Developers › Security Group blog

CA/Browser Forum considers reorganizing

March 1, 2012 · by Yngve Nysæter Pettersen

The CA/Browser Forum (CABForum) has, since it was formed in 2005, worked to improve security and trust on the internet -- first by defining the Extended Validation (EV) guidelines and, most recently, by defining the "Baseline Requirements for CAs".

Since its start, the list of participants in the Forum have included the major certificate authorities and browser vendors as voting members, as well as auditors and some other observers from interested parties.

Last week, at the 25th meeting of the forum, it was decided to form a working group to evaluate whether it is time to reorganize the forum, as well as whether membership should be expanded to include representatives of certificate subscribers (websites) and users (relying parties).

As part of this process, the CABForum invites interested parties to submit short position papers with suggestions about the topics to be considered. Please note that the submissions will be posted to the CABForum website.

Opera will participate in the working group and also intends to submit a position paper.

Please see the CABForum's announcement for more information.

Readers' comments 4

Left under the original article, as archived.

  • Charles SchlossFriday, March 2, 2012 5:05:11 AM

    No Anti-Malware vendors?
  • Yngve Nysæter PettersenFriday, March 2, 2012 11:37:06 AM

    well, we have at least Symantec, Comodo and Microsoft as members which are also anti-malware vendors
  • LymanPFriday, March 2, 2012 6:26:29 PM


    Snip>>>
    "membership should be expanded to include representatives of certificate subscribers (websites) and users (relying parties)"
    <<<Snip

    Most definitely!!
    Although subscribers ***should*** have a good knowledge od CAs most users I talk to seem to have little or no idea that they even exist, let alone what they are.
    In my opinion,it would be great for both promotion and transparency.
  • JimTuesday, March 6, 2012 7:47:27 AM

    I would like to suggest you invite the people from the Tor Project.

    I'm guessing that the major server vendors are being invited already? And Google, Facebook, Twitter people should go as well.

    The people who make website hosting software would benefit as well and help keep the smaller sites that run their software safe. Oh and there are a few open source CA software devs who might benefit from it.

About this article

Published inSecurity Group blog
DateMarch 1, 2012
AuthorYngve Nysæter Pettersen
TagsCertificates, cabforum, Opera, Security, 512-bit, browser, MD5, renego, renegotiation, RSA, security changes, Security Issue
OriginalInternet Archive