2024-09-25 Minutes of the S/MIME Certificate Working Group
Minutes of SMCWG
September 25, 2024
These are the Approved Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.
Attendees
Adrian Mueller (SwissSign), Adriano Santoni (Actalis S.p.A.), Andy Warner (Google), Ashish Dhiman (GlobalSign), Guillaume Amringer (Carillon Information Security Inc.), Inaba Atsushi (GlobalSign), Judith Spencer (CertiPath), Li-Chun Chen (Chunghwa Telecom), Malcolm Idaho (IdenTrust), Marco Schambach (IdenTrust), Martijn Katerbarg (Sectigo), Nargis Mannan (VikingCloud), Nome Huang (TrustAsia), Pedro Fuentes (OISTE Foundation), Peter Miskovic (Disig), Renne Rodriguez (Apple), Rollin Yu (TrustAsia), Sandy Balzer (SwissSign), Thomas Zermeno (SSL.com), Tsung-Min Kuo (Chunghwa Telecom)
1. Roll Call
2. Read Antitrust Statement
The statement was read concerning the antitrust policy, code of conduct, and intellectual property rights agreement.
3. Review Agenda
Minutes were prepared by Stephen Davidson.
4. Approval of minutes from last teleconference
The minutes for the teleconference of September 11 were approved.
5. Discussion
Meeting was led by Martijn Katerbarg who noted that turnout might be light due to the ENISA Trust Services Forum/CA Day.
Martijn reminded CAs of the effective dates on September 15: • SHALL use compliant ICA, transition end for Extant ICAs (from version 1.0.1, ballot SMC03) • SHOULD adopt CAA for S/MIME, CPS update required (from version 1.0.3, ballot SMC05) • SHALL check Active status of Legal Entity Applicants (from version 1.0.4, ballot SMC06)
Martijn described a proposed text to clarifying the use of Registration Reference for organizationIdentifier in the subjectDN of Org- and Sponsor-validated profiles. Martijn said the text is being considered to add to Ballot SMC09 which is soon to enter discussion. He said that a proposal would be forthcoming from Adrian Mueller to allow the use of EUID as an NTR or as an additional Registration Scheme.
Pedro Fuentes proposed that the organizationIdentifier was an unnecessary complication in subjectDNs. Martijn noted that this was a significant discussion during the drafting of the original S/MIME BR.
Martijn described an approach to delay the implementation of MPIC for several months, to accommodate CAs who may not be aware of the MPIC discussion for TLS. This includes a SHOULD adopt for March 15 2025 and a must of May 15. He said Stephen Davidson would soon distribute an updated draft.
Martijn noted that the next S/MIME call will occur on the Thursday of the F2F. The WG discussed agenda items, including pending ballots and roadmap for the rest of the year.
Martijn noted that the nomination period is open for Vice Chair of the SMCWG.
6. Any Other Business
7. Next call
Next meeting: CABF F2F #63 in Seattle. See wiki for details.