Ballot CSC-1: Adopt Baseline Requirements version 1.2

Ballot overview

• Ballot CSC-1, Adopt Baseline Requirements version 1.2, is a Code Signing Certificate Working Group ballot.
• The ballot states that it adopts written findings about the provenance of the Baseline Requirements for the Issuance and Management of Publicly Trusted Code Signing Certificates and adopts version 1.2 of those requirements as a Forum Guideline.
• The ballot also says the adoption is subject to completion of a 60-day Notice of Review Period under Section 4.1 of the Forum IPR Policy.

Voting result

• Voting on Ballot CSCWG-1 ended.
• 11 Certificate Issuers voted yes: Actalis, Sectigo, DigiCert, eMudhra, Entrust Datacard, GDCA, GlobalSign, GoDaddy, HARICA, SSL.com, and SecureTrust.
• 0 Certificate Issuers voted no or abstain.
• 1 Certificate Consumer voted yes: Microsoft.
• 0 Certificate Consumers voted no or abstain.
• Quorum was met, and the ballot passes.

Review period and procedure

• The notice gives a 60-day Review Period.
• Start of Review Period: June 13, 2019 at 11:00am Eastern Time.
• End of Review Period: August 13, 2019 at 11:00am Eastern Time.
• The procedure section also lists discussion and vote timing as 7+ days discussion and 7 days vote, with dates shown as 2019-05-XX and 2019-06-XX, but the exact day values are not provided in the evidence.

What the ballot says about the work

• The Forum began work on the Baseline-Requirements-CSC at the February 2013 Face-to-Face meeting.
• The group worked on the document from March 2013 through November 2015 through teleconferences, F2F meetings, and email.
• The base document was the CA/Browser Forum’s Guidelines for the Issuance and Management of Extended Validation Code Signing Certificates.
• The ballot says the work was performed by Forum members bound by IPR 1.0, and that non-member contributions were covered by an IPR Agreement on file.
• Upon adoption, the Chair of the CA/Browser Forum shall publish a Notice of Review Period and attach a copy of the Baseline-Requirements-CSC to it.