<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<br>
Bruce,<br>
<br>
Some of my concerns raised in 2020-12-16 are still unaddressed.<br>
<br>
14.1 still seems to be a bit ambiguous. It points directly to the EV
Guidelines section 14.1 but does it also apply for Employees that
vet non-EV Code Signing? The answer seems to be "yes" which makes
non-EV CS issuers non-conformant as soon as this becomes effective.<br>
<br>
The same applies for 16.2. We need an effective date for non-EV
issuers to migrate to the stronger EV requirements.<br>
<br>
I would be fine with any effective date. 2021-06-01 seems to be an
effective date for some changes regarding the key sizes so CAs
already have their attention to this deadline. I suggest we have
those two requirements phased-in for non-EV code signing certificate
issuers.<br>
<br>
<br>
Dimitris.<br>
<br>
<br>
<div class="moz-cite-prefix">On 4/1/2021 4:52 μ.μ., Bruce Morton via
Cscwg-public wrote:<br>
</div>
<blockquote type="cite"
cite="mid:01000176cde239bc-dd0ceb2b-397b-4c06-b8b8-1d19935e1282-000000@email.amazonses.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:DengXian;
panose-1:2 1 6 0 3 1 1 1 1 1;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:"\@DengXian";
panose-1:2 1 6 0 3 1 1 1 1 1;}@font-face
{font-family:"MS PGothic";
panose-1:2 11 6 0 7 2 5 8 2 4;}@font-face
{font-family:"\@MS PGothic";}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:JA;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><b>Ballot CSC-7: Update to merge EV and
Non-EV clauses<o:p></o:p></b></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Purpose of the Ballot:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The CSC-2 merger of the Code Signing BRs
and the EV Code Signing Guidelines was done without technical
changes. The result is that we have some sections where there
is different text for Non-EV and EV Code Signing certificates.
In many cases there was no reason to have two different
requirements. In other cases, it made sense that they both
have the same requirement. There were of course some items
where EV is different and these clauses were not touched for
now. These items were all discussed in our bi-weekly meetings.
Other minor changes were the adding in a table for document
revision and history and another table for effective dates
within the BRs. There were also some errors corrected from the
merger.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The following motion has been proposed by
Bruce Morton of Entrust, and endorsed by Dimitris
Zacharopoulos of HARICA and Dean Coclin of DigiCert.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--- MOTION BEGINS ---<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This ballot modifies the “Baseline
Requirements for the Issuance and Management of
Publicly‐Trusted Code Signing Certificates" version 2.1
according to the attached redline.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--- MOTION ENDS ---<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The procedure for approval of this ballot
is as follows:<br>
<br>
Discussion (7+ days)<br>
Start Time: 2021-01-04, 10:00 am Eastern Time (US)<br>
End Time: not before 2021-01-11, 10:00 am Eastern Time (US)<br>
<br>
Vote for approval (7 days)<o:p></o:p></p>
<p class="MsoNormal">Start Time: TBD<o:p></o:p></p>
<p class="MsoNormal">End Time: TBD<o:p></o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN"><o:p> </o:p></span></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Cscwg-public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Cscwg-public@cabforum.org">Cscwg-public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://lists.cabforum.org/mailman/listinfo/cscwg-public">https://lists.cabforum.org/mailman/listinfo/cscwg-public</a>
</pre>
</blockquote>
<br>
</body>
</html>