<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        font-size:11.0pt;
        font-family:"Aptos",sans-serif;
        mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:#467886;
        text-decoration:underline;}
p.null, li.null, div.null
        {mso-style-name:null;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Aptos",sans-serif;}
span.pl-mh
        {mso-style-name:pl-mh;}
span.apple-converted-space
        {mso-style-name:apple-converted-space;}
span.EmailStyle25
        {mso-style-type:personal-reply;
        font-family:"Aptos",sans-serif;
        color:windowtext;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;
        mso-ligatures:none;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
/* List Definitions */
@list l0
        {mso-list-id:667832243;
        mso-list-template-ids:-2038649774;}
@list l0:level1
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l0:level2
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:1.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l0:level3
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:1.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l0:level4
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l0:level5
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l0:level6
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l0:level7
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l0:level8
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l0:level9
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1
        {mso-list-id:691493924;
        mso-list-template-ids:568249574;}
@list l1:level1
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level2
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:1.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level3
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:1.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level4
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level5
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level6
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level7
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level8
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level9
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2
        {mso-list-id:701512386;
        mso-list-template-ids:-736166578;}
@list l2:level1
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level2
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:1.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level3
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:1.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level4
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level5
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level6
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level7
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level8
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2:level9
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l3
        {mso-list-id:1244071288;
        mso-list-template-ids:-94761738;}
@list l3:level1
        {mso-level-tab-stop:.5in;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l3:level2
        {mso-level-tab-stop:1.0in;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l3:level3
        {mso-level-tab-stop:1.5in;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l3:level4
        {mso-level-tab-stop:2.0in;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l3:level5
        {mso-level-tab-stop:2.5in;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l3:level6
        {mso-level-tab-stop:3.0in;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l3:level7
        {mso-level-tab-stop:3.5in;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l3:level8
        {mso-level-tab-stop:4.0in;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l3:level9
        {mso-level-tab-stop:4.5in;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l4
        {mso-list-id:1453397779;
        mso-list-template-ids:-676710100;}
@list l5
        {mso-list-id:1798327293;
        mso-list-template-ids:-992944260;}
@list l5:level1
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l5:level2
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:1.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l5:level3
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:1.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l5:level4
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l5:level5
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l5:level6
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l5:level7
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l5:level8
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l5:level9
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
ol
        {margin-bottom:0in;}
ul
        {margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#467886" vlink="#96607D" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><b>Ballot CSC 26: Timestamping Private Key Protection Ballot<o:p></o:p></b></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The Intellectual Property Review (IPR) period for Ballot CSC26: <b>Timestamping Private Key Protection Ballot </b>has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of Aug 1, 2024.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The new Code Signing BRs will be published to the CABF public website in accordance with the Bylaws.