<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:866530051;
mso-list-type:hybrid;
mso-list-template-ids:2071001616 -567870482 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:0in;
text-indent:0in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Here are the notes from our penultimate telephone call, held 4 April 2013. Item 14 was amended from the draft minutes to clarify that the draft white paper had been circulated to the code signing working group and not the CABF as a whole.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Present: Rick Andrews, Atsushi Inaba, Dean Coclin, Robin Alden , Steve Roylance, Wayne Thayer, Gerv Markham , Ben Wilson, Rich Smith, Phil Hallam-Baker<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Agenda review: The agenda was not sent out ahead of time due to a mix-up but was announced at the start of the meeting.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Approve Minutes of 21 March 2013: The minutes of 21 March 2013 were approved as published.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>4.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Review of Ballots: There are no outstanding ballots.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>5.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Latest Version of BR 1.1.3 on website: Wayne was requested to place latest version on the website. (Was completed after the call). Steve asked if we are moving away from the “errata” system and going towards point releases. Ben said that every ballot will produce a new point release and the “errata” will be shown in each subsequent release. These will be pdf files.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>6.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Ballot to add DSA into Baseline Requirements Appendix A: Rick is looking for a second endorser to his proposed ballot. Robin asked to see the ballot and he would consider endorsing. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>7.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>NIST Workshop: Ben is preparing slides for the NIST meeting on behalf of the CABF. Several members will meet for dinner on Tuesday night before the conference.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>8.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>EV SSL Guidelines: Rick said he hasn’t received any comments since the face to face meeting. He will put to a ballot if no other comments are received. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>9.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Technical Constraints on sub CAs: Steve asked for members to review the language in the email he sent out and respond with comments. He will format it as a ballot shortly.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>10.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Code Signing Working Group: Dean gave an update on the CSWG. A notice for public participation was posted but no one has responded from outside the CABF. The first meeting was held where it was agreed to set the high level goal as: “Prepare Baseline Requirements to reduce the incidence of signed malware”. The group will initially research the causes of signed malware by reviewing recent incidents and also reviewing best practices that may already exist from places like NIST, OTA, “Stop badware”, as well as code signing guidelines from Microsoft and Mozilla. The working group will meet in Munich on June 13<sup>th</sup>.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>11.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Munich Meeting: Symantec will provide a website for participants to register for the conference and to reserve hotel rooms. We were able to secure a hotel not far from the office and it looks like about 25 participants will attend. Symantec will hold rooms at the hotel for those that register. Members can pay with their own credit card upon checkout. Agenda to follow.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>12.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>IETF: Phil stated that the “must staple” draft has been renamed. There are also drafts on “Multi-stapling” and “Cached credentials for TLS”. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>13.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Status of website rewrites: Dean stated that most of the material is up on the wiki and encouraged a smaller group to get together to complete the updates. We will need Wayne’s help to complete the task and we might want to take a ˝ day in Munich to get peer review of all the materials.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>14.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Code Signing and NIST Meeting: Phil wrote a white paper which he circulated to the Code Signing Working Group which is basically a “problem statement”. Every platform has a different approach and developers have to learn how to sign code for multiple platforms. Phil said there really isn’t a forum that “owns” code signing as an infrastructure. Dean said that the CABF CSWG was setup to address this.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:0in;text-indent:0in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>15.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]> Meeting adjourned until the next call – Thursday, 18 April, 2013.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>