<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EstiloCorreo17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.qt-qt-qt-qt-qt-qt-, li.qt-qt-qt-qt-qt-qt-, div.qt-qt-qt-qt-qt-qt-
{mso-style-name:qt-qt-qt-qt-qt-qt-;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:459153086;
mso-list-template-ids:1295184998;}
@list l0:level1
{mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level4
{mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level5
{mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level6
{mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level7
{mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level8
{mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level9
{mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l1
{mso-list-id:706612509;
mso-list-template-ids:1631070300;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ES link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><b><span lang=EN-GB>Draft minutes Server Certificate Working Group – July 6, 2023</span></b><span lang=EN-GB><o:p></o:p></span></p><ol start=1 type=1><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level1 lfo1'><span lang=EN-GB>Roll Call and Begin Recording </span><o:p></o:p></li></ol><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: For the attendance, Rich Smith of Digicert and Daryn of GoDaddy joined the call.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Abdul Hakeem Putra - (MSC Trustgate Sdn Bhd), Abhishek Bhat - (eMudhra), Adam Jones - (Microsoft), Andrea Holland - (VikingCloud), Ben Wilson - (Mozilla), Brianca Martin - (Amazon), Chris Clements - (Google), Clint Wilson - (Apple), Corey Bonnell - (DigiCert), Corey Rasmussen - (OATI), Daryn Wright - (GoDaddy), Dimitris Zacharopoulos - (HARICA), Dustin Hollenback - (Microsoft), Enrico Entschew - (D-TRUST), Eva Vansteenberge - (GlobalSign), Fumi Yoneda - (Japan Registry Services), Inaba Atsushi - (GlobalSign), Inigo Barreira - (Sectigo), Janet Hines - (VikingCloud), Jos Purvis - (Fastly), Keshava Nagaraju - (eMudhra), Lynn Jeun - (Visa), Mads Henriksveen - (Buypass AS), Marcelo Silva - (Visa), Marco Schambach - (IdenTrust), Martijn Katerbarg - (Sectigo), Michelle Coon - (OATI), Nargis Mannan - (VikingCloud), Nate Smith - (GoDaddy), Nicol So - (CommScope), Paul van Brouwershaven - (Entrust), Pedro Fuentes - (OISTE Foundation), Peter Miskovic - (Disig), Rebecca Kelley - (Apple), RIch Smith - (DigiCert), Rollin Yu - (TrustAsia Technologies, Inc.), Roman Fischer - (SwissSign), Ryan Dickson - (Google), Scott Rea - (eMudhra), Stephen Davidson - (DigiCert), Tadahiko Ito - (SECOM Trust Systems), Thomas Zermeno - (SSL.com), Tobias Josefowitz - (Opera Software AS), Trevoli Ponds-White - (Amazon), Wayne Thayer - (Fastly), Yashwanth TM - (eMudhra)<o:p></o:p></span></p><ol start=2 type=1><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level1 lfo1'><span lang=EN-GB>Read Antitrust Statement </span><o:p></o:p></li></ol><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: Read during the forum call part<o:p></o:p></span></p><ol start=3 type=1><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level1 lfo1'>Review Agenda <o:p></o:p></li></ol><p class=qt-qt-qt-qt-qt-qt->Iņigo: Agenda approved<o:p></o:p></p><ol start=4 type=1><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level1 lfo1'><span lang=EN-GB>Minutes:</span><o:p></o:p></li><ul type=circle><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level2 lfo1'><span lang=EN-GB>22 June: circulated</span><o:p></o:p></li></ul></ol><p class=qt-qt-qt-qt-qt-qt- style='margin-left:54.0pt'><span lang=EN-GB>Iņigo: Minutes approved.</span><o:p></o:p></p><ol start=4 type=1><ul type=circle><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level2 lfo1'><span lang=EN-GB>F2F: not ready yet</span><o:p></o:p></li></ul></ol><p class=qt-qt-qt-qt-qt-qt- style='margin-left:54.0pt'><span lang=EN-GB>Iņigo: Sent out this morning. The validation SC minutes were also sent out this week. Will be approved in 2 weeks during the next call. And then published in the website.<o:p></o:p></span></p><ol start=5 type=1><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level1 lfo1'><span lang=EN-GB>Membership:</span><o:p></o:p></li><ul type=circle><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level2 lfo1'><span lang=EN-GB>No new applications</span><o:p></o:p></li></ul></ol><p class=qt-qt-qt-qt-qt-qt- style='margin-left:54.0pt'><span lang=EN-GB>Iņigo: no new applications in these 2 weeks<o:p></o:p></span></p><ol start=6 type=1><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level1 lfo1'><span lang=EN-GB>Issues to discuss</span><o:p></o:p></li><ul type=circle><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level2 lfo1'><span lang=EN-GB>Label GitHub open tickets</span><o:p></o:p></li></ul></ol><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: We have about 70ish open issues in GitHub and would like to ask to their owners to label those that are not yet labelled in order to get them organized. Weīd like to have a clean up ballot in the fall and will use those labelled as “clean-up” to recognize easily and then work on those specific ones and therefore not reviewing the others. With that, weīll create the clean-up ballot and also will reduce the number of open issues in GitHub.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Ben: thatīs good. To have the issues labelled. Need to go through and look and see whatīs marked as clean up.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: But Iīm asking the owners to review and label accordingly. Once done, start on the ballot. I asked Corey in the past F2F to work on this possible cleanup ballot.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Ben: How do you want to label backburner? Those with very low priority.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Trev: we just want to keep them as reminder <o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: yes, weīll focus on those labelled as cleanup. For the others, you can label generic.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Ben: Ok, we can sort and choose the cleanup label and for the others Iīll sort of.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: yes, correct.