[Cscwg-public] VOTING BEGINS: Ballot CSC 17 - Subscriber Private Key Protection Extension

[Andrea Holland]

SecureTrust/VikingCloud votes Yes on CSC 17.

From: Cscwg-public <cscwg-public-bounces at cabforum.org> On Behalf Of Ian McMillan via Cscwg-public
Sent: Friday, September 16, 2022 6:05 PM
To: cscwg-public at cabforum.org
Subject: [Cscwg-public] VOTING BEGINS: Ballot CSC 17 - Subscriber Private Key Protection Extension


Caution: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

Ballot CSC 17 - Subscriber Private Key Protection Extension

Purpose of this ballot: This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates“ version 3.1 according to the attached redline which includes the change of the effective date of November 15, 2021, to June 1, 2023, subscriber key protection and verification requirements in the following sections:


  *   Section 6.2.7.4.1 Subscriber Private Key protection
  *   Section 6.2.7.4.2 Subscriber Private Key verification
  *   Section 1.2.2 Relevant Dates

The change to extend the effective date for these sections regarding subscriber private key protection is to provide approximately 1 year of time from the public announcement of the requirement change for all effected parties to implement the changes.

The following motion has been proposed by Ian McMillan of Microsoft and endorsed by Tim Hollebeek of DigiCert and Bruce Morton of Entrust.

MOTION BEGINS:

This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” version 3.1 by replacing the entirely of the content of the document with the attached document.

MOTION ENDS

The procedure for approval of this ballot is as follows:

Discussion (7 days)

  *   Start Time: 09-09-2022 18:05 Eastern Time
  *   End Time: 09-16-2022 18:05 Eastern Time

Vote for approval (7 days)

  *   Start Time: 09-16-2022 18:05 Eastern Time
  *   End Time: 09-23-2022 18:05 Eastern Time

Company Registration Details
VikingCloud is the registered business name of Sysxnet Limited. Sysxnet Limited is registered in Ireland under company registration number 147176 and its registered office is at 1st Floor, Block 71a, The Plaza, Park West Business Park, Dublin 12, Ireland.

Email Disclaimer
The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by responding to this email and then delete it from your system. Sysxnet Limited is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt..
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20220922/67271ec9/attachment.html>