<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<br>
<br>
<div class="moz-cite-prefix">On 28/2/2024 11:44 π.μ., Martijn
Katerbarg wrote:<br>
</div>
<blockquote type="cite"
cite="mid:SA1PR17MB6503EFE00D46909AB6181AC4E3582@SA1PR17MB6503.namprd17.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator"
content="Microsoft Word 15 (filtered medium)">
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}div.WordSection1
{page:WordSection1;}</style>
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">So will
I.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">></span><span
style="font-size:11.0pt"> <span lang="EN-IN">Other ideas
are welcome.<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-IN">How
about September 2, 2020, which marks the release of CSBR
v2.0, and incorporated EV Code Signing into the document.</span></p>
</div>
</blockquote>
<br>
I'd like to thank eMudhra and Sectigo for endorsing the ballot. The
<a
href="https://wiki.cabforum.org/books/code-signing-certificate-wg/page/csc-23-marking-the-ev-code-signing-guidelines-superceded">draft
ballot</a> (CSC-23) is ready and I plan to start the discussion
period tomorrow.<br>
<br>
<blockquote type="cite"
cite="mid:SA1PR17MB6503EFE00D46909AB6181AC4E3582@SA1PR17MB6503.namprd17.prod.outlook.com">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-IN"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-IN"><br>
While we’re at it, could this ballot also get rid of this (<a
href="https://github.com/cabforum/code-signing/blob/main/docs/br-csc-v1-2.md"
moz-do-not-send="true" class="moz-txt-link-freetext">https://github.com/cabforum/code-signing/blob/main/docs/br-csc-v1-2.md</a>)
file in GH?<br>
</span></p>
</div>
</blockquote>
<br>
I'm not sure about this one. The can decide what to include in
GitHub and what not without the needs to have a ballot. All these
documents and contributions are already archived as part of the
public mailing list.<br>
<br>
Dean or Bruce can bring it up at the next CSCWG Teleconference and
we can decide to remove from the repo or follow a different process.<br>
<br>
<br>
Best regards,<br>
Dimitris.<br>
<br>
<blockquote type="cite"
cite="mid:SA1PR17MB6503EFE00D46909AB6181AC4E3582@SA1PR17MB6503.namprd17.prod.outlook.com">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-IN"><br>
Regards,<br>
<br>
Martijn <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div id="mail-editor-reference-message-container">
<div>
<div
style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span
style="font-size:12.0pt;font-family:"Aptos",sans-serif;color:black"
lang="EN-IN">From: </span></b><span
style="font-size:12.0pt;font-family:"Aptos",sans-serif;color:black"
lang="EN-IN">Cscwg-public
<a class="moz-txt-link-rfc2396E" href="mailto:cscwg-public-bounces@cabforum.org"><cscwg-public-bounces@cabforum.org></a> on behalf of
Scott Rea via Cscwg-public
<a class="moz-txt-link-rfc2396E" href="mailto:cscwg-public@cabforum.org"><cscwg-public@cabforum.org></a><br>
<b>Date: </b>Wednesday, 28 February 2024 at 10:29<br>
<b>To: </b>Dimitris Zacharopoulos (HARICA)
<a class="moz-txt-link-rfc2396E" href="mailto:dzacharo@harica.gr"><dzacharo@harica.gr></a>, <a class="moz-txt-link-abbreviated" href="mailto:cscwg-public@cabforum.org">cscwg-public@cabforum.org</a>
<a class="moz-txt-link-rfc2396E" href="mailto:cscwg-public@cabforum.org"><cscwg-public@cabforum.org></a><br>
<b>Subject: </b>Re: [Cscwg-public] Marking the EV
Code Signing Guidelines OBSOLETE<o:p></o:p></span></p>
</div>
<div
style="border:solid black 1.0pt;padding:2.0pt 2.0pt 2.0pt 2.0pt">
<p class="MsoNormal"
style="line-height:12.0pt;background:#FAFA03"><span
style="color:black" lang="EN-IN">CAUTION: This email
originated from outside of the organization. Do not
click links or open attachments unless you recognize
the sender and know the content is safe.<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt"
lang="EN-IN"><o:p> </o:p></span></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"
lang="EN-IN">eMudhra will endorse…</span><span
lang="EN-IN"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"
lang="EN-IN"> </span><span lang="EN-IN"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"
lang="EN-IN">Regards,</span><span lang="EN-IN"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"
lang="EN-IN">_Scott</span><span lang="EN-IN"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"
lang="EN-IN"> </span><span lang="EN-IN"><o:p></o:p></span></p>
<div id="mail-editor-reference-message-container">
<div>
<div
style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span
style="font-size:12.0pt;font-family:"Aptos",sans-serif;color:black"
