[cabfpub] Participation in the CA/Browser Forum S/MIME Certificate Working Group

Fri Jul 10 20:02:46 UTC 2020

WebTrust intends to participate in the S/MIME working group as an Interested Party. Representatives will be Jeff Ward and Don Sheehy.

Jeff Ward, CPA, CGMA, CITP, CISA, CISSP, CEH

National Managing Partner Third Party Attestation

(SOC/WebTrust/Cybersecurity)

314-889-1220[cid:39d89084-87f8-4130-915a-48c6c700e698] (Direct) 347-1220 (Internal)

jward at bdo.com

BDO

101 S Hanley Rd, #800

St. Louis, MO 63105

UNITED STATES

314-889-1100[cid:1d619d48-1aa5-46e4-a91e-0ac069579709]

www.bdo.com

Please consider the environment before printing this e-mail

________________________________
-----Original Message-----
From: Public <public-bounces at cabforum.org> On Behalf Of Stephen Davidson via Public
Sent: Wednesday, July 8, 2020 3:36 PM
To: CABforum1 <public at cabforum.org>
Cc: smcwg-public at cabforum.org
Subject: [EXTERNAL][cabfpub] Participation in the CA/Browser Forum S/MIME Certificate Working Group

Participation in the S/MIME Certificate Working Group

The ballot "Forum-14 version 2" recently passed forming the charter of the CA/Browser Forum's S/MIME Certificate Working Group (SMCWG).  We welcome applicants with an interest in S/MIME for membership.

The SMCWG will work on requirements applicable to Certification Authorities that issue S/MIME digital certificates used to sign, verify, encrypt, and decrypt email.  See https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcabforum.org%2Fsmcwg-charter%2F&data=02%7C01%7Cjward%40bdo.com%7C8c6d105ff5824b6a597a08d8250a0514%7C6e57fc1a413e405091da7d2dc8543e3c%7C0%7C0%7C637300072249751418&sdata=KP4JLG2nEQnLOpMmkO%2BiOrq9IwW1%2BDL0J4CxNvisbw0%3D&reserved=0    A primary deliverable will address:

-       Verification of control over email addresses
-       Key management and certificate lifecycle
-       Certificate profiles for S/MIME certificates and Issuing CA certificates
-       CA operational practices, physical/logical security, etc.

In addition, the SMCWG may also address identity validation for natural persons and legal entities in the context of S/MIME certificates.

The SMCWG will provide a publicly-accessible mailing list; see: https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcabforum.org%2Fmailman%2Flistinfo%2Fsmcwg-public&data=02%7C01%7Cjward%40bdo.com%7C8c6d105ff5824b6a597a08d8250a0514%7C6e57fc1a413e405091da7d2dc8543e3c%7C0%7C0%7C637300072249751418&sdata=6nLR%2FvAJGuMZEgBCoEQRZjJFnMpW35PG4XDguo2qVHI%3D&reserved=0.  Only members may post to the list.

- - - - - - - - - - - - - - - -
MEMBERSHIP CATEGORIES

There are four membership categories in the S/MIME Certificate Working Group:

-       Certificate Issuers are Certification Authorities that issue publicly trusted S/MIME certificates treated as valid by a Certificate Consumer Member. This group can attend all meetings and vote in the working group.
-       Certificate Consumers are entities that produce and maintain a mail user agent (web-based or application based) or operate an email service provider that processes S/MIME certificates. This group can attend all meetings and vote in the working group.
-       Interested Parties: Anyone that has an interest in participating in the working group. This group can attend all telephone meetings but cannot vote. They may be invited to face to face meetings by the Chair.
-       Associate Members: Organizations that add value to the working group as determined by the group (see: https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcabforum.org%2Fliaisons%2F&data=02%7C01%7Cjward%40bdo.com%7C8c6d105ff5824b6a597a08d8250a0514%7C6e57fc1a413e405091da7d2dc8543e3c%7C0%7C0%7C637300072249751418&sdata=KfWUdY9hvfH1HlIfm0TQ7ClAqWMCrh1SrG5kjbDAYew%3D&reserved=0). This category may also include organizations that intend to be in categories 1 or 2 but have not completed all the required steps. This group can attend all meetings but cannot vote.

