<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">These minutes were approved in the April 26, 2022 meeting of the Netsec WG.<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Apr 25, 2022, at 11:55 AM, Prachi Jain via Netsec <<a href="mailto:netsec@cabforum.org" class="">netsec@cabforum.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><br clear="all" class=""><div class=""><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class=""><b class="">NetSec Working Group – April 12th, 2022</b></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class=""><b class=""><br class="">
</b></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class=""><b class="">Attendees: </b></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class=""><br class="">
Antti Backman </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Adam Jones</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Ben Wilson </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Brittany Randall</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Bruce Morton </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Clint Wilson</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Corey Bonnell</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Corey Rasmussen</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Christophe Bonjean<br class="">
Daryn Wright</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">David Kluge</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Dustin Hollenback </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Heather Warncke</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Jillian Karner </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Joanna Fox</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Jozef Nigut</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Prachi Jain </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Tim Crawford</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Tony Seymour</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Trevoli Ponds-White </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class=""><br class="">
</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue"; min-height: 15px;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">1. <span class="gmail-s1" style="text-decoration-line:underline">Read Antitrust Statement</span></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class=""> Clint Wilson read the antitrust statement.</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class=""><br class="">
</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">2. <span class="gmail-s1" style="text-decoration-line:underline">Roll Call</span></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class=""> Clint Wilson read the roll.</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class=""><b class=""><br class=""></b></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">3. <u class="">Discussion Items</u></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class=""><br class="">a. We currently don’t have any ballots in discussion.</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue"; min-height: 15px;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">b. David Kluge gave an update regarding ongoing risk assessment work. He mentioned that we have finalized the assets section and are at a place where we can start assessing but are struggling with the methodology for documenting the assessment. In the last cloud sub-group call it was proposed that we use Microsoft’s STRIDE model. Trev offered to bring in a threat modeling expert. Trev is still following-up with them.<span class="gmail-Apple-converted-space"> </span></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue"; min-height: 15px;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">c. David, Trev and Clint also discussed about the OCSP SLA changes (<a href="https://docs.google.com/document/d/1hKSbbCXQbAxIX2MesHEoAS6q2PRQsbdCXXcwMx7fDQU/edit?usp=sharing&resourcekey=0-r6eCPgEcBHRhFd5iG0Y1Vw" class=""><span class="gmail-s2" style="color:rgb(220,161,13)">https://docs.google.com/document/d/1hKSbbCXQbAxIX2MesHEoAS6q2PRQsbdCXXcwMx7fDQU/edit?usp=sharing&resourcekey=0-r6eCPgEcBHRhFd5iG0Y1Vw</span></a>) There were some discussion around preference between global SLOs in the BRs or SLO/SLA publications in the CPSs. There were no strong preferences or reservations expressed by anyone. David will draft something and this will be taken back to other WGs. Bruce Morton expressed that this will involve changes in not only TLS BRs but other WG BRs as well.<span class="gmail-Apple-converted-space"> </span></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue"; min-height: 15px;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue"; min-height: 15px;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">d. No updates on zones ballot</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue"; min-height: 15px;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">e. Ben spent some time talking through all the issues that he has created in Github : <a href="https://github.com/cabforum/netsec/issues" class=""><span class="gmail-s2" style="color:rgb(220,161,13)">https://github.com/cabforum/netsec/issues</span></a> Ben collected all the WebTrust Task Force’s comments and put all the pending issues in Github.<br class="">
<br class="">
</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue"; min-height: 15px;" class=""><br class=""></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">4.. <span class="gmail-s1" style="text-decoration-line:underline">Any Other Business</span></div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">None</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class=""><br class="">
</div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">5. <span class="gmail-s1" style="text-decoration-line:underline">Next call</span>: </div><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">April 26th, 2022</div></div></div>
_______________________________________________<br class="">Netsec mailing list<br class=""><a href="mailto:Netsec@cabforum.org" class="">Netsec@cabforum.org</a><br class="">https://lists.cabforum.org/mailman/listinfo/netsec<br class=""></div></blockquote></div><br class=""></body></html>