[Cscwg-public] EV requirements simplification effort

Fri Jun 7 12:54:50 UTC 2024

Hey Tim

GlobalSign has compiled a list of bad-actor-indicators (following the review
of many certificate problem reports) that may be useful for this - although
the public mailing list may not be the right place for obvious reasons.

Kind regards,

Eva

From: Cscwg-public <cscwg-public-bounces at cabforum.org> On Behalf Of Ian
McMillan via Cscwg-public
Sent: 30 May 2024 22:06
To: Tim Hollebeek <tim.hollebeek at digicert.com>; cscwg-public at cabforum.org
Subject: Re: [Cscwg-public] EV requirements simplification effort

Hi Tim,

Please include myself in this effort. 

Thanks,

Ian

  _____  

From: Cscwg-public <cscwg-public-bounces at cabforum.org> on behalf of Tim
Hollebeek via Cscwg-public <cscwg-public at cabforum.org>
Sent: Thursday, May 30, 2024 5:48 AM
To: cscwg-public at cabforum.org <cscwg-public at cabforum.org>
Subject: [EXTERNAL] [Cscwg-public] EV requirements simplification effort 

Hello,

At the Bergamo F2F code signing discussion, I proposed an effort to go
through the EV requirements, and determine which of the requirements are
useful for code signing in the modern world.

As the next step, it was proposed that a group of CAs would get together, go
through the requirements, and come up with a proposal for a new version of
EV that:

1.	Keeps the strength of EV against relevant attacks, but
2.	eliminates unnecessary requirements that do not provide security
value.

If you would like to be part of the effort, please respond to this email.

-Tim

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20240607/a58fec1c/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 8482 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20240607/a58fec1c/attachment-0001.p7s>