[Smcwg-public] CAA and S/MIME

[Stephen Davidson]

Hello:



The topic of Certification Authority Authorisation (CAA) has arisen a number of times in relation to the evolving S/MIME Baseline.

I highlight a discussion on that subject related to the Mozilla policy: https://github.com/mozilla/pkipolicy/issues/135

A significant number of email providers - such as gmail.com, outlook.com, protonmail.com, and others - have CAA records.


Questions for us to address later in our discussions:



*       Is CAA a desired requirement of the S/MIME Baseline?
*       Should the S/MIME Baseline rely upon the existing requirements stated in the TLS BR, or is the S/MIME use case sufficiently different to merit a separate CAA tag?



Regards, Stephen

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20201024/3c8cf7f6/attachment.html>