<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><b><span style='font-size:12.0pt'>CA/B Forum Meeting – September 15, 2022<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Attendees: Aaron Poulsen (Amazon), Adam Jones (Microsoft), Andrea Holland (SecureTrust), Ben Wilson (Mozilla), Bruce Morton (Entrust), Clint Wilson (Apple), Corey Bonnell (Digicert), Corey Rasmussen (OATI), Daryn Wright (GoDaddy), David Kluge (Google), Dean Coclin (Digicert), Dimitris Zacharopoulos (HARICA), Dustin Hollenback (Microsoft), Fumi Yoneda (Japan Registry Services), Hazhar Ismail (MSC Trustgate Sdn Bhd), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Joanna Fox (TrustCor Systems), Johnny Reading (GoDaddy), Jos Purvis (Fastly), Karina Sirota (Microsoft), Kiran Tummala (Microsoft), Li-Chun Chen (Chunghwa Telecom), Lynn Jeun (Visa), Marcelo Silva (Visa), Martijn Katerbarg (Sectigo), Michelle Coon (OATI), Nargis Mannan (SecureTrust), Paul van Brouwershaven (Entrust), Peter Miskovic (Disig), Rebecca Kelley (Apple), Stephen Davidson (Digicert), Tadahiko Ito (SECOM Trust Systems), Tim Hollebeek (Digicert), Tobias Josefowitz (Opera Software AS), Vijayakumar (Vijay) Manjunatha (eMudhra), Wayne Thayer (Fastly), Yoshiro Yoneya (Japan Registry Services)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>1. Read Antitrust Statement<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Jos Purvis read the antitrust statement.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>2. Review Agenda<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>No changes were made to the agenda.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>3. Approval of Minutes from Last Teleconference<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Minutes of September 1<sup>st</sup> were approved.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>On the last call we approved minutes from Aug 18<sup>th</sup> however, those minutes had not been published yet. Hence we cannot approve them. Karina will work to get those published.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>4. Forum Infrastructure report<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Jos gave the report. Mew Membership tool is up and running. Webex integration requires a special license. Cutover plan to new system discussed. Oct 1<sup>st</sup> is the target date to make the old system <i>read only</i>. Ballots will also be tabulated in the new tool. Future integrations with Mailman are planned but will require an upgrade of our system. Admin emails are going to a special mailbox. <br>Working on upgrading php with GoDaddy.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>5. Code Signing Working Group report<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Bruce gave the report. Microsoft proposed moving the date to require keys on hardware to fall 2023. After discussion, it was decided to move that to June 2023. This will help provide some relief to those trying to become compliant. A new ballot is in process. Still working on signing service updates, malware proposals and timestamping.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>6. S/MIME report<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Stephen Davidson gave the report. Formal discussion period for the ballot is underway with much discussion taking place. A number of items have been raised toward the end of the discussion period. Some are minor but others involve more discussion. Hence there will likely be a delay going into ballot. This is not unusual, given this is the first version of this standard. Some minor changes include references to outdated ETSI standards. Effective date is 10 months from now so if something is found before then, changes can be made without affecting that date. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>7. NetSec report<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Clint gave the update. Working on risk assessment. Group would like to pause and gather feedback on it. Looked at air gap system requirements for NSSRs. Not quite finished but making progress. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>8. Any other business<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>The face to face meeting is capped at 60 people but we have 63 signed up and 21 remote. Dean is talking to the host about expanding capacity to 70 but if that is not possible, we will have to limit the number of guests. Then we will have to go to the member list and limit the number of members from individual companies. A draft agenda has been published, with a start time of 11am local time with a 4pm end time (possibly longer for working groups). Dean is looking for topics to add to the agenda. The CA Day and TSP Day signups are open for Thursday and Friday that week. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Nominations Status: Forum Chair nominations are in and voting period will start soon. Vice Chair nominations will start soon.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Meeting adjourned.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#0174C3'>Dean Coclin<o:p></o:p></span></b></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>