<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<br>
<br>
<div class="moz-cite-prefix">On 19/6/2024 6:49 μ.μ., Ian McMillan
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:PH7PR00MB17896A7DB141723F427B39B1C4CF2@PH7PR00MB1789.namprd00.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator"
content="Microsoft Word 15 (filtered medium)">
<style>@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:"Aptos Display";}@font-face
{font-family:Aptos;}@font-face
{font-family:"MS PGothic";
panose-1:2 11 6 0 7 2 5 8 2 4;}@font-face
{font-family:"\@MS PGothic";}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"MS PGothic",sans-serif;
mso-fareast-language:JA;}h1
{mso-style-priority:9;
mso-style-link:"Heading 1 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:24.0pt;
font-family:"MS PGothic",sans-serif;
mso-fareast-language:JA;
font-weight:bold;}h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:18.0pt;
font-family:"MS PGothic",sans-serif;
mso-fareast-language:JA;
font-weight:bold;}h4
{mso-style-priority:9;
mso-style-link:"Heading 4 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"MS PGothic",sans-serif;
mso-fareast-language:JA;
font-weight:bold;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}span.Heading1Char
{mso-style-name:"Heading 1 Char";
mso-style-priority:9;
mso-style-link:"Heading 1";
font-family:"Aptos Display",sans-serif;
color:#0F4761;
mso-fareast-language:JA;}span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Aptos Display",sans-serif;
color:#0F4761;
mso-fareast-language:JA;}span.Heading4Char
{mso-style-name:"Heading 4 Char";
mso-style-priority:9;
mso-style-link:"Heading 4";
font-family:"Aptos",sans-serif;
color:#0F4761;
mso-fareast-language:JA;
font-style:italic;}p.null, li.null, div.null
{mso-style-name:null;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"MS PGothic",sans-serif;
mso-fareast-language:JA;}span.EmailStyle22
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}div.WordSection1
{page:WordSection1;}ol
{margin-bottom:0in;}ul
{margin-bottom:0in;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Aptos",sans-serif;mso-fareast-language:EN-US">Dimitris,
<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Aptos",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Aptos",sans-serif;mso-fareast-language:EN-US">One
thing that is a bit out of sorts here is the in the first
line of the “Purpose of the Ballot” stating this ballot is
to clarify language regarding the Timestamp Authority
Private Key Protection. I know this ballot is not doing that
and the following line that outlines the goals clarifies
this ballot is for importing the EV guidelines into the
CSBRs so I don’t feel this is an issue.
<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Aptos",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
</div>
</blockquote>
<br>
You are absolutely right, apologies for the copy-paste leftover.
Indeed, the main goals of the ballot in the second sentence are
setting the scope correctly.<br>
<br>
Thank you Ian,<br>
Dimitris.<br>
<br>
<blockquote type="cite"
cite="mid:PH7PR00MB17896A7DB141723F427B39B1C4CF2@PH7PR00MB1789.namprd00.prod.outlook.com">
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Aptos",sans-serif;mso-fareast-language:EN-US">On
the behalf of Microsoft, I vote “YES” to ballot CSC-25.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Aptos",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Aptos",sans-serif;mso-fareast-language:EN-US">Cheers,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Aptos",sans-serif;mso-fareast-language:EN-US">Ian
<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Aptos",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div
style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">
Cscwg-public <a class="moz-txt-link-rfc2396E" href="mailto:cscwg-public-bounces@cabforum.org"><cscwg-public-bounces@cabforum.org></a>
