[Cscwg-public] New companies and EV Code Signing

[Tim Hollebeek]

I'm hearing from our code signing validation people that 11.1.1, which
refers to non-EV CS certificates, has a requirement for additional
validation for companies less than three years old (we've discussed this
recently), but this requirement is missing for EV code signing certificates.

 

Is that what we want?  It seems very odd that a higher level of validation
has fewer requirements.

 

-Tim

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20210722/d56a40aa/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4940 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20210722/d56a40aa/attachment.p7s>