<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:0in;
line-height:115%;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">## Minutes of SMCWG<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">February 28, 2024, F2F #61<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">These are the Approved Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed
are encouraged by reply.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">## Attendees (physical and online)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">Aaron Poulsen - (Amazon), Abhishek Bhat - (eMudhra), Adam Jones - (Microsoft), Adrian Mueller - (SwissSign), Adriano Santoni - (Actalis
S.p.A.), Andrea Holland - (VikingCloud), Andres Henschel - (D-TRUST), Antti Backman - (Telia Company), Arno Fiedler - (ETSI), Arnold Essing - (Telekom Security), Arvid Vermote - (GlobalSign), Ashish Dhiman - (GlobalSign), Ben Wilson - (Mozilla), Bilal Ashraf
- (SSL.com), Brittany Randall - (GoDaddy), Bruce Morton - (Entrust), Christophe Bonjean - (GlobalSign), Clint Wilson - (Apple), Corey Bonnell - (DigiCert), Dave Chin - (CPA Canada/WebTrust), Dean Coclin - (DigiCert), Dimitris Zacharopoulos - (HARICA), Enrico
Entschew - (D-TRUST), Eva Vansteenberge - (GlobalSign), Fumi Yoneda - (Japan Registry Services), Hogeun Yoo - (NAVER Cloud Trust Services), Inaba Atsushi - (GlobalSign), Inigo Barreira - (Sectigo), Jeremy Rowley - (DigiCert), Jos Purvis - (Fastly), Jozef Nigut
- (Disig), Kateryna Aleksieieva - (Asseco Data Systems SA (Certum)), Keshava Nagaraju - (eMudhra), Leo Grove - (SSL.com), Li-Chun Chen - (Chunghwa Telecom), Mads Henriksveen - (Buypass AS), Marco Schambach - (IdenTrust), Martijn Katerbarg - (Sectigo), Matthias
Wiedenhorst - (ACAB Council), Miguel Sanchez - (Google), Mike Kushner - (KeyFactor), Mrugesh Chandarana - (IdenTrust), Nargis Mannan - (VikingCloud), Nate Smith - (GoDaddy), Naveen Kumar - (eMudhra), Nicol So - (CommScope), Nome Huang - (TrustAsia), Paul van
Brouwershaven - (Entrust), Peter Miskovic - (Disig), Raffaela Achermann - (SwissSign), RIch Smith - (DigiCert), Rollin Yu - (TrustAsia), Roman Fischer - (SwissSign), Sandy Balzer - (SwissSign), Scott Rea - (eMudhra), Sissel Hoel - (Buypass AS), Sooyoung Eo
- (NAVER Cloud Trust Services), Star Simmons - (GoDaddy), Stephen Davidson - (DigiCert), Sven Rajala -(KeyFactor), Tadahiko Ito - (SECOM Trust Systems), Thomas Zermeno - (SSL.com), Tim Callan - (Sectigo), Tim Hollebeek - (DigiCert), Trevoli Ponds-White - (Amazon),
Tsung-Min Kuo - (Chunghwa Telecom), Vijayakumar (Vijay) Manjunatha - (eMudhra), Yaswanth - (eMudhra)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">## 1. Roll Call<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">The Roll Call was taken.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">## 2. Read Antitrust Statement<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">The statement was read concerning the antitrust policy, code of conduct, and intellectual property rights agreement.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">## 3. Review Agenda<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">Minutes were prepared by Stephen Davidson.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">## 4. Approval of minutes from last teleconference<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">The minutes for the teleconference of February 14 were approved.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">The membership of DiSig in the SMCWG was confirmed.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">## 5. Discussion<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">Stephen Davidson provided an overview of recent activity at the SMCWG, which included passage of Ballot SMC04 (ETSI audit criteria)
and Ballot SMC05 (CAA). The group has also expended considerable effort on a draft Ballot SMC06 which is largely comprised of clarifications based on feedback from implementers, auditors, and users of the open source pkilint linter for the S/MIME BR, see <a href="https://url.avanan.click/v2/___https:/github.com/digicert/pkilint___.YXAzOmRpZ2ljZXJ0OmE6bzo4ZGI0OWI4ZTJkZGI3NTE0YTliYmNjOWFmNjc3NDc4Yjo2OmZjMDk6Zjk5YWVjZWM3YjA0ZTE2Mzk1ZDM4ZjBmYWEyZDljZjQ3NmM3M2U1ZjgyZDY2OTI4M2UzZmIyNWM1NjllZWJkNzpoOkY" title="Protected by Avanan: https://github.com/digicert/pkilint">https://github.com/digicert/pkilint</a>.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">Key Transparency Workshop<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">Stephen proposed holding a workshop at #62 F2F to discuss Key Transparency (KT). KT addresses key discovery and key history, two
of the biggest issues in S/MIME deployments. See <a href="https://url.avanan.click/v2/___https:/github.com/google/keytransparency/blob/master/docs/overview.md___.YXAzOmRpZ2ljZXJ0OmE6bzo4ZGI0OWI4ZTJkZGI3NTE0YTliYmNjOWFmNjc3NDc4Yjo2OmM2ODY6YzE3ZGNmMTYzMzRkNmNiYmUxOTNkN2VlNDI0YjE4NzI5ZTE5NmViN2YwNmI0OGMxMzhkNDBiYzE1OTc4NDQ0MzpoOkY" title="Protected by Avanan: https://github.com/google/keytransparency/blob/master/docs/overview.md">https://github.com/google/keytransparency/blob/master/docs/overview.md</a>.
