<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body
style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
These are the Final Minutes of the Teleconference described in the
subject of this message, prepared by Kiran Tummala (Microsoft).<br>
<br>
<h3>1. Roll Call</h3>
Aaron Gable - (Let's Encrypt), Adam Jones - (Microsoft), Andrea
Holland - (VikingCloud), Ben Wilson - (Mozilla), Brianca Martin -
(Amazon), Cade Cairns - (Google), Chris Clements - (Google),
Christophe Bonjean - (GlobalSign), Clint Wilson - (Apple), Corey
Bonnell - (DigiCert), Corey Rasmussen - (OATI), David Kluge -
(Google), Dean Coclin - (DigiCert), Dimitris Zacharopoulos -
(HARICA), Doug Beattie - (GlobalSign), Dustin Hollenback -
(Microsoft), Enrico Entschew - (D-TRUST), Inaba Atsushi -
(GlobalSign), Johnny Reading - (GoDaddy), Karina Sirota -
(Microsoft), Kiran Tummala - (Microsoft), Lucy Buecking -
(IdenTrust), Lynn Jeun - (Visa), Mads Henriksveen - (Buypass AS),
Marcelo Silva - (Visa), Marco Schambach - (IdenTrust), Mark Nelson -
(IdenTrust), Martijn Katerbarg - (Sectigo), Michelle Coon - (OATI),
Mrugesh Chandarana - (IdenTrust), Nargis Mannan - (VikingCloud),
Nicol So - (CommScope), Nome Huang - (TrustAsia), Paul van
Brouwershaven - (Entrust), Peter Miskovic - (Disig), Rebecca Kelley
- (Apple), Rollin Yu - (TrustAsia), Roman Fischer - (SwissSign),
Scott Rea - (eMudhra), Stephen Davidson - (DigiCert), Steven Deitte
- (GoDaddy), Tadahiko Ito - (SECOM Trust Systems), Thomas Zermeno -
(SSL.com), Tim Hollebeek - (DigiCert), Trevoli Ponds-White -
(Amazon), Wayne Thayer - (Fastly), Wendy Brown - (US Federal PKI
Management Authority), Yoshihiko Matsuo - (Japan Registry Services).<br>
<h3>2. Read note-well<br>
</h3>
Dimitris read the note-well<br>
<h3>3. Review of Agenda</h3>
<p>Agenda was approved without modifications<br>
</p>
<h3>4. Approval of minutes from the December 7, 2023 Teleconference</h3>
<p>Minutes were just distributed. They will be considered for
approval at the next Teleconference<br>
</p>
<h3>5. Server Certificate Working Group update</h3>
No updates reported. <br>
<br>
Validation Committee:<br>
<ul>
<li>Met on Dec 16th.</li>
<li>Meeting minutes sent out; discussion on automating EV
validation.</li>
<li>DNS-based validation method discussed for further automation.</li>
</ul>
<h3>6. Code Signing Certificate Working Group update</h3>
<ul>
<li>Discussed signing service and high-risk check ballot.</li>
<li>Two ballots proposed simultaneously: signing service and
high-risk check.</li>
<li>Discussion period ends on Jan 5th.</li>
</ul>
<h3>7. S/MIME Certificate Working Group update</h3>
<ul>
<li>SMC 05 ballot in discussion period introducing CAA for
publicly trusted S/MIME. Dates for adoption: Feb 15th, 2024, and
March 15th, 2025.</li>
<li>New ballot for RFC 9495 implementation.</li>
<li>SMC 06 ballot for clarification and corrections.</li>
<li>Reviewing language on Organization Identifier in the subject
for EV.</li>
</ul>
<h3>8. Forum Infrastructure Subcommittee update</h3>
???<br>
<h3>9. NetSec Working Group update</h3>
<ul>
<li>Met on Dec 19th.</li>
<li>Timeline for section 4 ballots.</li>
<li>Updates on the memorandum of understanding from Cloud Security
Alliance expected soon.</li>
</ul>
<h3>10. CSCWG charter update</h3>
<p>???</p>
<h3>11. Survey for the separation of Forum and SCWG bi-weekly
Teleconference</h3>
<ul>
<li>Received 21 votes; election closing on Monday.</li>
<li>Trustees (Wayne and Martijn) to process votes.</li>
</ul>
<h3>12. Any Other Business</h3>
Dimitris highlighted the need to improve the Guidelines based on
public incidents, namely incidents in Bugzilla.<br>
<ul>
<li>Identified a recurring theme in several incidents, often
stemming from a misunderstanding of the requirements.</li>
<li>Dimitris emphasized the rarity of deliberate violations and
highlighted the need to raise awareness within the working
groups.</li>
<li>Suggested proactively monitoring these incidents to identify
repeated patterns and failures, with the goal of addressing
misunderstandings.</li>
<li>Advocated for creating issues to facilitate a review and
potential refinement of the language in those problematic areas.</li>
<li>Emphasized the importance of making language more accessible
and understandable to reduce misunderstandings and potential
issues for Certification Authorities (CAs).</li>
</ul>
<br>
<br>
Next call is January 18, 2024. Meeting adjourned.<br>
<br>
<br>
<br>
</body>
</html>