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3'>Dean Coclin <o:p></o:p></span></b></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#48565E'>CSCWG Chair<o:p></o:p></span></p><div><div><p class=MsoNormal><span style='mso-ligatures:none'><o:p> </o:p></span></p></div></div><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-family:"Calibri",sans-serif;mso-ligatures:none'>From:</span></b><span style='font-family:"Calibri",sans-serif;mso-ligatures:none'> Cscwg-public <cscwg-public-bounces@cabforum.org> <b>On Behalf Of </b>Dean Coclin via Cscwg-public<br><b>Sent:</b> Monday, July 1, 2024 9:55 AM<br><b>To:</b> cscwg-public@cabforum.org<br><b>Subject:</b> [Cscwg-public] Notice of IPR Review Period: CSC-26 Timestamping Private Key Protection Ballot<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b><span lang=EN-GB>NOTICE OF IPR REVIEW PERIOD</span></b><span lang=EN-GB style='mso-ligatures:none'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice is attached to this email, both in red-line and changes-accepted draft format, in PDF version.</span><span lang=EN-GB style='font-size:12.0pt'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-GB>Summary of Review</span></b><span lang=EN-GB><o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-GB>Ballot for Review: </span></b><span lang=EN-GB> <i>See below email</i><o:p></o:p></span></p><p class=MsoNormal><i><span lang=EN-GB><o:p> </o:p></span></i></p><p class=MsoNormal><i><span lang=EN-GB>Start of Review Period: July 1<sup>st</sup>, 2024 at 3:00 PM UTC</span></i><span lang=EN-GB><o:p></o:p></span></p><p class=MsoNormal><i><span lang=EN-GB>End of Review Period: August 1, 2024 at 3:00 PM UTC</span></i><span lang=EN-GB><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Members with any Essential Claim(s) to exclude must forward a written Notice to Exclude Essential Claims to the Working Group Chair (email to Dean Coclin <</span><a href="mailto:dean.coclin@digicert.com"><span lang=EN-GB>dean.coclin@digicert.com</span></a><span lang=EN-GB>>) and also submit a copy to the CA/B Forum CSCWG public mailing list (email to public at cabforum.org <</span><a href="mailto:cscwg-public@cabforum.org">cscwg-public@cabforum.org</a><span lang=EN-GB>>) before the end of the Review Period.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>For details, please see the current version of the </span><a href="https://url.avanan.click/v2/___https:/cabforum.org/wp-content/uploads/CABF-IPR-Policy-v.1.3_4APR18.pdf___.YXAzOmRpZ2ljZXJ0OmE6bzo4OWUxMTQ0MzAxY2U1NDNiNWVlN2NmYTgxNmYwN2YzMjo2OmM0YTk6OWVlMTdiOWZlYmI3ZWZkZWU0ZDljOWFhZTljYTY5ZGRhN2I1MzhkZmRjYjJiMGY3MDYyMjA1MTVlN2IyNzhjZTpoOkY6Tg" title="Protected by Avanan: https://cabforum.org/wp-content/uploads/CABF-IPR-Policy-v.1.3_4APR18.pdf"><span lang=EN-GB>CA/Browser Forum Intellectual Property Rights Policy</span></a><span lang=EN-GB>.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>(An optional template for submitting an Exclusion Notice is available at </span><a href="https://url.avanan.click/v2/___https:/cabforum.org/wp-content/uploads/Template-for-Exclusion-Notice.pdf___.YXAzOmRpZ2ljZXJ0OmE6bzo4OWUxMTQ0MzAxY2U1NDNiNWVlN2NmYTgxNmYwN2YzMjo2OmY1NmY6MjdiODVlNDQ1MThmNWIwNjE0ZmVmYTA1ZDEyMmE1YzU4OWQxZWE2Yzk1MmMyY2FjZGVmOTZmYjVkMTBjZTliODpoOkY6Tg" title="Protected by Avanan: https://cabforum.org/wp-content/uploads/Template-for-Exclusion-Notice.pdf"><span lang=EN-GB>https://cabforum.org/wp-content/uploads/Template-for-Exclusion-Notice.pdf</span></a><span lang=EN-GB>)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><div><div><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'>Dean Coclin <o:p></o:p></span></b></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#48565E;mso-ligatures:none'>CSCWG Chair<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#48565E;mso-ligatures:none'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-ligatures:none'><o:p> </o:p></span></p></div></div><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-family:"Calibri",sans-serif;mso-ligatures:none'>From:</span></b><span style='font-family:"Calibri",sans-serif;mso-ligatures:none'> Cscwg-public <<a href="mailto:cscwg-public-bounces@cabforum.org">cscwg-public-bounces@cabforum.org</a>> <b>On Behalf Of </b>Dean Coclin via Cscwg-public<br><b>Sent:</b> Friday, June 28, 2024 4:16 PM<br><b>To:</b> <a href="mailto:cscwg-public@cabforum.org">cscwg-public@cabforum.org</a><br><b>Subject:</b> [Cscwg-public] CSC-26 Timestamping Private Key Protection Ballot results<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'>Voting on CSC-26 Timestamping Private Key Protection has closed and the ballot has passed. Results are below:<o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'><o:p> </o:p></span></b></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'>Certificate Issuers <o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'>In Favor: Certum, DigiCert, eMudhra, Entrust, GlobalSign, IdenTrust, Sectigo, SSL.com<o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'>Opposed: none<o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'>Abstain: none<o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'><br>Certificate Consumers:<o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'>In Favor: Microsoft<o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'>Opposed: none<o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'>Abstain: none<o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3;mso-ligatures:none'><o:p> </o:p></span></b></p><p class=MsoNormal><span style='mso-ligatures:none'>Quorum was met at 5, therefore the ballot passes.