<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;
        mso-ligatures:standardcontextual;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;
        mso-ligatures:none;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
/* List Definitions */
@list l0
        {mso-list-id:19013934;
        mso-list-type:hybrid;
        mso-list-template-ids:274468546 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Symbol;}
@list l0:level2
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l0:level3
        {mso-level-number-format:bullet;
        mso-level-text:\F0A7;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Wingdings;}
@list l0:level4
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Symbol;}
@list l0:level5
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l0:level6
        {mso-level-number-format:bullet;
        mso-level-text:\F0A7;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Wingdings;}
@list l0:level7
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Symbol;}
@list l0:level8
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l0:level9
        {mso-level-number-format:bullet;
        mso-level-text:\F0A7;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Wingdings;}
@list l1
        {mso-list-id:462043507;
        mso-list-template-ids:1926920732;}
@list l1:level1
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level2
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:1.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:"Courier New";
        mso-bidi-font-family:"Times New Roman";}
@list l1:level3
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:1.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level4
        {mso-level-number-format:bullet;
        mso-level-text:\F0A7;
        mso-level-tab-stop:2.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Wingdings;}
@list l1:level5
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:2.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level6
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:3.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level7
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:3.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level8
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:4.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level9
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:4.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2
        {mso-list-id:1411730409;
        mso-list-template-ids:-978141234;}
@list l2:level1
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level2
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:1.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level3
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:1.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level4
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:2.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level5
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:2.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level6
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:3.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level7
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:3.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level8
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:4.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level9
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:4.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l3
        {mso-list-id:1594171029;
        mso-list-template-ids:-633846032;}
@list l3:level1
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l3:level2
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:1.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:"Courier New";
        mso-bidi-font-family:"Times New Roman";}
@list l3:level3
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:1.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l3:level4
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:2.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l3:level5
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:2.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l3:level6
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:3.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l3:level7
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:3.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l3:level8
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:4.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l3:level9
        {mso-level-number-format:bullet;
        mso-level-text:\F0B7;
        mso-level-tab-stop:4.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
ol
        {margin-bottom:0in;}
ul
        {margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>CSCWG Meeting 2023-11-02<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Attendees:<o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='mso-list:l2 level1 lfo1'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Dean Coclin - DigiCert<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l2 level1 lfo1'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Atsushi Inaba - GlobalSign<o:p></o:p></span></li></ul><ul style='margin-top:0in' type=disc><li class=MsoNormal style='mso-list:l0 level1 lfo2'>Ben Dewberry - Keyfactor<span style='font-family:"Aptos",sans-serif'><o:p></o:p></span></li><li class=MsoNormal style='mso-list:l0 level1 lfo2'><span style='font-family:"Aptos",sans-serif'>Bianca Martin – Amazon<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l0 level1 lfo2'><span style='font-family:"Aptos",sans-serif'>Bruce Morton – Entrust<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l0 level1 lfo2'>Eva Vansteenberge - GlobalSign<span style='font-family:"Aptos",sans-serif'> <o:p></o:p></span></li><li class=MsoNormal style='mso-list:l0 level1 lfo2'>Inigo Barreira - Sectigo<span style='font-family:"Aptos",sans-serif'><o:p></o:p></span></li><li class=MsoNormal style='mso-list:l0 level1 lfo2'><span style='font-family:"Aptos",sans-serif'>Janet Hines - VikingCloud <o:p></o:p></span></li><li class=MsoNormal style='mso-list:l0 level1 lfo2'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Richard Kisley – IBM<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l0 level1 lfo2'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Scott Rea – eMudhra<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l0 level1 lfo2'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Robert Quinones – Intel<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l0 level1 lfo2'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Tim Crawford - </span><span style='mso-ligatures:none'>CPA Canada/WebTrust</span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li><li class=MsoNormal style='mso-list:l0 level1 lfo2'><span style='mso-ligatures:none'>Mohit Kumar - GlobalSign</span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Agenda:<o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='mso-list:l1 level1 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Assign Minute taker (start recording)</span><span style='mso-ligatures:none'> </span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li><ul style='margin-top:0in' type=circle><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Brianca Martin<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-list:l1 level1 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Roll call</span><span style='mso-ligatures:none'> </span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li><ul style='margin-top:0in' type=circle><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Completed