Large examples exist in messaging such as by Whatsapp, Signal, KeyBase, and Apple. ProtonMail has a pilot for webmail: <a href="https://url.avanan.click/v2/___https:/proton.me/support/key-transparency___.YXAzOmRpZ2ljZXJ0OmE6bzo4ZGI0OWI4ZTJkZGI3NTE0YTliYmNjOWFmNjc3NDc4Yjo2OmM3NTc6NzU2OTUxYjA2YjVlY2I0YTNjZDQ0ZTdjYmU5Yjk2YjE2ZWNkMDlkNGQzODk2MjAwZTFhM2MzZjViZDhmNTNkODpoOkY" title="Protected by Avanan: https://proton.me/support/key-transparency">https://proton.me/support/key-transparency</a> <o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">As cloud service providers are now the dominant mode for email services, both personal and enterprise, Key Transparency becomes a
possible enhancement for S/MIME certificates providing better discovery and lifecycle support. Paul van Brouwershaven asked if this was within scope of the WG; Stephen argued that it fit within the charter focus on key management and certificate lifecycle;
Clint Wilson agreed. Stephen said we had an opportunity to have “right people in the room” to advance the topic. Tim Hollebeek noted that in the past invited guests were required to sign the IP agreement. It was agreed to move ahead, with Stephen to request
a suitable time bloc on the agenda.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">Draft Ballot SMC06<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">Stephen walked through the text changes of Draft Ballot SMC06 which will be taken to vote soon. The text is can be reviewed at <a href="https://url.avanan.click/v2/___https:/github.com/srdavidson/smime/compare/ed36440d7c967732aa08739b14cc29bed257a67d...345a2358e1c6960bf3dcfc0ca5d400096ba59267___.YXAzOmRpZ2ljZXJ0OmE6bzo4ZGI0OWI4ZTJkZGI3NTE0YTliYmNjOWFmNjc3NDc4Yjo2OjM2YzE6NWUzODM1OWI5ZjIxM2IyMDk5YjlhZTVjMTE1MzU2Njk4MWViZDkyZmFlNDE2YWQwZmY3OTZkODZjMTFmMzRkZDpoOkY" title="Protected by Avanan: https://github.com/srdavidson/smime/compare/ed36440d7c967732aa08739b14cc29bed257a67d...345a2358e1c6960bf3dcfc0ca5d400096ba59267">https://github.com/srdavidson/smime/compare/ed36440d7c967732aa08739b14cc29bed257a67d...345a2358e1c6960bf3dcfc0ca5d400096ba59267</a>.
He encouraged members to use the Issues list at <a href="https://url.avanan.click/v2/___https:/github.com/cabforum/smime/issues___.YXAzOmRpZ2ljZXJ0OmE6bzo4ZGI0OWI4ZTJkZGI3NTE0YTliYmNjOWFmNjc3NDc4Yjo2OjIwM2I6ZmYyOWVhMDNiZDIxMDQ0ZWJjMzQxZGIyMWUwZDM1MGM3YWQxZjJlNGViNThjNmZlYThhZjU0MjA5YWZjNTZkMDpoOkY" title="Protected by Avanan: https://github.com/cabforum/smime/issues">https://github.com/cabforum/smime/issues</a> to
submit topics for consideration.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">Roadmap<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">The WG reviewed topics for consideration in the coming months. He noted there was an outstanding question regarding allowing the
subject:country to differ from the country in the organizationIdentifier, which is not allowed in the S/MIME BR but is allowed in the EVG. Stephen noted, and Clint concurred, that the WG needed to address the deprecation of Legacy profiles, identifying (and
fixing where possible) obstacles to migration and setting a deprecation date, even it was a distance into the future. The issue of polling WG members of their profile use, within the byelaws, was raised. <o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">Stephen noted other topics for longer term discussion including consideration of possible new methods for vetting and email control,
such as the use of DNS for Sponsor-validated approvals, and the use of OAuth for authentication.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">And finally, the WG discussed the desire of bringing forward a ballot to evaluate a e-signature scheme in line with 3.2.4.1 (4)(b).
He suggested that eIDAS was a suitable framework to start with. He also noted that the text for 3.2.4.1 (3) should be reviewed in light oft he recently passed changes to eIDAS2 bringing forth the EUDI Wallet. He asked CAs/TSPs with experience in this area
to step forward.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">## 6. Any Other Business<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">None<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">## 7. Next call<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">Next call: Wednesday, March 13, 2024 at 11:00 am Eastern Time<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif">## Adjourned<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
</div>
</body>
</html>