[Cscwg-public] Importing BRs to CSBRs

Dimitris Zacharopoulos (HARICA) dzacharo at harica.gr
Thu Jul 13 08:52:12 UTC 2023



On 11/7/2023 6:34 μ.μ., Tim Hollebeek wrote:
>
> Thanks for all this work.  I dropped a nit or two into a review, but 
> would be happy to endorse.
>

Thanks Tim. Both have been addressed (I hope). I'll wait a couple more 
days for any additional feedback and will kick off the discussion period 
on Monday. I also updated the page on the wiki.

Best regards,
Dimitris.

> -Tim
>
> *From:*Cscwg-public <cscwg-public-bounces at cabforum.org> *On Behalf Of 
> *Dimitris Zacharopoulos (HARICA) via Cscwg-public
> *Sent:* Tuesday, July 11, 2023 5:22 AM
> *To:* cscwg-public at cabforum.org
> *Subject:* Re: [Cscwg-public] Importing BRs to CSBRs
>
> Dear Members,
>
> With CSBR version 3.3 released, we can proceed with the ballot to 
> import the TLS BRs into the CSBRs. The draft ballot language is 
> available on the wiki 
> <https://url.avanan.click/v2/___https:/wiki.cabforum.org/books/code-signing-certificate-wg/page/csc-19-draft-remove-ssl-br-references___.YXAzOmRpZ2ljZXJ0OmE6bzoxMTViMWE5ZGYzNWQ5ZDQ4ODgxZmNhYjNlMDM2MzU4NTo2OjU0OTM6ZTUxNzMzOWE1ZTE0NDdhMDJmYWIzMjRmODBlNmRmYzM3YmM1NmJlYjU0NjRhY2U1Yjg4MDBiMTAzYWE1MmRhNjpoOkY> 
> and I am still looking for one more endorser.
>
> You can check out the redline following this link:
>
>   * https://github.com/cabforum/code-signing/pull/16/files#diff-808316a5bc581afeb9178b30e20a9ab01f7d62f9
>     <https://url.avanan.click/v2/___https:/github.com/cabforum/code-signing/pull/16/files%23diff-808316a5bc581afeb9178b30e20a9ab01f7d62f9___.YXAzOmRpZ2ljZXJ0OmE6bzoxMTViMWE5ZGYzNWQ5ZDQ4ODgxZmNhYjNlMDM2MzU4NTo2OjhjMTY6ZjBlMGNjYmY0OGI1NzZlMWQwZTNiYjQ1OGM2YTVlMjEzODBjNmM1NzI2N2EyMzNjOTc5YzYwMDZjOWIwOGJjMDpoOkY>
>
>
> If you prefer to send comments directly to the pull request, please 
> use https://github.com/cabforum/code-signing/pull/16 
> <https://url.avanan.click/v2/___https:/github.com/cabforum/code-signing/pull/16___.YXAzOmRpZ2ljZXJ0OmE6bzoxMTViMWE5ZGYzNWQ5ZDQ4ODgxZmNhYjNlMDM2MzU4NTo2OjMwOTM6ZDEyZTQ4ZGJjNWE3NGUyMjYxYmU2YmZhODViNDFjNGQyYjM2NGUxYjJhNzA2YTg2NTY0OTEzMmUyNzU1M2Y2ZTpoOkY>.
>
>
> Thank you,
> Dimitris.
>
> On 5/4/2023 12:42 μ.μ., Dimitris Zacharopoulos (HARICA) wrote:
>
>     Dear Members,
>
>     I made some further edits to the imported requirements from the
>     TLS BRs. We can discuss tomorrow at the meeting and if there is
>     agreement we can remove the editorial notes. Please review using
>     the Pull Request link
>     <https://url.avanan.click/v2/___https:/github.com/cabforum/code-signing/pull/16/files___.YXAzOmRpZ2ljZXJ0OmE6bzoxMTViMWE5ZGYzNWQ5ZDQ4ODgxZmNhYjNlMDM2MzU4NTo2OmFlOWI6ODg1MGI3MmMwMDIyZGU4NTIxZDRhZjFjMGE1MWI3ZmQzNzVhM2E5Mzg4NTk1OTg4MjU1ZjJiMjQ4MDQ2M2VhNDpoOkY>.
>
>     There is a task that needs to be performed throughout the entire
>     document, and that is to scan for capitalized terms and
>     check/confirm that these terms exist in section 1.6.1
>     (Definitions). If they do not exist, we must highlight them and
>     then decide whether the term is ok to remain without capitalized
>     letters or if we have to create a definition for them.
>
>     Is there anyone that would like to volunteer to work on this
>     specific task?
>
>
>     Best regards,
>     Dimitris.
>
>
>     On 15/12/2022 7:34 μ.μ., Dimitris Zacharopoulos (HARICA) wrote:
>
>         Martijn,
>
>         As we discussed on today's call, we can start reviewing the
>         EDITOR comments at the upcoming meetings until we address all
>         of them.
>
>         Of course Members can comment in parallel on GitHub.
>
>         For convenience, I created a Pull Request
>         <https://url.avanan.click/v2/___https:/github.com/cabforum/code-signing/pull/16___.YXAzOmRpZ2ljZXJ0OmE6bzoxMTViMWE5ZGYzNWQ5ZDQ4ODgxZmNhYjNlMDM2MzU4NTo2OmFmYWM6NmQzODJjYTEwNTJlYTNjYjdmOWM5MmVlZTBhNDQxMTVmMWRkZTkzODk3MzZiNzU3NGRmMzNiOGVlYjUyZTQwZDpoOkY>
>         for people to review more easily against the current CSBRs.
>
>         Thanks,
>         Dimitris.
>
>         On 12/8/2022 2:40 PM, Martijn Katerbarg wrote:
>
>             I’ve continued from the point where Dimitris left off.
>             I’ve also given it another pass and updated a few more
>             sections. Every update has an editor note added to it, and
>             is now available in GitHub.
>
>             The one section remaining to be done, is section
>             7.1.4.2.3.  This section references BR Section 3.2 a
>             number of times, so we appear to need to do a complete
>             comparison of CSCBR Section 3.2 and BR Section 3.2, and
>             import anything that’s “missing but relevant”.
>
>             I’ve also discovered 2 potential conflicts, which are
