[Cscwg-public] EV requirements simplification effort

[Tim Hollebeek]

Oh, that's actually very interesting.  We should figure out how to have that
discussion.

 

-Tim

 

From: Eva Van Steenberge <eva.vansteenberge at globalsign.com> 
Sent: Friday, June 7, 2024 8:55 AM
To: Ian McMillan <ianmcm at microsoft.com>; cscwg-public at cabforum.org; Tim
Hollebeek <tim.hollebeek at digicert.com>
Subject: RE: EV requirements simplification effort

 

Hey Tim

 

GlobalSign has compiled a list of bad-actor-indicators (following the review
of many certificate problem reports) that may be useful for this - although
the public mailing list may not be the right place for obvious reasons.

 

Kind regards,

 

Eva

 

 

 

From: Cscwg-public <cscwg-public-bounces at cabforum.org
<mailto:cscwg-public-bounces at cabforum.org> > On Behalf Of Ian McMillan via
Cscwg-public
Sent: 30 May 2024 22:06
To: Tim Hollebeek <tim.hollebeek at digicert.com
<mailto:tim.hollebeek at digicert.com> >; cscwg-public at cabforum.org
<mailto:cscwg-public at cabforum.org> 
Subject: Re: [Cscwg-public] EV requirements simplification effort

 

Hi Tim,

 

Please include myself in this effort. 

 

Thanks,

Ian

  _____  

From: Cscwg-public <cscwg-public-bounces at cabforum.org
<mailto:cscwg-public-bounces at cabforum.org> > on behalf of Tim Hollebeek via
Cscwg-public <cscwg-public at cabforum.org <mailto:cscwg-public at cabforum.org> >
Sent: Thursday, May 30, 2024 5:48 AM
To: cscwg-public at cabforum.org <mailto:cscwg-public at cabforum.org>
<cscwg-public at cabforum.org <mailto:cscwg-public at cabforum.org> >
Subject: [EXTERNAL] [Cscwg-public] EV requirements simplification effort 

 

 

Hello,

 

At the Bergamo F2F code signing discussion, I proposed an effort to go
through the EV requirements, and determine which of the requirements are
useful for code signing in the modern world.

 

As the next step, it was proposed that a group of CAs would get together, go
through the requirements, and come up with a proposal for a new version of
EV that:

 

1.	Keeps the strength of EV against relevant attacks, but
2.	eliminates unnecessary requirements that do not provide security
value.

 

If you would like to be part of the effort, please respond to this email.

 

-Tim

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20240617/75519755/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5231 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20240617/75519755/attachment.p7s>