<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=gb2312"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:宋体;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:宋体;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@宋体";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
text-align:justify;
text-justify:inter-ideograph;
font-size:10.5pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
/* Page Definitions */
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ZH-CN link=blue vlink=purple style='text-justify-trim:punctuation'><div class=WordSection1><p class=MsoNormal><span lang=EN-US>Hello everyone:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Below are contents from “2015-05-14 Minutes"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>“<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>1. Membership Application, China Financial Certification Authority: We have received an application CFCA. IPR was signed and they appear to meet all the CA membership criteria. Dean to double check with the applicant to make sure the signed is authorized to sign on behalf of the company. Otherwise, the application was conditionally approved. Mat asked if there was a relationship between this entity and the Chinese Government and wondered if there were other Government owned CAs in the Forum. Atilla said that the Government CA of Turkey under Tubitak, is a Government owned CA. Mat thought it might be helpful to put those CAs in another category. Dean said Izenpe is also owned by the Spanish Government. Gerv asked if CFCA were a Government CA, would we treat their application differently? The answer from the floor was no. There is nothing in the bylaws that state that. Mat said it would be helpful to understand which companies are public and which are owned by Governments. Especially when security incidents occur, private companies may be motivated to act differently. Dean suggested we discuss this further on another call or F2F meeting and we approve this request as is. Kirk suggested we ask in our application whether or not it is a Government applicant. Gerv said it isn’t relevant to their application and we should not ask it there. A discussion ensued on who audits Government CAs because sometimes it’s not a 3rd party auditor but ended w/o conclusion. Mat said the cross signing habits of Government CAs and Company CAs are different and this should be noted for the browsers when managing the risk.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>“<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>This Minutes have discussions relate to "Government CA", Mat said "it would be helpful to understand which companies are public and which are owned by Governments. Especially when security incidents occur, private companies may be motivated to act differently." "the cross signing habits of Government CAs and Company CAs are different and this should be noted for the browsers when managing the risk."<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Let me clarify , CFCA is NOT a government CA.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Chinese government have a list of companies directly controlled by government, CFCA is not among them.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>The Chinese company name of our company is "</span><span style='font-family:宋体'>中金金融认证中心</span><span lang=EN-US>"</span><span style='font-family:宋体'>，</span><span lang=EN-US> we can't use "</span><span style='font-family:宋体'>中国</span><span lang=EN-US>"</span><span style='font-family:宋体'>（</span><span lang=EN-US>China</span><span style='font-family:宋体'>）</span><span lang=EN-US> in the Chinese company name registration because we are not a government company.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>China have over 7 million government-employee or so called "civil servant", none of them work in CFCA, or in charge of CFCA.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>CEO of CFCA, Ji XiaoJie, is not designated by Chinese government, none of CFCA's employee or director is designated by Chinese government.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>CFCA is not cross signed with any other CA or government department, or government CA, actually CFCA is not cross signed with anyone, and have no plan of doing so.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>If need more proof or discussion we can put this into next conference. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>how do we define "Government CA"?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>In China, Some CAs are Subordinate to Chinese government department and their CEO are designated by Chinese Government, I won't object if you guys want to define those CA as government CA. But CFCA is not like that.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Mat said " Government CAs and Company CAs are different and this should be noted for the browsers when managing the risk."<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>I'm not sure if this is the reason why apple do not process our EV root certificate inclusion application(We have no such problem with Microsoft, Mozilla and Google), is there a "government CA" mark on our company name?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Mat give me a feeling that apple may think so-called "Government CA" is ready to do dirty work, and ready to cover it up if incident happens. In this case, been treated as a "Government CA" is not fair.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>(please remind me if this is not appropriate to discuss in forum mail-list)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Zhang Yi<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US>Business Research Competent<o:p></o:p></span></b></p><p class=MsoNormal><span lang=EN-US>China Financial Certification Authority <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Business Department<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Address: Bldg. 2</span><span style='font-family:宋体'>，</span><span lang=EN-US> #20</span><span style='font-family:宋体'>，</span><span lang=EN-US> 14th Kechuang street, YiZhuang Economic-Technological Development Zone</span><span style='font-family:宋体'>，</span><span lang=EN-US>Daxing District</span><span style='font-family:宋体'>，</span><span lang=EN-US>Beijing , P. R. China<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Postcode: 100176<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>TEL: +86 010-58903555<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Mobile: +86 18510280028<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Email: <a href="mailto:zhangyi@cfca.com.cn"><span style='color:windowtext'>zhangyi@cfca.com.cn</span></a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></body></html>