[Smcwg-public] Draft SMCWG agenda - Wednesday, April 27, 2022

[Stephen Davidson]

SMCWG Agenda


Draft SMCWG agenda - Wednesday, April 27, 2022 at 11:00 am Eastern Time


Here is a draft agenda for the teleconference described in the subject of this message. Please review and propose changes if necessary.


1.            Roll Call


2.            Read Antitrust / Compliance Statement


3.            Review Agenda


4.            Approval of minutes from teleconference of April 13, 2022


5.            Discussion


Previous WG discussions in 2021 focused upon whether the S/MIME BR needed to establish the O is ANY company called ExampleCo or that it's THAT PARTICULAR company called ExampleCo registered in New York. Based on feedback from Cert Consumers, WG discussion gravitated towards EV-like vetting and the inclusion of a unique identifier in the certificates (using the subject:organizationalIdentifer from ETSI and the EVG rather than the layered EV JOI attributes).


Some CA concern has now been raised regarding EV as the choice for O vetting.  Options to be discussed:


*     Go full EV (as currently proposed in Section 3.2.3 [org vetting], 3.26 [validation of authority], and 3.2.8 [reliability of sources] of the draft S/MIME BR, on basis has existing CABF approval/audit criteria)


*     Use modernized EV (what parts are best suited for the S/MIME use case? Have heard proposals to remove physical and operational presence, review roles, simplify the text)


*     Adopt OV+ (restrict to Gov data sources or active/corroborated LEI; provide more detail on attestations, roles)


The goal is to resolve this remaining issue so we can move to Pre-Ballot discussion.


6.            Any other business


7.            Next call:  Wednesday, May 11, 2022 at 11:00 am Eastern Time


                Adjourn





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20220426/60df0a01/attachment.html>