<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
HARICA votes "no" to ballot CSC-17.<br>
<br>
As explained during our recent calls, HARICA prepared for this
change in a timely manner. We notified our Subscribers and assisted
them to switch over to signing solutions using private keys in
hardware devices. We did not detect any major challenges during this
switch-over, especially because these requirements already exist in
EV Code Signing Certificates, so there are solutions already mature
in the industry.<br>
<br>
Dimitris.<br>
<br>
<div class="moz-cite-prefix">On 17/9/2022 1:05 π.μ., Ian McMillan
via Cscwg-public wrote:<br>
</div>
<blockquote type="cite"
cite="mid:010001834855ddbc-8125ceaf-0191-4bfa-95be-33051cfd8eed-000000@email.amazonses.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
mso-ligatures:standardcontextual;}div.WordSection1
{page:WordSection1;}ol
{margin-bottom:0in;}ul
{margin-bottom:0in;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Ballot CSC 17 - Subscriber Private Key
Protection Extension<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Purpose of this ballot: This ballot updates
the “Baseline Requirements for the Issuance and Management of
Publicly‐Trusted Code Signing Certificates“ version 3.1
according to the attached redline which includes the change of
the effective date of November 15, 2021, to June 1, 2023,
subscriber key protection and verification requirements in the
following sections:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph"
style="margin-left:-13.0pt;mso-list:l5 level1 lfo5">
Section 6.2.7.4.1 Subscriber Private Key protection<o:p></o:p></li>
<li class="MsoListParagraph"
style="margin-left:-13.0pt;mso-list:l5 level1 lfo5">
Section 6.2.7.4.2 Subscriber Private Key verification<o:p></o:p></li>
<li class="MsoListParagraph"
style="margin-left:-13.0pt;mso-list:l5 level1 lfo5">
Section 1.2.2 Relevant Dates<o:p></o:p></li>
</ul>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The change to extend the effective date for
these sections regarding subscriber private key protection is
to provide approximately 1 year of time from the public
announcement of the requirement change for all effected
parties to implement the changes.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The following motion has been proposed by
Ian McMillan of Microsoft and endorsed by Tim Hollebeek of
DigiCert and Bruce Morton of Entrust.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">MOTION BEGINS: <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This ballot updates the “Baseline
Requirements for the Issuance and Management of
Publicly‐Trusted Code Signing Certificates” version 3.1 by
replacing the entirely of the content of the document with the
attached document.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">MOTION ENDS<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The procedure for approval of this ballot
is as follows:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Discussion (7 days)<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph"
style="margin-left:-13.0pt;mso-list:l5 level1 lfo5">
Start Time: 09-09-2022 18:05 Eastern Time<o:p></o:p></li>
<li class="MsoListParagraph"
style="margin-left:-13.0pt;mso-list:l5 level1 lfo5">
End Time: 09-16-2022 18:05 Eastern Time<o:p></o:p></li>
</ul>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Vote for approval (7 days)<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph"
style="margin-left:-13.0pt;mso-list:l5 level1 lfo5">
Start Time: 09-16-2022 18:05 Eastern Time<o:p></o:p></li>
<li class="MsoListParagraph"
style="margin-left:-13.0pt;mso-list:l5 level1 lfo5">
End Time: 09-23-2022 18:05 Eastern Time<o:p></o:p></li>
</ul>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Cscwg-public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Cscwg-public@cabforum.org">Cscwg-public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://lists.cabforum.org/mailman/listinfo/cscwg-public">https://lists.cabforum.org/mailman/listinfo/cscwg-public</a>
</pre>
</blockquote>
<br>
</body>
</html>