[cabfpub] Teleconference agenda - CA/B Forum - 17 April 2014

[Ben Wilson]

Teleconference agenda - CA/B Forum - 17 April 2014

 

Time: 1600 – 1700 UTC

 

 


Time

Start

Stop

Slot

Description

Notes / Presenters


(Thur) 17 April 2014

 


0:01

16:01

16:02

1

Read Antitrust Statement 

 


0:02

16:02

16:04

2

Review Agenda

 


0:02

16:04

16:06

3

Roll Call

 


0:03

16:06

16:09

4

Approval of minutes

Draft Minutes of the teleconference of 3 April 2014 were distributed on 3
April 2014.  Under Item, 7.  Discussion - Scope of Code Signing Work, the
second-to-last paragraph has been amended at Jeremy's request to read:
Rich said he thinks that additional work on EV Code Signing should be halted
until issues have been worked out and there is broader interest from more
Forum members.   Jeremy disagreed.  He said that the EV Code Signing
document is important work of the Forum that cannot simply be abandoned, and
that if you look at the last ballot, it was to fix a problem and maintain
the document.  He also argued that if we work on guideline documents and we
only have a single adopter of a guideline in a space filled with 4 or 5
browsers, then the work has been a significant driving force and one that is
probably envied by most other industry standard groups.


0:05

16:09

16:14

5

Ballot review:  Ballot 122 Verified Method of Communication

Voting period is Tuesday, 22-29 April 2014


0:03

16:14

16:17

 

Announcement:  New WebTrust documents

EV Guidelines (efffective 3-Apr-2014); SSL Baseline with Network Security
(effective 1-July-2014); and EV Code Signing (effective 1-July-2014)


0:06

16:17

16:23

6

Membership Application:  Actalis S.p.A

Email received 11-Apr-2014


0:12

16:23

16:35

7

Discussion: BR Re-key Rules

BR section 11.3 states that the age of data used to validate a certificate
must be less than 39 months. EVG provides a definition of reissuance and an
exception (EVG 11.13.4). Renewals and re-keys of legacy certificates issued
with data and pre-BR legacy certificates can’t be rekeyed without meeting
all BR requirements - Wayne Thayer


0:12

16:35

16:47

8

Discussion:  Root CA Recognition/Acceptance Processes of Trust Anchor
Programs

Mert Özarar (Turktrust) would like to discuss difficulties with getting into
trust anchor programs of Google and Oracle


0:05

16:47

16:52

9

Working Group Updates

EV WG - next call 27-Mar-2014; SSL Performance - continue work via public
email and check issue tracker; Code Signing - key issue is info-sharing
database; RFC 3647 - work on CA security


0:08

16:52

17:00

10

Any Other Business

Heartbleed vulnerability disclosure process and requirement that members
share vulnerability and threat information


0:00

17:00

17:00

11

Next phone call -- Thurs. April 17

 


0:00

17:00

17:00

12

Adjourn

 

 

 

 

NOTE: THE TELECONFERENCE WILL BE RECORDED FOR THE PURPOSE OF PREPARING THE
MINUTES.

 

NOTE: ALL MEMBERS SHALL ENSURE THAT THEIR ACTIONS, PROPOSALS AND DISCUSSIONS
DURING ANY AND ALL ASSOCIATION ACTIVITIES, EVENTS AND MEETINGS DO NOT CREATE
A RESTRAINT OF TRADE IN ANY FORM.  ACTIVITIES PROHIBITED AS POTENTIAL
RESTRAINTS OF TRADE SHALL INCLUDE, BUT NOT BE LIMITED TO, DISCUSSION OF
PRICING, INTERNAL COSTS, TERRITORIAL AGREEMENTS, OUTPUT, CUSTOMER LISTS,
PRODUCT AVAILABILITY AND FEATURES OR ANY OTHER TYPES OF
COMPETITIVELY-SENSITIVE INFORMATION.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20140416/68cb576f/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5453 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20140416/68cb576f/attachment.p7s>