CA/Browser Forum posts
Posts by author Iñigo Barreira
Minutes of the F2F 60 Meeting in Portsmouth, NH, USA, 3-5 October 2023 – SCWG (4 October)
December 7, 2023 by Iñigo BarreiraServer Cert Working GroupDate: October 4, 2023 Minute Taker: Kiran Tummala (Microsoft) Revocation: The current rules in place were established about a decade ago, and much has changed since then, especially in terms of certificate volumes and crt.sh. Often, revocation appears to be a cosmetic issue, and there’s a sense that it does a disservice to both subscribers and relying parties. Creating unnecessary crises is not beneficial. There’s a strong desire to update the rule.
December 7, 2023 by Iñigo BarreiraServer Cert Working GroupDate: October 4, 2023 Minute Taker: Kiran Tummala (Microsoft) Revocation: The current rules in place were established about a decade ago, and much has changed since then, especially in terms of certificate volumes and crt.sh. Often, revocation appears to be a cosmetic issue, and there’s a sense that it does a disservice to both subscribers and relying parties. Creating unnecessary crises is not beneficial. There’s a strong desire to update the rule.
2023-10-26 Minutes of the Server Certificate Working Group
December 7, 2023 by Iñigo BarreiraAttendance Aaron Poulsen – (Amazon), Abhishek Bhat – (eMudhra), Adam Jones – (Microsoft), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Brianca Martin – (Amazon), Brittany Randall – (GoDaddy), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Corey Rasmussen – (OATI), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Eva Vansteenberge – (GlobalSign), Inaba Atsushi – (GlobalSign), Janet Hines – (VikingCloud), Kiran Tummala – (Microsoft), Lynn Jeun – (Visa), Mads Henriksveen – (Buypass AS), Martijn Katerbarg – (Sectigo), Michelle Coon – (OATI), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Paul van Brouwershaven – (Entrust), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Rollin Yu – (TrustAsia Technologies Inc), Scott Rea – (eMudhra), Stephen Davidson – (DigiCert), Tadahiko Ito – (SECOM Trust Systems), Thomas Zermeno – (SSL.
December 7, 2023 by Iñigo BarreiraAttendance Aaron Poulsen – (Amazon), Abhishek Bhat – (eMudhra), Adam Jones – (Microsoft), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Brianca Martin – (Amazon), Brittany Randall – (GoDaddy), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Corey Rasmussen – (OATI), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Eva Vansteenberge – (GlobalSign), Inaba Atsushi – (GlobalSign), Janet Hines – (VikingCloud), Kiran Tummala – (Microsoft), Lynn Jeun – (Visa), Mads Henriksveen – (Buypass AS), Martijn Katerbarg – (Sectigo), Michelle Coon – (OATI), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Paul van Brouwershaven – (Entrust), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Rollin Yu – (TrustAsia Technologies Inc), Scott Rea – (eMudhra), Stephen Davidson – (DigiCert), Tadahiko Ito – (SECOM Trust Systems), Thomas Zermeno – (SSL.
