Re: [Cscwg-public] Notice of IPR review Ballots CSCWG 21 and 22

[Dean Coclin via Cscwg-public]

The review period for CSCWG 21 and 22 has concluded. No essential claims
were filed.

 

Corey-please create the final guideline, based on the drafts, and publish to
the website. The effective date will be today.


Thank you,

 

Dean Coclin 

CSCWG Chair

 

 

 

 

From: Cscwg-public  On Behalf Of Dean
Coclin via Cscwg-public
Sent: Wednesday, January 17, 2024 8:59 AM
To: Dean Coclin via Cscwg-public 
Subject: [Cscwg-public] Notice of IPR review Ballots CSCWG 21 and 22

 

NOTICE OF REVIEW PERIOD

This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum's
Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is
for one Final Maintenance Guidelines. The complete Draft Maintenance
Guideline that is the subject of this Review Notice is attached to this
email, in red-line draft format.

 

Summary of Review

Ballot(s) for Review:  CSCWG 21 (version 3.6) and CSCWG 22 (version 3.7)

 

Start of Review Period: 17 January 2024 at 09:00 Eastern Time

End of Review Period: 18 February 2024 at 09:00 Eastern Time

 

Members with any Essential Claim(s) to exclude must forward a written Notice
to Exclude Essential Claims to the Working Group Chair (email to Dean Coclin
mailto:dean.coc...@digicert.com> >) and also
submit a copy to the CA/B CSCWG public mailing list (email to cscwg-public
at cabforum.org before the end of the Review Period.

For details, please see the current version of the
 CA/Browser Forum
Intellectual Property Rights Policy.

(An optional template for submitting an Exclusion Notice is available at

https://cabforum.org/wp-content/uploads/Template-for-Exclusion-Notice.pdf)

 

 

Dean Coclin 

CSCWG Chair

 

 

 

 



smime.p7s
Description: S/MIME cryptographic signature
___
Cscwg-public mailing list
Cscwg-public@cabforum.org
https://lists.cabforum.org/mailman/listinfo/cscwg-public

Re: [Cscwg-public] [External Sender] Marking the EV Code Signing Guidelines OBSOLETE

[Adriano Santoni via Cscwg-public]

+1

Il 28/02/2024 10:16, Dimitris Zacharopoulos (HARICA) via Cscwg-public ha 
scritto:
NOTICE: Pay attention - external email - Sender is 
0100018def00533a-ed751293-2780-4d97-8825-f7d1841724b7-000...@amazonses.com 






Dear Members,

As we discussed today at the F2F#61 meeting, I would like to propose a 
ballot to mark the "Guidelines For The Issuance And Management Of 
Extended Validation Code Signing Certificates" as obsolete. I suggest 
that we update the latest EVCS Guidelines v1.4 
 
to version 1.5 with the following changes:


--- BEGIN DRAFT BALLOT LANGUAGE ---

In the "Notice to Readers" section, update the second paragraph to state:

*"The Code Signing Working Group considers this document OBSOLETE as 
of XX  . CAs SHOULD NOT use this standard but instead 
SHOULD use the "Baseline Requirements for the Issuance and Management 
of Publicly‐Trusted Code Signing Certificates" that has incorporated 
and improved requirements related to Extended Validation (EV) Code 
Signing Certificates"*


Update section 17.1 to state the following:

" *As this document is marked OBSOLETE, CAs SHOULD NOT be audited 
against this standard.* "


--- END DRAFT BALLOT LANGUAGE ---

The *XX  * will include an *effective date* we decide. I 
propose this date is *in the past* but I am not sure what would be a 
reasonable date. One thought is to ask if there is a CA Member that 
has been audited recently against the EV CS Guidelines v1.4. Another 
thought is to ask CPA Canada and ACAB'c for feedback about when they 
stopped issuing Audit Letters that cover the EV CS Guidelines v1.4. 
Other ideas are welcome.


Can I also have two endorsers so I can reserve a ballot number?


Thank you,
Dimitris.


