
    April 18, 2024 by Corey BonnellAttendees Andrea Holland (VikingCloud), Ben Dewberry (Keyfactor), Brian Winters (IdenTrust), Bruce Morton (Entrust), Christophe Bonjean (GlobalSign), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Eva Vansteenberge (GlobalSign), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Janet Hines (VikingCloud), Marco Schambach (IdenTrust), Martijn Katerbarg (Sectigo), Nome Huang (TrustAsia), Scott Rea (eMudhra), Thomas Zermeno (SSL.com), Tim Crawford (CPA Canada/WebTrust), Wangmo Tenzing (Wangmo Tenzing) Minute-taker: Corey Bonnell Minutes Bruce read the note well. Bruce said he will call for approval of the F2F minutes at the next meeting.
    2024-04-04 Minutes of the Code Signing Certificate Working Group
    April 4, 2024 by Corey BonnellAgenda Roll Call Antitrust reminder Approve prior meeting minutes – F2F (awaiting draft from Andrea), March 21st (Brianca) Ballot status: Marking the EV CS guidelines obsolete (CSC-23). Do we need an IPR review? Proposed ballots: Remove EV Guideline References Proposed ballot for Time-stamp Requirements update; CSC-24 Continued discussion on Application for Associate Member status from Keyfactor Interested Party application from Wangmo Tenzing (as an individual) Other business Next meeting – April 18th Adjourn Attendees Brian Winters (Identrust), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Ian McMillan (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Marco Schambach - (IdenTrust), Mohit Kumar (GlobalSign), Nome Huang - (TrustAsia), Rollin Yu - (TrustAsia), Scott Rea (eMudhra), Tim Crawford - (CPA Canada/WebTrust), Trevoli Ponds-White - (Amazon)
    Ballot CSC-23 - Marking the EV Code Signing Guidelines SUPERCEDED
    March 26, 2024 by Corey BonnellThe final documents, with the effective date being 2024-03-26, are available here. Results of Voting Yes No Abstain Certificate Issuers Actalis, Asseco (Certum), DigiCert, Entrust, Globalsign, HARICA, IdenTrust, Sectigo, SSL.com Certificate Consumers Microsoft Purpose of the Ballot As agreed at the F2F#61 meeting, this is a ballot to mark the “Guidelines For The Issuance And Management Of Extended Validation Code Signing Certificates” as superceded. The following motion has been proposed by Dimitris Zacharopoulos of HARICA and endorsed by Scott Rea of eMudhra and Martijn Katerbarg of Sectigo.
    2024-03-21 Minutes of the Code Signing Certificate Working Group
    March 21, 2024 by Corey BonnellAgenda Roll Call Antitrust reminder Minutes Ballots Membership Other business Next meeting – April 4th Adjourn Attendees Dean Coclin (DigiCert), Martijn Katerbarg (Sectigo), Brianca Martin (Amazon), Tim Crawford (CPA Canada/WebTrust), Thomas Zermeno (SSL.com), Mohit Kumar (GlobalSign), Scott Rea (eMudhra, Mohit Kumar (GlobalSign), Dimitris Zacharopoulos (HARICA), Atsushi INABA (GlobalSign), Inigo Barreira (Sectigo) Minutes Dean Coclin read the Antitrust policy. Meeting minutes – No minutes to approve. Andrea Holland working on minutes from F2F-New Delhi.
    2024-02-08 Minutes of the Code Signing Certificate Working Group
    February 8, 2024 by Corey BonnellAttendees Abhishek Bhat (eMudhra), Ben Dewberry (Keyfactor), Brianca Martin (Amazon), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Ian McMillan (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Keshava Nagaraju (eMudhra), Mohit Kumar (GlobalSign), Richard Kisley (IBM), Scott Rea (eMudhra), Thomas Zermeno (SSL.com) Minutes Dean read the note well. Meeting minutes for January 25th meeting were approved. Import EVG references into CSBRs Dimitris gave status update for removing references to EVGs.
    2024-01-25 Minutes of the Code Signing Certificate Working Group
    January 25, 2024 by Corey BonnellAttendees Atsushi Inaba, Bhat Abhishek, Brianca Martin, Bruce Morton, Corey Bonnell, Dean Coclin, Ian McMillan, Inigo Barreira, Janet Hines, Keshava N, Lucy Buecking, Martijn Katerbarg, Mohit Kumar, Richard Kisley, Scott Rea, Thomas Zermeno, Tim Crawford, Tim Hollebeek, Trevoli Ponds-White Minutes Roll Call Completed by Dean Antitrust reminder Completed by Dean Approve prior meeting minutes – Jan 11th Meeting Minutes from 2024/01/11 sent out on 2024/01/12, Approved Ballot CSC-21 Signing Service: Status In IPR until 2024/02/18 Ballot CSC-22 Proposed High Risk Ballot: Status In IPR until 2024/02/18 Proposed ballot Remove EV Guideline References status Work done by Dimitris to pull in the necessary text from the EV Guidelines and ready for feedback in https://github.
    Ballots CSC-21 and CSC-22
    January 17, 2024 by Corey BonnellRESULTS OF REVIEW PERIOD The IPR review period ended on February 28, 2024 and no exclusion notices were filed. The final documents, with the effective date being 2024-02-28, are available here. This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice are available here for CSC-21 and here for CSC-22, in red-line draft format.
    Ballot FORUM 20v2 – Amend Code Signing Certificate Working Group Charter
    January 13, 2024 by Dimitris ZacharopoulosThe voting period for Ballot FORUM-020 v.2 - Amend Code Signing Certificate Working Group Charter has ended and the Ballot has Passed. Here are the results: Voting by Certificate Issuers 23 votes total including abstentions 11 Yes votes: CFCA, eMudhra, Entrust, Fastly, GDCA, GoDaddy, HARICA, IdenTrust, Sectigo, SSL.com, Viking Cloud 1 No votes: DigiCert 0 Abstain: 92% of voting Certificate Issuers voted in favor Voting by Certificate Consumers 1 votes total including abstentions
    The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).