<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=en-SE link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;mso-fareast-language:EN-US'>So will I.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;mso-fareast-language:EN-US'>></span><span style='font-size:11.0pt'> <span lang=EN-IN>Other ideas are welcome.<o:p></o:p></span></span></p><p class=MsoNormal><span lang=EN-IN style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-IN style='font-size:11.0pt'>How about September 2, 2020, which marks the release of CSBR v2.0, and incorporated EV Code Signing into the document.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-IN style='font-size:11.0pt'><br>While we’re at it, could this ballot also get rid of this (<a href="https://github.com/cabforum/code-signing/blob/main/docs/br-csc-v1-2.md">https://github.com/cabforum/code-signing/blob/main/docs/br-csc-v1-2.md</a>) file in GH?<br><br>Regards,<br><br>Martijn <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div id=mail-editor-reference-message-container><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal style='margin-bottom:12.0pt'><b><span lang=EN-IN style='font-size:12.0pt;font-family:"Aptos",sans-serif;color:black'>From: </span></b><span lang=EN-IN style='font-size:12.0pt;font-family:"Aptos",sans-serif;color:black'>Cscwg-public <cscwg-public-bounces@cabforum.org> on behalf of Scott Rea via Cscwg-public <cscwg-public@cabforum.org><br><b>Date: </b>Wednesday, 28 February 2024 at 10:29<br><b>To: </b>Dimitris Zacharopoulos (HARICA) <dzacharo@harica.gr>, cscwg-public@cabforum.org <cscwg-public@cabforum.org><br><b>Subject: </b>Re: [Cscwg-public] Marking the EV Code Signing Guidelines OBSOLETE<o:p></o:p></span></p></div><div style='border:solid black 1.0pt;padding:2.0pt 2.0pt 2.0pt 2.0pt'><p class=MsoNormal style='line-height:12.0pt;background:#FAFA03'><span lang=EN-IN style='color:black'>CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.<o:p></o:p></span></p></div><p class=MsoNormal><span lang=EN-IN style='font-size:11.0pt'><o:p> </o:p></span></p><div><div><p class=MsoNormal><span lang=EN-IN style='font-size:11.0pt'>eMudhra will endorse…</span><span lang=EN-IN><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-IN style='font-size:11.0pt'> </span><span lang=EN-IN><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-IN style='font-size:11.0pt'>Regards,</span><span lang=EN-IN><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-IN style='font-size:11.0pt'>_Scott</span><span lang=EN-IN><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-IN style='font-size:11.0pt'> </span><span lang=EN-IN><o:p></o:p></span></p><div id=mail-editor-reference-message-container><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal style='margin-bottom:12.0pt'><b><span lang=EN-IN style='font-size:12.0pt;font-family:"Aptos",sans-serif;color:black'>From: </span></b><span lang=EN-IN style='font-size:12.0pt;font-family:"Aptos",sans-serif;color:black'>Cscwg-public <cscwg-public-bounces@cabforum.org> on behalf of Dimitris Zacharopoulos (HARICA) via Cscwg-public <cscwg-public@cabforum.org><br><b>Date: </b>Wednesday, 28 February 2024 at 2:46 PM<br><b>To: </b>cscwg-public@cabforum.org <cscwg-public@cabforum.org><br><b>Subject: </b>[Cscwg-public] Marking the EV Code Signing Guidelines OBSOLETE</span><span lang=EN-IN><o:p></o:p></span></p></div><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 align=left width="100%" style='width:100.0%'><tr><td style='border:solid #F26F27 1.5pt;background:#F26F27;padding:5.0pt 2.0pt 5.0pt 2.0pt'></td><td width="100%" style='width:100.0%;border:solid #A878B4 1.5pt;border-left:none;background:#FCF9F1;padding:5.0pt 4.0pt 5.0pt 12.0pt'><div><p class=MsoNormal style='mso-element:frame;mso-element-frame-hspace:2.25pt;mso-element-wrap:around;mso-element-anchor-vertical:paragraph;mso-element-anchor-horizontal:column;mso-height-rule:exactly'><b><span style='font-size:11.0pt;color:red'>CAUTION:</span></b><span style='font-size:11.0pt;color:red'> This email is originated from outside of the organization. Do not open the links or the attachments unless you recognize the sender and know the content is safe. </span><o:p></o:p></p></div></td></tr></table><p class=MsoNormal><span lang=EN-IN style='font-size:11.0pt'> </span><span lang=EN-IN><o:p></o:p></span></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-IN style='font-size:11.0pt'><br>Dear Members,<br><br>As we discussed today at the F2F#61 meeting, I would like to propose a ballot to mark the "Guidelines For The Issuance And Management Of Extended Validation Code Signing Certificates" as obsolete. I suggest that we update the <a href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcabforum.org%2Fworking-groups%2Fcode-signing%2Fev-code-signing-certificate-guidelines%2F&data=05%7C02%7Cmartijn.katerbarg%40sectigo.com%7C8cdeeef24c8d4104d4f408dc383fd290%7C0e9c48946caa465d96604b6968b49fb7%7C0%7C0%7C638447093980627329%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=QJsCgjzebEfwyu%2FxSoJZRXn8sMD%2Fy%2FvCNbfBq3FN97Q%3D&reserved=0">latest EVCS Guidelines v1.4</a> to version 1.5 with the following changes:<br><br>--- BEGIN DRAFT BALLOT LANGUAGE ---<br><br>In the "Notice to Readers" section, update the second paragraph to state:<br><br><b>"The Code Signing Working Group considers this document OBSOLETE as of XX XXXXXXXX XXXX. CAs SHOULD NOT use this standard but instead SHOULD use the "Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates" that has incorporated and improved requirements related to Extended Validation (EV) Code Signing Certificates"</b><br><br>Update section 17.1 to state the following:<br><br>"</span><b><span lang=EN-US style='font-size:11.0pt'>As this document is marked OBSOLETE, CAs SHOULD NOT be audited against this standard.</span></b><span lang=EN-IN style='font-size:11.0pt'> "<br><br>--- END DRAFT BALLOT LANGUAGE ---<br><br>The <b>XX XXXXXXXX XXXX </b>will include an <b>effective date</b> we decide. I propose this date is <b>in the past</b> but I am not sure what would be a reasonable date. One thought is to ask if there is a CA Member that has been audited recently against the EV CS Guidelines v1.4. Another thought is to ask CPA Canada and ACAB'c for feedback about when they stopped issuing Audit Letters that cover the EV CS Guidelines v1.4. Other ideas are welcome.<br><br>Can I also have two endorsers so I can reserve a ballot number?<br><br><br>Thank you,<br>Dimitris.</span><span lang=EN-IN><o:p></o:p></span></p></div></div></div></div><p class=MsoNormal><span lang=EN-IN style='font-size:11.0pt'>Disclaimer: The email and its contents hold confidential information and are intended for the person or entity to which it is addressed. If you are not the intended recipient, please note that any distribution or copying of this email is strictly prohibited as per Company Policy, you are requested to notify the sender and delete the email and associated attachments with it from your system. <o:p></o:p></span></p></div></div></div></div></body></html>