Ballot SMC010 - Introduction of Multi-Perspective Issuance Corroboration

Ballot SMC010: Introduction of Multi-Perspective Issuance Corroboration

Summary:

This ballot adopts Multi-Perspective Issuance Corroboration (MPIC) for CAs when conducting Email Domain Control Validation (DCV) and Certification Authority Authorization (CAA) checks for S/MIME Certificates. The Ballot adopts the MPIC implementation consistent with the TLS Baseline Requirements.

Acknowledging that some S/MIME CAs with no TLS operations may require additional time to deploy MPIC, the Ballot has a Compliance Date of May 15, 2025. Following that date the implementation timeline described in TLS BR section 3.2.2.9 applies.

This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Ashish Dhiman (GlobalSign) and Nicolas Lidzborski (Google).

— Motion Begins —

This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted S/MIME Certificates” (“S/MIME Baseline Requirements”), based on Version 1.0.6. MODIFY the Baseline Requirements as specified in the following Redline:

https://github.com/cabforum/smime/compare/c66dfe265f5fabf70150af68746d5cb9ba09f942..f61d2cd692eaa32c4624418324bcace8411e4a17

— Motion Ends —

This ballot proposes a Final Maintenance Guideline. This ballot does not conflict with the contents of Ballot SMC09 (see https://cabforum.org/2024/10/09/ballot-smc09-pre-linting-webtrust-for-netsec-and-minor-updates/) which is also based on Version 1.0.6 and has not been fully approved. The procedure for approval of this ballot is as follows:

Discussion (at least 7 days)

• Start time: November 7, 2024 at 12:00:00 UTC
• End time: November 14, 2024 at 14:00:00 UTC

Vote for approval (7 days):

• TBD
• TBD

IPR Review (30 days)