<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1256">
<meta content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style>
<!--
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif"}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:#1F497D}
span.EmailStyle18
{font-family:"Calibri","sans-serif";
color:#1F497D}
span.EmailStyle19
{font-family:"Calibri","sans-serif";
color:windowtext}
span.EmailStyle20
{font-family:"Calibri","sans-serif";
color:#1F497D}
span.EmailStyle21
{font-family:"Calibri","sans-serif";
color:windowtext}
span.EmailStyle22
{font-family:"Calibri","sans-serif";
color:#1F497D}
span.EmailStyle23
{font-family:"Calibri","sans-serif";
color:#1F497D;
font-weight:normal;
font-style:normal}
span.BalloonTextChar
{font-family:"Tahoma","sans-serif"}
.MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.WordSection1
{}
-->
</style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div>
<div style="font-family:Calibri,sans-serif; font-size:11pt">Correct. <br>
<br>
Sent from my Windows Phone</div>
</div>
<div dir="ltr">
<hr>
<span style="font-family:Calibri,sans-serif; font-size:11pt; font-weight:bold">From:
</span><span style="font-family:Calibri,sans-serif; font-size:11pt"><a href="mailto:Rick_Andrews@symantec.com">Rick Andrews</a></span><br>
<span style="font-family:Calibri,sans-serif; font-size:11pt; font-weight:bold">Sent:
</span><span style="font-family:Calibri,sans-serif; font-size:11pt">ý3/ý23/ý2015 5:32 AM</span><br>
<span style="font-family:Calibri,sans-serif; font-size:11pt; font-weight:bold">To:
</span><span style="font-family:Calibri,sans-serif; font-size:11pt"><a href="mailto:ansaboor@microsoft.com">Anoosh Saboori</a>;
<a href="mailto:bruce.morton@entrust.com">Bruce Morton</a></span><br>
<span style="font-family:Calibri,sans-serif; font-size:11pt; font-weight:bold">Cc:
</span><span style="font-family:Calibri,sans-serif; font-size:11pt"><a href="mailto:public@cabforum.org">CABFPub</a></span><br>
<span style="font-family:Calibri,sans-serif; font-size:11pt; font-weight:bold">Subject:
</span><span style="font-family:Calibri,sans-serif; font-size:11pt">RE: [cabfpub] Updates to Microsoft SHA-1 deprecation</span><br>
<br>
</div>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">Anoosh,</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">Thanks for informing us, but I want to be sure I know what you’ve changed. The post is still dated November 2013. I see a strikethrough and update in the
Code Signing Certificates section; is that the only change?</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">-Rick</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<div>
<div style="border:none; border-top:solid #B5C4DF 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:.5in"><b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif""> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org]
<b>On Behalf Of </b>Anoosh Saboori<br>
<b>Sent:</b> Saturday, March 21, 2015 5:29 PM<br>
<b>To:</b> Bruce Morton<br>
<b>Cc:</b> CABFPub<br>
<b>Subject:</b> Re: [cabfpub] Updates to Microsoft SHA-1 deprecation</span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:.5in"> </p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">Windows enforcement dates (i.e., date at which SHA-1 certificates will be rejected by Windows) only apply to SSL and code signing
certificates. All other types of certificates will be rejected on Windows side when SHA-1 pre-image attacks are deemed feasible by Microsoft.</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">Anoosh</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:.5in"><a name="_MailEndCompose"></a><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:.5in"><b><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"">From:</span></b><span style="font-size:11.0pt; font-family:"Calibri","sans-serif""> Bruce Morton [<a href="mailto:bruce.morton@entrust.com">mailto:bruce.morton@entrust.com</a>]
<br>
<b>Sent:</b> Friday, March 20, 2015 6:47 PM<br>
<b>To:</b> Anoosh Saboori<br>
<b>Cc:</b> CABFPub<br>
<b>Subject:</b> Re: [cabfpub] Updates to Microsoft SHA-1 deprecation</span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:.5in"> </p>
<div>
<p class="MsoNormal" style="margin-left:.5in">Hi Anoosh,</p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"> </p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in">Thank you for the update.</p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"> </p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in">I don't think the policy for S/MIME certificates has been stated. I see some discussion in the comments. Could you also advise how the SHA-1 deprecation policy applies to S/MIME certificates. </p>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"> </p>
</div>
<div>
<p class="MsoNormal" style="margin-right:0in; margin-bottom:12.0pt; margin-left:.5in">
Thanks, Bruce.</p>
</div>
<div>
<p class="MsoNormal" style="margin-right:0in; margin-bottom:12.0pt; margin-left:.5in">
<br>
On Mar 20, 2015, at 8:57 PM, Anoosh Saboori <<a href="mailto:ansaboor@microsoft.com">ansaboor@microsoft.com</a>> wrote:</p>
</div>
<blockquote style="margin-top:5.0pt; margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"">Hello,</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif""> </span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"">I would like to inform you that Microsoft has made update to its SHA-1 deprecation policy to accommodate developers targeting Vista/Server 2008.
Please see below.</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif""> </span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif""><a href="http://blogs.technet.com/b/pki/archive/2013/11/12/sha1-deprecation-policy.aspx">http://blogs.technet.com/b/pki/archive/2013/11/12/sha1-deprecation-policy.aspx</a>
</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif""> </span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"">Anoosh</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif""> </span></p>
</div>
</blockquote>
<blockquote style="margin-top:5.0pt; margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="margin-left:.5in">_______________________________________________<br>
Public mailing list<br>
<a href="mailto:Public@cabforum.org">Public@cabforum.org</a><br>
<a href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a></p>
</div>
</blockquote>
</div>
</div>
</body>
</html>