2023-09-28 Minutes of the Server Certificate Working Group
December 7, 2023 by Iñigo BarreiraAttendance Aaron Gable (Let’s Encrypt), Aaron Poulsen (Amazon), Abhishek Bhat (eMudhra), Adam Clark (Visa), Adam Jones (Microsoft), Adrian Mueller (SwissSign), Andrea Holland (VikingCloud), Ben Wilson (Mozilla), Bilal Ashraf (SSL.com), Brianca Martin (Amazon), Bruce Morton (Entrust), Clint Wilson (Apple), Corey Bonnell (DigiCert), Corey Rasmussen (OATI), Daryn Wright (GoDaddy), Dean Coclin (DigiCert), Dustin Hollenback (Microsoft), Fumi Yoneda (Japan Registry Services), Hannah Sokol (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Jos Purvis (Fastly), Jozef Nigut (Disig), Keshava Nagaraju (eMudhra), Li-Chun Chen (Chunghwa Telecom), Lynn Jeun (Visa), Mads Henriksveen (Buypass AS), Martijn Katerbarg (Sectigo), Michelle Coon (OATI), Nargis Mannan (VikingCloud), Nate Smith (GoDaddy), Nicol So (CommScope), Paul van Brouwershaven (Entrust), Pedro Fuentes (OISTE Foundation), Rebecca Kelley (Apple), RIch Smith (DigiCert), Roman Fischer (SwissSign), Scott Rea (eMudhra), Tadahiko Ito (SECOM Trust Systems), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Yoshihiko Matsuo (Japan Registry Services)
December 7, 2023 by Iñigo BarreiraAttendance Aaron Gable (Let’s Encrypt), Aaron Poulsen (Amazon), Abhishek Bhat (eMudhra), Adam Clark (Visa), Adam Jones (Microsoft), Adrian Mueller (SwissSign), Andrea Holland (VikingCloud), Ben Wilson (Mozilla), Bilal Ashraf (SSL.com), Brianca Martin (Amazon), Bruce Morton (Entrust), Clint Wilson (Apple), Corey Bonnell (DigiCert), Corey Rasmussen (OATI), Daryn Wright (GoDaddy), Dean Coclin (DigiCert), Dustin Hollenback (Microsoft), Fumi Yoneda (Japan Registry Services), Hannah Sokol (Microsoft), Inaba Atsushi (GlobalSign), Inigo Barreira (Sectigo), Jos Purvis (Fastly), Jozef Nigut (Disig), Keshava Nagaraju (eMudhra), Li-Chun Chen (Chunghwa Telecom), Lynn Jeun (Visa), Mads Henriksveen (Buypass AS), Martijn Katerbarg (Sectigo), Michelle Coon (OATI), Nargis Mannan (VikingCloud), Nate Smith (GoDaddy), Nicol So (CommScope), Paul van Brouwershaven (Entrust), Pedro Fuentes (OISTE Foundation), Rebecca Kelley (Apple), RIch Smith (DigiCert), Roman Fischer (SwissSign), Scott Rea (eMudhra), Tadahiko Ito (SECOM Trust Systems), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Yoshihiko Matsuo (Japan Registry Services)
2023-12-7 Minutes of the Server Certificate Working Group
December 7, 2023 by Iñigo BarreiraAttendance Aaron Gable – (Let’s Encrypt) Aaron Poulsen – (Amazon) Adam Jones – (Microsoft) Alison Wang – (TrustAsia) Andrea Holland – (VikingCloud) Ben Wilson – (Mozilla) Brianca Martin – (Amazon) Brittany Randall – (GoDaddy) Chris Clements – (Google) Corey Bonnell – (DigiCert) Dean Coclin – (DigiCert) Dimitris Zacharopoulos – (HARICA) Enrico Entschew – (D-TRUST) Inigo Barreira – (Sectigo) Kiran Tummala – (Microsoft) Lynn Jeun – (Visa) Mads Henriksveen – (Buypass AS) Marcelo Silva – (Visa) Marco Schambach – (IdenTrust) Martijn Katerbarg – (Sectigo) Michelle Coon – (OATI) Mrugesh Chandarana – (IdenTrust) Nargis Mannan – (VikingCloud) Nate Smith – (GoDaddy) Nicol So – (CommScope) Nome Huang – (TrustAsia) Paul van Brouwershaven – (Entrust) Pedro Fuentes – (OISTE Foundation) Peter Miskovic – (Disig) Rebecca Kelley – (Apple) Rollin Yu – (TrustAsia) Scott Rea – (eMudhra) Stephen Davidson – (DigiCert) Steven Deitte – (GoDaddy) Tadahiko Ito – (SECOM Trust Systems) Tobias Josefowitz – (Opera Software AS) Trevoli Ponds-White – (Amazon) Wayne Thayer – (Fastly) Yoshihiko Matsuo – (Japan Registry Services) Agenda The following meeting minutes are approved:
