[Smcwg-public] Methods for email verification

[Doug Beattie]

Hi Stephen,

 

I'm not sure I agree with this statement in section 3.2.2.2.2 Validating
control over email address via email

 

*	Completed validations of Applicant control over the email address
must be performed for each Certificate issuance.

 

I'd like to permit re-use of that validation over and over for the re-use
period for that subscriber if possible.  Is there a reason we preclude that?
For example, an email gateway provider might validate this email address and
then want to replace certificates more frequently than 397 days, but this
would require emails to the email box to act on that.

 

Doug

 

 

From: Smcwg-public <smcwg-public-bounces at cabforum.org> On Behalf Of Stephen
Davidson via Smcwg-public
Sent: Wednesday, February 17, 2021 6:02 PM
To: SMIME Certificate Working Group <smcwg-public at cabforum.org>
Subject: [Smcwg-public] Methods for email verification

 

Hello all:

 

Following our discussion on the call today, I attach draft text for section
3.2.2.2 of the SMIME BR (SBR) that deals with 1) Validating authority over
email address via domain and 2) Validating control over email address via
email.

 

It aims to fulfill the requirements of the Mozilla policy.  It includes
comments with some questions that require further discussion.  Additional
methods can be addressed in future versions of the SBR.

 

Many thanks for Doug and Sebastian at GlobalSign for their help in drafting
this.  We'll discuss this in a future meeting, but feel free to also provide
feedback here.

 

Many thanks, Stephen

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20210218/fa0302da/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5688 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20210218/fa0302da/attachment.p7s>