[Smcwg-public] QGIS, QTIS, and QIIS

[Bruce Morton]

S/MIME BRs section 3.2.3.2.1 provide methods to verify name, address and unique identifier in. Section 3.2.6 requires section 3.2.3.2.1 to be used to verify the Reliable Method of Communication.

EV Guidelines have defined QGIS, QTIS, and QIIS, which can be used to verify "Place of Business" and "Verified Method of Communication." I believe we can say that these would be similar to "address" and "Reliable Method of Communication" referred to in the S/MIME BRs and also the SSL BRs and CSBRs.

It could be argued that QGIS and QTIS are similar to "A government agency in the jurisdiction of the Legal Entity's creation, existence, or recognition" which is allowed in section 3.2.3.2.1. So maybe QGIS and QTIS are already covered.

It is proposed that QIIS be added to the list in S/MIME BR section 3.2.3.2.1, which could be used to verify the "address" and "Reliable Method of Communication." The benefit is the CAs which already use QIIS for these items can extend to verification for S/MIME certificates.


Thanks, Bruce.


Any email and files/attachments transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20221104/69f0f4c6/attachment.html>