From Stephen.Davidson at digicert.com Sat Dec 3 21:35:20 2022 From: Stephen.Davidson at digicert.com (Stephen Davidson) Date: Sat, 3 Dec 2022 21:35:20 +0000 Subject: [Smcwg-public] Draft SMCWG agenda - Wednesday, December 7, 2022 Message-ID: SMCWG Agenda Draft SMCWG agenda - Wednesday, December 7, 2022 at 11:00 am Eastern Time Here is a draft agenda for the teleconference described in the subject of this message. Please review and propose changes if necessary. 1. Roll Call 2. Read Antitrust / Compliance Statement 3. Review Agenda 4. Approval of past minutes (if distributed) 5. Discussion a. Discussion of end of year schedule (Dec 21, Jan 4) b. Note that IPR period to end on Jan 1: Adoption Date c. How to handle future ballot effective dates: rolling or fixed calendar? d. Bruce Morton's email re: QIIS at https://lists.cabforum.org/pipermail/smcwg-public/2022-November/000581.html e. CAA in SBR, and issuemail draft at https://datatracker.ietf.org/doc/draft-bonnell-caa-issuemail/ 6. Any other business 7. Next call: TBD Adjourn -------------- next part -------------- An HTML attachment was scrubbed... URL: From infra-bot at cabforum.org Sun Dec 4 21:40:17 2022 From: infra-bot at cabforum.org (Infrastructure Bot) Date: Sun, 4 Dec 2022 21:40:17 +0000 Subject: [Smcwg-public] Weekly github digest (S/MIME Certificate Working Group) Message-ID: <01000184df152d39-833d1d51-e516-4941-afe2-c0f997ff54b9-000000@email.amazonses.com> Issues ------ * cabforum/smime (+1/-0/?1) 1 issues created: - Key proof of possession (by srdavidson) https://github.com/cabforum/smime/issues/194 [enhancement] 1 issues received 1 new comments: - #194 Key proof of possession (1 by RufusJWB) https://github.com/cabforum/smime/issues/194 [enhancement] Repositories tracked by this digest: ----------------------------------- * https://github.com/cabforum/smime -------------- next part -------------- An HTML attachment was scrubbed... URL: From Stephen.Davidson at digicert.com Wed Dec 7 19:13:44 2022 From: Stephen.Davidson at digicert.com (Stephen Davidson) Date: Wed, 7 Dec 2022 19:13:44 +0000 Subject: [Smcwg-public] SMCWG: CAA background info Message-ID: Hello all: As discussed on the call today, in 2023 we will discuss the use of CAA for S/MIME. Here are some background materials: * Proposed CAA text for S/MIME BR at https://github.com/srdavidson/smime/blob/CAA/SBR.md * Internet-draft: Certification Authority Authorization (CAA) Processing for Email Addresses https://datatracker.ietf.org/doc/draft-bonnell-caa-issuemail/ * Discussion of the Internet-draft - if you think CAA is useful for S/MIME please add your voice https://mailarchive.ietf.org/arch/msg/spasm/chcrIZEit6HcdGyFGNzyiL7Dg6k/ CAA is well understood by CAs that issue TLS. We'd welcome feedback from Certificate Issuers that do not already implement CAA. Best regards, Stephen -------------- next part -------------- An HTML attachment was scrubbed... URL: From Stephen.Davidson at digicert.com Tue Dec 13 15:30:11 2022 From: Stephen.Davidson at digicert.com (Stephen Davidson) Date: Tue, 13 Dec 2022 15:30:11 +0000 Subject: [Smcwg-public] Draft update for keyUsage table for EdDSA in S/MIME BR Message-ID: Hello: We recently received a comment that the keyUsage table in Section 7.1.2.3 (e) required an update to accommodate EdDSA key pairs (id-Ed25519 and id-Ed448). Thanks to the community member who suggested this improvement. A draft change is shown at: https://github.com/cabforum/smime/compare/b1ff7867dc85392e4c57b1993ed571e61e34dee2...c04ba37f16e907430d86f671e19d880555922add We'd welcome any feedback on this draft, which will eventually be incorporated into a ballot intended to take effect with the initial S/MIME BR effective date. In addition, we'd welcome any other suggestions for corrections that readers may spot in the text. As noted in our recent call, the December 21 2022 SMCWG teleconference has been cancelled. Kind regards, Stephen -------------- next part -------------- An HTML attachment was scrubbed... URL: From Stephen.Davidson at digicert.com Wed Dec 21 13:11:46 2022 From: Stephen.Davidson at digicert.com (Stephen Davidson) Date: Wed, 21 Dec 2022 13:11:46 +0000 Subject: [Smcwg-public] RFC 9336 Message-ID: As discussed earlier in the working group, there was an internet-draft defining a generic eku for Document Signing. It has now been published as RFC 9336. Over time it is hoped this will allow the separation of document signing from emailProtection. (1.3.6.1.5.5.7.3.36 - id-kp-documentSigning) Congratulations to Tadahiko Ito, Tomofumi Okubo and Sean Turner for authoring this. https://www.rfc-editor.org/rfc/rfc9336.html RFC 9336: X.509 Certificate General-Purpose Extended Key Usage (EKU) for Document Signing rfc-editor.org [favicon.ico] -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: favicon.ico Type: image/x-icon Size: 198 bytes Desc: favicon.ico URL: