So, to make sure we have a clearly defined question and goal, which ensures a productive use of our time (rather than ad-hoc discussions), is this a correct summary of the exact topic to discuss:
"Does Sony, which distributes Android TV with additional Sony software installed, produce a software product, such as a browser, intended for use by the general public for relying upon certificates, based on the information currently provided" With possible outcomes being: "Yes" "No" "Here are additional questions that may need to be answered before-hand"? Similarly, one presumably repeats that process for all further definitions - such as CWG membership groups. I can see there are a number of questions that would need to be answered: - What CWGs would Sony be interested in applying for - Where are details about the Software Product (since updates to those products are part of our Bylaws) - Is the Software Product itself intended for use by the general public for relying upon certificates? - An example of how it could not be intended for use by the general public is a system that is intended to only connect to a single host or a limited set of hosts If the discussion is focused on gathering further questions or additional information to gather, that can be a productive conversation to have. On Wed, Jun 27, 2018 at 1:21 PM Kirk Hall via Public <[email protected]> wrote: > Summary based on quotes from my original email to the list: > > > > *Original Sony question*: “Can you please describe the bylaw requirement > of “produces a software product, such as a browser, intended for use by the > general public for relying upon certificates and is a member of a CWG”? If > we produce a hardware product which includes software which relies upon > (public root) certificates, does that meet the definition of “produces a > software product”?” > > > > *Dean Coclin response*: “Perhaps you can help clarify by stating whether > or not Sony makes the underlying software that runs in the hardware device > made by Sony?” > > > > *Sony response*: “Limiting the discussion to televisions (the question > at-hand), they’re based on Android TV then with Sony software on top. So, > “does Sony make the software” is yes and no. But we **do** write the > software that does the cryptographic signature validation.” > > > > > > Bylaws provide as follows: > > > > (a) All Forum members must *** meet at least one of the following > criteria: *** > > > > (*3) Certificate Consumer: The member organization produces a software > product, such as a browser, intended for use by the general public for > relying upon certificates* and is a member of a CWG [Chartered Working > Group, such as the new Server Certificate Working Group]*.* > > > > *From:* Ryan Sleevi [mailto:[email protected]] > *Sent:* Wednesday, June 27, 2018 10:13 AM > *To:* Kirk Hall <[email protected]>; CABFPub < > [email protected]> > *Subject:* Re: [cabfpub] [EXTERNAL]Re: Membership Application of Sony > > > > I'm having trouble finding a clear summary of the question from the > message forwarded. > > > > Could you helpfully re-state it? > > > > It sounds like the question is "Can we join the Forum without joining a > CWG" - but that may not be a correct understanding. > _______________________________________________ > Public mailing list > [email protected] > https://cabforum.org/mailman/listinfo/public >
_______________________________________________ Public mailing list [email protected] https://cabforum.org/mailman/listinfo/public
