<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Georgia;
panose-1:2 4 5 2 5 4 5 2 3 3;}
@font-face
{font-family:"Times New Roman \(Body CS\)";
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:18.0pt;
font-family:"Calibri",sans-serif;
font-weight:bold;}
h3
{mso-style-priority:9;
mso-style-link:"Heading 3 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:13.5pt;
font-family:"Calibri",sans-serif;
font-weight:bold;}
h4
{mso-style-priority:9;
mso-style-link:"Heading 4 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
font-weight:bold;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Calibri Light";
color:#2F5496;}
span.Heading3Char
{mso-style-name:"Heading 3 Char";
mso-style-priority:9;
mso-style-link:"Heading 3";
font-family:"Calibri Light";
color:#1F3763;}
span.Heading4Char
{mso-style-name:"Heading 4 Char";
mso-style-priority:9;
mso-style-link:"Heading 4";
font-family:"Calibri Light";
color:#2F5496;
font-style:italic;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Georgia",serif;
color:windowtext;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:73597067;
mso-list-template-ids:-205239732;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style></head><body lang=EN-US link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span style='font-family:"Georgia",serif'>Published!<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia",serif'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='font-size:9.0pt;font-family:Consolas;color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:9.0pt;font-family:Consolas;color:black'>-- <br>Jos Purvis (</span><a href="mailto:jopurvis@cisco.com"><span style='font-size:9.0pt;font-family:Consolas;color:#954F72'>jopurvis@cisco.com</span></a><span style='font-size:9.0pt;font-family:Consolas;color:black'>)<br>.:|:.:|:. cisco systems | Cryptographic Services<br>PGP: 0xFD802FEE07D19105 | Controls and Trust Verification</span><o:p></o:p></p></div><p class=MsoNormal><span style='font-family:"Georgia",serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia",serif'><o:p> </o:p></span></p><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:12.0pt;color:black'>From: </span></b><span style='font-size:12.0pt;color:black'>Servercert-wg <servercert-wg-bounces@cabforum.org> on behalf of CABF Server Cert WG <servercert-wg@cabforum.org><br><b>Reply-To: </b>"Dimitris Zacharopoulos (HARICA)" <dzacharo@harica.gr>, CABF Server Cert WG <servercert-wg@cabforum.org><br><b>Date: </b>Thursday, October 15, 2020 at 12:57 PM<br><b>To: </b>CABF Server Cert WG <servercert-wg@cabforum.org><br><b>Subject: </b>[Servercert-wg] Final Minutes for Server Certificate Working Group Teleconference - October 1, 2020<o:p></o:p></span></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal><br>These are the Final Minutes of the Teleconference described in the subject of this message as prepared by Jos Purvis (Cisco).<o:p></o:p></p><h2>Attendees (in alphabetical order)<o:p></o:p></h2><p>Adrian Mueller (SwissSign), Amanda Mendieta (Apple), Ben Wilson (Mozilla), Bruce Morton (Entrust), Clint Wilson (Apple), Daniela Hood (GoDaddy), Dean Coclin (Digicert), Dimitris Zacharopoulos (HARICA), Doug Beattie (GlobalSign), Dustin Hollenback (Microsoft), Enrico Entschew (D-TRUST), Hazhar Ismail (MSC Trustgate), Inaba Atsushi (GlobalSign), India Donald (US Federal PKI Management Authority), Janet Hines (SecureTrust), Jeff Ward (CPA Canada/WebTrust), Jos Purvis (Cisco Systems), Julie Olson (GlobalSign), Karina Sirota (Microsoft), Kirk Hall (Entrust), Li-Chun Chen (Chunghwa Telecom), Michelle Coon (OATI), Mike Reilly (Microsoft), Neil Dunbar (TrustCor Systems), Niko Carpenter (SecureTrust), Patrick Nohe (GlobalSign), Pedro Fuentes (OISTE Foundation), Peter Miskovic (Disig), Rae Ann Gonzales (GoDaddy), Rebecca Kelley (Apple), Rich Smith (Sectigo), Ryan Sleevi (Google), Shelley Brewer (Digicert), Stephen Davidson (Digicert), Tadahiko Ito (SECOM Trust Systems), Thanos Vrachnos (SSL.com), Tim Callan (Sectigo), Tim Hollebeek (Digicert), Tobias Josefowitz (Opera Software AS), Trevoli Ponds-White (Amazon), Wayne Thayer (Mozilla), Wendy Brown (US Federal PKI Management Authority).<o:p></o:p></p><h2>Minutes <o:p></o:p></h2><h3>1. Roll Call<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>The Roll Call was taken.<o:p></o:p></p><h3>2. Read Antitrust Statement<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Anti-trust statement was read. The working group expressed its gratitude to Robin Alden (“the voice of the anti-trust statement”) for his years of service both to Sectigo and to the CABF and SCWG, as he is retiring this year.<o:p></o:p></p><h3>3. Review Agenda<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Dimitris reviewed the agenda; no changes were identified. Minute-taker for the next call will be Dimitris.<o:p></o:p></p><h3>4. Approval of minutes from last teleconference<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Accepted without objections.<o:p></o:p></p><h3>5. Validation Subcommittee Update<o:p></o:p></h3><p class=MsoNormal>Tim Hollebeek presented. The committee continued discussion of the SubjectDN field for various certificate types. They’re most of the way through the field, but more discussion is needed around these DNs and other fields in the certificate profile.