[Cscwg-public] Final CSCWG Minutes September 22, 2022

[Dean Coclin]

CSCWG Final Minutes September 22, 2022

 

Attendees

 

Atsushi Inaba

Bruce Morton

Corey Bonnell

Andrea Holland

Dean Coclin

Ian McMillan

Joanna Fox

Martijn Katerbarg

Tim Crawford

Tim Hollebeek

Roberto Quiñones

Michael Sykes

 

Dean read the anti-trust statement

 

No objection to minutes from Aug 8, minutes approved. Will be sent to public
list

 

Information that the IPR review on CSC-15 ended and the ballot has been
approved. The website has been updated.

 

CSC-17, subscriber private key protection, is in voting period that closes
September 23rd. 

 

Topic to discuss

- Malware proposal

Martijn Katerbarg is finishing the text and will send out the latest
changes. Bruce Morton and Ian McMillan plan to endorse after review.

 

- Special election ballot

There is a chair ratification ballot, it's a ratification ballot, either you
ratify or not.

 

- Vice chain nomination

Bruce Morton is nominated so far. Other nominations should be submitted to
the list before October 3.

 

- Signing Service discussion

There was a discussion what a signing service should provide, being
complications between subscribers and signing service requirements. It was
discussed that a signing service should not only be a key protection service
without any other security mechanisms, that could sign anything if breached,
regardless if a HSM is used locally or a cloud HSM is used.

Bruce suggested to wait for Ian’s ballot (CSC-17) to go through, then
discuss the signing service in more detail. Tim suggested that it was a good
topic to discuss during the next F2F, to start defining which security
services are required. Bruce suggested to create a model for the subscriber
signing protection that enforces the same security level regardless of how
the signing is done. It was agreed to discuss further at F2F.

 

- Timestamping 

Ian is holding off on that for the moment to not distract from the malware
proposal and the signing service discussion.

 

- Other business:

The F2F coming up in one month. If there are topics someone want to add to
the list to discuss, send them to Bruce.

 

Joanna noticed that some numbering is confusing and looks off in section
6.2.7.4.1 in Ian’s ballot. Ian thinks the numbering is intentional, but will
go back and look at it.

 

Dean suggested to cancel the meeting the 20th of October due to the F2F the
following week. This will be discussed on the next meeting.

 

- Meeting was closed

 

 

Dean Coclin

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20221008/4858a807/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4916 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20221008/4858a807/attachment.p7s>