<div dir="ltr">
<div>I recall that Direct Trust uses an SMIME-type certificate. <br></div><div>Maybe there is helpful information here:<br></div><div><a href="https://www.directtrust.org/resources/compliance-and-key-policies#compliance" target="_blank">https://www.directtrust.org/resources/compliance-and-key-policies#compliance</a></div><font color="#888888"><div>Ben</div></font>
</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Aug 5, 2020 at 12:50 AM Wiedenhorst, Matthias via Smcwg-public <<a href="mailto:smcwg-public@cabforum.org">smcwg-public@cabforum.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="DE">
<div class="gmail-m_-1084494962508910544WordSection1">
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)">Hello,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)" lang="EN-GB">the requirements mentioned by Adriano are derived from the technical specification BSI-TR-03116-4 of the German BSI (Federal
Office for Information Security). <u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)"><a href="https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03116/BSI-TR-03116-4.html" target="_blank">https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03116/BSI-TR-03116-4.html</a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)" lang="EN-GB">In section 3 of that document, cryptographic requirements are specified for S/MIME that should be considered.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)" lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)" lang="EN-GB">Unfortunately there seems to be no English translation available. The title translates to “Cryptographic requirements for
projects of the federal government”. However, usage of the document is not strictly limited to the federal government but is also applied to various non-governmental (or at least not directly governmental
</span><span style="font-size:10pt;font-family:Wingdings;color:rgb(31,73,125)" lang="EN-GB">J</span><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)" lang="EN-GB">) projects like the
energy sector mentioned by Adriano. <u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)" lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)" lang="EN-GB">Best regards<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(31,73,125)" lang="EN-GB">Matthias<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<div style="border-color:currentcolor currentcolor currentcolor blue;border-style:none none none solid;border-width:medium medium medium 1.5pt;padding:0cm 0cm 0cm 4pt">
<div>
<div style="border-color:rgb(225,225,225) currentcolor currentcolor;border-style:solid none none;border-width:1pt medium medium;padding:3pt 0cm 0cm">
<p class="MsoNormal"><b>Von:</b> Smcwg-public <<a href="mailto:smcwg-public-bounces@cabforum.org" target="_blank">smcwg-public-bounces@cabforum.org</a>>
<b>Im Auftrag von </b>Adriano Santoni via Smcwg-public<br>
<b>Gesendet:</b> Dienstag, 4. August 2020 08:00<br>
<b>An:</b> <a href="mailto:smcwg-public@cabforum.org" target="_blank">smcwg-public@cabforum.org</a><br>
<b>Betreff:</b> Re: [Smcwg-public] Relevant S/MIME standards<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p>Hello,<span style="font-size:12pt"><u></u><u></u></span></p>
<p>there is a German standard that I think we should consider. <u></u><u></u></p>
<p>As of January 1, 2019, all operators in the German energy sector (the energy and water industry market) are required to use the RSASSA-PSS algorithm for signing S/MIME-based communications with market participants, and the S/MIME certificates themselves
must be signed with RSASSA-PSS. <u></u><u></u></p>
<p>The relevant regulation can be found here, although in German only (I could not find an English translation):
<u></u><u></u></p>
<p><a href="https://www.edi-energy.de/index.php?id=38&tx_bdew_bdew%5Buid%5D=70&tx_bdew_bdew%5Baction%5D=download&tx_bdew_bdew%5Bcontroller%5D=Dokument&cHash=e0c45c5f51c7224743339c116feef613" target="_blank">https://www.edi-energy.de/index.php?id=38&tx_bdew_bdew%5Buid%5D=70&tx_bdew_bdew%5Baction%5D=download&tx_bdew_bdew%5Bcontroller%5D=Dokument&cHash=e0c45c5f51c7224743339c116feef613</a><u></u><u></u></p>
<p>Regards<u></u><u></u></p>
<p>Adriano<u></u><u></u></p>
<p><u></u> <u></u></p>
<div>
<p class="MsoNormal">Il 03/08/2020 18:44, Stephen Davidson via Smcwg-public ha scritto:<u></u><u></u></p>
</div>
<blockquote style="margin-top:5pt;margin-bottom:5pt">
<p class="MsoNormal">Hello all:<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">SMCWG members are encouraged to submit relevant standards for S/MIME certificates for the group’s consideration via the public listserv. Here are two important ones:<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<ol style="margin-top:0cm" type="1" start="1">
<li class="MsoNormal">Mozilla Root Store Policy. Particularly Section 2.2 (2) for validation of email control and Section 6.2 for S/MIME revocation events. <a href="https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/" target="_blank">https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/</a><u></u><u></u></li><li class="MsoNormal">Gmail’s acceptable S/MIME certificate profiles for end entity certs, intermediate CAs, and root CAs:
<a href="https://support.google.com/a/answer/7300887?hl=en&ref_topic=9061730" target="_blank">https://support.google.com/a/answer/7300887?hl=en&ref_topic=9061730</a><u></u><u></u></li></ol>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">We are interested to know if similar S/MIME certificate profiles exist in government or industry standards.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Regards, Stephen<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:12pt;font-family:"Times New Roman",serif"><br>
<br>
<u></u><u></u></span></p>
<pre>_______________________________________________<u></u><u></u></pre>
<pre>Smcwg-public mailing list<u></u><u></u></pre>
<pre><a href="mailto:Smcwg-public@cabforum.org" target="_blank">Smcwg-public@cabforum.org</a><u></u><u></u></pre>
<pre><a href="https://lists.cabforum.org/mailman/listinfo/smcwg-public" target="_blank">https://lists.cabforum.org/mailman/listinfo/smcwg-public</a><u></u><u></u></pre>
</blockquote>
</div>
</div>
<pre><font size="1" face="arial,helvetica,sans-serif">
<strong>______________________________________________________________________________________________________________________</strong>
<strong>Sitz der Gesellschaft/Headquarter:</strong> TÜV Informationstechnik GmbH * Langemarckstr. 20 * 45141 Essen, Germany
<strong>Registergericht/Register Court:</strong> Amtsgericht/Local Court Essen * HRB 11687 * USt.-IdNr./VAT No.: DE 176132277 * Steuer-Nr./Tax No.: 111/57062251
<strong>Geschäftsführung/Management Board:</strong> Dirk Kretzschmar
</font></pre>
<br>
<pre><font size="3" face="arial,helvetica,sans-serif" color="#000000"><b>TÜV NORD GROUP</b></font>
<font size="1" face="arial,helvetica,sans-serif" color="#000000">Expertise for your Success
</font></pre>
<pre><font size="1" face="arial,helvetica,sans-serif" color="#000000"><b>Please visit our website: <a href="http://www.tuv-nord.com" target="_blank">www.tuv-nord.com</a>
Besuchen Sie unseren Internetauftritt: <a href="http://www.tuev-nord.de" target="_blank">www.tuev-nord.de</a></b></font></pre>
</div>
_______________________________________________<br>
Smcwg-public mailing list<br>
<a href="mailto:Smcwg-public@cabforum.org" target="_blank">Smcwg-public@cabforum.org</a><br>
<a href="https://lists.cabforum.org/mailman/listinfo/smcwg-public" rel="noreferrer" target="_blank">https://lists.cabforum.org/mailman/listinfo/smcwg-public</a><br>
</blockquote></div>