<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:18.0pt;
font-family:"Calibri",sans-serif;
color:black;}
h3
{mso-style-priority:9;
mso-style-link:"Heading 3 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:13.5pt;
font-family:"Calibri",sans-serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Calibri",sans-serif;
color:black;
font-weight:bold;}
span.Heading3Char
{mso-style-name:"Heading 3 Char";
mso-style-priority:9;
mso-style-link:"Heading 3";
font-family:"Calibri",sans-serif;
color:black;
font-weight:bold;}
span.EmailStyle22
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><h2>Minutes of SMCWG<o:p></o:p></h2><p class=MsoNormal>July 22, 2020<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>These are the <span style='color:windowtext'>Approved</span> Minutes of the Teleconference described in the subject of this message. <o:p></o:p></p><h2>Attendees (in alphabetical order)<o:p></o:p></h2><p class=MsoNormal>Qiu Dawei (CFCA), Zhang Danmeng (CFCA), Li-Chun Chen (Chunghwa Telecom ), Tim Hollebeek (DigiCert), Dean Coclin (DigiCert), Stephen Davidson (DigiCert), Andreas Henschel (D-TRUST), Enrico Entschew (D-TRUST), Vijay Kumar (eMudhra), Bruce Morton (Entrust DataCard), Wang Chunlan (GDCA), Xiu Lei (GDCA), Doug Beattie (GlobalSign), Hugh Mercer (GlobalSign), Atsushi Inaba (GlobalSign), Dimitris Zacharopoulos (HARICA), Toria Chen (SHECA), Chris Kemmerer (SSL.com), Mike Guenther (SwissSign), Neil Dunbar (TrustCor), Corey Bonnell (Trustwave), Janet Hines (Trustwave), David Chen (TWCA), Pedro Fuentes (OISTE), Hongquan Yin (Microsoft), Mike Reilly (Microsoft), Ben Wilson (Mozilla), Matthias Wiedenhorst (ACAB'c), India Donald (Federal PKI), Wendy Brown (Federal PKI), Thomas Connelly (Federal PKI), Hazhar Ismail (MSC Trustgate.com Sdn Bhd), Markus Wichmann (TeleTrust), Morad Abou Nasser (TeleTrust), Rufus Buschart (TeleTrust), Arno Fiedler, Christian Heutger (PSW), Russ Housley (Vigil Security, LLC), Patrycja Tulinska (PSW), Jeff Ward (WebTrust), Don Sheehy (WebTrust), Kai Engert (Thunderbird)<o:p></o:p></p><h3>1. Roll Call<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>The Roll Call was taken.<o:p></o:p></p><h3>2. Read Antitrust Statement<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>The Antitrust/Compliance Statement was read.<o:p></o:p></p><h3>3. Review Agenda<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>No changes to the agenda were noted.<o:p></o:p></p><h3>4. Approval of minutes from last teleconference<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>NA<o:p></o:p></p><h3>4. Formation of SMCWG<o:p></o:p></h3><p class=MsoNormal>An overview of the voting procedures was provided as outlined in the SMCWG Charter and CABF By-Laws for both the formation of the SMCWG and membership as well as onward ballots. Acting Chair Stephen Davidson proposed a list of initial qualifying members as follows.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Certificate Issuers: Actalis, Asseco Data Systems (Certum), BuyPass, CFCA, Comsign, DigiCert, D-TRUST, eMudhra, Entrust DataCard, GDCA, GlobalSign, HARICA, SHECA, SSL.com, SwissSign, TrustCor, Trustwave, TWCA, OISTE Foundation. Certificate Consumers: Microsoft, Mozilla/Thunderbird. Associate Members: ACAB'c, TeleTrusT, Federal PKI, MSC Trustgate.com Sdn Bhd, WebTrust. Interested Parties: Arno Fiedler (ETSI), PSW, Vigil Security.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>A discussion was held. It was noted that Mozilla was working with its affiliate Thunderbird, but that changes in organizational structure may lead to membership category changes at a later date. It was questioned whether Associate Member or Interested party was more appropriate for TeleTrust and the Acting Chair decided to remove TeleTrusT from the current vote. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>A roll call of the proposed members was held and more than two-thirds of the proposed initial membership voted in favor in accordance with the Charter. There were no votes against the proposed members (with only abstentions or not present). <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The initial members of the SMCWG are as follows. Certificate Issuers: Actalis, Asseco Data Systems (Certum), BuyPass, CFCA, Comsign, DigiCert, D-TRUST, eMudhra, Entrust DataCard, GDCA, GlobalSign, HARICA, SHECA, SSL.com, SwissSign, TrustCor, Trustwave, TWCA, OISTE Foundation. Certificate Consumers: Microsoft, Mozilla/Thunderbird. Associate Members: ACAB'c, Federal PKI, MSC Trustgate.com Sdn Bhd, WebTrust. Interested Parties: Arno Fiedler (ETSI), PSW, Vigil Security.<o:p></o:p></p><h3>5. Election of Officers<o:p></o:p></h3><p class=MsoNormal>Stephen Davidson was proposed by Dean Coclin to act as Chair of the SMCWG. A voice vote was held and Stephen Davidson was elected to serve as Chair. It was agreed to elect a Vice Chair of the SMCWG at a later meeting. It was agreed that Stephen Davidson and Jos Purvis of the Infrastructure Subcommittee would serve as webmaster as required.<o:p></o:p></p><h3>6. Goals and Next Steps<o:p></o:p></h3><p class=MsoNormal>A discussion was held on the goals of the SMCWG as described in the Charter. It was agreed that initial work would focus on verification of control over email addresses and certificate profiles for end entity S/MIME certificates and Issuing CA certificates. Later steps would focus on key management and certificate lifecycle; CA operational practices, physical/logical security; and identity validation.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Members were asked to provide examples of known standards for S/MIME certificates for the group’s consideration.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><h3 style='mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in'>7. Any Other Business<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>No other business was discussed.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Moderation has been removed from members of the SMCWG on the public and management list. Ordinarily discussion should occur on the public list at <a href="mailto:smcwg-public@cabforum.org">smcwg-public@cabforum.org</a> which has a public access archive. The management list at <span style='font-size:13.5pt;background:white'> </span><a href="mailto:smcwg-management@cabforum.org"><span style='background:white'>smcwg-management@cabforum.org</span></a> is used for tasks such as scheduling and approval of minutes.<o:p></o:p></p><h3>8. Next call<o:p></o:p></h3><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>The next call will take place on August 5, 2020 at 11:00am Eastern Time. A separate invitation has been sent to members of the SMCWG; meetings will occur every other week in weeks of the main CABF call.<o:p></o:p></p><h3><span lang=DE>Adjourned</span><o:p></o:p></h3><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p></div></body></html>