[Smcwg-public] Draft SMCWG agenda - Wednesday, April 27, 2022

Stephen Davidson Stephen.Davidson at digicert.com
Tue Apr 26 22:08:29 UTC 2022

SMCWG Agenda

Draft SMCWG agenda - Wednesday, April 27, 2022 at 11:00 am Eastern Time

Here is a draft agenda for the teleconference described in the subject of this message. Please review and propose changes if necessary.

1.            Roll Call

2.            Read Antitrust / Compliance Statement

3.            Review Agenda

4.            Approval of minutes from teleconference of April 13, 2022

5.            Discussion

Previous WG discussions in 2021 focused upon whether the S/MIME BR needed to establish the O is ANY company called ExampleCo or that it's THAT PARTICULAR company called ExampleCo registered in New York. Based on feedback from Cert Consumers, WG discussion gravitated towards EV-like vetting and the inclusion of a unique identifier in the certificates (using the subject:organizationalIdentifer from ETSI and the EVG rather than the layered EV JOI attributes).

Some CA concern has now been raised regarding EV as the choice for O vetting.  Options to be discussed:

*     Go full EV (as currently proposed in Section 3.2.3 [org vetting], 3.26 [validation of authority], and 3.2.8 [reliability of sources] of the draft S/MIME BR, on basis has existing CABF approval/audit criteria)

*     Use modernized EV (what parts are best suited for the S/MIME use case? Have heard proposals to remove physical and operational presence, review roles, simplify the text)

*     Adopt OV+ (restrict to Gov data sources or active/corroborated LEI; provide more detail on attestations, roles)

The goal is to resolve this remaining issue so we can move to Pre-Ballot discussion.

6.            Any other business

7.            Next call:  Wednesday, May 11, 2022 at 11:00 am Eastern Time


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20220426/60df0a01/attachment.html>

More information about the Smcwg-public mailing list