[Cscwg-public] Ballot CSC-10: WebTrust CSBR v2.0 Audit Criteria- Voting Begins
Dimitris Zacharopoulos (HARICA)
dzacharo at harica.gr
Mon Aug 9 20:01:56 UTC 2021
HARICA votes "yes" to ballot CSCWG-10.
On 6/8/2021 5:27 μ.μ., Dean Coclin wrote:
>
> Voting on Ballot CSCWG-10 ends 7 days after the start date/time. It
> will be August 12^th at 14:00 ET.
>
>
> Dean
>
> *From:* Dimitris Zacharopoulos (HARICA) <dzacharo at harica.gr>
> *Sent:* Friday, August 6, 2021 1:51 AM
> *To:* Dean Coclin <dean.coclin at digicert.com>;
> cscwg-public at cabforum.org; Bruce Morton <bruce.morton at entrust.com>
> *Subject:* Re: [Cscwg-public] Ballot CSC-10: WebTrust CSBR v2.0 Audit
> Criteria- Voting Begins
>
> Dean,
>
> Pleass clearly indicate when the voting ends.
>
> The section of the original email does not state when the voting
> begins or ends.
>
>
> Thanks,
> Dimitris.
>
> On 5/8/2021 9:06 μ.μ., Dean Coclin via Cscwg-public wrote:
>
> Voting begins on Ballot CSC-10 now.
>
> *From:* Cscwg-public <cscwg-public-bounces at cabforum.org>
> <mailto:cscwg-public-bounces at cabforum.org> *On Behalf Of *Bruce
> Morton via Cscwg-public
> *Sent:* Thursday, July 29, 2021 1:38 PM
> *To:* cscwg-public at cabforum.org <mailto:cscwg-public at cabforum.org>
> *Subject:* [Cscwg-public] Ballot CSC-10: WebTrust CSBR v2.0 Audit
> Criteria
>
> Ballot CSC-10: WebTrust CSBR v2.0 Audit Criteria
>
> Purpose of the Ballot: For Baseline Requirement for the Issuance
> and Management of Publicly-Trusted Code Signing Certificates v2.3,
> the purpose is to allow the new WebTrust CSBR 2.0 or later audit
> scheme. The ballot allows the older WebTrust audits to continue
> for audit periods which start before 1 November 2020. There is no
> specific start date for the CSBR 2.0 audit scheme, which allows it
> also to be used for audit periods starting before 1 November 2021.
>
> The following motion has been proposed by Bruce Morton of Entrust,
> and endorsed by Sebastian Schulz of GlobalSign and Inigo Barreira
> of Sectigo.
>
> - MOTION BEGINS -
>
> Delete the following text from Section 17.1:
>
> 1. “WebTrust for CAs v2.0 or newer” AND “WebTrust for
> Certification Authorities – Publicly Trusted Code Signing
> Certificates v1.0.1 or newer”; or
>
> 2. “WebTrust for CAs v2.0 or newer” AND “WebTrust for
> Certification Authorities – Extended Validation Code Signing
> v1.4.1 or newer”; or
>
> 3. ETSI EN 319 411-1, which includes normative references to ETSI
> EN 319 401 (the latest version of the referenced ETSI documents
> should be applied); or
>
> 4. If a Government CA is required by its Certificate Policy to use
> a different internal audit scheme, it MAY use such scheme provided
> that the audit either (a) encompasses all requirements of one of
> the above schemes or (b) consists of comparable criteria that are
> available for public review.
>
> Insert the following text to Section 17.1:
>
> 1. For Audit Periods starting before 1 November 2020, “WebTrust
> for CAs v2.0 or newer” AND “WebTrust for Certification Authorities
> – Publicly Trusted Code Signing Certificates v1.0.1 or newer”; or
>
> 2. For Audit Periods starting before 1 November 2020, “WebTrust
> for CAs v2.0 or newer” AND “WebTrust for Certification Authorities
> – Extended Validation Code Signing v1.4.1 or newer”; or
>
> 3. “WebTrust for CAs v2.0 or newer” AND “WebTrust for
> Certification Authorities – Code Signing Baseline Requirements
> v2.0 or newer”; or
>
> 4. ETSI EN 319 411-1, which includes normative references to ETSI
> EN 319 401 (the latest version of the referenced ETSI documents
> should be applied); or
>
> 5. If a Government CA is required by its Certificate Policy to use
> a different internal audit scheme, it MAY use such scheme provided
> that the audit either (a) encompasses all requirements of one of
> the above schemes or (b) consists of comparable criteria that are
> available for public review.
>
> - MOTION ENDS -
>
> The procedure for approval of this ballot is as follows:
>
> Discussion (7 days) Start Time: 2021-07-29, 14:00 Eastern Time
> (US) End Time: not before 2021-08-05, 14:00 Eastern Time (US)
>
> Vote for approval (7 days) Start Time:
>
>
>
> _______________________________________________
>
> Cscwg-public mailing list
>
> Cscwg-public at cabforum.org <mailto:Cscwg-public at cabforum.org>
>
> https://lists.cabforum.org/mailman/listinfo/cscwg-public <https://lists.cabforum.org/mailman/listinfo/cscwg-public>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20210809/4c31a88d/attachment.html>
More information about the Cscwg-public
mailing list