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-ligatures:none'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-ligatures:none'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-ligatures:none'>Dean Coclin<o:p></o:p></span></p><p class=MsoNormal><span style='mso-ligatures:none'>CSCWG Chair<o:p></o:p></span></p><p class=MsoNormal><span style='mso-ligatures:none'><o:p> </o:p></span></p></div></div><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-family:"Calibri",sans-serif;mso-ligatures:none'>From:</span></b><span style='font-family:"Calibri",sans-serif;mso-ligatures:none'> Cscwg-public <</span><a href="mailto:cscwg-public-bounces@cabforum.org"><span style='font-family:"Calibri",sans-serif;mso-ligatures:none'>cscwg-public-bounces@cabforum.org</span></a><span style='font-family:"Calibri",sans-serif;mso-ligatures:none'>> <b>On Behalf Of </b>Martijn Katerbarg via Cscwg-public<br><b>Sent:</b> Thursday, June 20, 2024 12:31 PM<br><b>To:</b> </span><a href="mailto:cscwg-public@cabforum.org"><span style='font-family:"Calibri",sans-serif;mso-ligatures:none'>cscwg-public@cabforum.org</span></a><span style='font-family:"Calibri",sans-serif;mso-ligatures:none'><br><b>Subject:</b> [Cscwg-public] [Voting Period Begins] CSC-26 Timestamping Private Key Protection<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p><strong><span style='font-family:"Aptos",sans-serif;color:#212121'>Purpose of the Ballot</span></strong><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal style='caret-color: rgb(33, 33, 33);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px' id=bkmrk-this-ballot-updates-><span style='color:#212121'>This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly</span><span style='font-family:"Cambria Math",serif;color:#212121'>‐</span><span style='color:#212121'>Trusted Code Signing Certificates“ version 3.7 in order to clarify language regarding Timestamp Authority Private Key Protection. The main goals of this ballot are to:<o:p></o:p></span></p><ol start=1 type=1 id=bkmrk-remove-dependencies-><li class=null style='color:#212121;mso-list:l3 level1 lfo3'><span class=pl-mh><span style='font-size:11.0pt'>Require Timestamp Authority Subordinate CA Private Keys to be stored in offline HSMs</span></span><o:p></o:p></li><li class=null style='color:#212121;mso-list:l3 level1 lfo3'><span class=pl-mh><span style='font-size:11.0pt'>Add a requirement to remove Private Keys associated with Timestamp Certificates after a 18 months</span></span><o:p></o:p></li><li class=null style='color:#212121;mso-list:l3 level1 lfo3'><span class=pl-mh><span style='font-size:11.0pt'>Add a requirement to reject SHA-1 timestamp requests</span></span><o:p></o:p></li></ol><p class=MsoNormal style='caret-color: rgb(33, 33, 33);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px' id=bkmrk-the-following-motion><span style='color:#212121'>The following motion has been proposed by Martijn Katerbarg of Sectigo and endorsed by Bruce Morton of Entrust and Ian McMillan of Microsoft.</span><span lang=SV style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><span lang=SV style='color:#212121'><o:p> </o:p></span></p><p class=MsoNormal style='caret-color: rgb(33, 33, 33);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px' id="bkmrk-%C2%A0motion-begins"><strong><span style='font-family:"Aptos",sans-serif;color:#212121'>MOTION BEGINS</span></strong><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal style='caret-color: rgb(33, 33, 33);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px' id=bkmrk-this-ballot-updates--1><span style='color:#212121'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#212121'>This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly</span><span style='font-family:"Cambria Math",serif;color:#212121'>‐</span><span style='color:#212121'>Trusted Code Signing Certificates” ("Code Signing Baseline Requirements") based on version 3.7. MODIFY the Code Signing Baseline Requirements as specified in the following redline:<span class=apple-converted-space> </span></span><a href="https://url.avanan.click/v2/___https:/github.com/cabforum/code-signing/compare/d431d9104094f2b89f35ed4bf1d64b9a844e762b...12130ff7c2b41d795d47925c084780ea0f7328cd___.YXAzOmRpZ2ljZXJ0OmE6bzo4NDVjMzVmMjQ0MzI5OGUyZmQ0NzljYjNkZGQ5NmE0Mjo2OmUwMmQ6MDI2ZTdmZmQ4OWQxMDgzZDcxMzA4YjE3NDUyNjk3MzQ0ZDgwM2U1YTdkMWVjZjRkZmFjZTRjNzA1NTUwMTRmOTpoOkY" title="Original URL: https://github.com/cabforum/code-signing/compare/d431d9104094f2b89f35ed4bf1d64b9a844e762b...12130ff7c2b41d795d47925c084780ea0f7328cd Click to follow link."><span style='color:#0078D7'>https://github.com/cabforum/code-signing/compare/d431d9104094f2b89f35ed4bf1d64b9a844e762b...12130ff7c2b41d795d47925c084780ea0f7328cd</span></a><span style='color:#212121'><o:p></o:p></span></p><p style='caret-color: rgb(33, 33, 33);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px' id=bkmrk-motion-ends><strong><span style='font-family:"Aptos",sans-serif;color:#212121'>MOTION ENDS</span></strong><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal style='caret-color: rgb(33, 33, 33);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px' id=bkmrk-the-procedure-for-th><span style='color:#212121'>The procedure for this ballot is as follows:<o:p></o:p></span></p><p style='caret-color: rgb(33, 33, 33);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px' id="bkmrk-discussion-%287-days%29"><span style='color:#212121'>Discussion (7 days)<o:p></o:p></span></p><ul style='margin-top:0in;caret-color: rgb(33, 33, 33);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px' type=disc id="bkmrk-start-time%3A-09-09-20"><li class=MsoNormal style='color:#212121;mso-list:l2 level1 lfo6'>Start Time: 2024-06-13 16:30 UTC<o:p></o:p></li><li class=MsoNormal style='color:#212121;mso-list:l2 level1 lfo6'>End Time: 2024-06-20 16:30 UTC<o:p></o:p></li></ul><p style='caret-color: rgb(33, 33, 33);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px' id="bkmrk-vote-for-approval-%287"><span style='color:#212121'>Vote for approval (7 days)<o:p></o:p></span></p><ul style='margin-top:0in;caret-color: rgb(33, 33, 33);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px' type=disc id="bkmrk-start-time%3A-09-16-20"><li class=MsoNormal style='color:#212121;mso-list:l5 level1 lfo9'>Start Time: 2024-06-20 16:30 UTC<o:p></o:p></li><li class=MsoNormal style='color:#212121;mso-list:l5 level1 lfo9'>End Time: 2024-06-2<span lang=SV>7</span> 16:30 UTC<o:p></o:p></li></ul><p class=MsoNormal style='caret-color: rgb(33, 33, 33);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px' id="bkmrk-%C2%A0"><span style='color:#212121'> <o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>