December 7, 2023 by Iñigo BarreiraAttendance Aaron Gable – (Let’s Encrypt) Aaron Poulsen – (Amazon) Adam Jones – (Microsoft) Alison Wang – (TrustAsia) Andrea Holland – (VikingCloud) Ben Wilson – (Mozilla) Brianca Martin – (Amazon) Brittany Randall – (GoDaddy) Chris Clements – (Google) Corey Bonnell – (DigiCert) Dean Coclin – (DigiCert) Dimitris Zacharopoulos – (HARICA) Enrico Entschew – (D-TRUST) Inigo Barreira – (Sectigo) Kiran Tummala – (Microsoft) Lynn Jeun – (Visa) Mads Henriksveen – (Buypass AS) Marcelo Silva – (Visa) Marco Schambach – (IdenTrust) Martijn Katerbarg – (Sectigo) Michelle Coon – (OATI) Mrugesh Chandarana – (IdenTrust) Nargis Mannan – (VikingCloud) Nate Smith – (GoDaddy) Nicol So – (CommScope) Nome Huang – (TrustAsia) Paul van Brouwershaven – (Entrust) Pedro Fuentes – (OISTE Foundation) Peter Miskovic – (Disig) Rebecca Kelley – (Apple) Rollin Yu – (TrustAsia) Scott Rea – (eMudhra) Stephen Davidson – (DigiCert) Steven Deitte – (GoDaddy) Tadahiko Ito – (SECOM Trust Systems) Tobias Josefowitz – (Opera Software AS) Trevoli Ponds-White – (Amazon) Wayne Thayer – (Fastly) Yoshihiko Matsuo – (Japan Registry Services) Agenda The following meeting minutes are approved:
Minutes of the F2F 60 Meeting in Portsmouth, NH, USA, 3-5 October 2023 – Validation SC (4 October)
December 4, 2023 by Iñigo BarreiraValidation SubcommitteeDate: October 4, 2023 Minute Taker: Clint Wilson (Apple) Validation WG Chair: Corey Bonnell (DigiCert) Prior Meeting Minutes approved Agenda Report on validation-sc progress since F2F #59 (5 minutes) Presentation of results from the domain validation threat modeling tiger team (1 hour to 1 hour and 15 minutes, led by Michael @ ATS) Presentation on MPDV/MPIC (30-45 minutes, led by Ryan & Chris @ Chrome) (Time permitting) backlog grooming
December 4, 2023 by Iñigo BarreiraValidation SubcommitteeDate: October 4, 2023 Minute Taker: Clint Wilson (Apple) Validation WG Chair: Corey Bonnell (DigiCert) Prior Meeting Minutes approved Agenda Report on validation-sc progress since F2F #59 (5 minutes) Presentation of results from the domain validation threat modeling tiger team (1 hour to 1 hour and 15 minutes, led by Michael @ ATS) Presentation on MPDV/MPIC (30-45 minutes, led by Ryan & Chris @ Chrome) (Time permitting) backlog grooming
Ballot SC-066 v4: Fall 2023 Clean up
November 24, 2023 by Iñigo BarreiraVoting Results Certificate Issuers 24 votes total, with no abstentions: 24 Issuers voting YES: Actalis, Amazon, Buypass, Chunghwa Telecom, D-Trust, Digicert, Disig, eMudhra, Entrust, Fastly, GDCA, Globalsign, GoDaddy, HARICA, iTrusChina, Izenpe, JPRS, LE, OISTE, SECOM, Sectigo, SSL.com, Swisssign and Telia 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 4 votes total, with no abstentions: 4 Consumers voting YES: Google, Mozilla, Apple and Opera 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
November 24, 2023 by Iñigo BarreiraVoting Results Certificate Issuers 24 votes total, with no abstentions: 24 Issuers voting YES: Actalis, Amazon, Buypass, Chunghwa Telecom, D-Trust, Digicert, Disig, eMudhra, Entrust, Fastly, GDCA, Globalsign, GoDaddy, HARICA, iTrusChina, Izenpe, JPRS, LE, OISTE, SECOM, Sectigo, SSL.com, Swisssign and Telia 0 Issuers voting NO 0 Issuers ABSTAIN Certificate Consumers 4 votes total, with no abstentions: 4 Consumers voting YES: Google, Mozilla, Apple and Opera 0 Consumers voting NO 0 Consumers ABSTAIN Bylaws Requirements Bylaw 2.
