<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><b>FINAL MINUTES OF CSCWG MEETING MAY 19, 2022<o:p></o:p></b></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal>Attendees:<o:p></o:p></p><p class=MsoNormal>Atsushi Inaba, Bruce Morton, Corey Bonnell, Dean Coclin, Dimitris Zacharopoulos, Ian McMillan, Inigo Barreira, Joanna Fox, Michael Sykes, Tomas Gustavsson<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Minute-taker: Corey<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Dean read the anti-trust statement.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Minutes of the 2022-05-05 meeting were approved.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>- CSC-13<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>This ballot went through IPR and v2.8 has been published with an effective date of May 9th. The normative changes in the ballot are effective November 15th.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>- CSC-14 Voting<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Bruce noted that we have already reached quorum.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Inigo noticed a formatting issue on page 38 and 39. It was agreed that we can fix this presentation issue after approval at the same time we add the effective date, as it is not a material change. (Minute-taker's note: the Bylaws actually prohibit this change, so a separate ballot is needed to fix)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>- F2F Agenda<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Code Signing meeting is Tuesday afternoon at 5 PM Poland time. Currently slated for 1-hour meeting.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Bruce mentioned that we should discuss incorporating the TLS BR content directly in the CSBRs. Dimitris said that we have previously agreed to take on this work and that the next step is to actually create the draft text. Ian and Bruce volunteered to assist Dimitris with this effort.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Dimitris said his team wanted to discuss timestamping requirements, specifically the requirement whether the timestamping ICA needs to be offline or not. Bruce said he'd support a comprehensive timestmaping "clean-up" ballot that would address this and other points raised recently.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Dimitris raised the discussion on the Root Policy change proposal to restrict the scope of audit to those timestamp ICAs and responder certificates to be used for the CSBRs. It was agreed that there needs to be an additional mechanism beyond the EKU (namely, policy OID) that can bifurcate the policy as well as provide an indicator to Relying Party software so it can reject timestamp tokens not signed by an in-scope TSA. It was further agreed to discuss this specific issue and timestamping as a whole at the F2F.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Ian suggested we will have a 1.5 hour meeting and there was consensus.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>- Amazon Trust Services application<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>ATS would like to join the CSCWG as an Associate Member. It was raised that they may qualify for Full Membership status. They have trusted roots in Windows, so they may be eligible for Full membership. However, they note that are not actively issuing Code Signing Certificates. For next steps, Dean will ask Trev to submit their Associate Member application to the questions mailing list.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>- Other business<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The 2022-06-02 meeting will be cancelled.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Next meeting is at the F2F.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Meeting adjourned.<o:p></o:p></p></div></body></html>