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Trev: I have not clear for what you said. Some are labelled, and Corey and you and someone are going to make a clean up ballot<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: yes, thatīs the idea<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Trev: So, youīre making a clean up ballot and youīre just saying that someone is making a clean up ballot<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: Well, weīre preparing the ballot but Iīm not saying that Iīll be the owner or proposer of the ballot, but yes, we can also make the proposal.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Trev: you need to figure out an owner of the cleanup ballot and then for the issues not labelled you want this person to open and label them?<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: the owners of the open issues need to check their own issues and label accordingly those that are not labelled. Iīm not going to do it but the owners. Those labelled as validation for example is ok.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Trev: so owners like Ryan, Clint, Tim, Dimitris, Aaron, Stephen, … are you going to email people or are you just telling them in this call?<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: I emailed some of this people time ago to review their open tickets, open issues because some were fixed and need to be removed, etc. For example, Tim told me that he was going to review his open tickets<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Trev: Are you giving a due date to do this?<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: No, Iīd like to have this done asap and to have it ready for the fall to work on that cleanup ballot. Maybe by the end of September. Itīs not needed to do it this week, weīre in summer holidays, so when people have time.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Trev: are you taking ownership of those? Items that were opened in the past by people that are not in the group. Are you going to assign them into someone else? How about those belonging to Ryan Sleevi?<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: I asked Ryan Dickson to take the ownership as they are from Google.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Trev: Thanks Ryan. Ok, if thatīs enough of a label, then thatīs great. I donīt think I have any other question, that was ok. Thank you.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB><o:p> </o:p></span></p><ol start=7 type=1><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level1 lfo1'><span lang=EN-GB>Ballot Status – see list below</span><o:p></o:p></li></ol><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: Regarding ballots, both ongoing have finished the discussion period. Iīd like to ask the promoters whatīs next step.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Tom: yes, weīve discussed and put a lot of effort in the ballot and want to wrap it up. If changes come later that may be something we can further discuss. So, yes, weīre moving to voting<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Ryan: Yes, the voting period will begin in 15 minutes. Iīll send out an email.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB><o:p> </o:p></span></p><ol start=8 type=1><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level1 lfo1'><span lang=EN-GB>Any Other Business</span><o:p></o:p></li></ol><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Iņigo: Paul sent a link with the presentation gave in the F2F that have gone to the IETF for discussion.<o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><a href="https://datatracker.ietf.org/doc/draft-vanbrouwershaven-acme-auto-discovery/"><span lang=EN-GB>draft-vanbrouwershaven-acme-auto-discovery-00 - Auto-discovery mechanism for ACME client configuration (ietf.org)</span></a><span lang=EN-GB><o:p></o:p></span></p><p class=qt-qt-qt-qt-qt-qt-><span lang=EN-GB>Paul: Review the proposal, provide feedback and maybe express your support if you like the idea. I think this is key for an opportunity to move to shorter certificates validity. The proposal is based on the CAA record, and also contains some guidance for establishing an account binding, etc. I just wanted to share with the working group because I think itīs important for everyone here on the call. Your feedback is really appreciated. Thank you.</span><span lang=EN-GB><o:p></o:p></span></p><ol start=9 type=1><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level1 lfo1'><span lang=EN-GB>Next call: 20 July</span><o:p></o:p></li><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l0 level1 lfo1'><span lang=EN-GB>Adjourn</span><o:p></o:p></li></ol><p class=MsoNormal><b>CURRENT STATUS OF BALLOTS</b> <o:p></o:p></p><ul type=disc><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level1 lfo2'>Passed<o:p></o:p></li><ul type=circle><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level2 lfo2'><span lang=EN-GB>None </span><o:p></o:p></li></ul><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level1 lfo2'><span lang=EN-GB>Failed</span><o:p></o:p></li><ul type=circle><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level2 lfo2'><span lang=EN-GB>None</span><o:p></o:p></li></ul><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level1 lfo2'>Voting Period<o:p></o:p></li><ul type=circle><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level2 lfo2'>None<o:p></o:p></li></ul><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level1 lfo2'>Discussion Period<o:p></o:p></li><ul type=circle><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level2 lfo2'><span lang=EN-GB>SC63 – Make OCSP optional, require CRLs. Finished on the 29/6</span><o:p></o:p></li><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level2 lfo2'><span lang=EN-GB>SC59 – Weak Keys. Finishes today 3/7<o:p></o:p></span></li></ul><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level1 lfo2'>Review Period <o:p></o:p></li><ul type=circle><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level2 lfo2'>None<o:p></o:p></li></ul><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level1 lfo2'>Draft / Under Consideration<o:p></o:p></li><ul type=circle><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level2 lfo2'><span lang=EN-GB>SCXX – SLO/Response for CRL & OCSP Responses - David Kluge (Google) / Clint Wilson (Apple): on hold<o:p></o:p></span></li><li class=qt-qt-qt-qt-qt-qt- style='mso-list:l1 level2 lfo2'><span lang=EN-GB>SCXX – Clean-up ballot</span><o:p></o:p></li></ul></ul><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p></div></body></html>