CA/Browser Forum

CA/Browser Forum posts

Posts by tag Minutes

    2025-10-17 Minutes of the S/MIME Certificate Working Group
    October 17, 2025 by Minutes of SMCWG October 17, 2025 Face-to-Face CABF #66, Warsaw Poland
    2025-10-08 Minutes of the S/MIME Certificate Working Group
    October 8, 2025 by Minutes of SMCWG October 8, 2025 These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.
    2025-09-25 Minutes of the Forum
    September 25, 2025 by Meeting Date: 2025-09-25 Attendees: Aaron Gable (Let’s Encrypt), Aaron Poulsen (Amazon), Abdul Hakeem Putra (MSC Trustgate Sdn Bhd), Adam Jones (Microsoft), Alvin Wang (SHECA), Antti Backman (Telia Company), Ben Wilson (Mozilla), Brianca Martin (Amazon), Chad Dandar (Cisco Systems), Clint Wilson (Apple), Corey Bonnell (DigiCert), Corey Rasmussen (OATI), Dean Coclin (DigiCert), Gregory Tomko (GlobalSign), Hogeun Yoo (NAVER Cloud Trust Services), Inaba Atsushi (GlobalSign), Janet Hines (VikingCloud), Jeanette Snook (Visa), Jun Okura (Cybertrust Japan), Karina Goodley (Microsoft), Kateryna Aleksieieva (Asseco Data Systems SA (Certum)), Kate Xu (TrustAsia), Luis Cervantes (SSL.com), Marcelo Silva (Visa), Martijn Katerbarg (Sectigo), Matthew McPherrin (Let’s Encrypt), Michael Slaughter (Amazon), Michelle Coon (OATI), Nargis Mannan (VikingCloud), Nate Smith (GoDaddy), Nicol So (CommScope), Nome Huang (TrustAsia), Ono Fumiaki (SECOM Trust Systems), Peter Miskovic (Disig), Rollin Yu (TrustAsia), Sandy Balzer (SwissSign), Scott Rea (eMudhra), Sean Huang (TWCA), Sven Rajala (Keyfactor), Tadahiko Ito (SECOM Trust Systems), Tathan Thacker (IdenTrust), Thomas Zermeno (SSL.com), Tim Hollebeek (DigiCert), Tobias Josefowitz (Opera Software AS), Tsung-Min Kuo (Chunghwa Telecom), Wayne Thayer (Fastly).
    2025-09-25 Minutes of the Server Certificate Working Group
    September 25, 2025 by Wayne ThayerMeeting Date: 2025-09-25 Note Well: Read by Wayne Thayer during the SCWG call preceding this call. Review of Agenda: No additions or changes. Approval of Minutes: September 11, 2025 Teleconference (Draft minutes were distributed on 2025-09-11) approved. The minutes from the April 10, 2023 meeting are still pending. Action Item: Dean Coclin will resend the meeting recording to Aaron Poulsen to assist in completing the minutes. Working Group Updates Server Certificate WG (Wayne Thayer): The last meeting discussed the sunset of pre-certificate signing CAs, with the effective date moved to March 15, 2024. Validation Subcommittee (Corey Bonnell): The group discussed definitions for “Authorization Domain Name,” “Base Domain Name,” and CNAME chaining. A future ballot will be drafted to clarify these terms. The next meeting will cover IP address-based validation and F2F meeting topics. Code Signing WG (Martijn Katerbarg): Ballot CSC-31 is in discussion and will be restarted soon with minor changes. S/MIME WG (Martijn Katerbarg): The last meeting was dominated by a discussion on the use of pseudonyms in the Common Name, with differing opinions. A discussion was also held on potentially re-allowing the OU field in S/MIME certificates. NetSec WG (Clint Wilson): The group had a brief discussion on the potential use of AI as a tool for monitoring incidents, ballots, and certificate validation workflows. Clint suggested this is a broader Forum-level topic. Definitions & Glossary WG (Tim Hollebeek): Work is resuming to create a standalone definitions document and resolve circular references. Ballots are being organized. Forum Infrastructure WG (Ben Wilson): The group discussed GitHub governance, including the Contributor License Agreement (CLA) and comment moderation. They concluded that these are policy decisions for the full Forum. IPR Subcommittee (Ben Wilson): A final redlined draft of the IPR Policy v1.4 is complete and will be circulated to the public list for review. Any Other Business: Fall 2026 F2F Meeting: The host and location have been changed. The meeting will now be hosted by eMudhra in Vienna, Austria. Scott Rea from eMudhra requested that members share any known scheduling conflicts for the October 2026 timeframe.
