<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Calibri Light";
panose-1:2 15 3 2 2 2 4 3 2 4;}
@font-face
{font-family:Georgia;
panose-1:2 4 5 2 5 4 5 2 3 3;}
@font-face
{font-family:"Times New Roman \(Body CS\)";
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:18.0pt;
font-family:"Calibri",sans-serif;
font-weight:bold;}
h3
{mso-style-priority:9;
mso-style-link:"Heading 3 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
page-break-after:avoid;
font-size:12.0pt;
font-family:"Calibri Light",sans-serif;
color:#1F3763;
font-weight:normal;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Calibri",sans-serif;
font-weight:bold;}
span.Heading3Char
{mso-style-name:"Heading 3 Char";
mso-style-priority:9;
mso-style-link:"Heading 3";
font-family:"Calibri Light",sans-serif;
color:#1F3763;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Georgia",serif;
color:windowtext;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-family:"Georgia",serif'>Published!<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia",serif'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='font-size:9.0pt;font-family:Consolas;color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:9.0pt;font-family:Consolas;color:black'>-- <br>Jos Purvis (</span><a href="mailto:jopurvis@cisco.com"><span style='font-size:9.0pt;font-family:Consolas;color:#954F72'>jopurvis@cisco.com</span></a><span style='font-size:9.0pt;font-family:Consolas;color:black'>)<br>.:|:.:|:. cisco systems | Cryptographic Services<br>PGP: 0xFD802FEE07D19105 | Controls and Trust Verification</span><o:p></o:p></p></div><p class=MsoNormal><span style='font-family:"Georgia",serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia",serif'><o:p> </o:p></span></p><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:12.0pt;color:black'>From: </span></b><span style='font-size:12.0pt;color:black'>Public <public-bounces@cabforum.org> on behalf of CA/B Forum Public List <public@cabforum.org><br><b>Reply-To: </b>"Dimitris Zacharopoulos (HARICA)" <dzacharo@harica.gr>, CA/B Forum Public List <public@cabforum.org><br><b>Date: </b>Monday, August 24, 2020 at 7:27 AM<br><b>To: </b>CA/B Forum Public List <public@cabforum.org><br><b>Subject: </b>[cabfpub] Final Minutes for CA/B Forum Teleconference - August 6, 2020<o:p></o:p></span></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><p style='margin:0in'><span style='font-family:"Arial",sans-serif;color:black'>These are the Final Minutes of the Teleconference described in the subject of this message as prepared by Dean Coclin (DigiCert).</span><o:p></o:p></p><p style='mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in'><span style='font-family:"Arial",sans-serif;color:black'><br><br></span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:.25in;margin-right:0in;margin-bottom:4.0pt;margin-left:0in'><b><span style='font-size:17.0pt;font-family:"Arial",sans-serif;color:black'>Attendees (in alphabetical order)</span></b><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#1D1C1D;background:white'>Ben Wilson (Mozilla), Chris McMillan (Visa), Clint Wilson (Apple), Corey Bonnell (SecureTrust), Chris Kemmerer (</span><span style='font-family:"Arial",sans-serif'><a href="http://ssl.com/" target="_blank"><span style='background:white'>SSL.com</span></a><span style='color:#1D1C1D;background:white'>), Daniela Hood (GoDaddy), Dean Coclin (Digicert), Dustin Hollenback (Microsoft), Enrico Entschew (D-TRUST), Hazhar Ismail (MSC Trustgate), Inaba Atsushi (GlobalSign), Janet Hines (SecureTrust), Joanna Fox (GoDaddy), Johny Reading (GoDaddy), Jos Purvis (Cisco Systems), Karina Sirota (Microsoft), Li-Chun Chen (Chunghwa Telecom), Mayur Manchanda (Visa), Michael Guenther (SwissSign), Michelle Coon (OATI), Mike Reilly (Microsoft), Neil Dunbar (TrustCor Systems), Niko Carpenter (SecureTrust), Peter Miskovic (Disig), Rae Ann Gonzales (Godaddy), Rich Smith (Sectigo), Ryan Sleevi (Google), Shelley Brewer (Digicert), Stephen Davidson (Digicert), Tobias Josefowitz (Opera Software AS), Wayne Thayer (Mozilla), Wendy Brown (US Federal PKI Management Authority)</span></span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><h2 style='mso-margin-top-alt:.25in;margin-right:0in;margin-bottom:4.0pt;margin-left:0in'><span style='font-size:17.0pt;font-family:"Arial",sans-serif;color:black'>Minutes</span><o:p></o:p></h2><p style='mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in'><span style='font-family:"Arial",sans-serif;color:black'>Dimitris is on vacation, so Dean led the call.</span><o:p></o:p></p><h3 style='mso-margin-top-alt:14.0pt;margin-right:0in;margin-bottom:4.0pt;margin-left:0in'><span style='font-size:13.0pt;font-family:"Arial",sans-serif;color:black'>1. Roll Call</span><o:p></o:p></h3><p style='mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in'><span style='font-family:"Arial",sans-serif;color:black'>The Roll Call was taken.</span><o:p></o:p></p><h3 style='mso-margin-top-alt:14.0pt;margin-right:0in;margin-bottom:4.0pt;margin-left:0in'><span style='font-size:13.0pt;font-family:"Arial",sans-serif;color:black'>2. Read Antitrust Statement</span><o:p></o:p></h3><p style='mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in'><span style='font-family:"Arial",sans-serif;color:black'>The Antitrust Statement was read by Ben WIlson.