Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates

Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates

Summary:

The S/MIME Baseline Requirements include a set of Legacy profiles designed to ease the transition into an audited framework, with the expectation that those Legacy profiles would be deprecated. This ballot sets a date by which issuance of certificates following the Legacy generation profiles must cease. It also includes the following minor updates:

• Pins the domain validation procedures to v 2.0.5 of the TLS Baseline Requirements while the ballot activity for multi-perspective validation is concluded, and the SMCWG determines its corresponding course of action;

• Updates the reference for SmtpUTF8Mailbox from RFC 8398 to RFC 9598; and

• Small text corrections in the Reference section

This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Clint Wilson (Apple) and Martijn Katerbarg (Sectigo).

— Motion Begins —

This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted S/MIME Certificates” (“S/MIME Baseline Requirements”), based on Version 1.0.5.

MODIFY the Baseline Requirements as specified in the following Redline: https://github.com/cabforum/smime/compare/927a78831c9330fe7c36d4a484c9eeed801c9c9d...9c16b53651caa3f91d9d6e298a617c4c748dd623

— Motion Ends —

This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:

Discussion (at least 7 days)

• Start time: July 15, 2024 at 16:00:00 UTC
• End time: July 22, 2024 at 16:00:00 UTC