<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;
mso-ligatures:none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:684018532;
mso-list-type:hybrid;
mso-list-template-ids:9349004 690277728 -182568390 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.25in;
text-indent:-.25in;
mso-ansi-font-weight:bold;
mso-bidi-font-weight:bold;}
@list l0:level2
{mso-level-start-at:5;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.75in;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:1.25in;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.75in;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.25in;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:2.75in;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.25in;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.75in;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:4.25in;
text-indent:-9.0pt;}
@list l1
{mso-list-id:1768886842;
mso-list-template-ids:-836354802;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><b><span style='font-size:12.0pt'>Code Signing WG Meeting: January 26, 2023<o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-size:12.0pt'><o:p> </o:p></span></b></p><p class=MsoNormal><b><span style='font-size:12.0pt'>Attendance (in alphabetical order):<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:12.0pt'>Andrea Holland (VikingCloud), Atsushi Inaba (GlobalSign), Ben Dewberry (Keyfactor), Brianca Martin (Amazon Trust Services), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Ian McMillan (Microsoft), Inigo Barreira (Sectigo), Janet Hines (VikingCloud), Martijn Katerbarg (Sectigo), Roberto Quinones (Intel), Tim Hollebeek (DigiCert), Trevoli (Amazon Trust Services)<o:p></o:p></span></p><p class=MsoNormal><b><u><span style='font-size:12.0pt'><o:p><span style='text-decoration:none'> </span></o:p></span></u></b></p><p class=MsoNormal><b><u><span style='font-size:12.0pt'>Minutes<o:p></o:p></span></u></b></p><ol style='margin-top:0in' start=1 type=1><li class=MsoListParagraphCxSpFirst style='margin-left:-.25in;mso-add-space:auto;mso-list:l0 level1 lfo3'><b><span style='font-size:12.0pt;line-height:105%'>Antitrust statement read<o:p></o:p></span></b></li><li class=MsoListParagraphCxSpLast style='margin-left:-.25in;mso-add-space:auto;mso-list:l0 level1 lfo3'><b><span style='font-size:12.0pt;line-height:105%'>Approval of minutes</span></b><span style='font-size:12.0pt;line-height:105%'>: Minutes for 12 January 2023 approved<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level1 lfo3'><span style='font-size:12.0pt'>Ballot: Malware base revocation (Martijn)<o:p></o:p></span></li><ul style='margin-top:0in' type=disc><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Some discussion and need to get feedback into Github before the end of the week. <o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Bruce stated he would endorse after review. Ian is the other endorser.<o:p></o:p></span></li></ul><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level1 lfo3'><span style='font-size:12.0pt'>Ballot: Signing Service Update (Bruce)<o:p></o:p></span></li><ul style='margin-top:0in' type=disc><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Bruce is having difficulty with Github to move the ballot forward. Martijn volunteered to help out.<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Ben asked for the procedure to give feedback, which can be done in Github or the mailing list<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Tim H would like to see the mailing list used more often<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Dean will check status of Ben in the mailing list<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Ben started a discussion about multi-factor for Signing Service. We need to come up with a way to discuss how this can be done.<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Ian indicated that the proposed change allows for secure server-to-server communication, but does not provide details<o:p></o:p></span></li></ul><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level1 lfo3'><span style='font-size:12.0pt'>Ballot: Remove SSL BR References (Dimitris)<o:p></o:p></span></li><ul style='margin-top:0in' type=disc><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Dimitris stated work has been done and has been reviewed with Martijn, now need to review with the group<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Dean suggested we add to the F2F meeting, but we decided to review in the meeting<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Dimitris added “Editor” notes for review<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Dimitris has imported text from SSL BRs where no text is in the CSBRs<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Inigo is concerned about conflicts between BRs, but Tim H advised that concerned CAs work in multiple working groups<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Bruce suggested that it would be good if we had the “BR of BRs” to cover common items<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>There was discussion about updates to definitions and references<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Decided not to import 4.2.1 from SSL BRs<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>There was a discussion about importing SubCA revocation and misalignment of paragraphs. It was suggested this could be fixed with the revocation ballot or another future ballot.<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Decided to add in OCSP “3600 seconds” change with an effective date<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>For Suspension, decided to add “No stipulation” and address in a future ballot.<o:p></o:p></span></li></ul><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level1 lfo3'><span style='font-size:12.0pt'>Other business<o:p></o:p></span></li><ul style='margin-top:0in' type=disc><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>F2F we have 1.5 hours scheduled<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level2 lfo3'><span style='font-size:12.0pt'>Try to make a plan for the year at F2F<o:p></o:p></span></li></ul><li class=MsoListParagraph style='margin-left:-.25in;mso-add-space:auto;mso-list:l0 level1 lfo3'><span style='font-size:12.0pt;line-height:105%'>Next Meeting – 9 February 2023<o:p></o:p></span></li><li class=MsoPlainText style='margin-left:-.25in;mso-list:l0 level1 lfo3'><span style='font-size:12.0pt'>Adjourn <o:p></o:p></span></li></ol><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>