Final CA/Browser Forum SCWG agenda - Thursday, December 4, 2025 at 11:00 am Eastern Time

[Dimitris Zacharopoulos (HARICA)]

Here is the final agenda for the subject call. 

Eva Van Steenberge (Globalsign) is scheduled to take minutes and Dustin Hollenback (Apple) is up next.

1. Begin Recording - Roll Call
   
2. Read note-well
   
3. Review of Agenda
4. Minutes approval
• October 16, 2025 F2F#66 (Draft minutes were distributed 2025-11-30)
• November 20, 2025 Teleconference (Draft minutes were distributed 2025-11-21)
5. Membership applications
•  None
6. SCWG issues on GitHub
1. Triage, grouped a number of issues as "simple", "moderate", "complex" as suggested at a previous Teleconference
2. Flagged some issues for the validation subcommittee
3. Most of the issues marked as "clean-up" are being addressed in the cleanup-2025 ballot
7. Discussion on the following issues:
1. #526 - Clean up usage of the "Certificate Profile" Defined Term (Corey)
2. #506 - Update to description of certificateHold (Dimitris, Corey, Martijn)
3. #499 - Review of EVG cabfOrganizationIdentifier extension (Stephen, Adriano, Inigo, Corey)
4. #580 - Update Section 4.9.1.1 to explicitly reference CAA violations (Dimitris)
8. Ballot Status – see list below
9. Any Other Business
10. Next call: December 18, 2025
11. Adjourn

Current status of Ballots

This is the latest status of ballots since the last meeting.

In Discussion Period

• None

In Voting Period

• None

Under IPR review

• SC086: Sunset the Inclusion of Address and Routing Parameter Area Names (IPR Review ends 2025-12-14 12:00:00 UTC)
• SC091: Sunset 3.2.2.5.3 Reverse Address Lookup Validation, proposal of new DNS-based validation using Persistent DCV TXT Record for IP addresses (IPR Review ends 2025-12-14 12:00:00 UTC)
• SC090: Gradually sunset all remaining email-based, phone-based, and 'crossover' validation methods from Sections 3.2.2.4 and 3.2.2.5 (IPR Review ends 2025-12-20 16:00:00 UTC)

Cleared IPR review, new Guidelines

• None

Draft / Under Consideration

• SC087: Registration Number Improvement for EV Certificates (Corey)
• SC094: DNSSEC exception for email DCV methods (Dimitris)
• SC095: Clean-up 2025 (Karolina)

• SC0XX: Cleanup for ADN CNAME use (PR 619 from Rich and PR 627 from Jacob)
• SC0XX: Improve Certificate Problem Reports and Clarify the Meaning of Revocation (Martijn)
• SC0XX: Validation method in TLS Certificates (Clint)
• SC0XX: Update Revocation timeline for errors affecting CP/CPS deviations but in accordance with the BRs (Dimitris)
• SC0XX: Sunset all remaining use of SHA-1 (Ryan)