CA/Browser Forum
Home » All CA/Browser Forum Posts » 2023-04-12 Minutes of the S/MIME Certificate Working Group

2023-04-12 Minutes of the S/MIME Certificate Working Group

Minutes of SMCWG

April 12, 2023

These are the Approved Minutes of the Teleconference described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

Attendees

Adrian Mueller – (SwissSign), Andreas Henschel – (D-TRUST), Ashish Dhiman – (GlobalSign), Ben Wilson – (Mozilla), Christophe Bonjean – (GlobalSign), Clint Wilson – (Apple), Corey Bonnell – (DigiCert), Dave Chin – (CPA Canada/WebTrust), Dimitris Zacharopoulos – (HARICA), Don Sheehy – (CPA Canada/WebTrust), Inaba Atsushi – (GlobalSign), Inigo Barreira – (Sectigo), Judith Spencer – (CertiPath), Li-Chun Chen – (Chunghwa Telecom), Marco Schambach – (IdenTrust), Martijn Katerbarg – (Sectigo), Morad Abou Nasser – (TeleTrust), Nome Huang – (TrustAsia Technologies, Inc.), Pekka Lahtiharju – (Telia Company), Rebecca Kelley – (Apple), Renne Rodriguez – (Apple), Rollin Yu – (TrustAsia Technologies, Inc.), Russ Housley – (Vigil Security LLC), Stefan Selbitschka – (rundQuadrat), Stephen Davidson – (DigiCert), Tadahiko Ito – (SECOM Trust Systems)

1. Roll Call

The Roll Call was taken.

2. Read Antitrust Statement

The statement was read concerning the antitrust policy, code of conduct, and intellectual property rights agreement.

3. Review Agenda

Minutes were prepared by Stephen Davidson.

4. Approval of minutes from last teleconference

The minutes were approved from the following SMCWG meetings: March 29.

5. Discussion

Stephen Davidson reminded the SMCWG of Clint Wilson’s request for leaf certificate examples that are compliant with the S/MIME BR.

Stephen reviewed the potential correction at this GitHub commit to address the comment raised by Bruce Morton at this mailing list message and separately by DigiCert.

It was noted that the text was derived from the EVG so a similar edit will be required there. Corey has submitted an issue at CAB Forum Server Certificate WG GitHub Issue #428.

Corey suggested that the text could simply refer to ISO 3166-2 (without the 3 character cap) to make the text less sensitive to changes in that external document.

Stephen suggested that the SMCWG was approaching readiness to move ahead with the erratum ballot and asked for potential co-sponsors of the ballot to contact him. He suggested that the goal would be to set an effective date alongside the Sept 1 effective date of v1.0.0. Don Sheehy noted that a prompt move on the ballot would be preferred to allow auditors time to update criteria if needed.

Dimitris Zacharopoulos noted the ongoing Pseudonym discussion; Christophe Bonjean said he would propose updated text.

Stephen reminded the SMCWG that draft text existed to add CAA to the S/MIME BR and asked when the group would be ready to proceed to ballot, and when a possible effective date might be set. He hoped to provide a long implementation window as some CAs may not have existing CAA implementations. He noted that the Internet-draft proposed was entering last call at the IETF LAMPS WG. Dimitris suggested that the SMCWG wait until the Internet-draft becomes an RFC and be prepared to immediately move to ballot at that time. It was suggested that a 9-12 month period was an appropriate timeline for implementation.

6. Any Other Business

None

7. Next call

Next call: tentative Wednesday, April 26, 2023 at 11:00 am Eastern Time

Adjourned

Latest releases
Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.7 - Ballot SMC09 - Nov 25, 2024

This ballot includes updates for the following: • Require pre-linting of leaf end entity Certificates starting September 15, 2025 • Require WebTrust for Network Security for audits starting after April 1, 2025 • Clarify that multiple certificatePolicy OIDs are allowed in end entity certificates • Clarify use of organizationIdentifer references • Update of Appendix A.2 Natural Person Identifiers This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Clint Wilson (Apple) and Martijn Katerbarg (Sectigo).

Network and Certificate System Security Requirements
v2.0 - Ballot NS-003 - Jun 26, 2024

Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).