[Cscwg-public] CSCWG Agenda for 16 June 2021

Fri Jun 18 12:41:32 UTC 2021

Hi Atsushi,

I don’t know if I understand the question, but here is my perspective.

A CA company can issue Non-EV or EV Code Signing certificates. If the CA
company issues Code Signing certificates, then they will also create a CA
which issues Timestamp certificates. Then they can issue a Timestamping
certificate to their TSA. The result is that a Subscriber can sign and
timestamp code and there will be trusted validation paths for both the code
signing and timestamping certificate.

Bruce. 

From: Atsushi Inaba <atsushi.inaba at globalsign.com> 
Sent: Friday, June 18, 2021 3:17 AM
To: Bruce Morton <Bruce.Morton at entrust.com>; cscwg-public at cabforum.org
Cc: Atsushi Inaba <atsushi.inaba at globalsign.com>
Subject: [EXTERNAL] RE: CSCWG Agenda for 16 June 2021

WARNING: This email originated outside of Entrust.
DO NOT CLICK links or attachments unless you trust the sender and know the
content is safe.

  _____  

Hello Bruce,

Thank you for the response.

Does 16.1.1   mean only the CA which issues Code Signing 

Certificate can be a TSA for Code Signing?

Sorry for my poor understanding.

Regards,

Atsushi Inaba

―――――――――――――――――――――――――――――

GMO GlobalSign K.K.

Business Planning

Atsushi Inaba

1-2-3, Dogenzaka, Shibuya Ku, Tokyo, Japan

150-0043

TEL: +81-3-6370-6671

FAX: +81-3-6370-6505

E-MAIL: atsushi.inaba at globalsign.com <mailto:atsushi.inaba at globalsign.com> 

URL:https://jp.globalsign.com/

―――――――――――――――――――――――――――――

THANK YOU 25 YEARS Internet for Everyone

―――――――――――――――――――――――――――――

■ GMO INTERNET GROUP ■ http://www.gmo.jp/

―――――――――――――――――――――――――――――

This e-mail message is intended to be conveyed only to the 

designated recipient(s). If you are NOT the intended 

recipient(s) of this e-mail, please kindly notify the sender 

immediately and delete the original message from your system.

From: Bruce Morton <Bruce.Morton at entrust.com
<mailto:Bruce.Morton at entrust.com> > 
Sent: Friday, June 18, 2021 12:13 AM
To: Atsushi Inaba <atsushi.inaba at globalsign.com
<mailto:atsushi.inaba at globalsign.com> >; cscwg-public at cabforum.org
<mailto:cscwg-public at cabforum.org> 
Subject: RE: CSCWG Agenda for 16 June 2021

Hi Atsushi,

It might be best for Microsoft to interpret their requirements.

>From my point of view, the Subscriber should have the opportunity to use a
TSA which the CA operates in accordance with RFC 3161.

Thanks, Bruce.

From: Atsushi Inaba <atsushi.inaba at globalsign.com
<mailto:atsushi.inaba at globalsign.com> > 
Sent: Thursday, June 17, 2021 12:44 AM
To: Bruce Morton <Bruce.Morton at entrust.com <mailto:Bruce.Morton at entrust.com>
>; cscwg-public at cabforum.org <mailto:cscwg-public at cabforum.org> 
Cc: Atsushi Inaba <atsushi.inaba at globalsign.com
<mailto:atsushi.inaba at globalsign.com> >
Subject: [EXTERNAL] RE: CSCWG Agenda for 16 June 2021

WARNING: This email originated outside of Entrust.
DO NOT CLICK links or attachments unless you trust the sender and know the
content is safe.

  _____  

Hello Bruce,

Thank you for your work in yesterday's CSCWG Mtg.

May I please ask you a question about the proposed wordings in 

CSBRs "16.1 Timestamp Authority Key Protection"?

In item 1, proposed wordings are "If the CA issues Code Signing 

Certificates then the CA MUST operates a Timestamp Authority that

complies with RFC-3161.".  If I'm not mistaken, I heard that you

quoted this sentence from Microsoft Root Program Requirements.

But in the Microsoft Root Program requirements, it says as follows;

>C. Revocation Requirements

>5.If a CA issues Code Signing certificates, it must use a Time Stamp

> Authority that complies with RFC 3161.".

So, I feel that it would be appropriate to change "Must operates 

Timestamp Authority " to "must use a Time Stamp Authority". 

Or is there any reason to use "operate"?

And, I suppose that the organization which does not operate a CA 

can be a Time Stamp Authority by using TSA certificate issued 

from any CA.

Please forgive me if I misunderstood the points.

Regards.

Atsushi Inaba

―――――――――――――――――――――――――――――

GMO GlobalSign K.K.

Business Planning

Atsushi Inaba

1-2-3, Dogenzaka, Shibuya Ku, Tokyo, Japan

150-0043

TEL: +81-3-6370-6671

FAX: +81-3-6370-6505

E-MAIL: atsushi.inaba at globalsign.com <mailto:atsushi.inaba at globalsign.com> 

URL:https://jp.globalsign.com/

―――――――――――――――――――――――――――――

THANK YOU 25 YEARS Internet for Everyone

―――――――――――――――――――――――――――――

■ GMO INTERNET GROUP ■ http://www.gmo.jp/

―――――――――――――――――――――――――――――

This e-mail message is intended to be conveyed only to the 

designated recipient(s). If you are NOT the intended 

recipient(s) of this e-mail, please kindly notify the sender 

immediately and delete the original message from your system.

From: Cscwg-public <cscwg-public-bounces at cabforum.org
<mailto:cscwg-public-bounces at cabforum.org> > On Behalf Of Bruce Morton via
Cscwg-public
Sent: Thursday, June 17, 2021 4:34 AM
To: cscwg-public at cabforum.org <mailto:cscwg-public at cabforum.org> 
Subject: Re: [Cscwg-public] CSCWG Agenda for 16 June 2021

Attached are the Signing Service slides and the Cleanup ballot markup.

I am looking for a second endorser for the Cleanup ballot, so I am hoping
that DigiCert or GlobalSign can confirm as soon as possible.

Great meeting today!

Thanks, Bruce.

From: Cscwg-public <cscwg-public-bounces at cabforum.org
<mailto:cscwg-public-bounces at cabforum.org> > On Behalf Of Bruce Morton via
Cscwg-public
Sent: Tuesday, June 15, 2021 4:51 PM
To: cscwg-public at cabforum.org <mailto:cscwg-public at cabforum.org> 
Subject: [EXTERNAL] [Cscwg-public] CSCWG Agenda for 16 June 2021

WARNING: This email originated outside of Entrust.
DO NOT CLICK links or attachments unless you trust the sender and know the
content is safe.

  _____  

Proposed agenda for our meeting on 16 June 2021 at 12:30 PM ET.

0.            Assign minute taker

1.            Roll Call

2.            Antitrust statement

3.            Approval of meeting minutes from 3 June 2021

4.            Signing Service (1 hr) 

5.            Clean-up ballot discussion changes (30 minutes) 

6.            Other ballots

7.            Other business

8.            Next Meeting - 1 July 2021 

9.            Adjourn

Thanks, Bruce.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20210618/bd538abe/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4929 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20210618/bd538abe/attachment-0001.p7s>