The CA/Browser Forum bylaws require that all members execute and submit the IPR Agreement.  See https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcabforum.org%2Fipr-policy%2F&data=02%7C01%7Cjward%40bdo.com%7C8c6d105ff5824b6a597a08d8250a0514%7C6e57fc1a413e405091da7d2dc8543e3c%7C0%7C0%7C637300072249751418&sdata=%2BTMs%2BnwItfe7lsLwwvS3NGeeTt8hPUnbnCybH678MeE%3D&reserved=0

- - - - - - - - - - - - - - - -
INSTRUCTIONS FOR NEW MEMBERS

The CA/Browser Forum welcomes new applicants with an interest in S/MIME for membership in the SMCWG.  There is no cost to join.  New applicants should provide the following information by email to questions at cabforum.org:

1.      Category under which the applicant wishes to apply to the SMCWG
2.      Organization name
3.      URL of the applicant's main Web site
4.      Completed IPR Agreement
5.      Names and email addresses of designated representatives who will participate
6.      Emergency contact information for security issues related to certificate trust
7.      Certificate Issuers must supply the following additional information:
        -       URL of the current qualifying audit report
        -       Links or references to issued end-entity certificates that demonstrate them being treated as valid by a Certificate Consumer Member

- - - - - - - - - - - - - - - -
INSTRUCTIONS FOR EXISTING MEMBERS

Existing CA/Browser Forum members must also declare their intent to participate in writing to questions at cabforum.org with evidence they meet the criteria and the names/email addresses of designated representatives who will participate.

- - - - - - - - - - - - - - - -
NEXT STEPS

Once expressions of interest are gathered, the SMCWG acting chairperson will convene a meeting tentatively scheduled for July 22, 2020 at 11 AM EST whose agenda will include:
-       Adopting a list of initial members from the list of proposed, qualifying applicants in conformance with the SMCWG Charter
-       Appointing a Chair, Vice Chair, and Webmaster for the SMCWG
-       Outline the goals and deliverables for SMCWG

- - - - - - - - - - - - - - - -
Many thanks for your interest in the S/MIME Certificate Working Group, Stephen Davidson, acting chairperson https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcabforum.org%2Fworking-groups%2Fsmime-certificate-wg%2F&data=02%7C01%7Cjward%40bdo.com%7C8c6d105ff5824b6a597a08d8250a0514%7C6e57fc1a413e405091da7d2dc8543e3c%7C0%7C0%7C637300072249751418&sdata=f7y2il1RF46PDyvtgkFv1rRM1RTt70sOr%2FsMEmH4JU4%3D&reserved=0

_______________________________________________
Public mailing list
Public at cabforum.org
https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.cabforum.org%2Fmailman%2Flistinfo%2Fpublic&data=02%7C01%7Cjward%40bdo.com%7C8c6d105ff5824b6a597a08d8250a0514%7C6e57fc1a413e405091da7d2dc8543e3c%7C0%7C0%7C637300072249751418&sdata=f%2F%2BPFmxoKA%2B9fXambg8l9qqChQrBu91pf5VjTEM32gQ%3D&reserved=0

_______________________________________________
Public mailing list
Public at cabforum.org
https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.cabforum.org%2Fmailman%2Flistinfo%2Fpublic&data=02%7C01%7Cjward%40bdo.com%7C8c6d105ff5824b6a597a08d8250a0514%7C6e57fc1a413e405091da7d2dc8543e3c%7C0%7C0%7C637300072249751418&sdata=f%2F%2BPFmxoKA%2B9fXambg8l9qqChQrBu91pf5VjTEM32gQ%3D&reserved=0

The health and safety of our people and communities is our top priority, as we all do our part to help stop the spread of COVID-19. All BDO USA offices will be closed until further notice. While we will be working from home, our already-flexible work environment enables us to make this transition seamlessly and we have the technology in place to continue to provide the same excellent level of service our clients are accustomed to. We are here if you need us, just as before, and if we can be helpful as you navigate the uncertainty, we stand ready.

BDO USA, LLP, a Delaware limited liability partnership, is the U.S. member of BDO International Limited, a UK company limited by guarantee, and forms part of the international BDO network of independent member firms.

BDO is the brand name for the BDO network and for each of the BDO Member Firms.

IMPORTANT NOTICES

The contents of this email and any attachments to it may contain privileged and confidential information from BDO USA, LLP. This information is only for the viewing or use of the intended recipient. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of, or the taking of any action in reliance upon, the information contained in this e-mail, or any of the attachments to this e-mail, is strictly prohibited and that this e-mail and all of the attachments to this e-mail, if any, must be immediately returned to BDO USA, LLP or destroyed and, in either case, this e-mail and all attachments to this e-mail must be immediately deleted from your computer without making any copies hereof. If you have received this e-mail in error, please notify BDO USA, LLP by e-mail immediately.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20200710/4d8e8ddd/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-uloeav1f.png
Type: image/png
Size: 427 bytes
Desc: Outlook-uloeav1f.png
URL: <http://lists.cabforum.org/pipermail/public/attachments/20200710/4d8e8ddd/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-t2mkiww2.png
Type: image/png
Size: 427 bytes
Desc: Outlook-t2mkiww2.png
URL: <http://lists.cabforum.org/pipermail/public/attachments/20200710/4d8e8ddd/attachment-0007.png>