[Cscwg-public] Final Minutes of Code Signing Working Group August 1 2019

[Dean Coclin]

Final Minutes below

 

 

 

 

1.	Call to Order - Completed
2.	Reading of Anti-trust Statement - Dean read the anti-trust statement
3.	Role Call - Dean Coclin, Jason Cooper, Atsushi Inaba, Bruce Morton,
Joanna Fox, Karthik Ramasamy, Tim Callan, Hugh Mercer, Robin Alden
4.	Approval of prior minutes: Minutes of July 18th approved
5.	Potential new member status: no changes
6.	Status of Ballot for current code signing guidelines: 

a.	In IPR review until August 13, 2019. Dean to send announcement when
complete

7.	Additional changes to current guidelines and EV guidelines

a.	Discussion about creating a list of CA contacts which can be
distributed to AV companies. Dean to start the list online
b.	Centralized blacklist: Jason to discuss with Mike about a community
driven effort to maintain such a list. Dean suggested that someone like
Netcraft could create/maintain this but it would require payment from CAs
and/or MSFT.
c.	Timestamping: general agreement on creating a separate timestamping
doc since timestamping is referenced in both BRCS and EVCS guidelines. Will
wait until after Aug 13th.
d.	SHA-1: Jason to circle back with Mike on moving the date in from
1/1/21. CAs were asked if they are even issuing any more. Bruce said they
are not. Others will check

8.	Any other business: None
9.	Adjourn-Next meeting August 15th

 

 

Thanks,

Bruce.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/cscwg-public/attachments/20190826/95840e89/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4916 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/cscwg-public/attachments/20190826/95840e89/attachment.p7s>