CA/Browser Forum posts
Posts by tag Code Signing
2022-08-11 Minutes of the Code Signing Certificate Working Group
August 11, 2022 by Corey BonnellAttendees Atsushi Inaba, Bruce Morton, Corey Bonnell, Dean Coclin, Ian McMillan, Lynn Jeun, Martijn Katerbarg, Michael Sykes, Tomas Gustavsson Minutes Anti-Trust Statement read by Dean Prior meeting minutes fron July 28, 2022 are approved without objection or comment. CSC-15 Ballot Status Voting period closed and Dean will be announcing the results. Next steps to send out for IPR. Signing Service Proposed Ballot Update Bruce is waiting for the CSC-15 ballot to clear before proceeding.
August 11, 2022 by Corey BonnellAttendees Atsushi Inaba, Bruce Morton, Corey Bonnell, Dean Coclin, Ian McMillan, Lynn Jeun, Martijn Katerbarg, Michael Sykes, Tomas Gustavsson Minutes Anti-Trust Statement read by Dean Prior meeting minutes fron July 28, 2022 are approved without objection or comment. CSC-15 Ballot Status Voting period closed and Dean will be announcing the results. Next steps to send out for IPR. Signing Service Proposed Ballot Update Bruce is waiting for the CSC-15 ballot to clear before proceeding.
2022-07-28 Minutes of the Code Signing Certificate Working Group
July 28, 2022 by Corey BonnellAttendees Andrea Holland (SecureTrust), Atsushi Inaba (GlobalSign), Bruce Morton (Entrust), Dean Coclin (DigiCert), Joanna Fox (TrustCor), Martijn Katerbarg (Sectigo), Michael Sykes (SSL.com), Mohit Kumar (GlobalSign), Tim Crawford (CPA Canada/WebTrust) Minutes Antitrust Statement: Read by Dean Coclin Minute Taker: Tim Crawford No comments on minutes from 7/14/2022, minutes approved Welcome back Bruce Membership Visa has applied as an interested party. It was noted Visa is a CAB Forum member and an agreement is in place.
July 28, 2022 by Corey BonnellAttendees Andrea Holland (SecureTrust), Atsushi Inaba (GlobalSign), Bruce Morton (Entrust), Dean Coclin (DigiCert), Joanna Fox (TrustCor), Martijn Katerbarg (Sectigo), Michael Sykes (SSL.com), Mohit Kumar (GlobalSign), Tim Crawford (CPA Canada/WebTrust) Minutes Antitrust Statement: Read by Dean Coclin Minute Taker: Tim Crawford No comments on minutes from 7/14/2022, minutes approved Welcome back Bruce Membership Visa has applied as an interested party. It was noted Visa is a CAB Forum member and an agreement is in place.
2022-07-14 Minutes of the Code Signing Certificate Working Group
July 14, 2022 by Corey BonnellAttendees Atsushi Inaba, Corey Bonnell, Dean Coclin, Inigo Barreira, Janet Hines, Joanna Fox, Michael Sykes, Roberto Quinones, Tim Crawford, and Tim Hollebeek Minutes Minute Taker: Janet Antitrust statement was read by Dean Coclin Approved minutes from June 30, 2022 meeting Signing service discussion No additional discussion – Waiting on Bruce to get back. Timestamping Corey will work on a draft ballot for the Pandoc typographical errors. We will need further discussion before we begin a draft ballot on timestamping.
July 14, 2022 by Corey BonnellAttendees Atsushi Inaba, Corey Bonnell, Dean Coclin, Inigo Barreira, Janet Hines, Joanna Fox, Michael Sykes, Roberto Quinones, Tim Crawford, and Tim Hollebeek Minutes Minute Taker: Janet Antitrust statement was read by Dean Coclin Approved minutes from June 30, 2022 meeting Signing service discussion No additional discussion – Waiting on Bruce to get back. Timestamping Corey will work on a draft ballot for the Pandoc typographical errors. We will need further discussion before we begin a draft ballot on timestamping.
2022-06-30 Minutes of the Code Signing Certificate Working Group
June 30, 2022 by Corey BonnellAttendees Andrea Holland (SecureTrust), Atsushi Inaba (GlobalSign), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Ian McMillan (Microsoft), Inigo Barreira (Sectigo), Janet Hines (SecureTrust), Joanna Fox (TrustCor), Martijn Katerbarg (Sectigo), Roberto Quinones (Intel), Tim Crawford (CPA Canada/WebTrust) Minutes Antitrust Statement: Read by Dean Coclin Minute Taker: Martijn Katerbarg Minutes of the June F2F meeting were approved Signing Service discussion (continued) With Bruce being absent from this meeting and having worked a great deal on this item, the group decided to hold off on discussing this item.
