<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1439639889;
mso-list-template-ids:1786702038;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1
{mso-list-id:1984308745;
mso-list-type:hybrid;
mso-list-template-ids:-437205106 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l1:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Meeting Minutes August 29, 2019<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><ol style='margin-top:0in' start=1 type=1><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level1 lfo3'>Call to order<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level1 lfo3'>Roll call performed – Bruce Morton, Dean Coclin, Tim Callen, Mike Reilly, Oliver Kuley, Atsushi Inaba, Joanna Fox, Karthik<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level1 lfo3'>Anti-trust statement was read<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level1 lfo3'>Approved minutes from August 15, 2019 meeting<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level1 lfo3'>No new members to the forum. Joanna advised that Daniela Hood will be added as a GoDaddy representative<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level1 lfo3'>Code Signing final guidelines have been posted to the CAB Forum site<o:p></o:p></li><ol style='margin-top:0in' start=1 type=a><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level2 lfo3'>Microsoft updated this link <a href="http://aka.ms/csbr">http://aka.ms/csbr</a> to point to the CAB Forum page<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level2 lfo3'>It was suggested that CASC remove old guideline from their resource page <a href="https://casecurity.org/resources/">https://casecurity.org/resources/</a> or update the link to the CABF page<o:p></o:p></li></ol><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level1 lfo3'>Discussed the impact of having Time-stamping in the Code Signing guidelines, as it has been stated this is outside of the charter of this Working Group. The team reviewed the charter and believes that there is no scope interference. Time-stamping as described in the document relates only to its use pertaining to code signing. It does not interfere or impede with other potential uses of time-stamping.<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level1 lfo3'>Information sharing sheet targeted to A/V vendors has been completed by CA members, <a href="https://1drv.ms/x/s!Aj5mKADqdqlWhSiFqRuWpcG-FdFQ">https://1drv.ms/x/s!Aj5mKADqdqlWhSiFqRuWpcG-FdFQ</a>. Intention is to provide this to AV vendors and post on CABF website.<i><o:p></o:p></i></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level1 lfo3'>Review of action items/discussion topics/additional changes <o:p></o:p></li><ol style='margin-top:0in' start=1 type=a><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level2 lfo3'>Mike stated they had discussed internally whether we should move up the SHA1 prohibition. He stated they agreed to May 31, 2020. This will be put into a cleanup ballot.<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level2 lfo3'>Bruce said he doesn’t believe kernel mode is reflected in the current document and therefore no updates are needed on that.<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level2 lfo3'>Bruce believed Doug was the one who brought up the “maintain revocation for 10 years” topic. Doug was not on the call.<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level2 lfo3'>Bruce asked about combining the EV CS and CS BRs into one document. Impact to audits was discussed. Bruce and Mike will review the documents to determine impact.<o:p></o:p></li></ol><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level1 lfo3'>No other business to discuss.<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l1 level1 lfo3'>Adjourned.<o:p></o:p></li></ol><p class=MsoNormal><o:p> </o:p></p></div></body></html>