[Cscwg-public] [External Sender] Marking the EV Code Signing Guidelines OBSOLETE

[Adriano Santoni]

+1

Il 28/02/2024 10:16, Dimitris Zacharopoulos (HARICA) via Cscwg-public ha 
scritto:
> NOTICE: Pay attention - external email - Sender is 
> 0100018def00533a-ed751293-2780-4d97-8825-f7d1841724b7-000000 at amazonses.com 
>
>
>
>
>
> Dear Members,
>
> As we discussed today at the F2F#61 meeting, I would like to propose a 
> ballot to mark the "Guidelines For The Issuance And Management Of 
> Extended Validation Code Signing Certificates" as obsolete. I suggest 
> that we update the latest EVCS Guidelines v1.4 
> <https://cabforum.org/working-groups/code-signing/ev-code-signing-certificate-guidelines/> 
> to version 1.5 with the following changes:
>
> --- BEGIN DRAFT BALLOT LANGUAGE ---
>
> In the "Notice to Readers" section, update the second paragraph to state:
>
> *"The Code Signing Working Group considers this document OBSOLETE as 
> of XX XXXXXXXX XXXX. CAs SHOULD NOT use this standard but instead 
> SHOULD use the "Baseline Requirements for the Issuance and Management 
> of Publicly‐Trusted Code Signing Certificates" that has incorporated 
> and improved requirements related to Extended Validation (EV) Code 
> Signing Certificates"*
>
> Update section 17.1 to state the following:
>
> " *As this document is marked OBSOLETE, CAs SHOULD NOT be audited 
> against this standard.* "
>
> --- END DRAFT BALLOT LANGUAGE ---
>
> The *XX XXXXXXXX XXXX* will include an *effective date* we decide. I 
> propose this date is *in the past* but I am not sure what would be a 
> reasonable date. One thought is to ask if there is a CA Member that 
> has been audited recently against the EV CS Guidelines v1.4. Another 
> thought is to ask CPA Canada and ACAB'c for feedback about when they 
> stopped issuing Audit Letters that cover the EV CS Guidelines v1.4. 
> Other ideas are welcome.
>
> Can I also have two endorsers so I can reserve a ballot number?
>
>
> Thank you,
> Dimitris.
>
>
> _______________________________________________
> Cscwg-public mailing list
> Cscwg-public at cabforum.org
> https://lists.cabforum.org/mailman/listinfo/cscwg-public
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20240228/6763d9d8/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4620 bytes
Desc: Firma crittografica S/MIME
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20240228/6763d9d8/attachment.p7s>