by Dean<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-list:l1 level1 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Antitrust Compliance Statement</span><span style='mso-ligatures:none'> </span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li><ul style='margin-top:0in' type=circle><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Completed by Dean<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-list:l1 level1 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Approval of prior meeting minutes</span><span style='mso-ligatures:none'> </span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li><ul style='margin-top:0in' type=circle><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>October 19<sup>th</sup> </span><span style='mso-ligatures:none'>- </span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Minutes approved<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>F2F Meeting on October 5<sup>th</sup>– 1<sup>st</sup> and 2<sup>nd</sup> half - Minutes approved<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-list:l1 level1 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Ballot CSC-21 Signing Service</span><span style='mso-ligatures:none'> </span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li><ul style='margin-top:0in' type=circle><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='mso-ligatures:none'>Currently in discussion period, m</span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>ade changes to the ballot. Questions raised about auditing signing service, along with a request was to simplify this more.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>One party re-endorsed, the second party did not.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Question: How long we can keep the discussion period going on for a ballot – minimum is 7 days, no maximum.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Example provided of a re-seller that also operates an HSM and is providing keys to its customers. By definition, the re-seller would be considered a signing service and the audit requirements would apply.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Question: How would a CA know if the person they are selling a certificate also offers a signing service and is this tracked? They may not know. The CA does a verification that keys are in an HSM, they don’t know who is operating the hardware. If a CA ran a signing service and the CA had it audited, it could be bundled in with its existing WebTrust for code signing audit report, uploaded to the CCDAB, Microsoft gets to see it.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Question: How would audit requirements be enforced and what would be done with the results, who does it go to? CA will post the audit and share it with their auditor.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Comment made that there is leverage on the CA to make sure they are getting it right but no mechanism to enforce it.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Discussion postponed for 2 weeks. Ballot will remain in the discussion period.<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-list:l1 level1 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Ballot CSC-20 Restore Version Reference to EV Guidelines</span><span style='mso-ligatures:none'> </span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li><ul style='margin-top:0in' type=circle><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Notice for review period sent on 10/30.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l1 level2 lfo3'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Ballot will be in IPR review for the next 30 days.<o:p></o:p></span></li></ul></ul><ul style='margin-top:0in' type=disc><li class=MsoNormal style='mso-list:l3 level1 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Proposed Ballot High Risk</span><span style='mso-ligatures:none'> </span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li><ul style='margin-top:0in' type=circle><li class=MsoNormal style='mso-list:l3 level2 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Ballot is drafted, no updates. Postponed until CSC-21 is completed.<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-list:l3 level1 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Proposed ballot Remove EV Guideline References</span><span style='mso-ligatures:none'> </span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li><ul style='margin-top:0in' type=circle><li class=MsoNormal style='mso-list:l3 level2 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>No update.<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-list:l3 level1 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Proposed ballot CSCWG Charter Update</span><span style='mso-ligatures:none'> </span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li><ul style='margin-top:0in' type=circle><li class=MsoNormal style='mso-list:l3 level2 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>No update.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l3 level2 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Question: Is this a CA/B Forum level ballot or a CSWG ballot? In the server cert working group the ballot is at the working group level - they are not changing their scope, only the rules around voting, etc.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l3 level2 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Comment that it seems odd that a working group can change their charter when it was voted on by the working group.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l3 level2 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Will bring this up in the next CA/B Forum call and have a discussion with governance experts.<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-list:l3 level1 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Other business</span><span style='mso-ligatures:none'> </span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'><o:p></o:p></span></li><ul style='margin-top:0in' type=circle><li class=MsoNormal style='mso-list:l3 level2 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Email to questions group from an organization in Hamburg, Germany.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l3 level2 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Question about baseline requirements: Version 3.4, section 1.6.1. Verifying person. Can this organization (they complete tasks like notary, they are not a CA) legitimize their own employees to acquire code signing certificates based on their own authority? Confirmation requested by November 16<sup>th</sup>.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l3 level2 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>The CA does the verification and up it is up to each CA to establish a procedure that their auditor is happy with.<o:p></o:p></span></li><li class=MsoNormal style='mso-list:l3 level2 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Appears to be what the requirements allow but it us up to each CA to verify and to make this determination and if they will allow this method.<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-list:l3 level1 lfo4'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none'>Next meeting – 16 November<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><div><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'>Dean Coclin <o:p></o:p></span></b></p><p class=MsoNormal><span style='mso-ligatures:none'><o:p> </o:p></span></p></div><p class=MsoNormal><o:p> </o:p></p></div></body></html>