<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Nur Text Zchn";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.NurTextZchn
{mso-style-name:"Nur Text Zchn";
mso-style-priority:99;
mso-style-link:"Nur Text";
font-family:"Consolas",serif;}
span.E-MailFormatvorlage20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.PlainText, li.PlainText, div.PlainText
{mso-style-name:"Plain Text";
mso-style-link:"Plain Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
span.E-MailFormatvorlage23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="DE" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">PSW GROUP (Christian Heutger, Patrycja Tulinska) would like to join as interested party<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal">Mit freundlichen Grüßen,<o:p></o:p></p>
<p class="MsoNormal">Christian Heutger<o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">Chief Technology Officer (CTO)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">CISSP, CISA, CISM, CIPP/E, CIPM<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">ITIL-Expert, PRINCE2-/COBIT-Practitioner<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">DS-/ISO 9001-/ISO 20000-1-/ISO 27001-Auditor<o:p></o:p></span></p>
<p class="MsoNormal">Zusätzliche Prüfverfahrens-Kompetenz für § 8a (3) BSIG sowie gemäß IT-Sicherheitskatalog nach § 11 (1a) EnWG<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://www.psw-training.de/"><span style="text-decoration:none"><img border="0" width="728" height="90" style="width:7.5833in;height:.9375in" id="Grafik_x0020_1" src="cid:image001.jpg@01D4D97F.C4DCDDB0" alt="signature_667973861"></span></a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-- <o:p></o:p></p>
<p class="MsoNormal">PSW GROUP GmbH & Co. KG, Flemingstraße 20-22, 36041 Fulda, Hessen, Deutschland<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Telefon 0661/480276-10, Telefax 0661/480276-19<o:p></o:p></p>
<p class="MsoNormal">Hotline 0800/503750-1, Faxline 0800/503750-9<o:p></o:p></p>
<p class="MsoNormal">support@psw.net, www.psw.net, kb.psw.net<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Geschäftsführerin Patrycja Tulinska, Amtsgericht Fulda, HRA 5007<o:p></o:p></p>
<p class="MsoNormal">Steuernr. 018 357 60369, USt-IdNr. DE243718955, DUNS-Nr. 53-747-3485<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Komplementär J.C. Beteiligungsges. mbH, Anschrift w.o., Amtsgericht Fulda, HRB 5474<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Diese Information ist vertraulich und ausschließlich für die adressierte Person bestimmt. Personen, für die diese Information nicht bestimmt ist, ist es nicht gestattet, diese zu lesen, erneut zu übertragen, zu verbreiten oder anderweitig
zu verwenden. Personen, für die diese Information nicht bestimmt ist, dürfen sich durch diese Mail nicht veranlasst sehen, Maßnahmen irgendeiner Art zu ergreifen. Sollten Sie diese Nachricht irrtümlich erhalten haben, bitten wir Sie, sich mit dem Absender
in Verbindung zu setzen und das Material (die Mail nebst etwaigen Anhängen) von Ihrem Computer zu löschen, ohne eine Kopie davon zurückzubehalten. Der Adressat dieser Nachricht hat uns gebeten, mit ihm über das Internet zu korrespondieren.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Wir weisen darauf hin, dass mittels E-Mail übermittelte Nachrichten mit und ohne Zutun von Dritten verloren, verändert oder verfälscht werden können. Herkömmliche E-Mails sind nicht gegen den Zugriff von Dritten geschützt und deshalb ist
auch die Vertraulichkeit unter Umständen nicht gewahrt. Wir haften deshalb nicht für die Unversehrtheit von E-Mails, nachdem sie unseren Herrschaftsbereich verlassen haben und können Ihnen hieraus entstehende Schäden nicht ersetzen. Sollte trotz der von uns
verwendeten Virus-Schutz-Programme durch die Zusendung von E-Mails ein Virus in Ihre Systeme gelangen, haften wir nicht für eventuell hieraus entstehende Schäden.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">This message is confidential and only intended for the recipient. Should you not be the intended recipient you are kindly asked to advise the sender immediately by reply e-mail and delete
this message and all attachments without keeping a copy.</span><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">Von: </span></b><span style="font-size:12.0pt;color:black">Public <public-bounces@cabforum.org> im Auftrag von Dean Coclin via Public <public@cabforum.org><br>
<b>Antworten an: </b>Dean Coclin <dean.coclin@digicert.com>, CA/Browser Forum Public Discussion List <public@cabforum.org><br>
<b>Datum: </b>Dienstag, 12. März 2019 um 17:46<br>
<b>An: </b>CA/Browser Forum Public Discussion List <public@cabforum.org><br>
<b>Betreff: </b>[cabfpub] Code Signing Working Group - Call for Participants<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">In accordance with the CA/B Forum Bylaws and the Charter of said working group, the Interim Chair announces a call for Participants interested in joining the Code Signing Working Group.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Current CA/B Forum members should submit their names and company affiliations, as a formal declaration of their intent (or provide them at the face to face meeting).<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Interested Parties are eligible to participate once they provide the signed IPR agreement to the Chair.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Here is the text from the ballot relevant to membership:<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoPlainText">The CSCWG SHALL consist of two classes of voting members, Certificate Issuers and Certificate Consumers meeting the eligibility criteria below:<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">(1) A Certificate Issuer eligible for voting membership in the CSCWG MUST have a publicly-available audit report or attestation statement in accordance with one of the following schemes:<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">* WebTrust for CAs v.2.0 or newer; or <o:p></o:p></p>
