<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma",sans-serif;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma",sans-serif;}
p.Default, li.Default, div.Default
{mso-style-name:Default;
margin:0in;
margin-bottom:.0001pt;
text-autospace:none;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle25
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle26
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle27
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1460998000;
mso-list-type:hybrid;
mso-list-template-ids:-356329220 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Attendees: Atsushi Inaba, Atilla Biller, Ben Wilson, Bruce Morton, Burak Kalkan, Davut Tokgoz, Dean Coclin, Dimitris Zacharopoulos, Doug Beattie, Eddy Nigg, Jeremy Rowley, Kirk Hall, Li-Chun Chen, Mads Henriksveen, Patrick Tronnier, Peter Miscovic, Rick Andrews, Robin Alden, Ryan Sleevi, Sisel Hoel, Tim Hollebeek, Tim Shirley, Tyler Myers, Wayne Thayer, Wendy Brown<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Antitrust Statement Read<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Roll Call completed<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Agenda Reviewed. New topic on LV certificates added.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>4.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Minutes of 12 November meeting: The minutes were approved and will be publicized.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>5.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Ballot Status: Ben is updating github with new policy working group ballots. A new policy working group ballot (159) is forthcoming for section 4 of the BRs. Ballot 157 (amend IPR) has been assigned but not yet balloted. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>6.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Proposed “LV” Certificates: Jeremy brought forward an item regarding “LV” or Legacy Verified certificates. This was brought up by Facebook and Cloudflare in order to find a better way to deprecate the SHA-1 certificates. They would be distinguished by an OID. Jeremy didn’t have a specific proposal but just wanted to get a feel how forum members thought about it. Dean asked how this improves the security of the ecosystem? Jeremy said that older browsers would have no security (if they don’t work with SHA-2) so this provides some security to them (since they can’t move to SHA-2). Kirk said he has some sympathy for the older browsers but is concerned about enforceability. Jeremy said the website would use SHA-2 first but fall back to SHA-1 if there was an issue. Wayne said the enforcement should be in the browsers by blocking SHA-1. Kirk said it comes down to allowing some encryption (via SHA-1) or no encryption by not allowing it. Wayne said that sites could conceivable get a 3 year SHA-1 cert from some CAs now and avoid this issue.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>7.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Domain Validation Ballot: The Validation Working Group went through 5 remaining questions and is working through “random values” and “test certs”. He is hoping to have something for full review at the Scottsdale meeting, if not sooner. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>8.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Membership Applications: We received a membership application from the Ministry of Interior of Korea. All items were in order. No objections from the Forum members. Full membership approved. A second application was received from Amazon Trust Services for Associate membership (while waiting for completion of their WebTrust audit). Membership approved.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>9.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>PAG Status: Ben said that Gerv had asked what the transition period would be if we adopt the new IPR policy. What would the disclosure framework be? Ben assumed we would give people 30-60 days to submit exclusions. Dean suggested if a new IPR ballot had to be adopted, then members will need considerable time for their corporate attorneys review it. The normal 2 week period is too short and will likely fail because folks won’t have time to review. Kirk and Ryan suggested we be clear about how the policy affects members and structure a timeline accordingly. Ben suggested that anyone that would like to discuss further, stay on the call for a short meeting. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>10.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Validation WG Update: Kirk said there was some discussion about proceeding with the IPR ballot before the domain validation ballot. Ryan said they are related and we need to understand how it affects existing disclosures as this will affect the timing. If we do domain validation before modifying IPR policy, there is some ambiguity as to whether it will apply. This is Google’s concern. Kirk said there is another path: Pass DV first, pass IPR second and re-pass DV. Kirk also said that a CA using “any other method” could be violating someone’s patent and not know it. Ben suggested holding off on the DV ballot until IPR passes. Kirk said the danger is that it could be a year off. Ryan asked if that is realistic given that we have 60 days as a limit in the current IPR for ballots. He thought it was doable much more quickly. One-two months to review ballot followed by 1 week voting period. Kirk suggested that companies that do not sign be suspended from membership, rather than kicked out of the program as he feels many legal departments will not start looking at it until it becomes a formal ballot. But we need straw man dates to kick this off. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>11.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Code Signing WG Update: Ballot voting starts today to approve the Code Signing Baseline Requirements. Dean and Jeremy met with the WebTrust Task Force to review the document. Some minor comments received and will be incorporated in the next release of the doc. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>12.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Policy WG Update: Update already given above in terms of the ballots.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>13.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Information Sharing WG Update: Meeting tomorrow. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>14.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Other Business: Dates for Bilbao meeting: Seems to be conflicts for the weeks of June 7<sup>th</sup> and June 21<sup>st</sup> so we are looking at the week of June 14<sup>th</sup>. Wayne cannot make it then. Need to check with Gerv. Inigo will be absent for 1 evening. For the February meeting, the wiki registration is open. The hotel has been selected and guests should book it per the instructions on the wiki. Meeting will be held at the GoDaddy office in North Scottsdale. Attendees should book their hotel now as rooms in Scottsdale are at a premium in February. A shuttle to the meeting will be provided from the hotel. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>15.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Next teleconference scheduled for January 7th<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='mso-list:Ignore'>16.<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Meeting Adjourned<o:p></o:p></p></div></body></html>