<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<br>
<br>
<div class="moz-cite-prefix">On 4/11/2022 4:08 μ.μ., Bruce Morton
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:DM5PR11MB004181983FB0AC9B1CAF9B19823B9@DM5PR11MB0041.namprd11.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:DengXian;
panose-1:2 1 6 0 3 1 1 1 1 1;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:"\@DengXian";
panose-1:2 1 6 0 3 1 1 1 1 1;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Please find attached the proposal for the
Signing Service update.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a
href="https://github.com/cabforum/code-signing/pull/12/commits/0ea86c90f90bdd39581f36214dfb6690f09b32de"
moz-do-not-send="true" class="moz-txt-link-freetext">https://github.com/cabforum/code-signing/pull/12/commits/0ea86c90f90bdd39581f36214dfb6690f09b32de</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a
id="OWAAMDDC4BFAF31944008AC1EE10D57C58220"
href="mailto:dzacharo@harica.gr" moz-do-not-send="true"><span
style="font-family:"Calibri",sans-serif;text-decoration:none">@Dimitris
Zacharopoulos (HARICA)</span></a>, could you please review
sections 8.4.2 and 8.4.3 to make sure I have covered the ETSI
audit criteria.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</blockquote>
<br>
Hi Bruce,<br>
<br>
I added a <a moz-do-not-send="true"
href="https://github.com/cabforum/code-signing/pull/12/files#r1022431181">proposed
change</a> for the Time-stamping audit scheme under ETSI.<br>
<br>
I have not had time to review the entire PR but I would like to
explore the option of adding the CEN 419 241 audit scheme as a 3rd
option for signing services in section 8.4.2 which provides an
excellent assurance level for service providers managing signing
keys on behalf of Subscribers.<br>
<br>
Thanks,<br>
Dimitris.<br>
<br>
<blockquote type="cite"
cite="mid:DM5PR11MB004181983FB0AC9B1CAF9B19823B9@DM5PR11MB0041.namprd11.prod.outlook.com">
<div class="WordSection1">
<p class="MsoNormal">I am looking for any other proposed
changes, plus two endorsers.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks, Bruce.<o:p></o:p></p>
</div>
<i>Any email and files/attachments transmitted with it are
confidential and are intended solely for the use of the
individual or entity to whom they are addressed. If this message
has been sent to you in error, you must not copy, distribute or
disclose of the information it contains. <u>Please notify
Entrust immediately</u> and delete the message from your
system.</i>
</blockquote>
<br>
</body>
</html>