[cabfpub] Code Signing Working Group

[Richard Wang]

So the code signing BR can be approved by CSWG, not by CABF, only CSWG member have the right to vote it.

Again, I wish Google can join the code signing WG to solve it serious malware signing problem, this not only benefit Android ecosystem, but also benefit the global internet user since android user is the No. 1 market now.

Regards,

Richard

> On May 6, 2016, at 18:38, Gervase Markham <gerv at mozilla.org> wrote:
> 
>> On 06/05/16 11:37, Rob Stradling wrote:
>> Hi Gerv.  AIUI, this Forum does have an element of jurisdiction over
>> code signing.
>> 
>> The "Code Signing BRs" have not been adopted by the Forum, but (like it
>> or not) the "EV Code Signing Guidelines" is a Forum document.
> 
> Which is why the question of jurisdiction has not been a main plank of
> my argument. We have adopted a Code Signing document a while ago, it's
> true, but it seems clear that we would not adopt another one now, and we
> have a Governance Reform WG so that we can change things to (among other
> goals) make that possible again in the future.
> 
> Gerv
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7208 bytes
Desc: not available
Url : https://cabforum.org/pipermail/public/attachments/20160506/5b697be3/attachment-0001.bin