<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b><span style='font-size:12.0pt'>CA/B Forum Meeting – September 29, 2022<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p style='margin:0in'><b><span style='font-family:"Arial",sans-serif;color:black'>Attendees:</span></b><span style='font-family:"Arial",sans-serif;color:black'> Adam Jones (Microsoft), Adrian Mueller (SwissSign), Arno Fiedler (D-TRUST), Ben Wilson (Mozilla), Bruce Morton (Entrust), Chris Clements (Google), Chris Kemmerer (SSL.com), Clint Wilson (Apple), Corey Bonnell (Digicert), Daryn Wright (GoDaddy), David Kluge (Google), Dean Coclin (Digicert), Dimitris Zacharopoulos (HARICA), Doug Beattie (GlobalSign), Dustin Hollenback (Microsoft), Enrico Entschew (D-TRUST), Fumi Yoneda (Japan Registry Services), Hazhar Ismail (MSC Trustgate Sdn Bhd), Hogeun Yoo (NAVER Cloud), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Joanna Fox (TrustCor Systems), John Mason (Microsoft), Johnny Reading (GoDaddy), Jos Purvis (Fastly), Kiran Tummala (Microsoft), Li-Chun Chen (Chunghwa Telecom), Lynn Jeun (Visa), Mads Henriksveen (Buypass AS), Marcelo Silva (Visa), Martijn Katerbarg (Sectigo), Michelle Coon (OATI), Nargis Mannan (SecureTrust), Paul van Brouwershaven (Entrust), Pedro Fuentes (OISTE Foundation), Peter Miskovic (Disig), Rebecca Kelley (Apple), Ryan Dickson (Google), Stephen Davidson (Digicert), Steven Deitte (GoDaddy), Tadahiko Ito (SECOM Trust Systems), Tobias Josefowitz (Opera Software AS), Trevoli Ponds-White (Amazon), Tyler Myers (GoDaddy), Wayne Thayer (Fastly), Yoshiro Yoneya (Japan Registry Services)<o:p></o:p></span></p><p style='margin:0in'><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:12.0pt'>Minutes:</span></b><span style='font-size:12.0pt'> Martijn Katerbarg<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:12.0pt'>Read Antitrust Statement<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:12.0pt'>Jos Purvis read the antitrust statement.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:12.0pt'>Review Agenda<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:12.0pt'>No changes were made to the agenda.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:12.0pt'>Approval of Minutes from Last Teleconference<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:12.0pt'>We’re still waiting on the minutes of the August 18<sup>th</sup> meeting. Minutes of September 15<sup>st</sup> were approved.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:12.0pt'>Forum Infrastructure report<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:12.0pt'>One bug discovered in the membership tool during member registration. This was resolved and it seems to be working well now. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>We’re working on upgrading php with GoDaddy.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Ben Wilson sent out a list of pages to be updated and while some have been done, the list is still very large and there is no particular ownership of these. We will be looking to splitting up the list, so if you’re willing to help please let us know.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>A PR request is open for tooling updates that generates the guideline documents. Individual working groups will need to look at upgrading and check that no documents are broken by this change. Each working group will also need to figure out if a formatting change will need a new document version.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:12.0pt'>Code Signing Working Group report<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:12.0pt'>Ballot CSC-15 for the summer cleanup is now complete through the IPR period.<br>Ballot CSC-16 in which the date to require keys on hardware is postponed passed and is now in the IPR period.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Still working on signing service updates, malware proposals and timestamping.<b><o:p></o:p></b></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:12.0pt'>NetSec report<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:12.0pt'>Chair election ballot will close in a few hours. After the results are posted the Vice-Chair nominations will open. Other than that NetSec is moving onwards with the threat assessment.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:12.0pt'>S/MIME report<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:12.0pt'>Formal discussion period for the ballot is underway but has been extended due to a number of discussion items. The pending issue of having a SHALL for OCSP is raised by Stephen. Some of the CAs have asked for OCSP to become a MAY, however Microsoft as Certificate Consumer has OCSP as a requirement in their Root Store Policy. Yet, at least one CA has made it clear that they have received confirmation by Microsoft that they only require OCSP for TLS Certificates, not code signing and S/MIME. Stephen has requested a representative from Microsoft to contribute to the discussion to get clarity. Kiran Tummala clarified that internal discussions are ongoing which is leaning towards making it optional, however it will be up to Karina to come with the official response once final decision has been made.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Dimitris mentioned that HARICA is one of the CAs that received a letter from Microsoft basically stating the OCSP requirement applies only to TLS certificates.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Dimitris also raised that there was also a discussion regarding the use of countryName. Stephen has put in and merged a PR that should resolve this issue.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:12.0pt'>Any other business<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:12.0pt'>Election status: Code Signing Chair election is completed. Other working groups are about to close.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>We will be extending the Vice-Chair nomination period for all WGs and the Forum itself.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>The face to face meeting is cap is raised to 70 people. We have 64 signed up and 27 remote at this moment. A draft agenda has been published, with a start time of 11am local time except for Monday, which will start at 1pm.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>If anything needs to be added to the agenda please submit this to Dean.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>The evening event is set to start at 7pm but may be moved earlier.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Dimitris added that the CA Day and TSP Day agenda is now posted. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>Meeting adjourned.<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>