    2025-09-24 Minutes of the S/MIME Certificate Working Group
    September 24, 2025 by Minutes of SMCWG September 24, 2025 These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.
    2025-09-11 Minutes of the Forum
    September 11, 2025 by Martijn KaterbargMeeting Date: 2025-09-11 Attendees: Aaron Gable (Let’s Encrypt), Aaron Poulsen (Amazon), Adam Jones (Microsoft), Adrian Mueller (SwissSign), Ben Wilson (Mozilla), Brianca Martin (Amazon), Bruce Morton (Entrust), Chris Clements (Google), Clint Wilson (Apple), Corey Bonnell (DigiCert), Corey Rasmussen (OATI), Daryn Wright (Apple), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Enrico Entschew (D-TRUST), Eric Kramer (Sectigo), Gregory Tomko (GlobalSign), Hogeun Yoo (NAVER Cloud Trust Services), Inaba Atsushi (GlobalSign), Iñigo Barreira (Sectigo), Jaime Hablutzel (OISTE Foundation), Janet Hines (VikingCloud), Jeanette Snook (Visa), Jeff Ward (CPA Canada/WebTrust), Johnny Reading (GoDaddy), Jun Okura (Cybertrust Japan), Karina Sirota (Microsoft), Kateryna Aleksieieva (Asseco Data Systems SA (Certum)), Kate Xu (TrustAsia), Kiran Tummala (Microsoft), Lucy Buecking (IdenTrust), Luis Cervantes (SSL.com), Mahua Chaudhuri (Microsoft), Marco Schambach (IdenTrust), Martijn Katerbarg (Sectigo), Masaru Sakamoto (Cybertrust Japan), Matthew McPherrin (Let’s Encrypt), Michelle Coon (OATI), Mrugesh Chandarana (IdenTrust), Nargis Mannan (VikingCloud), Nate Smith (GoDaddy), Nicol So (CommScope), Nome Huang (TrustAsia), Ono Fumiaki (SECOM Trust Systems), Peter Miskovic (Disig), Rebecca Kelly (SSL.com), Rich Smith (DigiCert), Rollin Yu (TrustAsia), Ryan Dickson (Google), Sean Huang (TWCA), Sven Rajala (Keyfactor), Tathan Thacker (IdenTrust), Thomas Zermeno (SSL.com), Tim Callan (Sectigo), Tim Hollebeek (DigiCert), Tobias Josefowitz (Opera Software AS), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Wiktoria Więckowska (Asseco Data Systems SA (Certum))
    2025-09-11 Minutes of the Server Certificate Working Group
    September 11, 2025 by Wayne ThayerMeeting Date: 2025-09-11 Note Well: Read by Dimitris Zacharopoulos. Review of Agenda: No additions or changes. Approval of Minutes: July 17, 2025 Teleconference (Draft minutes were distributed on 2025-09-01) approved.
    2025-09-10 Minutes of the S/MIME Certificate Working Group
    September 10, 2025 by Minutes of SMCWG These are the Minutes of the meeting for September 10, 2025. Corrections and clarifications where needed are encouraged by reply.
    2025-08-28 Minutes of the Forum
    August 28, 2025 by CA/B Forum Teleconference - 2025-08-281. Roll Call For attendance, see Item 15 below. 2. Review of Agenda The agenda was reviewed. One additional item was added under Any Other Business: the notice from Buypass CA regarding the cessation of TLS issuance. 3. Approval of Minutes Minutes of 31 July 2025 plenary, prepared by Aaron Gable, were approved without objection. Minutes of 17 July 2025, prepared by Scott Rea, are still being finalized. Minutes of 10 April 2025, which were to be prepared by Trev, remain outstanding. Aaron Poulsen noted that he has the recording and can assist with preparing them. 4. Server Certificate Working Group update Dimitris Zacharopoulos reported that the WG had continued its work on ballots and discussions of DNSSEC requirements. He noted that Sectigo has published P-521 keys to its GitHub repository. 5. Code Signing Certificate Working Group update Martijn Katerbarg reported that the ballot to reduce the validity period now has two endorsers and is progressing. He also described plans for a presentation at the Warsaw face-to-face meeting by representatives of the Canadian police on malware and its impacts. A guest contributor accompanying them has requested anonymity in the public minutes. The group agreed that the individual’s name would be redacted. 6. S/MIME Certificate Working Group update Martijn, serving as vice chair, reported that SMC-013 (PQC for S/MIME) has been adopted and the IPR review period has closed. Work continues on a charter update and discussions relating to SMC-014 (DNSSEC for CA records) and the treatment of pseudonyms. 7. NetSec Working Group update Clint Wilson reported that the WG has begun considering possible policies concerning the use of artificial intelligence in WebPKI. The group also continues to explore issues related to the use of cloud services. 