<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
HARICA votes "yes" to ballot CSCWG-10.<br>
<br>
<div class="moz-cite-prefix">On 6/8/2021 5:27 μ.μ., Dean Coclin
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CH0PR14MB5010E5C92A8C6E2C542235EF92F39@CH0PR14MB5010.namprd14.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
font-size:10.0pt;
font-family:"Courier New";}span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Voting on Ballot CSCWG-10 ends 7 days after
the start date/time. It will be August 12<sup>th</sup> at
14:00 ET.<o:p></o:p></p>
<p class="MsoNormal"><br>
Dean<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Dimitris Zacharopoulos
(HARICA) <a class="moz-txt-link-rfc2396E" href="mailto:dzacharo@harica.gr"><dzacharo@harica.gr></a> <br>
<b>Sent:</b> Friday, August 6, 2021 1:51 AM<br>
<b>To:</b> Dean Coclin <a class="moz-txt-link-rfc2396E" href="mailto:dean.coclin@digicert.com"><dean.coclin@digicert.com></a>;
<a class="moz-txt-link-abbreviated" href="mailto:cscwg-public@cabforum.org">cscwg-public@cabforum.org</a>; Bruce Morton
<a class="moz-txt-link-rfc2396E" href="mailto:bruce.morton@entrust.com"><bruce.morton@entrust.com></a><br>
<b>Subject:</b> Re: [Cscwg-public] Ballot CSC-10: WebTrust
CSBR v2.0 Audit Criteria- Voting Begins<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">Dean,<br>
<br>
Pleass clearly indicate when the voting ends.<br>
<br>
The section of the original email does not state when the
voting begins or ends.<br>
<br>
<br>
Thanks,<br>
Dimitris.<o:p></o:p></p>
<div>
<p class="MsoNormal">On 5/8/2021 9:06 μ.μ., Dean Coclin via
Cscwg-public wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">Voting begins on Ballot CSC-10 now.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Cscwg-public <a
href="mailto:cscwg-public-bounces@cabforum.org"
moz-do-not-send="true"><cscwg-public-bounces@cabforum.org></a>
<b>On Behalf Of </b>Bruce Morton via Cscwg-public<br>
<b>Sent:</b> Thursday, July 29, 2021 1:38 PM<br>
<b>To:</b> <a href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true">cscwg-public@cabforum.org</a><br>
<b>Subject:</b> [Cscwg-public] Ballot CSC-10: WebTrust
CSBR v2.0 Audit Criteria<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white"><span
style="font-size:10.5pt;color:black">Ballot CSC-10:
WebTrust CSBR v2.0 Audit Criteria</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">Purpose of the
Ballot: For Baseline Requirement for the Issuance and
Management of Publicly-Trusted Code Signing Certificates
v2.3, the purpose is to allow the new WebTrust CSBR 2.0 or
later audit scheme. The ballot allows the older WebTrust
audits to continue for audit periods which start before 1
November 2020. There is no specific start date for the
CSBR 2.0 audit scheme, which allows it also to be used for
audit periods starting before 1 November 2021.</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">The following motion
has been proposed by Bruce Morton of Entrust, and endorsed
by Sebastian Schulz of GlobalSign and Inigo Barreira of
Sectigo.</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">- MOTION BEGINS -</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">Delete the following
text from Section 17.1:</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">1. “WebTrust for CAs
v2.0 or newer” AND “WebTrust for Certification Authorities
– Publicly Trusted Code Signing Certificates v1.0.1 or
newer”; or</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">2. “WebTrust for CAs
v2.0 or newer” AND “WebTrust for Certification Authorities
– Extended Validation Code Signing v1.4.1 or newer”; or</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">3. ETSI EN 319 411-1,
which includes normative references to ETSI EN 319 401
(the latest version of the referenced ETSI documents
should be applied); or</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">4. If a Government CA
is required by its Certificate Policy to use a different
internal audit scheme, it MAY use such scheme provided
that the audit either (a) encompasses all requirements of
one of the above schemes or (b) consists of comparable
criteria that are available for public review.</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">Insert the following
text to Section 17.1:</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">1. For Audit Periods
starting before 1 November 2020, “WebTrust for CAs v2.0 or
newer” AND “WebTrust for Certification Authorities –
Publicly Trusted Code Signing Certificates v1.0.1 or
newer”; or</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">2. For Audit Periods
starting before 1 November 2020, “WebTrust for CAs v2.0 or
newer” AND “WebTrust for Certification Authorities –
Extended Validation Code Signing v1.4.1 or newer”; or</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">3. “WebTrust for CAs
v2.0 or newer” AND “WebTrust for Certification Authorities
– Code Signing Baseline Requirements v2.0 or newer”; or</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">4. ETSI EN 319 411-1,
which includes normative references to ETSI EN 319 401
(the latest version of the referenced ETSI documents
should be applied); or</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">5. If a Government CA
is required by its Certificate Policy to use a different
internal audit scheme, it MAY use such scheme provided
that the audit either (a) encompasses all requirements of
one of the above schemes or (b) consists of comparable
criteria that are available for public review.</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">- MOTION ENDS -</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">The procedure for
approval of this ballot is as follows:</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">Discussion (7 days)
Start Time: 2021-07-29, 14:00 Eastern Time (US) End Time:
not before 2021-08-05, 14:00 Eastern Time (US)</span><o:p></o:p></p>
<p
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style:
initial;text-decoration-color: initial;word-spacing:0px"><span
style="font-size:10.5pt;color:black">Vote for approval (7
days) Start Time:</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>Cscwg-public mailing list<o:p></o:p></pre>
<pre><a href="mailto:Cscwg-public@cabforum.org" moz-do-not-send="true">Cscwg-public@cabforum.org</a><o:p></o:p></pre>
<pre><a href="https://lists.cabforum.org/mailman/listinfo/cscwg-public" moz-do-not-send="true">https://lists.cabforum.org/mailman/listinfo/cscwg-public</a><o:p></o:p></pre>
</blockquote>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</blockquote>
<br>
</body>
</html>