pkic / ltl Goto Github PK

https://contentauthenticity.org/

Adobe AATL is already part of the LTL. The trust list supporting the Content Authenticity Initiative in the Adobe suite products might be merged in this file or get its own file.

https://github.com/pkic/ltl/blob/main/adobe.yaml

Information about how and where this list will be managed is currently not available and would be welcome.

Gmail is already included but only for the S/MIME purpose:
https://github.com/pkic/ltl/blob/main/gmail.yaml

https://bimigroup.org/verified-mark-certificates-vmc-and-bimi/
https://cloud.google.com/blog/products/identity-security/bringing-bimi-to-gmail-in-google-workspace

Name of the Trust List

Vietnam National Root Certification Authority

Description of the Trust List

The Vietnam National Root Certification Authority is a super CA, signing third party subordinate CAs.

The National E-Certification Center is a public non-business unit under the Ministry of Information and Communications in Vietnam, with the function of managing and exploiting infrastructure serving the provision of digital signature certification and e-authentication services, timestamp issuance services and other services on e-transactions in accordance with law; is a national digital signature certification service provider (Root Certification Authority).

Some more research and discussions are needed, this does seem to be a national trust program but does not directly classify as a trusted list.

Website

https://rootca.gov.vn/

Email or website address to contact privately

[email protected]

Policy

https://rootca.gov.vn/

Add the UK Trusted list as this is no longer included on eIDAS Trusted Lists since the UK left the EU.

https://ico.org.uk/for-organisations/guide-to-eidas/using-the-uk-trusted-list/

https://esignature.ec.europa.eu/efda/tl-browser/#/screen/home

https://www.openadr.org/index.php?option=com_content&view=article&id=94:cybersecurity&catid=20:general-site-content&Itemid=154

Name of the Trust List

ICP - Brasil

Description of the Trust List

https://www.gov.br/iti/pt-br

Website

https://estrutura.iti.gov.br/

Email or website address to contact privately

No response

Common CA Database

• This Trust List is managed through CCADB (https://www.ccadb.org/)

Policy

No response

Code of Conduct

• I agree to follow the Code of Conduct for Participants and Publications of the PKI Consortium

https://caprogram.360.cn/#trust

https://www.cisco.com/security/pki/ (see Trusted Root Stores at the bottom)

Webex looks to rely on the Cisco root store, not sure though:
https://help.webex.com/en-us/WBX9000008850/What-Root-Certificate-Authorities-are-Supported-for-Calls-to-Cisco-Webex-Audio-and-Video-Platforms

https://www.wi-fi.org/certification/certificate-authority-vendors

https://www.icao.int/Security/FAL/PKD/Pages/default.aspx

https://www.igtf.net/

Trust Anchor Distribution: https://dl.igtf.net/distribution/igtf/current/

https://help.sap.com/docs/CLOUD_INTEGRATION/368c481cd6954bdfa5d0435479fd4eaf/4509f605e83c4c939a91b81eb3a6cdea.html
https://launchpad.support.sap.com/#/notes/2801396

Audit: Web Trust or EHNAC and FPKI
URL: https://directtrust.org/about-membership/member-list#dt-accredited-ca
Certificate Policies: https://directtrust.app.box.com/s/wr4qa2pqbetxyp78sbtfci5jlzofis67/folder/129082896391
Description: DirectTrust accredits CAs operating in healthcare in support of the Direct Secure Messaging ANSI standard, as well as various other use cases such as health information exchange, digital signatures and assuring non-PKI Credential Service Providers. DirectTrust is referenced by the New Hampshire Department of State supporting the selection of CAs for eNotaries and is working with other states to expand reliance on the DirectTrust assurance program. More information about DirectTrust membership can be found here: https://directtrust.org/about-membership/member-list

Name of the Trust List

PSrE Indonesia

Description of the Trust List

The Parent PSrE or Parent Electronic Certificate Provider is the Electronic Certificate Provider/Certification Authority (CA) which is the parent for PSrE Indonesia. PSrE Induk is formed and run in accordance with Government Regulation No. 71 of 2019 which adheres to a single master system and is organized by the Ministry of Communication and Information Technology.

Website

https://www.rootca.id/

Email or website address to contact privately

No response

Common CA Database

• This Trust List is managed through CCADB (https://www.ccadb.org/)

Policy

No response

Code of Conduct

• I agree to follow the Code of Conduct for Participants and Publications of the PKI Consortium

Name of the Trust List

Bangaldesh Controller of Ceritication Authorities (CCA)

Description of the Trust List

The Office of the Regulator (CCA) of the issuing electronic signature certificate under the Information and Communication Technology Department is one of the partners in the construction of Digital Bangladesh.

Website

https://cca.gov.bd/site/page/a58193fd-99b7-45ea-b9ce-8df231598985/List-of-CAs

Email or website address to contact privately

No response

Common CA Database

• This Trust List is managed through CCADB (https://www.ccadb.org/)

Policy

No response

Code of Conduct

• I agree to follow the Code of Conduct for Participants and Publications of the PKI Consortium

Intel AMT:
https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments%2Facquiringanintelvprocertificate.htm

By doing some simple research the link to the AATL from Adobe seems to be: http://trustlist.adobe.com/tl12.acrobatsecuritysettings

This is a signed PDF file with an XML attachment that represents the trust list.

Is this link left intentionally?

https://www.oracle.com/java/technologies/javase/carootcertsprogram.html

Name of the Trust List

ANTIC

Description of the Trust List

ANTIC operates the national PKI for Cameroon.

Website

https://antic.cm/index.php/en/

Email or website address to contact privately

No response

Common CA Database

• This Trust List is managed through CCADB (https://www.ccadb.org/)

Policy

No response

Code of Conduct

• I agree to follow the Code of Conduct for Participants and Publications of the PKI Consortium

Name of the Trust List

ZT Browser Trusted List

Description of the Trust List

ZoTrus Trusted Root Program supports the distribution of root certificates, enabling customers to trust RSA/ECC SSL certificates, PDF Document Signing certificates and S/MIME certificates, and enabling customers to trust SM2 SSL certificates, PDF/OFD Document Signing certificates, Code Signing certificates and S/MIME certificates.

• For RSA/ECC SSL certificates, the root certificates included in Chromium is trusted as default, but ZT Browser will change our policy at any time without notice that we may des-include some default roots.
• For RSA/ECC Document Signing certificates, the root certificate must have been trusted by Adobe AATL, but ZT Browser does not trust it as default, CA must apply for inclusion.
• SM2 algorithm root certificate inclusion applicant must have a valid China CA license issued by MIIT and SCA and must have its own SM2 Root certificate or sub-CA issued by the China Public Root CA (SM2) for issuing SM2 SSL/TLS certificates. Other special cases are dealt with on a case-by-case basis.

Website

https://www.zotrus.com/en/browser/trust-root-program.html

Email or website address to contact privately

[email protected]

Common CA Database

• This Trust List is managed through CCADB (https://www.ccadb.org/)

Policy

https://www.zotrus.com/en/policy/index.html

Code of Conduct

• I agree to follow the Code of Conduct for Participants and Publications of the PKI Consortium