<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:18.0pt;
font-family:"Calibri",sans-serif;
color:black;}
h3
{mso-style-priority:9;
mso-style-link:"Heading 3 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:13.5pt;
font-family:"Calibri",sans-serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Calibri",sans-serif;
color:black;
mso-ligatures:none;
font-weight:bold;}
span.Heading3Char
{mso-style-name:"Heading 3 Char";
mso-style-priority:9;
mso-style-link:"Heading 3";
font-family:"Calibri",sans-serif;
color:black;
mso-ligatures:none;
font-weight:bold;}
span.EmailStyle22
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<h2><a name="_Hlk116919592">Minutes of SMCWG<o:p></o:p></a></h2>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">February 14, 2024<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">These are the </span>
<span style="mso-bookmark:_Hlk116919592"><span style="color:windowtext">Approved</span> Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.<o:p></o:p></span></p>
<h3><span style="mso-bookmark:_Hlk116919592">Attendees <o:p></o:p></span></h3>
<h3><span style="mso-bookmark:_Hlk116919592"><span style="font-size:11.0pt;font-weight:normal">Abhishek Bhat - (eMudhra), Andreas Henschel - (D-TRUST), Ashish Dhiman - (GlobalSign), Ben Wilson - (Mozilla), Bruce Morton - (Entrust), Clint Wilson - (Apple), Corey
Bonnell - (DigiCert), Don Sheehy - (CPA Canada/WebTrust), Eva Vansteenberge - (GlobalSign), Inaba Atsushi - (GlobalSign), Inigo Barreira - (Sectigo), Judith Spencer - (CertiPath), Keshava Nagaraju - (eMudhra), Lucy Buecking - (IdenTrust), Marco Schambach -
(IdenTrust), Martijn Katerbarg - (Sectigo), Morad Abou Nasser - (TeleTrust), Nome Huang - (TrustAsia), Renne Rodriguez - (Apple), Rollin Yu - (TrustAsia), Scott Rea - (eMudhra), Taavi Eomäe - (Zone Media), Tadahiko Ito - (SECOM Trust Systems), Tathan Thacker
- (IdenTrust), Thomas Zermeno - (SSL.com), Tim Crawford - (CPA Canada/WebTrust), Tim Hollebeek - (DigiCert), Tsung-Min Kuo - (Chunghwa Telecom)
<o:p></o:p></span></span></h3>
<h3><span style="mso-bookmark:_Hlk116919592">1. Roll Call<o:p></o:p></span></h3>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_Hlk116919592">The Roll Call was taken.<o:p></o:p></span></p>
<h3><span style="mso-bookmark:_Hlk116919592">2. Read Antitrust Statement<o:p></o:p></span></h3>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_Hlk116919592">The statement was read concerning the antitrust policy, code of conduct, and intellectual property rights agreement.<o:p></o:p></span></p>
<h3><span style="mso-bookmark:_Hlk116919592">3. Review Agenda<o:p></o:p></span></h3>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">Minutes were prepared by Stephen Davidson.<o:p></o:p></span></p>
<h3><span style="mso-bookmark:_Hlk116919592">4. Approval of minutes from last teleconference<o:p></o:p></span></h3>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">The minutes for the teleconference of January 31 were approved.<o:p></o:p></span></p>
<h3><span style="mso-bookmark:_Hlk116919592">5. Discussion <o:p></o:p></span></h3>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">Martijn Katerbarg lead the WG discussion.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">Martijn noted that “</span><a href="https://url.avanan.click/v2/___https:/cabforum.org/2024/01/17/ballot-smc05-adoption-of-caa-for-s-mime/___.YXAzOmRpZ2ljZXJ0OmE6bzoxN2U4YTg0Y2YxNTk2MGQ4MGI3ZTMwM2QxNzczYzFjYzo2OjUwMDA6YzhmMzQ2Mzk4ZTI4Y2I1NmZlNzlmMzkzNjMxOWJiNTMxMjU1NTk3NWZhMGRhMzY5MjM4NDNhNmZhNjQzNGU1ZjpoOkY" title="Protected by Avanan: https://cabforum.org/2024/01/17/ballot-smc05-adoption-of-caa-for-s-mime/"><span style="mso-bookmark:_Hlk116919592">Ballot
SMC05: Adoption of CAA for S/MIME</span><span style="mso-bookmark:_Hlk116919592"></span></a><span style="mso-bookmark:_Hlk116919592">” was in IPR, ending on February 16. Thus far there were no filings. He noted that the WG would be moving on to Ballot SMC06
