CA/Browser Forum
Home » All CA/Browser Forum Posts » Ballot SMC06: Post implementation clarification and corrections

Ballot SMC06: Post implementation clarification and corrections

The Intellectual Property Review (IPR) period for Ballot SMC06 (Post implementation clarification and corrections) has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of May 11, 2024.

The new S/MIME BR v.1.0.4 have been published to the CABF public website in accordance with the Bylaws: https://cabforum.org/uploads/CA-Browser-Forum-SMIMEBR-1.0.4.pdf

IPR Review of Ballot SMC06: Post implementation clarification and corrections

This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This 30-day Review Period is for the Final Maintenance Guideline that is attached to this Review Notice.

Ballot for Review: Ballot SMC06, redline at https://cabforum.org/posts/2024/2024-04-11-SMCWG-ballot-SMC06/CA-Browser-Forum-SMIMEBR-1.0.4-redline.pdf

Start of Review Period: April 11, 2024

End of Review Period: 2359 UTC on May 11, 2024

Please forward a written notice to exclude Essential Claims by email to smcwg-public@cabforum.org and a copy to the CA/B Forum public mailing list public@cabforum.org before the end of the Review Period.

See current version of CA/Browser Forum Intellectual Property Rights Policy for details. See also https://cabforum.org/ipr-policy/. An optional format for an Exclusion Notice is available at https://cabforum.org/wp-content/uploads/Template-for-Exclusion-Notice.pdf.

Results of Ballot SMC06: Post implementation clarification and corrections

The voting period for “Ballot SMC06: Post implementation clarification and corrections” has completed, and the ballot has passed.

Voting Results

Certificate Issuers

16 votes total, with no abstentions:

  • 16 Issuers voting YES: Actalis S.p.A., Asseco Data Systems SA (Certum), DigiCert, D-TRUST, eMudhra, Entrust, GlobalSign, HARICA, IdenTrust, OISTE Foundation, SECOM Trust Systems, Sectigo, SSL.com, SwissSign, Telia Company, TWCA
  • 0 Issuers voting NO
  • 0 Issuers ABSTAIN

Certificate Consumers

3 votes total, with no abstentions:

  • 3 Consumers voting YES: Apple, Mozilla, rundQuadrat
  • 0 Consumers voting NO
  • 0 Consumers ABSTAIN

Bylaws Requirements

  1. Bylaw 2.3(f) requires: o A “yes” vote by two-thirds of Certificate Issuer votes and by 50%-plus-one of Certificate Consumer votes. Votes to abstain are not counted for this purpose. This requirement was MET for Certificate Issuers and MET for Certificate Consumers. o At least one Certificate Issuer and one Certificate Consumer Member must vote in favor of a ballot for the ballot to be adopted. This requirement was MET.
  2. Bylaw 2.3(g) requires that a ballot result only be considered valid when “more than half of the number of currently active Members has participated”. The number of currently active Voting Members is the average number of Voting Member organizations that have participated in the previous three meetings. Votes to abstain are counted in determining quorum. The quorum was 7 for this ballot. This requirement was MET. This ballot now enters the 30-day IP Rights Review Period to permit members to review the ballot for relevant IP rights issues. The IP Rights Review Period ends at 2359 UTC on May 11, 2024.

Ballot SMC06: Post implementation clarification and corrections

Purpose of Ballot:

The ballot proposes changes to the S/MIME Baseline Requirements to provide clarifications and corrections arising from the implementation of the S/MIME BR and initial audits.

The following motion has been proposed by Stephen Davidson of DigiCert and endorsed by Martijn Katerbarg of Sectigo and Roman Fischer of SwissSign.

Motion Begins

This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted S/MIME Certificates” (“S/MIME Baseline Requirements”) resulting in Version 1.0.4.

The proposed modifications to the S/MIME Baseline Requirements may be found at https://github.com/srdavidson/smime/compare/ed36440d7c967732aa08739b14cc29bed257a67d...246fab8b8880aa62cec95b6d055b872173d4dadf

The SMCWG Chair or Vice-Chair is permitted to update the Relevant Dates and Version Number of the S/MIME Baseline Requirements to reflect final dates.

Motion Ends

This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:

Discussion (9 days) Start Time: Tuesday March 26, 2024 17:00 UTC End Time: Thursday April 4, 2024 17:00 UTC

Vote for approval (7 days) Start Time: Thursday April 4, 2024 17:00 UTC End Time: Thursday April 11, 2024 17:00 UTC

IPR Review (30 days)

Latest releases
Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.7 - Ballot SMC09 - Nov 25, 2024

This ballot includes updates for the following: • Require pre-linting of leaf end entity Certificates starting September 15, 2025 • Require WebTrust for Network Security for audits starting after April 1, 2025 • Clarify that multiple certificatePolicy OIDs are allowed in end entity certificates • Clarify use of organizationIdentifer references • Update of Appendix A.2 Natural Person Identifiers This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Clint Wilson (Apple) and Martijn Katerbarg (Sectigo).

Network and Certificate System Security Requirements
v2.0 - Ballot NS-003 - Jun 26, 2024

Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).