lang="EN-IN">From: </span></b><span
style="font-size:12.0pt;font-family:"Aptos",sans-serif;color:black"
lang="EN-IN">Cscwg-public
<a class="moz-txt-link-rfc2396E" href="mailto:cscwg-public-bounces@cabforum.org"><cscwg-public-bounces@cabforum.org></a> on
behalf of Dimitris Zacharopoulos (HARICA) via
Cscwg-public <a class="moz-txt-link-rfc2396E" href="mailto:cscwg-public@cabforum.org"><cscwg-public@cabforum.org></a><br>
<b>Date: </b>Wednesday, 28 February 2024 at
2:46 PM<br>
<b>To: </b><a class="moz-txt-link-abbreviated" href="mailto:cscwg-public@cabforum.org">cscwg-public@cabforum.org</a>
<a class="moz-txt-link-rfc2396E" href="mailto:cscwg-public@cabforum.org"><cscwg-public@cabforum.org></a><br>
<b>Subject: </b>[Cscwg-public] Marking the EV
Code Signing Guidelines OBSOLETE</span><span
lang="EN-IN"><o:p></o:p></span></p>
</div>
<table class="MsoNormalTable" style="width:100.0%"
width="100%" cellspacing="0" cellpadding="0"
border="0" align="left">
<tbody>
<tr>
<td
style="border:solid #F26F27 1.5pt;background:#F26F27;padding:5.0pt 2.0pt 5.0pt 2.0pt"><br>
</td>
<td
style="width:100.0%;border:solid #A878B4 1.5pt;border-left:none;background:#FCF9F1;padding:5.0pt 4.0pt 5.0pt 12.0pt"
width="100%">
<div>
<p class="MsoNormal"
style="mso-element:frame;mso-element-frame-hspace:2.25pt;mso-element-wrap:around;mso-element-anchor-vertical:paragraph;mso-element-anchor-horizontal:column;mso-height-rule:exactly"><b><span
style="font-size:11.0pt;color:red">CAUTION:</span></b><span
style="font-size:11.0pt;color:red">
This email is originated from outside
of the organization. Do not open the
links or the attachments unless you
recognize the sender and know the
content is safe. </span><o:p></o:p></p>
</div>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:11.0pt"
lang="EN-IN"> </span><span lang="EN-IN"><o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:11.0pt" lang="EN-IN"><br>
Dear Members,<br>
<br>
As we discussed today at the F2F#61 meeting, I
would like to propose a ballot to mark the
"Guidelines For The Issuance And Management Of
Extended Validation Code Signing Certificates"
as obsolete. I suggest that we update the <a
href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcabforum.org%2Fworking-groups%2Fcode-signing%2Fev-code-signing-certificate-guidelines%2F&data=05%7C02%7Cmartijn.katerbarg%40sectigo.com%7C8cdeeef24c8d4104d4f408dc383fd290%7C0e9c48946caa465d96604b6968b49fb7%7C0%7C0%7C638447093980627329%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=QJsCgjzebEfwyu%2FxSoJZRXn8sMD%2Fy%2FvCNbfBq3FN97Q%3D&reserved=0"
moz-do-not-send="true">latest EVCS
Guidelines v1.4</a> to version 1.5 with the
following changes:<br>
<br>
--- BEGIN DRAFT BALLOT LANGUAGE ---<br>
<br>
In the "Notice to Readers" section, update the
second paragraph to state:<br>
<br>
<b>"The Code Signing Working Group considers
this document OBSOLETE as of XX XXXXXXXX
XXXX. CAs SHOULD NOT use this standard but
instead SHOULD use the "Baseline
Requirements for the Issuance and Management
of Publicly‐Trusted Code Signing
Certificates" that has incorporated and
improved requirements related to Extended
Validation (EV) Code Signing Certificates"</b><br>
<br>
Update section 17.1 to state the following:<br>
<br>
"</span><b><span style="font-size:11.0pt"
lang="EN-US">As this document is marked
OBSOLETE, CAs SHOULD NOT be audited against
this standard.</span></b><span
style="font-size:11.0pt" lang="EN-IN"> "<br>
<br>
--- END DRAFT BALLOT LANGUAGE ---<br>
<br>
The <b>XX XXXXXXXX XXXX </b>will include an
<b>effective date</b> we decide. I propose
this date is <b>in the past</b> but I am not
sure what would be a reasonable date. One
thought is to ask if there is a CA Member that
has been audited recently against the EV CS
Guidelines v1.4. Another thought is to ask CPA
Canada and ACAB'c for feedback about when they
stopped issuing Audit Letters that cover the
EV CS Guidelines v1.4. Other ideas are
welcome.<br>
<br>
Can I also have two endorsers so I can reserve
a ballot number?<br>
<br>
<br>
Thank you,<br>
Dimitris.</span><span lang="EN-IN"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt"
lang="EN-IN">Disclaimer: The email and its contents
hold confidential information and are intended for the
person or entity to which it is addressed. If you are
not the intended recipient, please note that any
distribution or copying of this email is strictly
prohibited as per Company Policy, you are requested to
notify the sender and delete the email and associated
attachments with it from your system. <o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</blockquote>
<br>
</body>
</html>