2023-09-14 Minutes of the Server Certificate Working Group
September 29, 2023 by Iñigo BarreiraAttendance Aaron Gable – (Let’s Encrypt), Aaron Poulsen – (Amazon), Abhishek Bhat – (eMudhra), Adam Jones – (Microsoft), Adrian Mueller – (SwissSign), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Chris Clements – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Corey Rasmussen – (OATI), Daryn Wright – (GoDaddy), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Enrico Entschew – (D-TRUST), Fumi Yoneda – (Japan Registry Services), Hannah Sokol – (Microsoft), Inaba Atsushi – (GlobalSign), Jos Purvis – (Fastly), Keshava Nagaraju – (eMudhra), Lynn Jeun – (Visa), Mads Henriksveen – (Buypass AS), Marcelo Silva – (Visa), Martijn Katerbarg – (Sectigo), Michelle Coon – (OATI), Mrugesh Chandarana – (IdenTrust), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Paul van Brouwershaven – (Entrust), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Rollin Yu – (TrustAsia Technologies, Inc.
September 29, 2023 by Iñigo BarreiraAttendance Aaron Gable – (Let’s Encrypt), Aaron Poulsen – (Amazon), Abhishek Bhat – (eMudhra), Adam Jones – (Microsoft), Adrian Mueller – (SwissSign), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Chris Clements – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Corey Rasmussen – (OATI), Daryn Wright – (GoDaddy), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Enrico Entschew – (D-TRUST), Fumi Yoneda – (Japan Registry Services), Hannah Sokol – (Microsoft), Inaba Atsushi – (GlobalSign), Jos Purvis – (Fastly), Keshava Nagaraju – (eMudhra), Lynn Jeun – (Visa), Mads Henriksveen – (Buypass AS), Marcelo Silva – (Visa), Martijn Katerbarg – (Sectigo), Michelle Coon – (OATI), Mrugesh Chandarana – (IdenTrust), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Paul van Brouwershaven – (Entrust), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Rollin Yu – (TrustAsia Technologies, Inc.
2023-08-31 Minutes of the Server Certificate Working Group
August 31, 2023 by Iñigo BarreiraAttendance Aaron Gable – (Let’s Encrypt), Aaron Poulsen – (Amazon), Abhishek Bhat – (eMudhra), Ben Wilson – (Mozilla), Bilal Ashraf – (SSL.com), Brianca Martin – (Amazon), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Chris Clements – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Daryn Wright – (GoDaddy), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Enrico Entschew – (D-TRUST), Fumi Yoneda – (Japan Registry Services), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Joanna Fox – (TrustCor Systems), Johnny Reading – (GoDaddy), Jos Purvis – (Fastly), Li-Chun Chen – (Chunghwa Telecom), Lynn Jeun – (Visa), Marcelo Silva – (Visa), Martijn Katerbarg – (Sectigo), Michelle Coon – (OATI), Mrugesh Chandarana – (IdenTrust), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Nome Huang – (TrustAsia Technologies, Inc.
August 31, 2023 by Iñigo BarreiraAttendance Aaron Gable – (Let’s Encrypt), Aaron Poulsen – (Amazon), Abhishek Bhat – (eMudhra), Ben Wilson – (Mozilla), Bilal Ashraf – (SSL.com), Brianca Martin – (Amazon), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Chris Clements – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Daryn Wright – (GoDaddy), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Enrico Entschew – (D-TRUST), Fumi Yoneda – (Japan Registry Services), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Joanna Fox – (TrustCor Systems), Johnny Reading – (GoDaddy), Jos Purvis – (Fastly), Li-Chun Chen – (Chunghwa Telecom), Lynn Jeun – (Visa), Marcelo Silva – (Visa), Martijn Katerbarg – (Sectigo), Michelle Coon – (OATI), Mrugesh Chandarana – (IdenTrust), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Nome Huang – (TrustAsia Technologies, Inc.
2023-07-20 Minutes of the Server Certificate Working Group
August 3, 2023 by Iñigo BarreiraServerCert WG Meeting: July 20, 2023Attendance (from WebEx) Aaron Gable – (Let’s Encrypt), Aaron Poulsen – (Amazon), Abdul Hakeem Putra – (MSC Trustgate Sdn Bhd), Abhishek Bhat – (eMudhra), Adam Clark – (Visa), Adam Jones – (Microsoft), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Chris Clements – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Daryn Wright – (GoDaddy), Dean Coclin – (DigiCert), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Eva Vansteenberge – (GlobalSign), Fumi Yoneda – (Japan Registry Services), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Jamie Mackey – (US Federal PKI Management Authority), Joanna Fox – (TrustCor Systems), Jos Purvis – (Fastly), Lynn Jeun – (Visa), Marcelo Silva – (Visa), Marco Schambach – (IdenTrust), Michelle Coon – (OATI), Miguel Sanchez – (Google), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Rollin Yu – (TrustAsia Technologies, Inc.