</span><o:p></o:p></p><h3 style='mso-margin-top-alt:14.0pt;margin-right:0in;margin-bottom:4.0pt;margin-left:0in'><span style='font-size:13.0pt;font-family:"Arial",sans-serif;color:black'>3. Review Agenda</span><o:p></o:p></h3><p style='mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in'><span style='font-family:"Arial",sans-serif;color:black'>No changes to the agenda were noted. It was noted that Neil Dunbar volunteered to take minutes for the next SCWG and Forum teleconference.</span><o:p></o:p></p><h3 style='mso-margin-top-alt:14.0pt;margin-right:0in;margin-bottom:4.0pt;margin-left:0in'><span style='font-size:13.0pt;font-family:"Arial",sans-serif;color:black'>4. Approval of minutes from last teleconference</span><o:p></o:p></h3><p style='mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in'><span style='font-family:"Arial",sans-serif;color:black'>Accepted without objections.</span><o:p></o:p></p><h3 style='mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in'><span style='font-size:13.0pt;font-family:"Arial",sans-serif;color:black'>5. Forum Infrastructure Subcommittee Update</span><o:p></o:p></h3><h3 style='mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in'><span style='font-size:13.0pt;font-family:"Arial",sans-serif;color:black'> </span><o:p></o:p></h3><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:black'>Jos Purvis provided an update. There was no meeting this past week. Jos reported they are working on a password repository for access to the infrastructure, listserv, etc. They are also discussing separating the GitHub repository by documents. This will help as we continue to add working groups. </span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:black'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:black'>Several groups have asked for a GitHub “refresher”. Jos volunteered to conduct a demo and explain the procedures in a 1 hour class. Contact Jos if interested. </span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:black'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:black'>The group is soliciting feedback on the new wiki, now that we are 1 year into it. </span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:black'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:black'>Dean asked if the group could look at making it easy to update members registries and mailing lists as the current process is cumbersome for the volunteers to manage. Jos said once the mailing system is migrated to AWS, then they can look at making this happen. Ryan said this was discussed on other calls and confirmed that it is an issue.</span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><h3 style='mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in'><span style='font-size:13.0pt;font-family:"Arial",sans-serif;color:black'>6. Code Signing Working Group Update</span><o:p></o:p></h3><h3 style='mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in'><span style='font-family:"Arial",sans-serif;color:black'> </span><o:p></o:p></h3><h3 style='mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in'><span style='font-size:11.0pt;font-family:"Arial",sans-serif;color:black'>Dean gave the report. The combined EV and Baseline document ballot (CSCWG-2) passed and is in a 30 day IPR review. In the meantime, the group is reviewing the “parking lot list” and is preparing to make any corrections/changes necessary for a future ballot. </span><o:p></o:p></h3><p class=MsoNormal> <o:p></o:p></p><h3 style='mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in'><span style='font-size:13.0pt;font-family:"Arial",sans-serif;color:black'>7. S/MIME Working Group Update</span><o:p></o:p></h3><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:black'>Stephen Davidson provided the update. The first real meeting was held yesterday (since the initial kickoff). New members were voted in: iTrusChina, SSC and Chungwa Telecom as Certificate Issuers and Teletrust as an Interested Party. The overall approach was laid out and the decision was made to begin with Certificate Profiles. Examples are being gathered to see what work has been done in various standards and other companies. The next meeting is August 19<sup>th</sup>. </span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><h3 style='mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in'><span style='font-size:13.0pt;font-family:"Arial",sans-serif;color:black'>8. Any Other Business</span><o:p></o:p></h3><p style='mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in'><span style='font-family:"Arial",sans-serif;color:black'>Dean stated that he had some folks look at the CA/B Forum documents to check for language that should be updated given the movement in the technology industry to deprecate certain words like master/slave, whitelist/blacklist, etc. The review found only 3 places in the BRs, EV Guidelines and Code Signing guidelines that should be updated. He will send a note to the list with the suggested corrections. </span><o:p></o:p></p><h3 style='mso-margin-top-alt:14.0pt;margin-right:0in;margin-bottom:4.0pt;margin-left:0in'><span style='font-size:13.0pt;font-family:"Arial",sans-serif;color:black'>9. Next call</span><o:p></o:p></h3><p style='mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in'><span style='font-family:"Arial",sans-serif;color:black'>The next call will take place on August 20, 2020 at 11:00am Eastern Time.</span><o:p></o:p></p><h3 style='mso-margin-top-alt:14.0pt;margin-right:0in;margin-bottom:4.0pt;margin-left:0in'><span style='font-size:13.0pt;font-family:"Arial",sans-serif;color:black'>Adjourned</span><o:p></o:p></h3><p class=MsoNormal> <o:p></o:p></p></div></body></html>