[Cscwg-public] VOTING BEGINS: Ballot CSC 17 - Subscriber Private Key Protection Extension

[Dimitris Zacharopoulos (HARICA)]

HARICA votes "no" to ballot CSC-17.

As explained during our recent calls, HARICA prepared for this change in 
a timely manner. We notified our Subscribers and assisted them to switch 
over to signing solutions using private keys in hardware devices. We did 
not detect any major challenges during this switch-over, especially 
because these requirements already exist in EV Code Signing 
Certificates, so there are solutions already mature in the industry.

Dimitris.

On 17/9/2022 1:05 π.μ., Ian McMillan via Cscwg-public wrote:
>
> Ballot CSC 17 - Subscriber Private Key Protection Extension
>
> Purpose of this ballot: This ballot updates the “Baseline Requirements 
> for the Issuance and Management of Publicly‐Trusted Code Signing 
> Certificates“ version 3.1 according to the attached redline which 
> includes the change of the effective date of November 15, 2021, to 
> June 1, 2023, subscriber key protection and verification requirements 
> in the following sections:
>
>   * Section 6.2.7.4.1 Subscriber Private Key protection
>   * Section 6.2.7.4.2 Subscriber Private Key verification
>   * Section 1.2.2 Relevant Dates
>
> The change to extend the effective date for these sections regarding 
> subscriber private key protection is to provide approximately 1 year 
> of time from the public announcement of the requirement change for all 
> effected parties to implement the changes.
>
> The following motion has been proposed by Ian McMillan of Microsoft 
> and endorsed by Tim Hollebeek of DigiCert and Bruce Morton of Entrust.
>
> MOTION BEGINS:
>
> This ballot updates the “Baseline Requirements for the Issuance and 
> Management of Publicly‐Trusted Code Signing Certificates” version 3.1 
> by replacing the entirely of the content of the document with the 
> attached document.
>
> MOTION ENDS
>
> The procedure for approval of this ballot is as follows:
>
> Discussion (7 days)
>
>   * Start Time: 09-09-2022 18:05 Eastern Time
>   * End Time: 09-16-2022 18:05 Eastern Time
>
> Vote for approval (7 days)
>
>   * Start Time: 09-16-2022 18:05 Eastern Time
>   * End Time: 09-23-2022 18:05 Eastern Time
>
>
> _______________________________________________
> Cscwg-public mailing list
> Cscwg-public at cabforum.org
> https://lists.cabforum.org/mailman/listinfo/cscwg-public
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20220920/e16e66b0/attachment-0001.html>