<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1014578989;
mso-list-template-ids:-698161346;}
@list l1
{mso-list-id:1241136729;
mso-list-type:hybrid;
mso-list-template-ids:1308516582 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l1:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>Code Signing Working Group Meeting of 2022-04-07<o:p></o:p></b></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>Attendees:</b> Atsushi Inaba (GlobalSign), Bruce Morton (Entrust), Corey Bonell (DigiCert), Dean Coclin (DigiCert), Ian McMillan (Microsoft), Inigo Barreira (Sectigo), Joanna Fox (TrustCor), Mohit Kumar (GlobalSign), Tim Crawford (CPA Canada/WebTrust), Andrea Holland (SecureTrust)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>Antitrust Statement:</b> Read by Dean<o:p></o:p></p><p class=MsoNormal><b>Minute Taker:</b> Tim Crawford<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Minutes for the March 24th meetings were approved<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>Interested party application from Insta Oy<o:p></o:p></b></p><p class=MsoNormal>No comment was offered, and the application was accepted. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>Updates on Ballot CSC-13 – Private Key Protection:<o:p></o:p></b></p><p class=MsoNormal>Bruce mentioned that the ballot received eight (8) votes and is deemed to have passed. A question was raised on the need for 15 votes to have quorum. The chair will respond to that question and the group does not believe there is an issue with the number of votes. The ballot is ready for IPR review and set to be effective November 15<sup>th</sup>. The second question was on the need to circulate a Word version of the ballot. Bruce will send that. Bruce will also check the bylaws on the requirement to circulate particular formats of the ballot. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>RFC3647 Ballot<o:p></o:p></b></p><p class=MsoNormal>The question was raised to determine if ballot CSC-13 can be incorporated into the version of the requirements in RFC 3647 format. There was discussion of an extended discussion period for the re-formatting the ballot to include CSC-13, post IPR. This ballot is not intended to make any changes to the requirements, only reformat the document. There have been a number of reviewers thus far and good feedback has been provided. Reviewers include Dimitris Zacharopoulos and Joanna Fox. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>Other Business:<o:p></o:p></b></p><p class=MsoNormal>The question was raised on areas future ballots will look at address. The three areas for future consideration mentioned by Bruce Morton and Ian McMillan were signing services, time stamping, and high risk application processing. Ian was asked how he would prioritize these topics and he indicated:<o:p></o:p></p><ol style='margin-top:0in' start=1 type=1><li class=MsoListParagraphCxSpFirst style='margin-bottom:0in;margin-left:0in;mso-add-space:auto;line-height:normal;mso-list:l1 level1 lfo3'>Timestamping<o:p></o:p></li><li class=MsoListParagraphCxSpMiddle style='margin-bottom:0in;margin-left:0in;mso-add-space:auto;line-height:normal;mso-list:l1 level1 lfo3'>Signing services<o:p></o:p></li><li class=MsoListParagraphCxSpLast style='margin-bottom:0in;margin-left:0in;mso-add-space:auto;line-height:normal;mso-list:l1 level1 lfo3'>High risk applicants (would like to update by November 15<sup>th</sup> deadline for ballot CSC-13)<o:p></o:p></li></ol><p class=MsoNormal>Bruce indicated the best way to get future issued to a ballot would be to put forth a proposal. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The face to face in Warsaw is still scheduled to be in person. Other events are going on in this area without issue. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Adjourned.<o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3'>Dean Coclin<o:p></o:p></span></b></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>