<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe Script";
panose-1:3 11 5 4 2 0 0 0 0 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:18.0pt;
font-family:"Calibri",sans-serif;
font-weight:bold;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Calibri Light",sans-serif;
color:#2F5496;}
span.EmailStyle21
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Thanks Wendy – we’ll have time to discuss this today.<o:p></o:p></p>
<p class="MsoNormal">Best, Stephen<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Wendy Brown - QT3LB-C <wendy.brown@gsa.gov> <br>
<b>Sent:</b> Tuesday, June 22, 2021 5:10 PM<br>
<b>To:</b> Stephen Davidson <Stephen.Davidson@digicert.com>; SMIME Certificate Working Group <smcwg-public@cabforum.org><br>
<b>Subject:</b> Re: [Smcwg-public] Draft SMCWG agenda - Wednesday, June 23, 2021<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Stephen - <o:p></o:p></p>
<div>
<p class="MsoNormal">Is there a good definition of Organization-validation certificates vs Sponsored-validation certs written up somewhere so I don't waste the group's time tomorrow? I don't see the draft BR on the SMIME Wiki and can't find the link to where
you had started the SMIME BR<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Taking a quick look at the profiles, my concern is that OU is ot allowed in the org-validated profiles & I understand that it may be difficult to programmatically validate most OUs, but in the case of the US Federal Government the O is
just U.S. Government and the first OU might be something like Department of State vs General Services Administration or DHS, etc. And would be very important because I can't imagine emails being sent from "the US Government" but I could see IRS or Social Security
Administration having an organizational email.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I thought the Sponsored Validation was more if the CA has a contract with the Organization - maybe at the c=US, O=U.S. Government, OU=Social Security Administration level - the SSA is responsible for doing the id proofing for the human
user identified in the CN as well as their email address and other attributes that may be specific to the organization that the CA might ot be able to validate on their own.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks<br clear="all">
<o:p></o:p></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p><span style="font-family:"Segoe Script"">Wendy</span><o:p></o:p></p>
<p><span style="font-size:9.5pt">Wendy Brown<br>
Supporting GSA FPKI<br>
Protiviti Government Services</span><o:p></o:p></p>
<p> 703-965-2990 (cell)<o:p></o:p></p>
<p><a href="mailto:wendy.brown@gsa.gov" target="_blank"><span style="font-size:9.5pt">wendy.brown@gsa.gov</span></a><br>
<a href="mailto:wendy.brown@protiviti.com" target="_blank">wendy.brown@protiviti.com</a><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Tue, Jun 22, 2021 at 3:34 PM Stephen Davidson via Smcwg-public <<a href="mailto:smcwg-public@cabforum.org">smcwg-public@cabforum.org</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<h2><a name="m_-1638870901881957371__Hlk72771135">SMCWG Agenda</a><o:p></o:p></h2>
<h2><span style="font-size:11.0pt;font-weight:normal">Draft SMCWG agenda - Wednesday, June 23, 2021 at 11:00 am Eastern Time</span><o:p></o:p></h2>
<h2><span style="font-size:11.0pt;font-weight:normal">Here is a draft agenda for the teleconference described in the subject of this message. Please review and propose changes if necessary.</span><o:p></o:p></h2>
<h2><span style="font-size:11.0pt;font-weight:normal">1. Roll Call </span>
<o:p></o:p></h2>
<h2><span style="font-size:11.0pt;font-weight:normal">2. Read Antitrust / Compliance Statement</span><o:p></o:p></h2>
<h2><span style="font-size:11.0pt;font-weight:normal">3. Review Agenda</span><o:p></o:p></h2>
<h2><span style="font-size:11.0pt;font-weight:normal">4. Approval of minutes from teleconference of June 9, 2021</span><o:p></o:p></h2>
<h2 style="margin-left:.5in"><span style="font-size:11.0pt;font-weight:normal">5. New discussion of Organisation-validation certificate profile at
</span><a href="https://docs.google.com/spreadsheets/d/1gEq-o4jU1FWvKBeMoncfmhAUemAgGuvVRSLQb7PedLU/edit#gid=718518913" target="_blank"><span style="font-size:11.0pt;font-weight:normal">here</span></a><span style="font-size:11.0pt;font-weight:normal">
</span><o:p></o:p></h2>
<h2><span style="font-size:11.0pt;font-weight:normal">6. Any other business
</span><o:p></o:p></h2>
<h2><span style="font-size:11.0pt;font-weight:normal">7. Next call: July 7, 2021 at 11:00 am Eastern Time</span><o:p></o:p></h2>
<h2><span style="font-size:11.0pt;font-weight:normal"> Adjourn</span><o:p></o:p></h2>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
Smcwg-public mailing list<br>
<a href="mailto:Smcwg-public@cabforum.org" target="_blank">Smcwg-public@cabforum.org</a><br>
<a href="https://lists.cabforum.org/mailman/listinfo/smcwg-public" target="_blank">https://lists.cabforum.org/mailman/listinfo/smcwg-public</a><o:p></o:p></p>
</blockquote>
</div>
</div>
</body>
</html>