[Cscwg-public] Voting Period Begins: Ballot CSC-18v2 - Update Revocation Requirements

[Bruce Morton]

Entrust votes Yes to CSC-18 ballot.

Bruce.

From: Cscwg-public <cscwg-public-bounces at cabforum.org> On Behalf Of Martijn Katerbarg via Cscwg-public
Sent: Thursday, May 11, 2023 12:30 PM
To: cscwg-public at cabforum.org
Subject: [EXTERNAL] [Cscwg-public] Voting Period Begins: Ballot CSC-18v2 - Update Revocation Requirements

WARNING: This email originated outside of Entrust.
DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.
________________________________
Purpose of this ballot: This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates“ version 3.2, Section 4.9.1 - "Circumstances for revocation" in order to align it with the TLS and S/MIME BRs and set stricter requirements for revocation due to Private Key Compromise and use in Suspect Code.
The following motion has been proposed by Martijn Katerbarg of Sectigo and endorsed by Ian McMillan of Microsoft and Bruce Morton of Entrust.
MOTION BEGINS:
This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” ("Code Signing Baseline Requirements") based on version 3.2.
MODIFY the Code Signing Baseline Requirements as specified in the following redline: https://github.com/cabforum/code-signing/pull/17/files#diff-904962f0e52198f4a232d6ef6732d57ccb47433d4bba47b3472d681405360e31
MOTION ENDS
The procedure for approval of this ballot is as follows:
Discussion (7 days)

  *   Start Time: 2023-05-04 18:30 CEST
  *   End Time: 2023-05-11 18:30 CEST
Vote for approval (7 days)

  *   Start Time: 2023-05-11 18:30 CEST
  *   End Time: 2023-05-18 18:30 CEST



Any email and files/attachments transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20230511/20cfab7b/attachment-0001.html>