CA/Browser Forum
Home » All CA/Browser Forum Posts » Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates

Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates

The Intellectual Property Review (IPR) period for Ballot SMC08 (Deprecate Legacy Generation Profiles and Minor Updates) has completed.

No IPR Exclusion Notices were filed, and the ballot is adopted as of August 29, 2024.

The new S/MIME BR v.1.0.6 have been published to the CABF public website in accordance with the Bylaws: https://cabforum.org/uploads/CA-Browser-Forum-SMIMEBR-1.0.6.pdf

IPR Review of Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates

This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This 30-day Review Period is for the Final Maintenance Guideline that is attached to this Review Notice.

Ballot for Review: Ballot SMC08, redline at https://cabforum.org/posts/2024/2024-07-15-SMCWG-ballot-SMC08/CA-Browser-Forum-SMIMEBR-1.0.6-redline.pdf

Start of Review Period: July 29, 2024 End of Review Period: 2359 UTC on August 28, 2024

Please forward a written notice to exclude Essential Claims by email to smcwg-public@groups.cabforum.org and a copy to the CA/B Forum public mailing list public@groups.cabforum.org before the end of the Review Period.

See current version of CA/Browser Forum Intellectual Property Rights Policy for details. See also https://cabforum.org/about/ipr-policy/.

Results of Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates

The voting period for “Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates” has completed, and the ballot has passed.

Voting Results

Certificate Issuers 19 votes total, with no abstentions:

  • 16 Issuers voting YES: Asseco Data Systems SA (Certum), Chunghwa Telecom, DigiCert, D-TRUST, eMudhra, GlobalSign, HARICA, IdenTrust, Logius PKIoverheid, OISTE Foundation, SECOM Trust Systems, Sectigo, SSL.com, SwissSign, TrustAsia, TWCA
  • 0 Issuers voting NO
  • 0 Issuers ABSTAIN

Certificate Consumers 3 votes total, with no abstentions:

  • 3 Consumers voting YES: Apple, Mozilla, rundQuadrat
  • 0 Consumers voting NO
  • 0 Consumers ABSTAIN

Bylaws Requirements

  1. Bylaw 2.3(f) requires:
  • A “yes” vote by two-thirds of Certificate Issuer votes and by 50%-plus-one of Certificate Consumer votes. Votes to abstain are not counted for this purpose. This requirement was MET for Certificate Issuers and MET for Certificate Consumers.
  • At least one Certificate Issuer and one Certificate Consumer Member must vote in favor of a ballot for the ballot to be adopted. This requirement was MET.
  1. Bylaw 2.3(g) requires that a ballot result only be considered valid when “more than half of the number of currently active Members has participated”. The number of currently active Voting Members is the average number of Voting Member organizations that have participated in the previous three meetings. Votes to abstain are counted in determining quorum. The quorum was 8 for this ballot. This requirement was MET.

This ballot now enters the 30-day IP Rights Review Period to permit members to review the ballot for relevant IP rights issues. The IP Rights Review Period ends at 2359 UTC on August 28, 2024.

Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates

Summary:

The S/MIME Baseline Requirements include a set of Legacy profiles designed to ease the transition into an audited framework, with the expectation that those Legacy profiles would be deprecated. This ballot sets a date by which issuance of certificates following the Legacy generation profiles must cease. It also includes the following minor updates:

  • Pins the domain validation procedures to v 2.0.5 of the TLS Baseline Requirements while the ballot activity for multi-perspective validation is concluded, and the SMCWG determines its corresponding course of action;

  • Updates the reference for SmtpUTF8Mailbox from RFC 8398 to RFC 9598; and

  • Small text corrections in the Reference section

This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Clint Wilson (Apple) and Martijn Katerbarg (Sectigo).

— Motion Begins —

This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted S/MIME Certificates” (“S/MIME Baseline Requirements”), based on Version 1.0.5.

MODIFY the Baseline Requirements as specified in the following Redline: https://github.com/cabforum/smime/compare/927a78831c9330fe7c36d4a484c9eeed801c9c9d...9c16b53651caa3f91d9d6e298a617c4c748dd623

— Motion Ends —

This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:

Discussion (at least 7 days)

  • Start time: July 15, 2024 at 16:00:00 UTC
  • End time: July 22, 2024 at 16:00:00 UTC

Vote for approval (7 days)

  • Start time: July 22, 2024 at 16:00:00 UTC
  • End time: July 29, 2024 at 16:00:00 UTC
Latest releases
Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.7 - Ballot SMC09 - Nov 25, 2024

This ballot includes updates for the following: • Require pre-linting of leaf end entity Certificates starting September 15, 2025 • Require WebTrust for Network Security for audits starting after April 1, 2025 • Clarify that multiple certificatePolicy OIDs are allowed in end entity certificates • Clarify use of organizationIdentifer references • Update of Appendix A.2 Natural Person Identifiers This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Clint Wilson (Apple) and Martijn Katerbarg (Sectigo).

Network and Certificate System Security Requirements
v2.0 - Ballot NS-003 - Jun 26, 2024

Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).