<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EstiloCorreo21
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ES link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span lang=EN-US>These are the Final Minutes of the Teleconference described in the subject of this message<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><p class=MsoNormal><span lang=EN-US>Attendees:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Aaron Poulsen - (Amazon), Adam Jones - (Microsoft), Adrian Mueller - (SwissSign), Ben Wilson - (Mozilla), Brianca Martin - (Amazon), Clint Wilson - (Apple), Corey Bonnell - (DigiCert), Corey Rasmussen - (OATI), David Kluge - (Google), Dean Coclin - (DigiCert), Dimitris Zacharopoulos - (HARICA), Doug Beattie - (GlobalSign), Dustin Hollenback - (Microsoft), Ellie Lu - (TrustAsia Technologies, Inc.), Enrico Entschew - (D-TRUST), Fumi Yoneda - (Japan Registry Services), Inaba Atsushi - (GlobalSign), Inigo Barreira - (Sectigo), Janet Hines - (VikingCloud), Joanna Fox - (TrustCor Systems), Johnny Reading - (GoDaddy), Jos Purvis - (Fastly), Mads Henriksveen - (Buypass AS), Martijn Katerbarg - (Sectigo), Michelle Coon - (OATI), Nargis Mannan - (VikingCloud), Peter Miskovic - (Disig), Rebecca Kelley - (Apple), Rollin Yu - (TrustAsia Technologies, Inc.), Ryan Dickson - (Google), Stephen Davidson - (DigiCert), Tadahiko Ito - (SECOM Trust Systems), Thomas Zermeno - (SSL.com), Tobias Josefowitz - (Opera Software AS), Trevoli Ponds-White - (Amazon), Wayne Thayer - (Fastly), Wendy Brown - (US Federal PKI Management Authority), Yoshiro Yoneya - (Japan Registry Services)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Inigo said that the servercert-wg and validation-sc F2F meeting minutes were approved and<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>published yesterday.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>The meeting minutes for March 16th were approved.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Inigo said we will not discuss the QuickFox inclusion request for today at Ben's<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>request for a moratorium on new Certificate Consumer members. Ben said there<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>was an initial meeting on adjusting the Certificate Consumer membership<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>criteria yesterday. The group is contemplating changes to the requirements<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>in a document. Ben said that at the F2F, it was agreed that changes are<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>required to the membership criteria and did not want to proceed with approving<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>prior to that discussion. Dean said that there was an outstanding question<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>to the QuickFox representative to proceed with the request but there has been<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>no response.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Trev asked Ben if we change the membership criteria, will existing members<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>need to reaffirm their qualifications? Ben said yes. Dimitris said the Bylaws<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>allow members to challenge the qualifications of another member. That mechanism<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>can be used in this case. Trev said that it would be good to add a requirement<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>that a Certificate Consumer cannot propose requirements that would cause<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>interoperability issues with Certificate Consumers. Ben said that there may be<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>interpretation issues of a particular standard and Consumers implement<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>non-interoperable technologies.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Trev also suggested that we should adopt a culture of "blameless post-mortems" and<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>not sanction individuals. Ben said that improvements to the Code of Conduct can also<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>be considered as part of this work. Inigo said that we will continue these<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>matters on an upcoming call. Inigo then asked the group for next steps on the QuickFox<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>inclusion request. Dean said that we cannot proceed until they respond to our<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>request for information. Ben said that with the current criteria, Mozilla will<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>vote to deny the request, so perhaps waiting until the new membership criteria<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>are in place may be to QuickFox's advantage.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Toby suggested that a ballot be created establishing the moratorium. Trev questioned<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>whether this would create a lot of work. Dimitris said that we have not added<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>risk by previously accepting new members and questions whether it is good to do<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>that now.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Inigo raised the issue of annual audits (Github issue #370). Ryan said that instead<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>of "365 days", it can be changed to "366 days in a leap year" to avoid drifting<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>due to leap years.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Inigo raised the proposal of upping the version of BRs to 2.0.0 for SC-62, as it is<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>a very large change. Dimitris agreed with this proposal.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Inigo raised the parked keys issue (Github issue #417). Ben said that Bruce Morton<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>sent a conceptual example of how this can be done by CAs and invited others to<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>send him suggestions.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Inigo asked Ryan whether Github issue #419 (CRL profile) is part of the short-lived<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>certificate/OCSP optional ballot. Ryan confirmed that it is and expects to bring the<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>ballot to formal discussion in the next few weeks.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Ryan said that having a sheet of all open issues to discuss the disposition of open<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Github issues would be make it easy to collaborate.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Inigo volunteered to reformat the EVGs in RFC 3647 format.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>There was no other business. Next call will be April 27th.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Meeting adjourned.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></div></body></html>