2026-01-14 Minutes of the S/MIME Certificate Working Group
Minutes of SMCWG
January 14, 2026
These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.
1. Roll Call
2. Note well: Antitrust / Compliance Statement
3. Approval of past minutes
The following minutes were approved:
- December 03
- December 17
Minutes provided by Stephen Davidson.
4. Review Agenda
5. Membership
NA
6. Discussion
The WG discussed two ballots underway at the Server Certificate Working group. It was agreed that text should be inserted in the S/MIME BR to maintain equivalency with SC96. Stephen Davidson shared a proposal at https://github.com/cabforum/smime/issues/298. Changes for SC94 were not considered necessary.
The WG revisited the subject of the user of clientAuth for SMTP-to-SMTP authentication. Stephen asked for assistance in determining the scale of adoption of such certificates. Andy Warner noted that he was seeking data.
Stephen presented a draft ballot https://github.com/cabforum/smime/compare/be9a18ab2b48eb0cbff41d3a268202f700c06c05...a4d2a8abcd43abe3ec8c5a6cb27cf4f3f97a4f51. Scott Rea noted that some of the changes were unnecessarily explicit as they restated the requirements of the ISO standard being quoted. Stephen agreed to redraft. It was agreed to move the change relating to XX country code to a standalone ballot. Ben Wilson previously agreed to endorse the mDL ballot. Scott Rea tentatively agreed to endorse, subject to updates being made.
7. Ballot Status Updates
- In Development: Pseudonym, mDL, eID, section 7 re-write
- In Discussion Period: NA
- In Voting Period: NA
- Under IPR Review: NA
- Approved and Effective: SMC014: DNSSEC for CAA (October 13)
8. Next meeting:
- January 28, 2026 at 11 am Eastern
9. Any other business
NA
10. Adjourn
Attendees:
Adam Folson (IdenTrust), Albert de Ruiter (Logius PKIoverheid), Andreas Henschel (D-TRUST), Andy Warner (Google), Arman Asemani (Apple), Ashish Dhiman (GlobalSign), Ben Wilson (Mozilla), Dustin Hollenback (Apple), Hazhar Ismail (MSC Trustgate Sdn Bhd), Inaba Atsushi (GlobalSign), Iñigo Barreira (Sectigo), Judith Spencer (CertiPath), Luis Cervantes (SSL.com), Malcolm Idaho (IdenTrust), Marco Schambach (IdenTrust), Martijn Katerbarg (Sectigo), Nome Huang (TrustAsia), Ono Fumiaki (SECOM Trust Systems), Peter Miskovic (Disig), Rebecca Kelly (SSL.com), Rollin Yu (TrustAsia), Sandy Balzer (SwissSign), Scott Rea (eMudhra), Sean Huang (TWCA), Stefan Selbitschka (rundQuadrat), Stephen Davidson (DigiCert), Tadahiko Ito (SECOM Trust Systems), Thomas Zermeno (SSL.com), Wiktoria Więckowska (Asseco Data Systems SA (Certum))