<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal>Voting ends today at 14:00 ET. Please submit your votes by then.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks,<o:p></o:p></p><p class=MsoNormal>Dean<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Cscwg-public <cscwg-public-bounces@cabforum.org> <b>On Behalf Of </b>Dean Coclin via Cscwg-public<br><b>Sent:</b> Friday, August 6, 2021 10:27 AM<br><b>To:</b> Dimitris Zacharopoulos (HARICA) <dzacharo@harica.gr>; cscwg-public@cabforum.org; Bruce Morton <bruce.morton@entrust.com><br><b>Subject:</b> Re: [Cscwg-public] Ballot CSC-10: WebTrust CSBR v2.0 Audit Criteria- Voting Begins<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Voting on Ballot CSCWG-10 ends 7 days after the start date/time. It will be August 12<sup>th</sup> at 14:00 ET.<o:p></o:p></p><p class=MsoNormal><br>Dean<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Dimitris Zacharopoulos (HARICA) <<a href="mailto:dzacharo@harica.gr">dzacharo@harica.gr</a>> <br><b>Sent:</b> Friday, August 6, 2021 1:51 AM<br><b>To:</b> Dean Coclin <<a href="mailto:dean.coclin@digicert.com">dean.coclin@digicert.com</a>>; <a href="mailto:cscwg-public@cabforum.org">cscwg-public@cabforum.org</a>; Bruce Morton <<a href="mailto:bruce.morton@entrust.com">bruce.morton@entrust.com</a>><br><b>Subject:</b> Re: [Cscwg-public] Ballot CSC-10: WebTrust CSBR v2.0 Audit Criteria- Voting Begins<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'>Dean,<br><br>Pleass clearly indicate when the voting ends.<br><br>The section of the original email does not state when the voting begins or ends.<br><br><br>Thanks,<br>Dimitris.<o:p></o:p></p><div><p class=MsoNormal>On 5/8/2021 9:06 μ.μ., Dean Coclin via Cscwg-public wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>Voting begins on Ballot CSC-10 now.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Cscwg-public <a href="mailto:cscwg-public-bounces@cabforum.org"><cscwg-public-bounces@cabforum.org></a> <b>On Behalf Of </b>Bruce Morton via Cscwg-public<br><b>Sent:</b> Thursday, July 29, 2021 1:38 PM<br><b>To:</b> <a href="mailto:cscwg-public@cabforum.org">cscwg-public@cabforum.org</a><br><b>Subject:</b> [Cscwg-public] Ballot CSC-10: WebTrust CSBR v2.0 Audit Criteria<o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white'><span style='font-size:10.5pt;color:black'>Ballot CSC-10: WebTrust CSBR v2.0 Audit Criteria</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>Purpose of the Ballot: For Baseline Requirement for the Issuance and Management of Publicly-Trusted Code Signing Certificates v2.3, the purpose is to allow the new WebTrust CSBR 2.0 or later audit scheme. The ballot allows the older WebTrust audits to continue for audit periods which start before 1 November 2020. There is no specific start date for the CSBR 2.0 audit scheme, which allows it also to be used for audit periods starting before 1 November 2021.</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>The following motion has been proposed by Bruce Morton of Entrust, and endorsed by Sebastian Schulz of GlobalSign and Inigo Barreira of Sectigo.</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>- MOTION BEGINS -</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>Delete the following text from Section 17.1:</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>1. “WebTrust for CAs v2.0 or newer” AND “WebTrust for Certification Authorities – Publicly Trusted Code Signing Certificates v1.0.1 or newer”; or</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>2. “WebTrust for CAs v2.0 or newer” AND “WebTrust for Certification Authorities – Extended Validation Code Signing v1.4.1 or newer”; or</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>3. ETSI EN 319 411-1, which includes normative references to ETSI EN 319 401 (the latest version of the referenced ETSI documents should be applied); or</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>4. If a Government CA is required by its Certificate Policy to use a different internal audit scheme, it MAY use such scheme provided that the audit either (a) encompasses all requirements of one of the above schemes or (b) consists of comparable criteria that are available for public review.</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>Insert the following text to Section 17.1:</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>1. For Audit Periods starting before 1 November 2020, “WebTrust for CAs v2.0 or newer” AND “WebTrust for Certification Authorities – Publicly Trusted Code Signing Certificates v1.0.1 or newer”; or</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>2. For Audit Periods starting before 1 November 2020, “WebTrust for CAs v2.0 or newer” AND “WebTrust for Certification Authorities – Extended Validation Code Signing v1.4.1 or newer”; or</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>3. “WebTrust for CAs v2.0 or newer” AND “WebTrust for Certification Authorities – Code Signing Baseline Requirements v2.0 or newer”; or</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>4. ETSI EN 319 411-1, which includes normative references to ETSI EN 319 401 (the latest version of the referenced ETSI documents should be applied); or</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>5. If a Government CA is required by its Certificate Policy to use a different internal audit scheme, it MAY use such scheme provided that the audit either (a) encompasses all requirements of one of the above schemes or (b) consists of comparable criteria that are available for public review.</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>- MOTION ENDS -</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>The procedure for approval of this ballot is as follows:</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>Discussion (7 days) Start Time: 2021-07-29, 14:00 Eastern Time (US) End Time: not before 2021-08-05, 14:00 Eastern Time (US)</span><o:p></o:p></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;background:white;box-sizing:
border-box;font-variant-ligatures: normal;font-variant-caps:
normal;orphans: 2;text-align:start;widows:
2;-webkit-text-stroke-width: 0px;text-decoration-thickness:
initial;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px'><span style='font-size:10.5pt;color:black'>Vote for approval (7 days) Start Time:</span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><pre>_______________________________________________<o:p></o:p></pre><pre>Cscwg-public mailing list<o:p></o:p></pre><pre><a href="mailto:Cscwg-public@cabforum.org">Cscwg-public@cabforum.org</a><o:p></o:p></pre><pre><a href="https://lists.cabforum.org/mailman/listinfo/cscwg-public">https://lists.cabforum.org/mailman/listinfo/cscwg-public</a><o:p></o:p></pre></blockquote><p class=MsoNormal><o:p> </o:p></p></div></body></html>