<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Georgia;
panose-1:2 4 5 2 5 4 5 2 3 3;}
@font-face
{font-family:"Times New Roman \(Body CS\)";
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Georgia",serif;
color:windowtext;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span style='font-family:"Georgia",serif'>Published as <a href="https://cabforum.org/2021/11/12/2021-10-28-minutes-of-the-ca-browser-forum-teleconference/">https://cabforum.org/2021/11/12/2021-10-28-minutes-of-the-ca-browser-forum-teleconference/</a>. <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia",serif'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='font-size:9.0pt;font-family:Consolas;color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:9.0pt;font-family:Consolas;color:black'>-- <br>Jos Purvis (</span><a href="mailto:jopurvis@cisco.com"><span style='font-size:9.0pt;font-family:Consolas;color:#954F72'>jopurvis@cisco.com</span></a><span style='font-size:9.0pt;font-family:Consolas;color:black'>)<br>.:|:.:|:. cisco systems | Cryptographic Services<br>PGP: 0xFD802FEE07D19105 | Controls and Trust Verification</span><o:p></o:p></p></div><p class=MsoNormal><span style='font-family:"Georgia",serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia",serif'><o:p> </o:p></span></p><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='margin-bottom:12.0pt'><b><span style='font-size:12.0pt;color:black'>From: </span></b><span style='font-size:12.0pt;color:black'>Public <public-bounces@cabforum.org> on behalf of Dean Coclin via Public <public@cabforum.org><br><b>Date: </b>Thursday, 11 November, 2021 at 11:55<br><b>To: </b>CABforum1 <public@cabforum.org><br><b>Subject: </b>[cabfpub] Final Minutes of CA/B Forum call October 28, 2021<o:p></o:p></span></p></div><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal>Here are the final minutes of the subject call:<o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Attendees: Ali Gholami (Telia), Andrea Holland (SecureTrust), Ben Wilson (Mozilla), Bruce Morton (Entrust), Chris Kemmerer (SSL.com), Chris McMillan (Visa), Clint Wilson (Apple), Corey Bonnell (Digicert), Dean Coclin (Digicert), Doug Beattie (GlobalSign), Dustin Hollenback (Microsoft), Enrico Entschew (D-TRUST), Hazhar Ismail (MSC Trustgate), Inaba Atsushi (GlobalSign), India Donald (US Federal PKI Management Authority), Inigo Barreira (Sectigo), Joanna Fox (TrustCor Systems), Johnny Reading (GoDaddy), Jos Purvis (Cisco Systems), Kati Davids (GoDaddy), Mads Henriksveen (Buypass AS), Marcelo Silva (Visa), Martijn Katerbarg (Sectigo), Michelle Coon (OATI), Natalia Kotliarsky (SecureTrust), Niko Carpenter (SecureTrust), Paul van Brouwershaven (Entrust), Peter Miskovic (Disig), Rae Ann Gonzales (GoDaddy), Rebecca Kelley (Apple), Ryan Dickson (Google), Sebastian Schulz (GlobalSign), Shelley Brewer (Digicert), Stephen Davidson (Digicert), Tadahiko Ito (SECOM Trust Systems), Thomas Zermeno (SSL.com), Tim Hollebeek (Digicert), Tobias Josefowitz (Opera Software AS), Trevoli Ponds-White (Amazon), Tyler Myers (GoDaddy), Wendy Brown (US Federal PKI Management Authority), Yoshiro Yoneya (Japan Registry Services)<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>The anti-trust statement was read.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>The agenda was reviewed. No changes.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>No minutes to approve.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Forum Infrastructure Report: Jos Purvis gave the update.<o:p></o:p></p><p class=MsoNormal>There was a very brief discussion on the GitHub digest and Corey has started poking into implementing the automated digest email digest to GitHub activity to each of the working groups. He just needs access to send from the account, which Jos is going to be getting him.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Code Signing Working Group Update: Bruce Morton gave the update.<o:p></o:p></p><p class=MsoNormal>CSC-12 is in the voting period. Working on a ballot for subscriber key protection. Next priority is to update the code signing service requirements. Also want to complete changing CSBRs to the RFC 3647 format.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>S/MIME Working Group Update: Stephen Davidson gave the update.<o:p></o:p></p><p class=MsoNormal>Continuing the discussion on the validity periods. Apple has settled on 825 days. Would be allowable for the 1 legacy policy, which is intended as kind of a short term bridge to allow more of the ecosystem to be pulled into this auditable framework. But the intent is that it would disappear over time. It's really a debate on the balancing of kind of the desire for automation and policy agility, versus kind of acknowledging the heavy usage of tokens and so forth. There has been some willingness on the part of a certificate consumers to consider 2095 day legacy period, as long as there is a hard date that it would be deprecated. So that's really an ongoing discussion. We've also had a discussion of the contents of the version 1, primary deliverable. Certainly for those who would like to see the evolution of that document, it is publicly available out In the cab form, GitHub repository, there's, the S/mine section and you would be looking for the SBR. There's a version called the Pre SBR that is the working draft. The next step in our list of discussions there, was a specific request from a certificate consumer asking to have, as a focused discussion, the topic of external enterprise RAs. So that's what's next on our agenda.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Next Meetings:<br>Next face to face meeting will be in person hosted by DigiCert in Salt Lake City. Proposed dates are Feb 22-24. RSA Conference is week of Feb 7<sup>th</sup>. Discussed possibly starting meeting on Weds vs. Tuesday. Dean will send out Doodle poll but preference is to start on Tuesday, Feb 22<sup>nd</sup>. <o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Other meetings:<br>Dates have been set for June and October meetings. <o:p></o:p></p><p class=MsoNormal>June 6-8 Poland (Asseco)<o:p></o:p></p><p class=MsoNormal>October 24-26 Berlin (D-Trust)<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>No other business<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Meeting adjourned<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3'>Dean Coclin</span></b><o:p></o:p></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3'>CA/B Forum Chair</span></b><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p></div></body></html>