[Cscwg-public] Voting results Ballot CSCWG-18 (v2)

Dean Coclin dean.coclin at digicert.com
Thu May 18 18:13:26 UTC 2023

The voting period for Ballot CSC-18 (v2) has ended and the Ballot has Passed. Here are the results:


Voting by Certificate Issuers – 5 votes total including abstentions


- 5 Yes votes: DigiCert, Entrust, GlobalSign, HARICA, Sectigo

- 0 No votes

- 0 Abstain


100% of voting Certificate Issuers voted in favor.


Voting by Certificate Consumers – 1 vote total including abstentions


- 1 Yes votes: Microsoft

- 0 No votes

- 0 Abstain


100% of voting Certificate Consumers voted in favor.


Relevant Bylaw references


Bylaw 2.3(f) requires:


- a "yes" vote by two-thirds of Certificate Issuer votes and 50%-plus-one Certificate Consumer votes for approval.  Votes to abstain are not counted for this purpose.  This requirement was met for both Certificate Issuers and Certificate Consumers.

- at least one Certificate Issuer and one Certificate Consumer Member must vote in favor of a ballot for the ballot to be adopted. This requirement was also met.


Under Bylaw 2.3(g), "a ballot result will be considered valid only when more than half of the number of currently active Members has participated". Votes to abstain are counted in determining a quorum.  Half of currently active Members as of the start of voting was XX, so quorum was XX votes – quorum was met."


Corey-Please publish to the website.


Dean Coclin


Dean Coclin 






From: Cscwg-public <cscwg-public-bounces at cabforum.org> On Behalf Of Martijn Katerbarg via Cscwg-public
Sent: Thursday, May 11, 2023 12:30 PM
To: cscwg-public at cabforum.org
Subject: [Cscwg-public] Voting Period Begins: Ballot CSC-18v2 - Update Revocation Requirements


Purpose of this ballot: This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates“ version 3.2, Section 4.9.1 - "Circumstances for revocation" in order to align it with the TLS and S/MIME BRs and set stricter requirements for revocation due to Private Key Compromise and use in Suspect Code.

The following motion has been proposed by Martijn Katerbarg of Sectigo and endorsed by Ian McMillan of Microsoft and Bruce Morton of Entrust.


This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” ("Code Signing Baseline Requirements") based on version 3.2.

MODIFY the Code Signing Baseline Requirements as specified in the following redline: https://github.com/cabforum/code-signing/pull/17/files#diff-904962f0e52198f4a232d6ef6732d57ccb47433d4bba47b3472d681405360e31 <https://url.avanan.click/v2/___https:/github.com/cabforum/code-signing/pull/17/files%23diff-904962f0e52198f4a232d6ef6732d57ccb47433d4bba47b3472d681405360e31___.YXAzOmRpZ2ljZXJ0OmE6bzpkYzRjYTM3NjljYzI1NzZhMjZkNzYyZWJkYjEzNGMwNjo2OmI0YTU6NWNlNTM3YTc3OGJiNTA5OGI0NWUzYWQ5ZGVhNWIxMzY5NzNmNjE3ZmMyNDNhZjVlM2E5MTM2ZGFkZWFmMmViYjpoOkY> 


The procedure for approval of this ballot is as follows:

Discussion (7 days)

*	Start Time: 2023-05-04 18:30 CEST
*	End Time: 2023-05-11 18:30 CEST

Vote for approval (7 days)

*	Start Time: 2023-05-11 18:30 CEST
*	End Time: 2023-05-18 18:30 CEST




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20230518/c6b6afac/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5197 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20230518/c6b6afac/attachment-0001.p7s>

More information about the Cscwg-public mailing list