August 3, 2023 by Iñigo BarreiraServerCert WG Meeting: July 20, 2023Attendance (from WebEx) Aaron Gable – (Let’s Encrypt), Aaron Poulsen – (Amazon), Abdul Hakeem Putra – (MSC Trustgate Sdn Bhd), Abhishek Bhat – (eMudhra), Adam Clark – (Visa), Adam Jones – (Microsoft), Andrea Holland – (VikingCloud), Ben Wilson – (Mozilla), Bruce Morton – (Entrust), Chad Ehlers – (IdenTrust), Chris Clements – (Google), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Daryn Wright – (GoDaddy), Dean Coclin – (DigiCert), Dimitris Zacharopoulos – (HARICA), Doug Beattie – (GlobalSign), Dustin Hollenback – (Microsoft), Eva Vansteenberge – (GlobalSign), Fumi Yoneda – (Japan Registry Services), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Jamie Mackey – (US Federal PKI Management Authority), Joanna Fox – (TrustCor Systems), Jos Purvis – (Fastly), Lynn Jeun – (Visa), Marcelo Silva – (Visa), Marco Schambach – (IdenTrust), Michelle Coon – (OATI), Miguel Sanchez – (Google), Nargis Mannan – (VikingCloud), Nate Smith – (GoDaddy), Nicol So – (CommScope), Pedro Fuentes – (OISTE Foundation), Peter Miskovic – (Disig), Rebecca Kelley – (Apple), Rollin Yu – (TrustAsia Technologies, Inc.
2023-08-03 Minutes of the Server Certificate Working Group
August 3, 2023 by Iñigo BarreiraServerCert WG Meeting: August 3, 2023Present: Aaron Gable – (Let’s Encrypt) Aaron Poulsen – (Amazon) Adrian Mueller – (SwissSign) Andrea Holland – (VikingCloud) Brianca Martin – (Amazon) Bruce Morton – (Entrust) Clint Wilson – (Apple) Corey Bonnell – (DigiCert) Corey Rasmussen – (OATI) Daryn Wright – (GoDaddy) David Kluge – (Google) Dean Coclin – (DigiCert) Dimitris Zacharopoulos – (HARICA) Dustin Hollenback – (Microsoft) Enrico Entschew – (D-TRUST) Fumi Yoneda – (Japan Registry Services) Hannah Sokol – (Microsoft) Inaba Atsushi – (GlobalSign) Inigo Barreira – (Sectigo) Joanna Fox – (TrustCor Systems) Marco Schambach – (IdenTrust) Michelle Coon – (OATI) Nargis Mannan – (VikingCloud) Nate Smith – (GoDaddy) Nome Huang – (TrustAsia Technologies, Inc.
August 3, 2023 by Iñigo BarreiraServerCert WG Meeting: August 3, 2023Present: Aaron Gable – (Let’s Encrypt) Aaron Poulsen – (Amazon) Adrian Mueller – (SwissSign) Andrea Holland – (VikingCloud) Brianca Martin – (Amazon) Bruce Morton – (Entrust) Clint Wilson – (Apple) Corey Bonnell – (DigiCert) Corey Rasmussen – (OATI) Daryn Wright – (GoDaddy) David Kluge – (Google) Dean Coclin – (DigiCert) Dimitris Zacharopoulos – (HARICA) Dustin Hollenback – (Microsoft) Enrico Entschew – (D-TRUST) Fumi Yoneda – (Japan Registry Services) Hannah Sokol – (Microsoft) Inaba Atsushi – (GlobalSign) Inigo Barreira – (Sectigo) Joanna Fox – (TrustCor Systems) Marco Schambach – (IdenTrust) Michelle Coon – (OATI) Nargis Mannan – (VikingCloud) Nate Smith – (GoDaddy) Nome Huang – (TrustAsia Technologies, Inc.