___
Cscwg-public mailing list
Cscwg-public@cabforum.org
https://lists.cabforum.org/mailman/listinfo/cscwg-public

smime.p7s
Description: Firma crittografica S/MIME
___
Cscwg-public mailing list
Cscwg-public@cabforum.org
https://lists.cabforum.org/mailman/listinfo/cscwg-public

Re: [Cscwg-public] Marking the EV Code Signing Guidelines OBSOLETE

[Martijn Katerbarg via Cscwg-public]

So will I. 

> Other ideas are welcome. 

How about September 2, 2020, which marks the release of CSBR v2.0, and 
incorporated EV Code Signing into the document. 

While we’re at it, could this ballot also get rid of this 
(https://github.com/cabforum/code-signing/blob/main/docs/br-csc-v1-2.md 
) file 
in GH?

Regards,

Martijn 

From: Cscwg-public  on behalf of Scott Rea 
via Cscwg-public 
Date: Wednesday, 28 February 2024 at 10:29
To: Dimitris Zacharopoulos (HARICA) , 
cscwg-public@cabforum.org 
Subject: Re: [Cscwg-public] Marking the EV Code Signing Guidelines OBSOLETE 

CAUTION: This email originated from outside of the organization. Do not click 
links or open attachments unless you recognize the sender and know the content 
is safe. 


eMudhra will endorse… 

Regards, 
_Scott 

From: Cscwg-public  on behalf of Dimitris 
Zacharopoulos (HARICA) via Cscwg-public 
Date: Wednesday, 28 February 2024 at 2:46 PM
To: cscwg-public@cabforum.org 
Subject: [Cscwg-public] Marking the EV Code Signing Guidelines OBSOLETE 

CAUTION: This email is originated from outside of the organization. Do not open 
the links or the attachments unless you recognize the sender and know the 
content is safe. 



Dear Members,

As we discussed today at the F2F#61 meeting, I would like to propose a ballot 
to mark the "Guidelines For The Issuance And Management Of Extended Validation 
Code Signing Certificates" as obsolete. I suggest that we update the latest 
EVCS Guidelines v1.4 

 to version 1.5 with the following changes:

--- BEGIN DRAFT BALLOT LANGUAGE ---

In the "Notice to Readers" section, update the second paragraph to state:

"The Code Signing Working Group considers this document OBSOLETE as of XX 
 . CAs SHOULD NOT use this standard but instead SHOULD use the 
"Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code 
Signing Certificates" that has incorporated and improved requirements related 
to Extended Validation (EV) Code Signing Certificates"

Update section 17.1 to state the following:

"As this document is marked OBSOLETE, CAs SHOULD NOT be audited against this 
standard. "

--- END DRAFT BALLOT LANGUAGE ---

The XX   will include an effective date we decide. I propose this 
date is in the past but I am not sure what would be a reasonable date. One 
thought is to ask if there is a CA Member that has been audited recently 
against the EV CS Guidelines v1.4. Another thought is to ask CPA Canada and 
ACAB'c for feedback about when they stopped issuing Audit Letters that cover 
the EV CS Guidelines v1.4. Other ideas are welcome.

Can I also have two endorsers so I can reserve a ballot number?


Thank you,
Dimitris. 




Disclaimer: The email and its contents hold confidential information and are 
intended for the person or entity to which it is addressed. If you are not the 
intended recipient, please note that any distribution or copying of this email 
is strictly prohibited as per Company Policy, you are requested to notify the 
sender and delete the email and associated attachments with it from your 
system. 






smime.p7s
Description: S/MIME cryptographic signature
___
Cscwg-public mailing list
Cscwg-public@cabforum.org
https://lists.cabforum.org/mailman/listinfo/cscwg-public

Re: [Cscwg-public] Marking the EV Code Signing Guidelines OBSOLETE

[Scott Rea via Cscwg-public]

eMudhra will endorse…

Regards,
_Scott

From: Cscwg-public  on behalf of Dimitris 
Zacharopoulos (HARICA) via Cscwg-public 
Date: Wednesday, 28 February 2024 at 2:46 PM
To: cscwg-public@cabforum.org 
Subject: [Cscwg-public] Marking the EV Code Signing Guidelines OBSOLETE
CAUTION: This email is originated from outside of the organization. Do not open 
the links or the attachments unless you recognize the sender and know the 
content is safe.


