<div dir="ltr">Hi Stephen <div><br></div><div>I will miss the call tomorrow - let me know if any audit issues fall out</div><div><br></div><div>Doing an all day presentation tomorrow</div><div><br></div><div>Don </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Apr 26, 2022 at 6:08 PM Stephen Davidson via Smcwg-public <<a href="mailto:smcwg-public@cabforum.org">smcwg-public@cabforum.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US" style="overflow-wrap: break-word;">
<div class="gmail-m_-8070131431026049483WordSection1">
<h2><a name="m_-8070131431026049483__Hlk72771135">SMCWG Agenda<u></u><u></u></a></h2>
<h2><span><span style="font-size:11pt;font-weight:normal">Draft SMCWG agenda - Wednesday, April 27, 2022 at 11:00 am Eastern Time<u></u><u></u></span></span></h2>
<h2><span><span style="font-size:11pt;font-weight:normal">Here is a draft agenda for the teleconference described in the subject of this message. Please review and propose changes if necessary.<u></u><u></u></span></span></h2>
<h2><span><span style="font-size:11pt;font-weight:normal">1. Roll Call
<u></u><u></u></span></span></h2>
<h2><span><span style="font-size:11pt;font-weight:normal">2. Read Antitrust / Compliance Statement<u></u><u></u></span></span></h2>
<h2><span><span style="font-size:11pt;font-weight:normal">3. Review Agenda<u></u><u></u></span></span></h2>
<h2><span><span style="font-size:11pt;font-weight:normal">4. Approval of minutes from teleconference of April 13, 2022<u></u><u></u></span></span></h2>
<h2 style="margin-left:0.5in"><span><span style="font-size:11pt;font-weight:normal">5. Discussion
<u></u><u></u></span></span></h2>
<h2 style="margin-left:0.5in"><span><span style="font-size:11pt;font-weight:normal">Previous WG discussions in 2021 focused upon whether the S/MIME BR needed to establish the O is ANY company called ExampleCo or that it's
THAT PARTICULAR company called ExampleCo registered in New York. Based on feedback from Cert Consumers, WG discussion gravitated towards EV-like vetting and the inclusion of a unique identifier in the certificates (using the subject:organizationalIdentifer
from ETSI and the EVG rather than the layered EV JOI attributes).<u></u><u></u></span></span></h2>
<h2 style="margin-left:0.5in"><span><span style="font-size:11pt;font-weight:normal">Some CA concern has now been raised regarding EV as the choice for O vetting. Options to be discussed:<u></u><u></u></span></span></h2>
<h2 style="margin-left:0.75in"><span><span style="font-size:11pt;font-weight:normal">• Go full EV (as currently proposed in Section 3.2.3 [org vetting], 3.26 [validation of authority], and 3.2.8 [reliability
of sources] of the draft S/MIME BR, on basis has existing CABF approval/audit criteria)<u></u><u></u></span></span></h2>
<h2 style="margin-left:0.75in"><span><span style="font-size:11pt;font-weight:normal">• Use modernized EV (what parts are best suited for the S/MIME use case? Have heard proposals to remove physical and
operational presence, review roles, simplify the text)<u></u><u></u></span></span></h2>
<h2 style="margin-left:0.75in"><span><span style="font-size:11pt;font-weight:normal">• Adopt OV+ (restrict to Gov data sources or active/corroborated LEI; provide more detail on attestations, roles)<u></u><u></u></span></span></h2>
<h2 style="margin-left:0.5in"><span><span style="font-size:11pt;font-weight:normal">The goal is to resolve this remaining issue so we can move to Pre-Ballot discussion.<u></u><u></u></span></span></h2>
<h2><span><span style="font-size:11pt;font-weight:normal">6. Any other business
<u></u><u></u></span></span></h2>
<h2 style="margin-left:0.5in"><span><span style="font-size:11pt;font-weight:normal">7. Next call: Wednesday, May 11, 2022 at 11:00 am Eastern Time<u></u><u></u></span></span></h2>
<h2><span><span style="font-size:11pt;font-weight:normal"> Adjourn<u></u><u></u></span></span></h2>
<span></span>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="color:windowtext"><u></u> <u></u></span></p>
</div>
</div>
_______________________________________________<br>
Smcwg-public mailing list<br>
<a href="mailto:Smcwg-public@cabforum.org" target="_blank">Smcwg-public@cabforum.org</a><br>
<a href="https://lists.cabforum.org/mailman/listinfo/smcwg-public" rel="noreferrer" target="_blank">https://lists.cabforum.org/mailman/listinfo/smcwg-public</a><br>
</blockquote></div>