<p class="MsoPlainText">* ETSI EN 319 411-1, which includes normative references to ETSI EN 319 401 (the latest version of the referenced ETSI documents should be applied); or<o:p></o:p></p>
<p class="MsoPlainText">* If a Government Certificate Issuer is required by its Certificate Policy to use a different internal audit scheme, it MAY use such scheme provided that the audit either (a) encompasses all requirements of one of the above
schemes or (b) consists of comparable criteria that are available for public review.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">These audit reports must also meet the following requirements:<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">* They must report on the operational effectiveness of controls for a historic period of at least 60 days;<o:p></o:p></p>
<p class="MsoPlainText">* No more than 27 months have elapsed since the beginning of the reported-on period and no more than 15 months since the end of the reported-on period; and<o:p></o:p></p>
<p class="MsoPlainText">* The audit report was prepared by a Qualified Auditor.
<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">In addition, the Certificate Issuer MUST actively issue code signing certificates that are accepted for use in computing platforms in which the platform supplier accepts code signing certificates issued by such Certificate Issuer.
<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">(2) A Certificate Consumer (i.e. a platform supplier) eligible for voting membership in the CSCWG must produce a computing platform that accepts code signing certificates issued by third-party Certificate Issuers who meet criteria
set by such Certificate Consumer.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">4.2.2 Membership Application/Declaration process<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">A. An Applicant not already a member of the Forum SHALL provide the following information:
<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">* Confirmation that the applicant satisfies at least one (1) of the membership eligibility criteria (and if it satisfies more than one (1), indication of the single category under which the applicant wishes to apply).<o:p></o:p></p>
<p class="MsoPlainText">* The organization name, as they wish it to appear on the Forum Web site and in official Forum documents.<o:p></o:p></p>
<p class="MsoPlainText">* URL of the applicant's main Web site.<o:p></o:p></p>
<p class="MsoPlainText">* Names and email addresses of employees who will participate in the Working Group and Forum as Member representatives.<o:p></o:p></p>
<p class="MsoPlainText">* Emergency contact information for security issues related to certificate trust.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">Applicants that qualify as Certificate Issuers or Root Certificate Issuers must supply the following additional information:<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">* URL of the current qualifying audit report.<o:p></o:p></p>
<p class="MsoPlainText">* The URL of at least one third party website that includes a certificate issued by the Applicant in the certificate chain.<o:p></o:p></p>
<p class="MsoPlainText">* Links or references to issued end-entity certificates that demonstrate them being treated as valid by a Certificate Consumer Member.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">Such Applicant SHALL become a Member once the CSCWG has determined by consensus among the Members during a CSCWG Meeting or Teleconference that the Applicant meets all of the requirements above or, upon the request of any Member of the
CSCWG, by a Ballot among Members of the CSCWG. Acceptance by consensus shall be determined or a Ballot of the Members shall be held as soon as the Applicant indicates that it has presented all information required above and has responded to all follow-up questions
from the CSCWG and the Member has complied with the requirements of Bylaw 5.5.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">Certificate Issuer applicants that are not actively issuing code signing certificates but otherwise meet these membership criteria MAY request to the CSCWG that they be granted an invitation for Associate Member status in accordance
with Bylaw 3.1, subject to conditions designated by the CSCWG.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText">The CSCWG SHALL allow participation by Interested Parties, as set forth in the Bylaws.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoNormal">An initial organizational meeting will take place during this week’s face to face meeting followed by the formal kickoff later in the week (see agenda for details).<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Dean Coclin<o:p></o:p></p>
<p class="MsoNormal">CA/B Forum Vice Chair<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</body>
</html>