[cabfpub] Final Minutes for CA/Browser Forum Teleconference - May 2, 2019

Fri May 17 01:24:33 UTC 2019

These are the Final Minutes of the Teleconference described in the 
subject of this message.

    Attendees (in alphabetical order)

Antonio Perez (GoDaddy), Ben Wilson (Digicert), Chris Kemmerer 
(SSL.com), Dean Coclin (Digicert), Devon O'Brien (Google), Doug Beattie 
(GlobalSign), Dustin Hollenback (Microsoft), Enrico Entschew (D-TRUST), 
Frank Corday (SecureTrust), Geoff Keating (Apple), India Donald (US 
Federal PKI Management Authority), Joanna Fox (GoDaddy), Jos Purvis 
(Cisco Systems), Kenneth Myers (US Federal PKI Management Authority), 
Kirk Hall (Entrust Datacard), Li-Chun Chen (Chunghwa Telecom), Mads 
Henriksveen (Buypass AS), Michael Guenther (SwissSign), Michelle Coon 
(OATI), Mike Reilly (Microsoft), Neil Dunbar (TrustCor Systems), Niko 
Carpenter (SecureTrust), Peter Miskovic (Disig), Rich Smith (Sectigo), 
Robin Alden (Sectigo), Scott Rea (Dark Matter), Shelley Brewer 
(Digicert), Tim Callan (Sectigo), Tim Hollebeek (Digicert), Tim Shirley 
(SecureTrust), Timo Schmitt (SwissSign), Trevoli Ponds-White (Amazon), 
Wayne Thayer (Mozilla), Wendy Brown (US Federal PKI Management Authority).

    Minutes

      1. Roll Call

The Vice-Chair took attendance

      2. Read Antitrust Statement

The Antitrust Statement was read

      3. Review Agenda

Today's Agenda was approved.

      4. Approval of minutes from F2F 46 and previous teleconference

The minutes from the previous teleconference were approved and will be 
circulated to the public list.

The minutes from F2F 46 were approved and will be posted to the public 
web site.

      5. Forum Infrastructure Working Group update

Jos reported that we are proceeding with the planned upgrade of the wiki 
and other mailer services migration. Amazon has provided us with AWS 
resources so we're able to spin up EC2 and S3 resources to support that 
migration.

The wiki will be switching to read-only next week according to the 
migration plan and move to its own system.

Kirk asked if this will be the same wiki platform or will members be 
required to learn a new wiki.  Jos responded that the interface of the 
new wiki is very similar to the old one so it's not expected to be any 
complicated. Just like the current one, there is a graphical interface 
which helps updating pages and content on web pages. Jos also said that 
when the migration is complete, he will ask for some time in an upcoming 
call to demo the new wiki.

New credentials will be required and this will be based on the current 
representatives list.

Kirk also recommended a creation or a reference to a "cheat sheet" for 
those that might miss the demo on our next call.

Dean asked when is this migration expected to happen and Jos replied the 
it will start Monday May 6th and hopefully end by Friday May 10th.

Dean asked members who are planning to attend the F2F in Thessaloniki to 
register their names today because the wiki will not be editable next week.

Wayne asked about the mail system migration and Jos responded that it 
will be migrated at the same time. The plan is to migrate the mailer 
without creating an outage. Wayne's concern is when changing IP 
addresses on mail servers, there is a chance for messages not being 
delivered or getting bounced back. So we should avoid any voting being 
scheduled for next week.

      6. Code Signing Working Group update

Dean reported that the CSCWG had a call last week. Ben has drafted a 
ballot to adopt the minimum requirements for code signing. Improvements 
are already being gathered for the minimum requirements and the EV Code 
Signing requirements.

      7. Follow-up on new S/MIME WG Charter

Tim will provide a draft in a week or two.

      8. Bylaws and existing SCWG Charter update ballot

Wayne mentioned that the ballot is in a pretty good shape and he spent 
quite some time with Dimitris to create a clean redline version on 
GitHub. During this process a new problem was discovered. When we moved 
the membership criteria out of the Bylaws and into the Working Group 
Charters, we moved the definitions of Root Certificate Issuers and 
Certificate Issuers out of the Bylaws. This creates a potential problem 
when voting at the Forum level because we lost the definitions for the 
voting categories (Root Certificate Issuers, Certificate Issuers, 
Certificate Consumers). So, we put the definitions back into the bylaws 
to address this issue.

We also clarified that the voting rules of the Forum keep the same 
membership category as in the Working Group. So a Certificate Consumer 
in a Working Group will vote as a Certificate Consumer at the Forum 
level, which is what we've been doing already.

Finally, there were some improvements in the formatting of the document 
to resolve some markdown viewing issues.

The ballot is in the discussion period since last Friday and according 
to our decision at the last F2F, we agreed to leave it open for 
discussion at least 2 weeks before voting begins, so members that wish 
to engage their legal counsels will have the time to do that. So, the 
ballot will remain in discussion period for next week and if there are 
no comments we will initiate the voting period after the e-mail 
migration is complete. If anyone needs an extension please ask.

      9. Any Other Business

None.

      10. Next call

May 16, 2019 at 11:00 am Eastern Time.

      Adjourned

      *F2F Meeting Schedule: *

  * 2019: June 11-13, 2019 – Greece (HARICA), October 28-31– Guangzhou
    (GDCA)
  * 2020: Feb18-20 Bratislava (Disig), June – Minneapolis (OATI),
    October – Tokyo (GlobalSign)
  * 2021: Feb-March Dubai (DarkMatter), June – Poland (Asseco-Certum),
    October [Open]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20190517/f060c4db/attachment-0002.html>