>             called out in the text.  I’ll add github comments on these
>             so we they become more visible to everyone, and people can
>             chime in on the items easily.
>
>             Regards,
>
>             Martijn
>
>             *From:*Cscwg-public <cscwg-public-bounces at cabforum.org>
>             <mailto:cscwg-public-bounces at cabforum.org> *On Behalf Of
>             *Martijn Katerbarg via Cscwg-public
>             *Sent:* Monday, 5 December 2022 11:02
>             *To:* Dimitris Zacharopoulos (HARICA) <dzacharo at harica.gr>
>             <mailto:dzacharo at harica.gr>; cscwg-public at cabforum.org
>             *Subject:* Re: [Cscwg-public] Importing BRs to CSBRs
>
>             CAUTION: This email originated from outside of the
>             organization. Do not click links or open attachments
>             unless you recognize the sender and know the content is safe.
>
>             Dimitris, I’ll allot time this week to proceed from 7.1.4
>
>             *From:*Cscwg-public <cscwg-public-bounces at cabforum.org>
>             *On Behalf Of *Dimitris Zacharopoulos (HARICA) via
>             Cscwg-public
>             *Sent:* Monday, 5 December 2022 10:34
>             *To:* cscwg-public at cabforum.org
>             *Subject:* Re: [Cscwg-public] Importing BRs to CSBRs
>
>             CAUTION: This email originated from outside of the
>             organization. Do not click links or open attachments
>             unless you recognize the sender and know the content is safe.
>
>
>             I continued to work in this project and imported
>             requirements all the way to section 7.1.4 (without working
>             on 7.1.4) and would appreciate it if someone could pick up
>             from there. The remaining references to a "BR Section" are
>             very few but at the same time the editor must check every
>             BR section that was not explicitly referenced by the CSBRs
>             and import that language.
>
>             Please check for additional comments/concerns that need to
>             be addressed, marked with the word "EDITOR".
>
>
>             Thanks,
>             Dimitris.
>
>             On 30/10/2022 1:21 μ.μ., Dimitris Zacharopoulos (HARICA)
>             via Cscwg-public wrote:
>
>
>                 Dear friends,
>
>                 With the publication of CSBRs version 3.2, I created a
>                 branch and started importing TLS BRs (already
>                 completed sections 1 and 2). You can monitor the
>                 progress in:
>
>                  1. https://url.avanan.click/v2/___https://github.com/cabforum/code-signing/blob/importTLSBRrefs/docs/CSBR.md___.YXAzOmRpZ2ljZXJ0OmE6bzoxMTViMWE5ZGYzNWQ5ZDQ4ODgxZmNhYjNlMDM2MzU4NTo2Ojg3MzI6MDNlNjIwN2M2ZmUwOGE3ZTUwMzM4MDlkNGVjZThmNDAzYTlkMDc5YWRmMDhlYTI2ZTUzZGFjYzIwMTE3YmUyYTp0OkY
>                     <https://url.avanan.click/v2/___https:/github.com/cabforum/code-signing/blob/importTLSBRrefs/docs/CSBR.md___.YXAzOmRpZ2ljZXJ0OmE6bzoxMTViMWE5ZGYzNWQ5ZDQ4ODgxZmNhYjNlMDM2MzU4NTo2OjkyNjI6N2Q4NTQ4ZmFjMzUzMjk4ZDJhMzI1MDYyM2NlMWFlYjRjZTFiODc4Zjc4NzQyNjUxZmFjMzYwMDA0MGI3MTJlNDpoOkY>
>
>                 Since we will make a full pass of the TLS BRs and
>                 EVGs, I believe it is a good opportunity to import the
>                 requirements from*the latest TLS BRs/EVGs*
>                 (1.8.4/1.7.9 respectively). If we encounter some
>                 controversial requirements between the latest versions
>                 and the ones currently referenced that need more
>                 discussion, we will bring this back to the WG to
>                 discuss/resolve.
>
>                 Digicert (Corey) and Sectigo (Martijn) have already
>                 declared their intent to assist in this process. If
>                 there are more volunteers, please reply to this thread
>                 so we can possibly break-down the sections.
>
>                 Please let me know if you have any questions or concerns.
>
>                 Best regards,
>
>                 Dimitris.
>
>                 _______________________________________________
>
>                 Cscwg-public mailing list
>
>                 Cscwg-public at cabforum.org
>
>                 https://lists.cabforum.org/mailman/listinfo/cscwg-public  <https://url.avanan.click/v2/___https:/lists.cabforum.org/mailman/listinfo/cscwg-public___.YXAzOmRpZ2ljZXJ0OmE6bzoxMTViMWE5ZGYzNWQ5ZDQ4ODgxZmNhYjNlMDM2MzU4NTo2OjdiNDU6ZGFkYWVhNGNmMTljZGU0MTY3MDI2YzQ5MGIzZmEzMjI0MDVmNmZhMWM2NjMwOGEwNjQ2ZWE0OGY2YTAzOWE3NTpoOkY>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20230713/f33f07e1/attachment-0001.html>


More information about the Cscwg-public mailing list