<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1403092848;
mso-list-template-ids:-1682801026;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>CSCWG Meeting 2023-11-16</span></b><b><span style='mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></b></p><p class=MsoNormal><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'> <o:p></o:p></span></p><p class=MsoNormal><b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>General Note: </span></b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>A recording was not started for the meeting. As such, most items in these minutes were provided by Bruce based on his own notes. If anyone has anything to add, please reach out.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>Attendees</span></b><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>Andrea Holland - (VikingCloud), Ben Dewberry - (Keyfactor), Brianca Martin - (Amazon), Bruce Morton - (Entrust), Corey Bonnell - (DigiCert), Dimitris Zacharopoulos - (HARICA), Eva Vansteenberge - (GlobalSign), Ian McMillan - (Microsoft), Inaba Atsushi - (GlobalSign), Inigo Barreira - (Sectigo), Janet Hines - (VikingCloud), Martijn Katerbarg - (Sectigo), Mohit Kumar - (GlobalSign), Richard Kisley - (IBM), Roberto Quionones - (Intel), Rollin Yu - (TrustAsia Technologies Inc), Scott Rea - (eMudhra), Tim Crawford - (CPA Canada/WebTrust)<o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>Assign Minute taker</span></b><b><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></b></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:#212121;mso-list:l0 level1 lfo1'><span lang=SV style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'>Martijn Katerbarg</span><span style='mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></li></ul><p class=MsoNormal style='margin-left:1.0in'><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>Roll call</span></b><b><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></b></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraph style='color:#212121;margin-left:0in;mso-list:l0 level1 lfo1'><span lang=SV style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'>Read</span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'> by </span><span lang=SV style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'>Bruce</span><b><span style='mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></b></li></ul><p class=MsoNormal><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>Antitrust Compliance Statement</span></b><b><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></b></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:#212121;mso-list:l0 level1 lfo1'><span lang=SV style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'>Read</span><span style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'> by </span><span lang=SV style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'>Bruce</span><span style='mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>Approval of prior meeting minutes</span></b><b><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></b></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:#212121;mso-list:l0 level1 lfo1'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'>Minutes of the November 2nd meeting were approved.</span><span style='mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>Ballot CSC-21 (Signing Service) Status<o:p></o:p></span></b></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraph style='color:#212121;margin-left:0in;mso-list:l0 level1 lfo1'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'>Ian discussed with Tim that the Cloud Security Alliance (CSA) STAR CCM Certification with the audit requirements (“Level 1” or “Level 2”) could be an alternative to the proposed audit requirements. </span><span style='mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></li><li class=MsoListParagraph style='color:#212121;margin-left:0in;mso-list:l0 level1 lfo1'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'>Bruce suggested that this could be a big change to the ballot, so how do we proceed. </span><span style='mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></li><li class=MsoListParagraph style='color:#212121;margin-left:0in;mso-list:l0 level1 lfo1'><span style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'>Dimitris stated that the discussion period can last for 90-days, so we have time to update and start a new discussion period. Bruce and Ian will work on an update to the ballot.</span><span style='mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></li></ul><p class=MsoNormal><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=SV style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>High Risk Ballot<o:p></o:p></span></b></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraph style='color:#212121;margin-left:0in;mso-list:l0 level1 lfo1'><span style='mso-ligatures:none;mso-fareast-language:EN-GB'>It’s agreed that with CSC-21 being put on hold, the High Risk ballot can proceed and take priority. Bruce with work with Corey to add the proposal to GitHub and start a ballot.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>Remove EV Guideline References Ballot<o:p></o:p></span></b></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraph style='color:#212121;margin-left:0in;mso-list:l0 level1 lfo1'><span style='mso-ligatures:none;mso-fareast-language:EN-GB'>Dimitris offered to prepare a non-normative ballot to remove all EV Guideline references from the CSBRs. A follow-up normative ballot will be considered to change/update the EV requirements.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>CSCWG Charter Update Ballot<o:p></o:p></span></b></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraph style='color:#212121;margin-left:0in;mso-list:l0 level1 lfo1'><span style='mso-ligatures:none;mso-fareast-language:EN-GB'>Ballot text is final. Dimitris has already endorsed. Bruce offered to endorse during the call.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>Other business<o:p></o:p></span></b></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraph style='color:#212121;margin-left:0in;mso-list:l0 level1 lfo1'><span style='mso-ligatures:none;mso-fareast-language:EN-GB'>During the November 30 meeting, a presentation will be given regarding the Key Attestation RFC.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'>Next meeting</span></b><span style='font-family:"Aptos",sans-serif;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraph style='color:#212121;margin-left:0in;mso-list:l0 level1 lfo1'><span lang=SV style='font-family:"Aptos",sans-serif;mso-ligatures:none;mso-fareast-language:EN-GB'>2023-11-30</span><span style='mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:12.0pt;color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'> </span><span style='color:#212121;mso-ligatures:none;mso-fareast-language:EN-GB'><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>