Dear Members,

As we discussed today at the F2F#61 meeting, I would like to propose a ballot 
to mark the "Guidelines For The Issuance And Management Of Extended Validation 
Code Signing Certificates" as obsolete. I suggest that we update the latest 
EVCS Guidelines 
v1.4
 to version 1.5 with the following changes:

--- BEGIN DRAFT BALLOT LANGUAGE ---

In the "Notice to Readers" section, update the second paragraph to state:

"The Code Signing Working Group considers this document OBSOLETE as of XX 
 . CAs SHOULD NOT use this standard but instead SHOULD use the 
"Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code 
Signing Certificates" that has incorporated and improved requirements related 
to Extended Validation (EV) Code Signing Certificates"

Update section 17.1 to state the following:

"As this document is marked OBSOLETE, CAs SHOULD NOT be audited against this 
standard. "

--- END DRAFT BALLOT LANGUAGE ---

The XX   will include an effective date we decide. I propose this 
date is in the past but I am not sure what would be a reasonable date. One 
thought is to ask if there is a CA Member that has been audited recently 
against the EV CS Guidelines v1.4. Another thought is to ask CPA Canada and 
ACAB'c for feedback about when they stopped issuing Audit Letters that cover 
the EV CS Guidelines v1.4. Other ideas are welcome.

Can I also have two endorsers so I can reserve a ballot number?


Thank you,
Dimitris.
Disclaimer: The email and its contents hold confidential information and are 
intended for the person or entity to which it is addressed. If you are not the 
intended recipient, please note that any distribution or copying of this email 
is strictly prohibited as per Company Policy, you are requested to notify the 
sender and delete the email and associated attachments with it from your system.
___
Cscwg-public mailing list
Cscwg-public@cabforum.org
https://lists.cabforum.org/mailman/listinfo/cscwg-public

[Cscwg-public] Marking the EV Code Signing Guidelines OBSOLETE

[Dimitris Zacharopoulos (HARICA) via Cscwg-public]

Dear Members,

As we discussed today at the F2F#61 meeting, I would like to propose a 
ballot to mark the "Guidelines For The Issuance And Management Of 
Extended Validation Code Signing Certificates" as obsolete. I suggest 
that we update the latest EVCS Guidelines v1.4 
 
to version 1.5 with the following changes:


--- BEGIN DRAFT BALLOT LANGUAGE ---

In the "Notice to Readers" section, update the second paragraph to state:

*"The Code Signing Working Group considers this document OBSOLETE as of 
XX  . CAs SHOULD NOT use this standard but instead SHOULD 
use the "Baseline Requirements for the Issuance and Management of 
Publicly‐Trusted Code Signing Certificates" that has incorporated and 
improved requirements related to Extended Validation (EV) Code Signing 
Certificates"*


Update section 17.1 to state the following:

"*As this document is marked OBSOLETE, CAs SHOULD NOT be audited against 
this standard.* "


--- END DRAFT BALLOT LANGUAGE ---

The *XX   *will include an *effective date* we decide. I 
propose this date is *in the past* but I am not sure what would be a 
reasonable date. One thought is to ask if there is a CA Member that has 
been audited recently against the EV CS Guidelines v1.4. Another thought 
is to ask CPA Canada and ACAB'c for feedback about when they stopped 
issuing Audit Letters that cover the EV CS Guidelines v1.4. Other ideas 
are welcome.


Can I also have two endorsers so I can reserve a ballot number?


Thank you,
Dimitris.
___
Cscwg-public mailing list
Cscwg-public@cabforum.org
https://lists.cabforum.org/mailman/listinfo/cscwg-public