[Smcwg-public] Draft SMCWG agenda - Wednesday, June 23, 2021

[Stephen Davidson]

Thanks Wendy – we’ll have time to discuss this today.

Best, Stephen







From: Wendy Brown - QT3LB-C <wendy.brown at gsa.gov>
Sent: Tuesday, June 22, 2021 5:10 PM
To: Stephen Davidson <Stephen.Davidson at digicert.com>; SMIME Certificate Working Group <smcwg-public at cabforum.org>
Subject: Re: [Smcwg-public] Draft SMCWG agenda - Wednesday, June 23, 2021



Stephen -

Is there a good definition of Organization-validation certificates vs Sponsored-validation certs written up somewhere so I don't waste the group's time tomorrow?  I don't see the draft BR on the SMIME Wiki and can't find the link to where you had started the SMIME BR



Taking a quick look at the profiles, my concern is that OU is ot allowed in the org-validated profiles & I understand that it may be difficult to programmatically validate most OUs, but in the case of the US Federal Government the O is just U.S. Government and the first OU might be something like Department of State vs General Services Administration or DHS, etc. And would be very important because I can't imagine emails being sent from "the US Government" but I could see IRS or Social Security Administration having an organizational email.



I thought the Sponsored Validation was more if the CA has a contract with the Organization - maybe at the c=US, O=U.S. Government, OU=Social Security Administration level - the SSA is responsible for doing the id proofing for the human user identified in the CN as well as their email address and other attributes that may be specific to the organization that the CA might ot be able to validate on their own.



Thanks


Wendy

Wendy Brown
Supporting GSA FPKI
Protiviti Government Services

 703-965-2990 (cell)

wendy.brown at gsa.gov<mailto:wendy.brown at gsa.gov>
wendy.brown at protiviti.com<mailto:wendy.brown at protiviti.com>





On Tue, Jun 22, 2021 at 3:34 PM Stephen Davidson via Smcwg-public <smcwg-public at cabforum.org<mailto:smcwg-public at cabforum.org>> wrote:


   SMCWG Agenda


   Draft SMCWG agenda - Wednesday, June 23, 2021 at 11:00 am Eastern Time


   Here is a draft agenda for the teleconference described in the subject of this message. Please review and propose changes if necessary.


   1.            Roll Call


   2.            Read Antitrust / Compliance Statement


   3.            Review Agenda


   4.            Approval of minutes from teleconference of June 9, 2021


   5.            New discussion of Organisation-validation certificate profile at here<https://docs.google.com/spreadsheets/d/1gEq-o4jU1FWvKBeMoncfmhAUemAgGuvVRSLQb7PedLU/edit#gid=718518913>


   6.            Any other business


   7.            Next call: July 7, 2021 at 11:00 am Eastern Time


                   Adjourn




   _______________________________________________
   Smcwg-public mailing list
   Smcwg-public at cabforum.org<mailto:Smcwg-public at cabforum.org>
   https://lists.cabforum.org/mailman/listinfo/smcwg-public

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20210623/87d68f2b/attachment.html>