[Cscwg-public] Code Signing Cleanup and Clarification Ballot

[Ian McMillan]

Hi Bruce,

I confirm you have my endorsement on behalf of Microsoft.

Thanks,
Ian

From: Cscwg-public <cscwg-public-bounces at cabforum.org> On Behalf Of Bruce Morton via Cscwg-public
Sent: Thursday, July 8, 2021 7:58 AM
To: cscwg-public at cabforum.org
Subject: [EXTERNAL] [Cscwg-public] Code Signing Cleanup and Clarification Ballot

Based on feedback, here is the updated proposal for the ballot. The changes were:

Section 11.1.1 – Added in an effective date which states, “Effective 1 November 2021, the method used to verify the identity of the Certificate Requester SHALL be per section 11.1.2.” Please provide feedback, if we think another date should be used.

Appendix A (1) – changed cross certificate requirement to state, “**CAs can issue Cross Certificates for Root CAs whose Public Key meets the above requirements in force after the Transition Date with a Root whose Public Key meets the above requirements in force prior to the Transition Date to support Code Signing Certificate validation.”

Appendix A (2) – changed cross certificate requirement to state, “**CAs can issue Cross Certificates for Root CAs whose Public Key meets the above requirements in force after the Transition Date with a Root whose Public Key meets the above requirements in force prior to the Transition Date to support Timestamp Certificate validation.”

With these changes DigiCert has agreed to endorse.
Ian, please confirm that you will still endorse with these changes.


Thanks, Bruce.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20210710/648c26b4/attachment-0001.html>