<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:839539276;
mso-list-template-ids:-1723426598;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level4
{mso-level-number-format:roman-lower;
mso-level-tab-stop:2.0in;
mso-level-number-position:right;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level2 lfo4
{mso-level-start-at:2;}
@list l0:level2 lfo6
{mso-level-start-at:3;}
@list l0:level2 lfo8
{mso-level-start-at:4;}
@list l0:level2 lfo9
{mso-level-start-at:5;}
@list l0:level2 lfo11
{mso-level-start-at:6;}
@list l0:level2 lfo13
{mso-level-start-at:7;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal>Final minutes of CA/B Forum call August 19, 2021<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=1 type=1><li class=MsoNormal style='color:black;mso-list:l0 level2 lfo1;vertical-align:middle'>Opening Procedures- Dean <o:p></o:p></li></ol></ul><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=1 type=1><ol style='margin-top:0in' start=1 type=a><li class=MsoNormal style='color:black;mso-list:l0 level3 lfo2;vertical-align:middle'>Roll Call<span style='color:windowtext'>:</span> <span style='color:windowtext'>Adrian Mueller (SwissSign), Amanda Mendieta (Apple), Andrea Holland (SecureTrust), Ben Wilson (Mozilla), Bruce Morton (Entrust), Chris Kemmerer (SSL.com), Chris McMillan (Visa), Christy Berghoff (US Federal PKI Management Authority), Clint Wilson (Apple), Christy Berghoff (US Federal PKI Management Authority), David Kluge (Google), Dean Coclin (Digicert), Doug Beattie (GlobalSign), Dustin Hollenback (Microsoft), Enrico Entschew (D-TRUST), Hazhar Ismail (MSC Trustgate), Inaba Atsushi (GlobalSign), India Donald (US Federal PKI Management Authority), Janet Hines (SecureTrust), Joanna Fox (TrustCor Systems), Johnny Reading (GoDaddy), Jos Purvis (Cisco Systems), Jose Guzman (GoDaddy), Karina Sirota (Microsoft), Kati Davids (GoDaddy), Mads Henriksveen (Buypass AS), Michelle Coon (OATI), Mike Min (GoDaddy), Mike Reilly (Microsoft), Niko Carpenter (SecureTrust), Rebecca Kelley (Apple), Ryan Sleevi (Google), Sebastian Schulz (GlobalSign), Shelley Brewer (Digicert), Stephen Davidson (Digicert), Tadahiko Ito (SECOM Trust Systems), Tim Hollebeek (Digicert), Trevoli Ponds-White (Amazon), Tyler Myers (GoDaddy), Wayne Thayer (Mozilla), Wendy Brown (US Federal PKI Management Authority), Yoshiro Yoneya (Japan Registry Services), Anuj Saxena (Web.com), Steven Deitte (GoDaddy)</span><o:p></o:p></li><li class=MsoNormal style='color:black;mso-list:l0 level3 lfo2;vertical-align:middle'>Read Antitrust Statement<o:p></o:p></li><li class=MsoNormal style='color:black;mso-list:l0 level3 lfo2;vertical-align:middle'>Review Agenda<o:p></o:p></li><li class=MsoNormal style='color:black;mso-list:l0 level3 lfo2;vertical-align:middle'>Approval of minutes of last call<o:p></o:p></li></ol></ol></ul><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=1 type=1><ol style='margin-top:0in' start=4 type=a><ol style='margin-top:0in' start=1 type=i><li class=MsoNormal style='color:black;mso-list:l0 level4 lfo3;vertical-align:middle'>Brief discussion of previous minutes. <o:p></o:p></li></ol></ol></ol></ul><p class=MsoNormal style='margin-left:63.0pt'><span style='color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=2 type=1><li class=MsoNormal style='color:black;mso-list:l0 level2 lfo4;vertical-align:middle'>Forum Infrastructure Subcommittee update given by Jos <o:p></o:p></li></ol></ul><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=2 type=1><ol style='margin-top:0in' start=1 type=a><li class=MsoNormal style='mso-list:l0 level3 lfo5;vertical-align:middle'>Github work continuing steadily. The most recent release at SC47 included the new tagging. We'll be posting the documentation on that so that people understand how to do it in the future.<o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level3 lfo5;vertical-align:middle'>Digging into the website revamp and then we'll be opening a Google Doc to track any changes on the test website so that we can replicate them in the live website. we have to kind of do them in 1 place, approve them and then do them again on the existing site. <o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level3 lfo5;vertical-align:middle'>Ben did some updates per Dimitris’s request to the ballots table on the public website<o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level3 lfo5;vertical-align:middle'>We'll be looking at how to revamp membership spreadsheet, redo it and hopefully clean that up into something much more.<o:p></o:p></li></ol></ol></ul><p class=MsoNormal style='margin-left:63.0pt'> <o:p></o:p></p><p class=MsoNormal style='margin-left:63.0pt'><span style='color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=3 type=1><li class=MsoNormal style='color:black;mso-list:l0 level2 lfo6;vertical-align:middle'>Code Signing Certificate Working Group update given by Bruce<o:p></o:p></li></ol></ul><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=3 type=1><ol style='margin-top:0in' start=1 type=a><li class=MsoNormal style='color:black;mso-list:l0 level3 lfo7;vertical-align:middle'>In the last 2 weeks, we have 2 ballots approved. 