eMudhra will endorse… Regards, _Scott
From: Cscwg-public <[email protected]> on behalf of Dimitris Zacharopoulos (HARICA) via Cscwg-public <[email protected]> Date: Wednesday, 28 February 2024 at 2:46 PM To: [email protected] <[email protected]> Subject: [Cscwg-public] Marking the EV Code Signing Guidelines OBSOLETE CAUTION: This email is originated from outside of the organization. Do not open the links or the attachments unless you recognize the sender and know the content is safe. Dear Members, As we discussed today at the F2F#61 meeting, I would like to propose a ballot to mark the "Guidelines For The Issuance And Management Of Extended Validation Code Signing Certificates" as obsolete. I suggest that we update the latest EVCS Guidelines v1.4<https://cabforum.org/working-groups/code-signing/ev-code-signing-certificate-guidelines/> to version 1.5 with the following changes: --- BEGIN DRAFT BALLOT LANGUAGE --- In the "Notice to Readers" section, update the second paragraph to state: "The Code Signing Working Group considers this document OBSOLETE as of XX XXXXXXXX XXXX. CAs SHOULD NOT use this standard but instead SHOULD use the "Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates" that has incorporated and improved requirements related to Extended Validation (EV) Code Signing Certificates" Update section 17.1 to state the following: "As this document is marked OBSOLETE, CAs SHOULD NOT be audited against this standard. " --- END DRAFT BALLOT LANGUAGE --- The XX XXXXXXXX XXXX will include an effective date we decide. I propose this date is in the past but I am not sure what would be a reasonable date. One thought is to ask if there is a CA Member that has been audited recently against the EV CS Guidelines v1.4. Another thought is to ask CPA Canada and ACAB'c for feedback about when they stopped issuing Audit Letters that cover the EV CS Guidelines v1.4. Other ideas are welcome. Can I also have two endorsers so I can reserve a ballot number? Thank you, Dimitris. Disclaimer: The email and its contents hold confidential information and are intended for the person or entity to which it is addressed. If you are not the intended recipient, please note that any distribution or copying of this email is strictly prohibited as per Company Policy, you are requested to notify the sender and delete the email and associated attachments with it from your system.
_______________________________________________ Cscwg-public mailing list [email protected] https://lists.cabforum.org/mailman/listinfo/cscwg-public
