[cabfpub] Final minutes of CA/B Forum call January 6, 2022

[Dean Coclin]

Here are the final minutes for the subject call:



Attendance:



Adam Jones (Microsoft)

Adrian Mueller (SwissSign)

Andrea Holland (SecureTrust)

Ben Wilson (Mozilla)

Bruce Morton (Entrust)

Chris Kemmerer (SSL.com)

Clint Wilson (Apple)

Corey Bonnell (Digicert)

Dean Coclin (Digicert)

Dimitris Zacharopoulos (HARICA)

Doug Beattie (GlobalSign)

Dustin Hollenback (Microsoft)

Enrico Entschew (D-TRUST)

Fumihiko Yoneda (Japan Registry Services)

Hazhar Ismail (MSC Trustgate Sdn Bhd)

Inaba Atsushi (GlobalSign)

Israr Ahmed (E-tugra)

Joanna Fox (TrustCor Systems)

Johnny Reading (GoDaddy)

Jos Purvis (Cisco Systems)

Karina Sirota (Microsoft)

Kati Davids (GoDaddy)

Mads Henriksveen (Buypass AS)

Marcelo Silva (Visa)

Martijn Katerbarg (Sectigo)

Niko Carpenter (SecureTrust)

Peter Miskovic (Disig)

Rae Ann Gonzales (GoDaddy)

Rebecca Kelley (Apple)

Ryan Dickson (Google)

Stephen Davidson (Digicert)

Tadahiko Ito (SECOM Trust Systems)

Tim Hollebeek (Digicert)

Trevoli Ponds-White (Amazon)

Tyler Myers (GoDaddy)

Vijayakumar (Vijay) Manjunatha (eMudhra)

Wayne Thayer (Fastly)

Wendy Brown (US Federal PKI Management Authority)

Yoshiro Yoneya (Japan Registry Services)







1.	Opening Procedures- Dean

a.	Roll Call



2.	Read Antitrust Statement
3.	Review Agenda
4.	Approval of minutes of last call

a.	Face to Face minutes approved



2.	Forum Infrastructure Subcommittee update given by Jos Purvis

a.	No update due to no meetings since last meeting



3.	Code Signing Certificate Working Group update given by Bruce Morton

a.	Working on ballot for subscriber key protection
b.	Making progress on changing format for CSBRs
c.	Taking about verification for open source projects- how to issue CS 
certificates to open source projects or members of OS projects
d.	Changing the validity period for timestamp authorities certificates and 
rekey requirements



4.	SMIME working group update given by Stephen Davidson

a.	Talking about actual verification regimes covering 3 areas:

a.	The organization
b.	Control over the domain or mailbox
c.	The individual identity

a.	Discussion about OV and EV for S/MIME certificates and how to verify the 
legal existence of entities in both cases, but especially EV
b.	Tried to adopt standards that have come out of the baseline requirements

a.	Discussions of where there are deviations from the baseline requirements
b.	Example, there are some stipulations of subscriber keys that are specific 
to TLS but don't really apply to S/MIME

c.	Question: When will you have draft BRs out?

a.	 2022 is the intent

5.	F2F dates

a.	June meeting- RSA conference was postponed until June meeting with Certum. 
Polled of 39 participants on call, 1 has said they may be attending.  No 
additional comments.

a.	Unclear what the status of this meeting is at this time.
b.	The reason for doing it is due to a forum that will be held at the same 
time at that location and thought that Forum participants will want to stay 
and listen for it.
c.	Similar case for Berlin, where Face to Face is scheduled at the same time 
as CA Day

a.	People who are going to Salt Lake City should review the registration page 
modify the additional columns that were added.



6.	Any Other Business:

a.	None



7.	Next call: January 20th, 2022

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20220120/404e986d/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4916 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20220120/404e986d/attachment-0001.p7s>