8. Definitions and Glossary Working Group Tim Callan explained that the WG has been slowed by limited resources, but Sectigo has now assigned a project manager to drive progress. A kickoff is scheduled, and activity is expected to increase. 9. Forum Infrastructure Subcommittee update Jos Purvis reported that all e-mail processing for cabforum.org has been migrated to Google Workspace, resolving prior issues caused by the split between systems. The old mail server will be retired after list archives are transferred. The Subcommittee is also clarifying the process for saving IPR policy agreements online, particularly from Interested Parties, to ensure consistent handling. 10. Intellectual Property Rights Subcommittee Ben Wilson reported that the Subcommittee had reviewed a request from Deutsche Telekom to exclude affiliates from coverage under the IPR Policy Agreement. This request was rejected as inconsistent with the IPR Policy Agreement signed by all other members. Deutsche Telekom has been informed. The Subcommittee is also finalizing proposed updates to the IPR Policy, which will soon be circulated for member review. The Subcommittee also discussed Contributor License Agreements (CLA) and possible GitHub configurations to ensure alignment with the IPR policy. The Forum Infrastructure Subcommittee would be asked to look into this. 11. Bylaws Changes No report was provided. 12. Any Other Business The Forum discussed whether Deutsche Telekom should continue to attend face-to-face meetings without signing the IPR Policy Agreement. It was agreed that they may attend the October 2025 meeting in Warsaw, but that their continued participation will need to be reconsidered if they remain unwilling to sign. Dean Coclin reminded members that registration for the Warsaw meeting is open, with capacity limited to 75 participants and a registration deadline of 15 September 2025. Dean also informed members of Buypass CA’s notice that it will cease issuing TLS certificates by October 2025, citing commercial reasons. Buypass will continue to provide revocation and status services for previously issued certificates until their expiration or revocation, no later than October 2026, and will remain a Forum member until that time. However, it was also mentioned that Buypass might still be intending to issue other types of publicly trusted certificates. Finally, members were reminded that the agenda for the Warsaw plenary includes a session for CA presentations. Interested CAs should notify the Chair of their proposed topics. 13. Next Call The next plenary teleconference will be held on 11 September 2025. 14. Adjourn The meeting was adjourned. Attendees Aaron Gable (Let’s Encrypt), Aaron Poulsen (Amazon), Adrian Mueller (SwissSign), Adriano Santoni (Actalis S.p.A.), Alvin Wang (SHECA), Ben Wilson (Mozilla), Brianca Martin (Amazon), Chris Clements (Google), Clint Wilson (Apple), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Enrico Entschew (D-TRUST), Eric Kramer (Sectigo), Gregory Tomko (GlobalSign), Inaba Atsushi (GlobalSign), Iñigo Barreira (Sectigo), Jaime Hablutzel (OISTE Foundation), Johnny Reading (GoDaddy), Jos Purvis (Fastly), Jun Okura (Cybertrust Japan), Karina Sirota (Microsoft), Kateryna Aleksieieva (Asseco Data Systems SA (Certum)), Kate Xu (TrustAsia), Kiran Tummala (Microsoft), Lucy Buecking (IdenTrust), Luis Cervantes (SSL.com), Marco Schambach (IdenTrust), Martijn Katerbarg (Sectigo), Michael Slaughter (Amazon), Michelle Coon (OATI), Miguel Sanchez (Google), Mohd Redha Hamzah (Pos Digicert Sdn. Bhd.), Mrugesh Chandarana (IdenTrust), Nargis Mannan (VikingCloud), Nate Smith (GoDaddy), Nicol So (CommScope), Nome Huang (TrustAsia), Ono Fumiaki (SECOM Trust Systems), Peter Miskovic (Disig), Rebecca Kelly (SSL.com), Roman Fischer (SwissSign), Ryan Dickson (Google), Sandy Balzer (SwissSign), Scott Rea (eMudhra), Sean Huang (TWCA), Stephen Davidson (DigiCert), Tadahiko Ito (SECOM Trust Systems), Tathan Thacker (IdenTrust), Thomas Zermeno (SSL.com), Tim Callan (Sectigo), Tobias Josefowitz (Opera Software AS), Tsung-Min Kuo (Chunghwa Telecom), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Wiktoria Więckowska (Asseco Data Systems SA (Certum)
    2025-08-28 Minutes of the Server Certificate Working Group
    August 28, 2025 by Wayne ThayerFinal Minutes – Server Certificate Working Group Teleconference (28 August 2025)1. Roll Call For attendance, see Item 11 below.
    The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).