<br><br>Subcommittee minutes: <a href="https://lists.cabforum.org/pipermail/validation/2020-September/001564.html">https://lists.cabforum.org/pipermail/validation/2020-September/001564.html</a><o:p></o:p></p><h3>6. NetSec Subcommittee Update<o:p></o:p></h3><p class=MsoNormal>Neil presented. They are still trying to get feedback on SC34 (acct mgt) around GH comments posted a few weeks ago. Threat Modeling group met a few weeks ago to review network zones ballot, looking for feedback from network eng, and got some good feedback from Clint and others around need for comms and protection. Impromptu discussion started around when NCSSRs are considered “complete” and what the end goals might be. Continued discussions around extending CA operations into cloud and what cloud operators might be able to do better (automation, verification, etc.). Not trying to boil the ocean, but instead look at some specific use cases and then develop NCSSR updates around those.<br><br>Questions:<br><br>Ryan Sleevi (Google): Google is a bit concerned with some of the directions you described. Would it be possible to set out where the group is considering pursuing? In particular, the move from physical to logical security and considerations around cloud security are both interesting and concerning. Could NetSec lay this out during F2F in terms of both agenda and work direction?<br><br>Neil: Understood! Yes.<br><br>Subcommittee minutes: <a href="https://lists.cabforum.org/pipermail/netsec/2020-September/000404.html">https://lists.cabforum.org/pipermail/netsec/2020-September/000404.html</a><o:p></o:p></p><h3 style='mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in'>7. Ballot Status <o:p></o:p></h3><h4>Ballots in Discussion Period<o:p></o:p></h4><p class=MsoNormal><i><span style='color:black;border:none windowtext 1.0pt;padding:0in;background:white'>None.</span></i><br> <br><b>Ballots in Voting Period</b><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><i><span style='color:black;border:none windowtext 1.0pt;padding:0in;background:white'>None.<br><br></span></i><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b>Ballots in IPR Review Period</b><o:p></o:p></p><p class=MsoNormal><i><span style='color:black;border:none windowtext 1.0pt;padding:0in;background:white'>SC28: Logging and Log Retention </span></i><span style='color:black;border:none windowtext 1.0pt;padding:0in;background:white'>(Review ends October 14, 2020)</span><br><br><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><i><span style='color:black;border:none windowtext 1.0pt;padding:0in;background:white'>SC35: Cleanups and Clarifications </span></i><span style='color:black;border:none windowtext 1.0pt;padding:0in;background:white'>(Review ends October 14, 2020)</span><o:p></o:p></p><h4 style='mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in'>Draft Ballots under Consideration<o:p></o:p></h4><p class=MsoNormal><br><i><span style='color:black;border:none windowtext 1.0pt;padding:0in;background:white'>Minimum expectations regarding weak keys </span></i><span style='color:black;border:none windowtext 1.0pt;padding:0in;background:white'>(Chris)<br><br>Chris was not on the call, but Thanos presented updates: We have taken back the community comments thus far and are going to reply with an update/official status very soon. We are not yet ready to provide a final update (need to discuss more with our engineers), but will at least have official update soon.<br><br><i>Offline CA Security Requirements </i>(Ben)<br>No updates<br><br><i>Remove “zone” from NCSSRs and add provisions to BR 5.1 </i>(Ben)<br>No updates <br><br><i>SC34 Account Management </i>(Tobi)</span><br><span style='color:black;border:none windowtext 1.0pt;padding:0in;background:white'>No updates</span> <o:p></o:p></p><h3>8. Topics for the next virtual F2F<o:p></o:p></h3><p class=MsoNormal style='margin-bottom:12.0pt'>Dimitris sent out draft agenda for F2F to the public and management lists. Dean is discussing guest speakers and will need slots for those to be announced later. Dimitris will send messages to subcommittee chairs to request time estimates for discussions on Tuesday (subcommittee & WG day). We will not be spending full days as with physical-F2F; instead we will try to keep things short as with the previous virtual-F2F. If members have any topics or special challenges, they’re asked to email Dimitris or respond on the list, as they see fit.<br><br>Daniela Hood (GoDaddy)> In the past, we have discussed the conference session times. Should we change times for this? Have we discussed it?<br><br>Dimitris> The group seems to prefer to keep the same as the last virtual F2F, which was scheduled to try and minimize time-zone issues.<br><br>Dean Coclin (DigiCert)> The times for the last F2F were really the only times we could do between members in Asia, Americas, and Europe.<br><br>Daniela> Thanks!<br><br>Dean> I have 1 guest speaker for 30 minutes; I have another with more of a tech talk on random number generators that will be no more than 30 minutes. We will space these out with no more than 1 per day. Should be interesting!<br><br>Dimitris> Dean, how are registrations?<br><br>Dean> Pretty good! We’ve merged attendee lists into one (since everyone is virtual). We are at 68 registered attendees now.<o:p></o:p></p><h3 style='mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in'>9. Any Other Business<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>No other business was discussed.<o:p></o:p></p><h3>10. Next call<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>The next call will take place on October 15, 2020 at 11:00am Eastern Time.<o:p></o:p></p><h3><span lang=DE>Adjourned</span><o:p></o:p></h3></div></body></html>