<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-2022-jp"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:"Yu Gothic";
        panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
        {font-family:DengXian;
        panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:"\@DengXian";
        panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
        {font-family:"MS PGothic";
        panose-1:2 11 6 0 7 2 5 8 2 4;}
@font-face
        {font-family:"\@MS PGothic";}
@font-face
        {font-family:"\@Yu Gothic";
        panose-1:2 11 4 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;
        mso-fareast-language:JA;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:#0563C1;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:#954F72;
        text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
        {mso-style-name:msonormal;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"MS PGothic",sans-serif;
        mso-fareast-language:JA;}
span.EmailStyle18
        {mso-style-type:personal;
        font-family:"Yu Gothic",sans-serif;
        color:windowtext;}
span.EmailStyle20
        {mso-style-type:personal-reply;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='mso-fareast-language:ZH-CN'>Moved to public list.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:ZH-CN'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:ZH-CN'>The CSBRs state, $B!H(BThe Timestamp Authority MUST use a new Timestamp Certificate with <span style='background:yellow;mso-highlight:yellow'>a new private key no later than every 15 months to minimize the impact to users in the event that a Timestamp Certificate's private key is compromised.</span> The validity for a Timestamp Certificate must not exceed 135 months. The Timestamp Certificate MUST meet the "Minimum Cryptographic Algorithm and Key Size Requirements" in Appendix A for the communicated time period.$B!I(B As such, the CSBRs are stating that the Timestamp Certificate private key has a lifetime of 15 months for signing. <o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:ZH-CN'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:ZH-CN'>The change will reduce the validity period of the certificate from 135 months to 15 months. The reason is that the Windows application will check the validity period of the Timestamp Certificate. The signature should be trusted if it occurred at a time when the Code Signing certificate was valid (i.e., not expired or revoked). The time will be asserted with the timestamp token.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:ZH-CN'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:ZH-CN'>Bruce.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:ZH-CN'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Atsushi Inaba <atsushi.inaba@globalsign.com> <br><b>Sent:</b> Tuesday, March 2, 2021 2:51 PM<br><b>To:</b> Bruce Morton <Bruce.Morton@entrust.com>; cscwg-management@cabforum.org<br><b>Cc:</b> Atsushi Inaba <atsushi.inaba@globalsign.com><br><b>Subject:</b> [EXTERNAL] [EXTERNAL] RE: F2F Minutes<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"MS PGothic",sans-serif'>WARNING: This email originated outside of Entrust.<br>DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.<o:p></o:p></span></p><div class=MsoNormal align=center style='text-align:center'><span style='font-size:12.0pt;font-family:"MS PGothic",sans-serif'><hr size=2 width="100%" align=center></span></div><p class=MsoNormal><span style='font-family:"Yu Gothic",sans-serif'>Hello Bruce,<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Yu Gothic",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Yu Gothic",sans-serif'>Thank you for sharing the material.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Yu Gothic",sans-serif'><o:p> </o:p></span></p><div><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>Could I make sure the consideration about the validity<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>period of TSA certificate ?  How the private key and<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>certificate of TSA are used when the max validity of TSA<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>certificate is 15 months?  <o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>Sorry, I missed the TSA validity related discussion at<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>last CSCWG meeting.  ( I was dozing off, maybe...)<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>Sorry to trouble you.<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>Atsushi Inaba<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span lang=JA style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B</span><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'><o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>GMO GlobalSign K.K.<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>Business Planning<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>Atsushi Inaba<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>1-2-3, Dogenzaka, Shibuya Ku, Tokyo, Japan<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>150-0043<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>TEL: +81-3-6370-6671<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>FAX: +81-3-6370-6505<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>E-MAIL: <a href="mailto:atsushi.inaba@globalsign.com">atsushi.inaba@globalsign.com</a><o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'><a href="URL:https://jp.globalsign.com/">URL:https://jp.globalsign.com/</a><o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span lang=JA style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B</span><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'><o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>THANK YOU 25 YEARS Internet for Everyone<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span lang=JA style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B</span><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'><o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span lang=JA style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>$B"#(B</span><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'> GMO INTERNET GROUP <span lang=JA>$B"#(B </span><a href="http://www.gmo.jp/">http://www.gmo.jp/</a><o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span lang=JA style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B</span><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'><o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>This e-mail message is intended to be conveyed only to the <o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>designated recipient(s). If you are NOT the intended <o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>recipient(s) of this e-mail, please kindly notify the sender <o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span style='font-size:10.5pt;font-family:"Yu Gothic",sans-serif'>immediately and delete the original message from your system.<o:p></o:p></span></p></div><p class=MsoNormal><span style='font-family:"Yu Gothic",sans-serif'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Cscwg-management <<a href="mailto:cscwg-management-bounces@cabforum.org">cscwg-management-bounces@cabforum.org</a>> <b>On Behalf Of </b>Bruce Morton via Cscwg-management<br><b>Sent:</b> Wednesday, March 3, 2021 3:57 AM<br><b>To:</b> Bruce Morton <<a href="mailto:Bruce.Morton@entrust.com">Bruce.Morton@entrust.com</a>>; <a href="mailto:cscwg-management@cabforum.org">cscwg-management@cabforum.org</a><br><b>Subject:</b> Re: [Cscwg-management] F2F Minutes<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Here are the slides, <a href="https://wiki.cabforum.org/_media/cscwg/f2f_cswg_20210302_v2.pdf">https://wiki.cabforum.org/_media/cscwg/f2f_cswg_20210302_v2.pdf</a>.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Bruce.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Cscwg-management <<a href="mailto:cscwg-management-bounces@cabforum.org">cscwg-management-bounces@cabforum.org</a>> <b>On Behalf Of </b>Bruce Morton via Cscwg-management<br><b>Sent:</b> Tuesday, March 2, 2021 10:42 AM<br><b>To:</b> <a href="mailto:cscwg-management@cabforum.org">cscwg-management@cabforum.org</a><br><b>Subject:</b> [EXTERNAL] [Cscwg-management] F2F Minutes<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>WARNING: This email originated outside of Entrust.<br>DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.<o:p></o:p></p><div class=MsoNormal align=center style='text-align:center'><hr size=2 width="100%" align=center></div><p class=MsoNormal>I will use a presentation for today$B!G(Bs meeting.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Can someone volunteer to take minutes? The slides will really help. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks, Bruce.<o:p></o:p></p></div></body></html>