1 was our clean up and clarification ballot that closed off a lot of our Parking lot items we've been creating. This one is under IPR. The other one we pushed in the new audit requirements, for the merged CSBR document that we have in the forum. Also under IPR Review. <o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level3 lfo7;vertical-align:middle'>We're making some progress at working towards going to the new format to the RFC 3647 and in the pandoc format. So it's some work there. And our goal is to get that done by the end of the year<o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level3 lfo7;vertical-align:middle'>Progress will start on the signing service work that we want to do, to work on the code signing service requirements in September or October timeframe.<o:p></o:p></li></ol></ol></ul><p class=MsoNormal style='margin-left:.5in'><span style='color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=4 type=1><li class=MsoNormal style='mso-list:l0 level2 lfo8;vertical-align:middle'>SMIME working group update given by Stephen <o:p></o:p></li><ol style='margin-top:0in' start=1 type=a><li class=MsoNormal style='mso-list:l0 level3 lfo8;vertical-align:middle'>There is a new certificate issuer joining, IdenTrust … there are currently 29 cert issuers, 6 cert consumers, 3 associate members, 6 interested parties.<o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level3 lfo8;vertical-align:middle'>Working on the certificate profiles, which has lead to some revisits of use cases based on what we know of real world use of S/MIME today, to help clarify which fields and settings are appropriate.<o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level3 lfo8;vertical-align:middle'>Profile types are mailbox, organization, Individual -affiliated (w/ organization), Individual – personal.<o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level3 lfo8;vertical-align:middle'>Validation for Org details – at least for the Strict versions of those profiles – will be drawn from EVG procedures. Reflecting that vetting the Subject may use the OrganizationalIdentifer as defined in EVG 9.2.8. and Appendix H.<o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level3 lfo8;vertical-align:middle'>Ryan: Is there any hope of a publication of a document that focuses on the primary deliverable namely, the verification of control over an email address?<o:p></o:p></li><ol style='margin-top:0in' start=1 type=i><li class=MsoNormal style='mso-list:l0 level4 lfo8;vertical-align:middle'>Stephen: Yes. The draft already defines verification of control over an email address. Our discussions have also touched upon other Subject verification topics inasmuch as they impact cert profile fields. As decisions made on one cert profile affects other, progress accelerates as we move from one to the next. <o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level4 lfo8;vertical-align:middle'>Ryan: is the working group focused on delivering this primary deliverable or is the working group focused on the secondary things that have long been identified? <o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level4 lfo8;vertical-align:middle'>Stephen: We do have draft text for email control will be established and domain control, which is drawn upon the existing work from the baseline requirements<o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level4 lfo8;vertical-align:middle'>Ryan: Are we looking at something that might be coming to a vote within, say, 2 to 3 months or are we looking at something that's, you know, looking at half a year to year because of work on the secondary features? <o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level4 lfo8;vertical-align:middle'>Stephen: Once we have completed our draft cert profiles, which the WG defined as our first deliverable and I do not foresee requiring extended time, the WG will discuss next steps. The draft of the S/MIME BR based on our discussions is well advanced. <o:p></o:p></li><li class=MsoNormal style='mso-list:l0 level4 lfo8;vertical-align:middle'>Dean is waiting on Stephen to add Identrust to the S/MIME lists. <o:p></o:p></li></ol></ol></ol></ul><p class=MsoNormal style='margin-left:1.25in'> <o:p></o:p></p><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=5 type=1><li class=MsoNormal style='color:black;mso-list:l0 level2 lfo9;vertical-align:middle'>Fall F2F dates<o:p></o:p></li></ol></ul><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=5 type=1><ol style='margin-top:0in' start=1 type=a><li class=MsoNormal style='color:black;mso-list:l0 level3 lfo10;vertical-align:middle'>October 12-14, 2021<o:p></o:p></li></ol></ol></ul><p class=MsoNormal style='margin-left:63.0pt'><span style='color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=6 type=1><li class=MsoNormal style='color:black;mso-list:l0 level2 lfo11;vertical-align:middle'>Any Other Business:<o:p></o:p></li></ol></ul><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=6 type=1><ol style='margin-top:0in' start=1 type=a><li class=MsoNormal style='color:black;mso-list:l0 level3 lfo12;vertical-align:middle'>None<o:p></o:p></li></ol></ol></ul><p class=MsoNormal style='margin-left:63.0pt'><span style='color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><ol style='margin-top:0in' start=7 type=1><li class=MsoNormal style='color:black;mso-list:l0 level2 lfo13;vertical-align:middle'>Next call: September 2<o:p></o:p></li></ol></ul><p class=MsoNormal><o:p> </o:p></p></div></body></html>