[Cscwg-public] Code Signing Cleanup and Clarification Ballot

[Bruce Morton]

Based on feedback, here is the updated proposal for the ballot. The changes were:

Section 11.1.1 - Added in an effective date which states, "Effective 1 November 2021, the method used to verify the identity of the Certificate Requester SHALL be per section 11.1.2." Please provide feedback, if we think another date should be used.

Appendix A (1) - changed cross certificate requirement to state, "**CAs can issue Cross Certificates for Root CAs whose Public Key meets the above requirements in force after the Transition Date with a Root whose Public Key meets the above requirements in force prior to the Transition Date to support Code Signing Certificate validation."

Appendix A (2) - changed cross certificate requirement to state, "**CAs can issue Cross Certificates for Root CAs whose Public Key meets the above requirements in force after the Transition Date with a Root whose Public Key meets the above requirements in force prior to the Transition Date to support Timestamp Certificate validation."

With these changes DigiCert has agreed to endorse.
Ian, please confirm that you will still endorse with these changes.


Thanks, Bruce.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20210708/eaddc0f1/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Baseline Requirements for the Issuance and Management of Code Signing.v2.3_cleanup ballot_v4.docx
Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document
Size: 140783 bytes
Desc: Baseline Requirements for the Issuance and Management of Code Signing.v2.3_cleanup ballot_v4.docx
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20210708/eaddc0f1/attachment-0001.docx>