> The CABforum BRs define, de facto, the rules/requirements for being a CA: https://cabforum.org/baseline-requirements-documents/ https://cabforum.org/baseline-

> The CABforum BRs define, de facto, the rules/requirements for being a CA: https://cabforum.org/baseline-requirements-documents/ https://cabforum.org/baseline-requirements-documents/ Note that there have been several ballots which have been won by the CAs against the browsers, after which the browsers have turned around, shrugged, and just enforced the new requirements for their root stores without them becoming CAB BRs. Most obviously this applies to Google and Apple requiring all newly issued certificates to be CT qualified.