[cabfpub] Final minutes of CA/B Forum meeting March 31, 2022

[Dean Coclin]

Here are the final minutes for the subject call:





1.	Opening Procedures- Dean

a.	Roll Call

a.	Attendees: Adam Jones (Microsoft), Adrian Mueller (SwissSign), Amanda 
Mendieta (Apple), Ben Wilson (Mozilla), Brian Keogh (Microsoft), Brittany 
Randall (GoDaddy), Bruce Morton (Entrust), Chris Kemmerer (SSL.com), Clint 
Wilson (Apple), Corey Bonnell (Digicert), Dean Coclin (Digicert), Devon 
O'Brien (Google), Dimitris Zacharopoulos (HARICA), Dustin Hollenback 
(Microsoft), Fumi Yoneda (Japan Registry Services), Heather Warncke (Amazon), 
Hogeun Yoo (NAVER Cloud), Hubert Chao (Google), Inaba Atsushi (GlobalSign), 
Inigo Barreira (Sectigo), Jamie Mackey (US Federal PKI Management Authority), 
Joanna Fox (TrustCor Systems), Johnny Reading (GoDaddy), Jos Purvis (Cisco 
Systems), Karina Sirota (Microsoft), Mads Henriksveen (Buypass AS), Martijn 
Katerbarg (Sectigo), Michelle Coon (OATI), Miguel Sanchez (Google), Paul van 
Brouwershaven (Entrust), Pedro Fuentes (OISTE Foundation), Peter Miskovic 
(Disig), Rae Ann Gonzales (GoDaddy), Rebecca Kelley (Apple), Renne Rodriguez 
(Apple), Ryan Dickson (Google), Sooyoung Eo (NAVER Cloud), Stephen Davidson 
(Digicert), Tadahiko Ito (SECOM Trust Systems), Trevoli Ponds-White (Amazon), 
Tyler Myers (GoDaddy), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI 
Management Authority), Yoshiro Yoneya (Japan Registry Services)Read Antitrust 
Statement- Jos Purvis
b.	Review Agenda
c.	Approval of minutes of last call (3/17/2022)

a.	Approved

c.	Approval of minutes from face-to-face 55

a.	Approved



2.	Forum Infrastructure Subcommittee update given by Jos Purvis

a.	New Membership tool code is in a private GitHub repo and being discussed 
and reviewed with features. It is looking promising.
b.	Did DNS cutover on past Monday, which means the Forum has direct control 
over DNS router now. We can create DNS records for tools on our own. No issues 
with cutover.
c.	Discussed website update. Ben has completed it, so people should review 
cabforum.org website and provide feedback
d.	Had discussion on making manuals and flows in GitHub, including a style 
guide for markdown to help with best practices for ballots.



3.	Code Signing Certificate Working Group update given by Bruce Morton

a.	Closed out on ballot for weak keys and this ballot is in voting until a 
week from now (4/7/2022)
b.	Discussion on timestamp policy- this discussion will continue next week.
c.	Discussion on subscriber having issues with getting through EV code 
validation. This is currently being investigated to see if this will be a 
topic in the future.



4.	SMIME working group update given by Stephen Davidson

a.	At an advanced stage of the S/MIME BRs

a.	Examples: exploring organizational identifier, working on ensuring that 
there is international coverage, clarifying the common name field and maybe 
the pseudonym field.

a.	Started discussions on bringing this document to ballot

a.	At some point in the coming weeks, the group will call a pre-ballot period 
for discussion for at least 30 days to read the document and review.
b.	Have this completed before officer elections in the fall



5.	NetSec Working Group given by Clint Wilson

a.	Around risk assessment, specifically around assets and where assets are 
located and asset categories and correlating that information to risk 
scenarios
b.	If there are individuals that are specialized in this, the group is 
requesting more eyes looking into the group



6.	Any Other Business:

a.	If there are new members joining from your group, please fill out document 
on wiki to help with management list.
b.	Someone is trying to scam the forum to try to join but it's all coming from 
a single Gmail account. Dean is keeping an eye on it.
c.	Next Meeting is April 14, 2022





F2F Meeting Schedule:

2022

*    June 6-8 - Poland (Note: Meeting dates are Mon-Weds and will be

followed by the Trusted Economy Forum on Weds-Thurs), MEETING IS CONFIRMED

*    Oct 24-26 - Berlin (Note: Meeting dates are Mon-Weds and will be

followed by the CA Day and TSP event on Thurs/Fri)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20220414/47bc2d22/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4916 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20220414/47bc2d22/attachment-0001.p7s>