soon and that Stephen Davidson’s draft could be found at </span><a href="https://url.avanan.click/v2/___https:/github.com/srdavidson/smime/blob/Ballot-SMC06/SBR.md___.YXAzOmRpZ2ljZXJ0OmE6bzoxN2U4YTg0Y2YxNTk2MGQ4MGI3ZTMwM2QxNzczYzFjYzo2OmI5MTg6YmNkMDlkZGU2OGM4YTc5YzAzMWViMDlkMjNjNjM3OTE2N2M1YTQ3MWNkN2NiYjdlZTZmNTVhY2Y5NTQ2ZGI2NzpoOkY" title="Protected by Avanan: https://github.com/srdavidson/smime/blob/Ballot-SMC06/SBR.md"><span style="mso-bookmark:_Hlk116919592">https://github.com/srdavidson/smime/blob/Ballot-SMC06/SBR.md</span><span style="mso-bookmark:_Hlk116919592"></span></a><span style="mso-bookmark:_Hlk116919592">
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">Eva Vansteenberge raised the point that the SBR requires the subject:country to match the country of the registration scheme, and noted that this was not a requirement in the EVG. She asked for
a discussion on this point.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">Martijn raised a draft text to clarify that extensions (such as EKU) that meet open standards are allowed. See
</span><a href="https://url.avanan.click/v2/___https:/github.com/cabforum/smime/issues/235___.YXAzOmRpZ2ljZXJ0OmE6bzoxN2U4YTg0Y2YxNTk2MGQ4MGI3ZTMwM2QxNzczYzFjYzo2OjY4N2I6Zjc5ZmMyYjY0YzYyY2QzYmJlN2NlNTY1YWY1NjFjMGZkY2IwNDBlMzMwZDI3NzYzZjkyMjEwZWEzZjUxZGU4ODpoOkY" title="Protected by Avanan: https://github.com/cabforum/smime/issues/235"><span style="mso-bookmark:_Hlk116919592">https://github.com/cabforum/smime/issues/235</span><span style="mso-bookmark:_Hlk116919592"></span></a><span style="mso-bookmark:_Hlk116919592">
Russ Housley had raised that such extensions should not be marked critical. Following discussion with Tim Hollebeek and Tadahiko Ito it was agreed that criticality should be determined by the extension’s open standards.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">Martijn raised the subject of topics for the F2F. Tim said the group should focus on laying out a topic roadmap for the year. Martijn said that the timetable for deprecation of Legacy should be
discussed, as well as a review of open topics on the Issues board. He requested that WG members reach out to he or Stephen Davidson if they have topics they’d like addressed at the F2F.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">Martin raised </span>
<a href="https://url.avanan.click/v2/___https:/github.com/cabforum/smime/issues/199___.YXAzOmRpZ2ljZXJ0OmE6bzoxN2U4YTg0Y2YxNTk2MGQ4MGI3ZTMwM2QxNzczYzFjYzo2OjhjMTA6NTEzYzc2ZjgzNTJjNjQxOGMyYjRlNWYyNjNmZjZhMDM3MDU2NjQ3YjM5NDA1ZDM0Y2Q3ZDdjODNmOTUzMTdhZjpoOkY" title="Protected by Avanan: https://github.com/cabforum/smime/issues/199"><span style="mso-bookmark:_Hlk116919592">https://github.com/cabforum/smime/issues/199</span><span style="mso-bookmark:_Hlk116919592"></span></a><span style="mso-bookmark:_Hlk116919592">
on duplicated subject DN attributes, noting that this was hardened in the TLS BR under ballot SC62. Corey noted that we should retain flexibility for multiple attributes for givenName and surname as this was a known use case in countries like Spain. Scott
Rea said the same applied in UAE. The existing SBR text allows separation of the names, or bundling them within attributes. Tim proposed looking at the ISO x500 specs. It was suggested that this might be a F2F topic.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">Martijn noted that this might lead to a ballot to drive increased specification of cert profiles as was handled for TLS by SC62. Tim agreed that in time it was preferable to reduce the divergences
between CABF standards.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592"><o:p> </o:p></span></p>
<h3 style="mso-margin-top-alt:1.0pt;margin-right:0in;margin-bottom:1.0pt;margin-left:0in">
<span style="mso-bookmark:_Hlk116919592">6. Any Other Business<o:p></o:p></span></h3>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">None<o:p></o:p></span></p>
<h3><span style="mso-bookmark:_Hlk116919592">7. Next call<o:p></o:p></span></h3>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk116919592">Next call: see schedule for the New Delhi F2F.<o:p></o:p></span></p>
<h3><span style="mso-bookmark:_Hlk116919592"><span lang="DE">Adjourned</span></span><span style="mso-bookmark:_Hlk116919592"></span><o:p></o:p></h3>
<p class="MsoNormal"><span style="color:windowtext"><o:p> </o:p></span></p>
</div>
</body>
</html>