[Smcwg-public] Draft SMCWG agenda - Wednesday, June 23, 2021

Wendy Brown - QT3LB-C wendy.brown at gsa.gov
Tue Jun 22 20:10:17 UTC 2021


Stephen -
Is there a good definition of Organization-validation certificates vs
Sponsored-validation certs written up somewhere so I don't waste the
group's time tomorrow?  I don't see the draft BR on the SMIME Wiki and
can't find the link to where you had started the SMIME BR

Taking a quick look at the profiles, my concern is that OU is ot allowed in
the org-validated profiles & I understand that it may be difficult to
programmatically validate most OUs, but in the case of the US Federal
Government the O is just U.S. Government and the first OU might be
something like Department of State vs General Services Administration or
DHS, etc. And would be very important because I can't imagine emails being
sent from "the US Government" but I could see IRS or Social Security
Administration having an organizational email.

I thought the Sponsored Validation was more if the CA has a contract with
the Organization - maybe at the c=US, O=U.S. Government, OU=Social Security
Administration level - the SSA is responsible for doing the id proofing for
the human user identified in the CN as well as their email address and
other attributes that may be specific to the organization that the CA might
ot be able to validate on their own.

Thanks

Wendy

Wendy Brown
Supporting GSA FPKI
Protiviti Government Services

 703-965-2990 (cell)

wendy.brown at gsa.gov
wendy.brown at protiviti.com


On Tue, Jun 22, 2021 at 3:34 PM Stephen Davidson via Smcwg-public <
smcwg-public at cabforum.org> wrote:

> SMCWG Agenda Draft SMCWG agenda - Wednesday, June 23, 2021 at 11:00 am
> Eastern Time Here is a draft agenda for the teleconference described in
> the subject of this message. Please review and propose changes if necessary. 1.
> Roll Call 2.            Read Antitrust / Compliance Statement 3.
> Review Agenda 4.            Approval of minutes from teleconference of
> June 9, 2021 5.            New discussion of Organisation-validation
> certificate profile at here
> <https://docs.google.com/spreadsheets/d/1gEq-o4jU1FWvKBeMoncfmhAUemAgGuvVRSLQb7PedLU/edit#gid=718518913>
> 6.            Any other business 7.            Next call: July 7, 2021 at
> 11:00 am Eastern Time                 Adjourn
>
>
> _______________________________________________
> Smcwg-public mailing list
> Smcwg-public at cabforum.org
> https://lists.cabforum.org/mailman/listinfo/smcwg-public
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20210622/504c44c2/attachment.html>


More information about the Smcwg-public mailing list