June 30, 2022 by Corey BonnellAttendees Andrea Holland (SecureTrust), Atsushi Inaba (GlobalSign), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Ian McMillan (Microsoft), Inigo Barreira (Sectigo), Janet Hines (SecureTrust), Joanna Fox (TrustCor), Martijn Katerbarg (Sectigo), Roberto Quinones (Intel), Tim Crawford (CPA Canada/WebTrust) Minutes Antitrust Statement: Read by Dean Coclin Minute Taker: Martijn Katerbarg Minutes of the June F2F meeting were approved Signing Service discussion (continued) With Bruce being absent from this meeting and having worked a great deal on this item, the group decided to hold off on discussing this item.
Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework
May 26, 2022 by Corey BonnellResults of Review Period (Mailing list post is available here.) The IPR review period ended on June 25, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-06-29, are available here. Summary of Review Ballot for Review Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework Start of Review Period 26 May 2022 at 18:00 UTC End of Review Period 25 June 2022 at 18:00 UTC Members with any Essential Claim(s) to exclude must forward a written Notice to Exclude Essential Claims to the Working Group Chair (email to ) and also submit a copy to the CA/B Forum public mailing list (email to ) before the end of the Review Period.
May 26, 2022 by Corey BonnellResults of Review Period (Mailing list post is available here.) The IPR review period ended on June 25, 2022 and no exclusion notices were filed. The final documents, with the effective date being 2022-06-29, are available here. Summary of Review Ballot for Review Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework Start of Review Period 26 May 2022 at 18:00 UTC End of Review Period 25 June 2022 at 18:00 UTC Members with any Essential Claim(s) to exclude must forward a written Notice to Exclude Essential Claims to the Working Group Chair (email to ) and also submit a copy to the CA/B Forum public mailing list (email to ) before the end of the Review Period.
2022-05-19 Minutes of the Code Signing Certificate Working Group
May 19, 2022 by Corey BonnellAttendees Atsushi Inaba, Bruce Morton, Corey Bonnell, Dean Coclin, Dimitris Zacharopoulos, Ian McMillan, Inigo Barreira, Joanna Fox, Michael Sykes, Tomas Gustavsson Minutes Minute-taker: Corey Dean read the anti-trust statement. Minutes of the 2022-05-05 meeting were approved. CSC-13 This ballot went through IPR and v2.8 has been published with an effective date of May 9th. The normative changes in the ballot are effective November 15th. CSC-14 Voting Bruce noted that we have already reached quorum.
May 19, 2022 by Corey BonnellAttendees Atsushi Inaba, Bruce Morton, Corey Bonnell, Dean Coclin, Dimitris Zacharopoulos, Ian McMillan, Inigo Barreira, Joanna Fox, Michael Sykes, Tomas Gustavsson Minutes Minute-taker: Corey Dean read the anti-trust statement. Minutes of the 2022-05-05 meeting were approved. CSC-13 This ballot went through IPR and v2.8 has been published with an effective date of May 9th. The normative changes in the ballot are effective November 15th. CSC-14 Voting Bruce noted that we have already reached quorum.
2022-05-05 Minutes of the Code Signing Certificate Working Group
May 5, 2022 by Corey BonnellAttendees Atsushi Inaba, Ben Wilson, Bruce Morton, Corey Bonnell, Dean Coclin, Ian McMillan, Joanna Fox, Martijn Katerbarg, Michael Sykes, Tim Crawford Minutes Minute Taker: Dean Antitrust statement was read Prior meeting minutes of April 21st, approved. CSC-13 Subscriber Private Key Protection Ballot (Bruce) No IPR review responses have been received and once period ends tomorrow, a notice will go out to all. CSC-14 Format changes (Corey) No issues have been flagged with the ballot so the discussion period will be kicked off next week.
May 5, 2022 by Corey BonnellAttendees Atsushi Inaba, Ben Wilson, Bruce Morton, Corey Bonnell, Dean Coclin, Ian McMillan, Joanna Fox, Martijn Katerbarg, Michael Sykes, Tim Crawford Minutes Minute Taker: Dean Antitrust statement was read Prior meeting minutes of April 21st, approved. CSC-13 Subscriber Private Key Protection Ballot (Bruce) No IPR review responses have been received and once period ends tomorrow, a notice will go out to all. CSC-14 Format changes (Corey) No issues have been flagged with the ballot so the discussion period will be kicked off next week.
