<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<br>
<br>
<div class="moz-cite-prefix">On 22/7/2021 7:11 μ.μ., Tim Hollebeek
via Cscwg-public wrote:<br>
</div>
<blockquote type="cite"
cite="mid:0100017acefcdff2-872bba92-3081-47eb-80f0-536bed8220b1-000000@email.amazonses.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m hearing from our code signing
validation people that 11.1.1, which refers to non-EV CS
certificates, has a requirement for additional validation for
companies less than three years old (we’ve discussed this
recently), but this requirement is missing for EV code signing
certificates.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is that what we want? It seems very odd
that a higher level of validation has fewer requirements.</p>
</div>
</blockquote>
<br>
Hi Tim,<br>
<br>
For EV CS certificates there is a direct reference to the EV
Guidelines. Specifically, 11.2.7 of the CSBRs point to EVG 11.6.<br>
<br>
EVG 11.6.2 includes language for companies less than three years
old. I recall bringing this up in one of the previous calls where it
was pointed out that it's not necessary for a company to be less
than 3 years old if the other verification methods described in
11.6.2 are used.<br>
<br>
Hope this helps.<br>
<br>
Dimitris.<br>
<br>
<br>
<br>
<blockquote type="cite"
cite="mid:0100017acefcdff2-872bba92-3081-47eb-80f0-536bed8220b1-000000@email.amazonses.com">
<div class="WordSection1">
<p class="MsoNormal"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span
style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#1D1C1D;background:#F8F8F8">-Tim</span><o:p></o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Cscwg-public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Cscwg-public@cabforum.org">Cscwg-public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://lists.cabforum.org/mailman/listinfo/cscwg-public">https://lists.cabforum.org/mailman/listinfo/cscwg-public</a>
</pre>
</blockquote>
<br>
</body>
</html>