<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:DengXian;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@DengXian";
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Open Sans";}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:JA;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:771784377;
mso-list-template-ids:-1739916688;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:1144784380;
mso-list-template-ids:-1933021006;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal" style="margin-bottom:7.5pt;background:white"><span style="font-size:10.5pt;font-family:"Open Sans",sans-serif;color:black">Notice of Review Period - Ballot CSC-</span><span style="color:black">
</span><span style="font-size:10.5pt;font-family:"Open Sans",sans-serif;color:black">11: Update to log data retention requirements<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;background:white"><span style="font-size:10.5pt;font-family:"Open Sans",sans-serif;color:black">This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum$B!G(Bs Intellectual Property Rights Policy
(v1.2). This Review Period is for Final Maintenance Guidelines (30 day Review Period). A complete draft of the Draft Guideline that is the subject of this Review Notice is attached.</span><span style="font-size:10.5pt;font-family:"Open Sans",sans-serif"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;text-indent:.5in;background:white">
<span style="font-size:10.5pt;font-family:"Open Sans",sans-serif;color:black">Date Review Notice Sent: October 4, 2021</span><span style="font-size:10.5pt;font-family:"Open Sans",sans-serif"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;text-indent:.5in;background:white">
<span style="font-size:10.5pt;font-family:"Open Sans",sans-serif;color:black">Ballot for Review: Ballot CSC-</span><span style="color:black">
</span><span style="font-size:10.5pt;font-family:"Open Sans",sans-serif;color:black">11: Update to log data retention requirements<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;text-indent:.5in;background:white">
<span style="font-size:10.5pt;font-family:"Open Sans",sans-serif;color:black">Start of Review Period: October 4, 2021 at 13:30 UTC</span><span style="font-size:10.5pt;font-family:"Open Sans",sans-serif"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;text-indent:.5in;background:white">
<span style="font-size:10.5pt;font-family:"Open Sans",sans-serif;color:black">End of Review Period: November 3, 2021 at 13:30 UTC</span><span style="font-size:10.5pt;font-family:"Open Sans",sans-serif"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;background:white"><span style="font-size:10.5pt;font-family:"Open Sans",sans-serif;color:black">Please forward any Exclusion Notice relating to Essential Claims to the Chair by email to
<a href="mailto:dean.coclin@digicert.com">dean.coclin@digicert.com</a> before the end of the Review Period. See current version of CA/Browser Forum Intellectual Property Rights Policy for details.</span><span style="font-size:10.5pt;font-family:"Open Sans",sans-serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN"><o:p> </o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:SimSun;mso-fareast-language:ZH-CN">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Purpose of this ballot: <o:p></o:p></p>
<p class="MsoNormal">Update the log data and retention of log data requirements in the Baseline Requirement for the Issuance and Management of Publicly-Trusted Code Signing Certificates v2.5. The following motion has been proposed by Ian McMillan of Microsoft,
and I am looking for endorsements from two other members of the CSCWG.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">— MOTION BEGINS — <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This ballot updates the $B!H(BBaseline Requirements for the Issuance and Management of Publicly$B!>(BTrusted Code Signing Certificates$B!H(B version 2.5 according to the attached redline which includes:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="mso-list:l1 level1 lfo3">Update section 15 $B!H(BData Records$B!I(B removing references to [SSL/TLS] Baseline Requirements for this section in totality<o:p></o:p></li><li class="MsoNormal" style="mso-list:l1 level1 lfo3">Update section 15 $B!H(BData Records$B!I(B to include sub-section 15.1 $B!H(BTypes of Events Recorded$B!I(B and describing the requirements for CAs and Third Party Delegates while removing $B!H(BSigning Services$B!I(B<o:p></o:p></li><li class="MsoNormal" style="mso-list:l1 level1 lfo3">Update section 15 $B!H(BData Records$B!I(B to include sub-section 15.2 $B!H(BTimestamp Authority Data Records$B!I(B<o:p></o:p></li><li class="MsoNormal" style="mso-list:l1 level1 lfo3">Update section 15.1 to clarify 4(f) for security event logging on Timestamp Authority servers<o:p></o:p></li><li class="MsoNormal" style="mso-list:l1 level1 lfo3">Update section 15.1 on 4(d) for security event logging to no longer include $B!H(Bhardware failures$B!I(B<o:p></o:p></li><li class="MsoNormal" style="mso-list:l1 level1 lfo3">Update section 15 $B!H(BData Records$B!I(B to include sub-section 15.3 $B!H(BData Retention Period for Audit Logs$B!I(B<o:p></o:p></li><li class="MsoNormal" style="mso-list:l1 level1 lfo3">Update section 15.2 to no longer reference Baseline Requirements section 5.4.3 and defined a specific retention period for CA, subscriber certificate, Timestamp Authority, and security event data records
for at least 2 years<o:p></o:p></li></ul>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">— MOTION ENDS —<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The procedure for approval of this ballot is as follows:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Discussion (7 days) <o:p></o:p></p>
<p class="MsoNormal">Start Time: 2021-09-17, 19:00 Eastern Time (US) <o:p></o:p></p>
<p class="MsoNormal">End Time: not before 2021-09-24, 19:00 Eastern Time (US)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Vote for approval (7 days) <o:p></o:p></p>
<p class="MsoNormal">Start Time: 2021-09-24, 19:00 Eastern Time (US) <o:p></o:p></p>
<p class="MsoNormal">End Time: 2021-10-01, 19:00 Eastern Time (US)<o:p></o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
</div>
<i>Any email and files/attachments transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the
information it contains. <u>Please notify Entrust immediately</u> and delete the message from your system.</i>
</body>
</html>