2022-04-21 Minutes of the Code Signing Certificate Working Group
April 21, 2022 by Corey BonnellAttendees Atsushi Inaba (GlobalSign), Ben Wilson (Mozilla), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dimitris Zacharopoulos (HARICA), Ian McMillan (Microsoft), Inigo Barreira (Sectigo), Joanna Fox (TrustCor), Martijn Katerbarg (Sectigo), Michael Sykes (SSL.com), Roberto Quinones (Intel), Tim Crawford (CPA Canada/WebTrust) Minutes Antitrust Statement: Read by Bruce Morton Minute Taker: Martijn Katerbarg Minutes of the April 7th meeting were approved. Ballot for CSBR Format Change There was a discussion on when the discussion period for the format change should start and whether we should wait until the IPR review period of ballot CSC-13 has completed or not.
April 21, 2022 by Corey BonnellAttendees Atsushi Inaba (GlobalSign), Ben Wilson (Mozilla), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dimitris Zacharopoulos (HARICA), Ian McMillan (Microsoft), Inigo Barreira (Sectigo), Joanna Fox (TrustCor), Martijn Katerbarg (Sectigo), Michael Sykes (SSL.com), Roberto Quinones (Intel), Tim Crawford (CPA Canada/WebTrust) Minutes Antitrust Statement: Read by Bruce Morton Minute Taker: Martijn Katerbarg Minutes of the April 7th meeting were approved. Ballot for CSBR Format Change There was a discussion on when the discussion period for the format change should start and whether we should wait until the IPR review period of ballot CSC-13 has completed or not.
2022-04-07 Minutes of the Code Signing Certificate Working Group
April 7, 2022 by Corey BonnellAttendees Andrea Holland (SecureTrust), Atsushi Inaba (GlobalSign), Bruce Morton (Entrust), Corey Bonell (DigiCert), Dean Coclin (DigiCert), Ian McMillan (Microsoft), Inigo Barreira (Sectigo), Joanna Fox (TrustCor), Mohit Kumar (GlobalSign), Tim Crawford (CPA Canada/WebTrust) Minute-taker: Tim Crawford Minutes Antitrust Statement: Read by Dean Minutes for the March 24th meetings were approved Interested party application from Insta Oy No comment was offered, and the application was accepted. Updates on Ballot CSC-13 – Private Key Protection Bruce mentioned that the ballot received eight (8) votes and is deemed to have passed.
April 7, 2022 by Corey BonnellAttendees Andrea Holland (SecureTrust), Atsushi Inaba (GlobalSign), Bruce Morton (Entrust), Corey Bonell (DigiCert), Dean Coclin (DigiCert), Ian McMillan (Microsoft), Inigo Barreira (Sectigo), Joanna Fox (TrustCor), Mohit Kumar (GlobalSign), Tim Crawford (CPA Canada/WebTrust) Minute-taker: Tim Crawford Minutes Antitrust Statement: Read by Dean Minutes for the March 24th meetings were approved Interested party application from Insta Oy No comment was offered, and the application was accepted. Updates on Ballot CSC-13 – Private Key Protection Bruce mentioned that the ballot received eight (8) votes and is deemed to have passed.
Ballot CSC-13 – Update to Subscriber Key Protection Requirements
April 6, 2022 by Corey BonnellResults of Review Period (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2022-05-09, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco), DigiCert, eMudhra, Entrust, HARICA, Sectigo, SSL.com Certificate Consumers Microsoft The ballot has PASSED. Purpose of the Ballot Update the subscriber private key protection requirements in the Baseline Requirement for the Issuance and Management of Publicly-Trusted Code Signing Certificates v2.
April 6, 2022 by Corey BonnellResults of Review Period (Mailing list post is available here.) The review period has ended and no exclusion notices were filed. The final documents, with the effective date being 2022-05-09, are available here. Results of Voting (Mailing list post is available here.) Yes No Abstain Certificate Issuers Certum (Asseco), DigiCert, eMudhra, Entrust, HARICA, Sectigo, SSL.com Certificate Consumers Microsoft The ballot has PASSED. Purpose of the Ballot Update the subscriber private key protection requirements in the Baseline Requirement for the Issuance and Management of Publicly-Trusted Code Signing Certificates v2.