<b>On Behalf Of </b>Dimitris Zacharopoulos (HARICA) via
Cscwg-public<br>
<b>Sent:</b> Wednesday, June 19, 2024 6:16 AM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:cscwg-public@cabforum.org">cscwg-public@cabforum.org</a><br>
<b>Subject:</b> [EXTERNAL] [Cscwg-public] [Voting
begins] Ballot CSC-25: Import EV Guidelines into the
Code Signing Baseline Requirements<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">Voting begins
for this ballot.<o:p></o:p></p>
<h1>CSC-25 Import EV Guidelines into the Code Signing Baseline
Requirements<o:p></o:p></h1>
<h2 id="bkmrk-summary"><strong><span
style="font-family:"MS PGothic",sans-serif">Purpose
of the Ballot</span></strong><o:p></o:p></h2>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"
id="bkmrk-this-ballot-updates-">
This ballot updates the <span lang="JA">“</span>Baseline
Requirements for the Issuance and Management of Publicly<span
lang="JA">‐</span>Trusted Code Signing Certificates<span
lang="JA">“</span> version 3.7 in order to clarify language
regarding Timestamp Authority Private Key Protection. The main
goals of this ballot are to:<o:p></o:p></p>
<ol id="bkmrk-remove-dependencies-" type="1" start="1">
<li class="null" style="mso-list:l2 level1 lfo1">Import all
CSBR references that point to the EV Guidelines with the
actual language of corresponding sections of version 1.8.0
of the EV Guidelines, in order to remove external
dependencies.<o:p></o:p></li>
<li class="null" style="mso-list:l2 level1 lfo1">The Code
Signing Working Group decided not to import rules related to
the subject:organizationIdentifier field.<o:p></o:p></li>
</ol>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"
id="bkmrk-the-following-motion">
The following motion has been proposed by Dimitris
Zacharopoulos of HARICA and endorsed by Martijn Katerbarg of
Sectigo and Corey Bonnell of Digicert.<o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"
id="bkmrk-you-can-view-the-git">
You can view the github pull request representing this ballot
<a href="https://github.com/cabforum/code-signing/pull/38"
moz-do-not-send="true">
here</a>. <o:p></o:p></p>
<h2 id="bkmrk-motion-begins">Motion Begins<o:p></o:p></h2>
<p id="bkmrk-modify-the-%22baseline">MODIFY the “Baseline
Requirements for the Issuance and Management of
Publicly‐Trusted Code Signing Certificates” ("Code Signing
Baseline Requirements") based on version 3.7 as specified in
the following redline:<o:p></o:p></p>
<ul id="bkmrk-https%3A%2F%2Fgithub.com%2Fc" type="disc">
<li class="null" style="mso-list:l3 level1 lfo2"><a
href="https://github.com/cabforum/code-signing/compare/d431d9104094f2b89f35ed4bf1d64b9a844e762b...d5af6d895b3666b5351509ad25d47ac5e87321fc"
moz-do-not-send="true" class="moz-txt-link-freetext">https://github.com/cabforum/code-signing/compare/d431d9104094f2b89f35ed4bf1d64b9a844e762b...d5af6d895b3666b5351509ad25d47ac5e87321fc</a>
<o:p></o:p></li>
</ul>
<h2 id="bkmrk-motion-ends">Motion Ends<o:p></o:p></h2>
<p id="bkmrk-this-ballot-proposes">This ballot proposes a Final
Maintenance Guideline. The procedure for approval of this
ballot is as follows:<o:p></o:p></p>
<h4 id="bkmrk-discussion-%2811%2B-days">Discussion (at least 7
days)<o:p></o:p></h4>
<ul id="bkmrk-start-time%3A-2024-01-" type="disc">
<li class="null" style="mso-list:l0 level1 lfo3">Start time:
2024-06-12 07:00:00 UTC<o:p></o:p></li>
<li class="null" style="mso-list:l0 level1 lfo3">End time: on
or after 2024-06-19 07:00:00 UTC<o:p></o:p></li>
</ul>
<h4 id="bkmrk-vote-for-approval-%287">Vote for approval (7 days)<o:p></o:p></h4>
<ul id="bkmrk-start-time%3A-tbd-end-" type="disc">
<li class="null" style="mso-list:l1 level1 lfo4">Start time:
2024-06-19 10:15:00 UTC<o:p></o:p></li>
<li class="null" style="mso-list:l1 level1 lfo4">End time:
2024-06-26 10:15:00 UTC<o:p></o:p></li>
</ul>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</blockquote>
<br>
</body>
</html>