Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 Framework
Code Signing Certificate Working Group
Key dates
- Effective date
- 29 Jun 2022 3 years ago
- Voting opened
- 29 Jun 2022 3 years ago
- IPR review ends
- 25 Jun 2022 3 years ago
Resources
AI Summary
Ballot overview
- Ballot CSC-14 updates the Code Signing Baseline Requirements by replacing the entire content of version 2.8 with an attached document.
- The ballot’s purpose is to convert the Code Signing Baseline Requirements to the RFC 3647 framework.
- The page says this restates existing obligations and requirements in the outline recommended by RFC 3647 to make comparison with other policy documents easier.
Voting result
- The ballot has PASSED.
- Certificate issuers listed as voting yes include Actalis, Certum (Asseco), DigiCert, eMudhra, Entrust, GlobalSign, HARICA, SSL.com, SecureTrust, and Sectigo.
- Microsoft is listed as a certificate consumer.
Review period and IPR
- The review period ran from 26 May 2022 at 18:00 UTC to 25 June 2022 at 18:00 UTC.
- The IPR review period ended on June 25, 2022.
- No exclusion notices were filed.
Effective date
- The final documents have an effective date of 2022-06-29.
- This is the date by which the updated Code Signing Baseline Requirements take effect.
- Effective date
- 2022-06-29
- Voting opened
- 2022-06-29
- IPR review ends
- 2022-06-25
2022-06-29 — CAs must follow the updated Code Signing Baseline Requirements in RFC 3647 framework form Applies to the final documents produced by Ballot CSC-14 after the review period ended with no exclusion notices filed
AI-generated from the CABF ballot page. The official CABF article remains the authoritative source.
Proposers
Corey Bonnell of DigiCert and endorsed by Ian McMillan of Microsoft and Dimitris Zacharopoulos of HARICA.
Excerpt
SearchHome » All CA/Browser Forum Posts » Ballot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 FrameworkBallot CSC-14 – Convert Code Signing Baseline Requirements to RFC 3647 FrameworkResults of Review Period (Mailing list post is available here.)