[Discussion] Ballot SMC016: Equivalence with Ballots SC096 and SC097
Stephen Davidson
Ballot SMC016: Equivalence with Ballots SC096 and SC097
Summary:
This ballot maintains consistency between the S/MIME Baseline Requirements and the TLS Baseline Requirements with changes introduced by Ballots SC096 and SC097. Specifically, this ballot:
* Creates a carve-out of the logging requirements for DNSSEC specifically, stating these are not in scope. For audit purposes, change management logging is able to confirm if the appropriate controls are in effect or not.
* Sunsets all remaining use of SHA-1 signatures in Certificates and CRLs. It is noted that most uses of SHA-1 signatures are already deprecated by SC097. With this ballot, all unexpired Subordinate CA Certificates issuing S/MIME containing the SHA-1 signature algorithm must be revoked. This proposal does not prohibit the use of SHA-1 to generate issuerKeyHash or issuerNameHash values as currently required by RFC 5019.
* Includes minor formatting corrections.
This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Martijn Katerbarg (Sectigo) and Ben Wilson (Mozilla).
— Motion Begins —
This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted S/MIME Certificates” (“S/MIME Baseline Requirements”), based on Version 1.0.12.
MODIFY the Baseline Requirements as specified in the following Redline:
— Motion Ends —
This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:
Discussion (at least 7 days)
* Start time: March 17, 2026 at 23:00:00 UTC
* End time: March 25, 2026 at 18:00 UTC
Stephen Davidson
Voting for Approval
* Start time: March 25, 2026 at 18:00 UTC
* End time: April 1, 2026 at 18:00 UTC
Nome Huang
黃晟(orca)
TWCA votes “Yes” on SMC-016.
Regards,
Sean Huang
Senior R&D Engineer
TEL：02-2370-8886#728
FAX：02-2388-6720
Email：or...@twca.com.tw
10F., No. 85, Yanping South Road,
Taipei, Taiwan (R.O.C.)
--
You received this message because you are subscribed to the Google Groups "S/MIME Certificate WG - Public (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
smcwg-public...@groups.cabforum.org.
To view this discussion visit
https://groups.google.com/a/groups.cabforum.org/d/msgid/smcwg-public/BL1PR14MB51438C829FA4C0F104A78F18E549A%40BL1PR14MB5143.namprd14.prod.outlook.com.
Stefan Selbitschka
On 3/25/26 19:00, 'Stephen Davidson' via S/MIME Certificate WG - Public (CA/B Forum) wrote:
> *Ballot SMC016: Equivalence with Ballots SC096 and SC097*
>
> *Summary: *
>
> **
> This ballot maintains consistency between the S/MIME Baseline Requirements and the TLS Baseline
> Requirements with changes introduced by Ballots SC096 and SC097. Specifically, this ballot:
>
> * Creates a carve-out of the logging requirements for DNSSEC specifically, stating these are not in
> scope. For audit purposes, change management logging is able to confirm if the appropriate controls
> are in effect or not.
>
> * Sunsets all remaining use of SHA-1 signatures in Certificates and CRLs. It is noted that most uses
> of SHA-1 signatures are already deprecated by SC097. With this ballot, all unexpired Subordinate CA
> Certificates issuing S/MIME containing the SHA-1 signature algorithm must be revoked. This proposal
> does not prohibit the use of SHA-1 to generate issuerKeyHash or issuerNameHash values as currently
> required by RFC 5019.
>
> * Includes minor formatting corrections.
>
>
> This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Martijn Katerbarg (Sectigo)
> and Ben Wilson (Mozilla).
>
> — Motion Begins —
>
> This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted
> S/MIME Certificates” (“S/MIME Baseline Requirements”), based on Version 1.0.12.
>
> MODIFY the Baseline Requirements as specified in the following Redline:
>
> https://github.com/cabforum/smime/compare/
> github.com/cabforum/smime/compare/
> be9a18ab2b48eb0cbff41d3a268202f700c06c05...32915d18f165e1702aa759d01cdceb231d262ec0>
> — Motion Ends —
>
> This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as
> follows:
>
> * Start time: March 17, 2026 at 23:00:00 UTC
>
> * End time: March 25, 2026 at 18:00 UTC
>
> * Start time: March 25, 2026 at 18:00 UTC
>
> * End time: April 1, 2026 at 18:00 UTC
>
> You received this message because you are subscribed to the Google Groups "S/MIME Certificate WG -
> Public (CA/B Forum)" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to smcwg-
> groups.google.com/a/groups.cabforum.org/d/msgid/smcwg-public/
> BL1PR14MB51438C829FA4C0F104A78F18E549A%40BL1PR14MB5143.namprd14.prod.outlook.com?
> utm_medium=email&utm_source=footer>.
Dimitris Zacharopoulos (HARICA)
--
You received this message because you are subscribed to the Google Groups "S/MIME Certificate WG - Public (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to smcwg-public...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/smcwg-public/BL1PR14MB51438C829FA4C0F104A78F18E549A%40BL1PR14MB5143.namprd14.prod.outlook.com.
Ruiter, Albert de
PKIoverheid Logius votes "yes" to ballot SMC016.
Albert de Ruiter
Policy Authority PKIoverheid
Logius
Dienst Digitale Samenleving
Ministerie van Binnenlandse Zaken en Koninkrijksrelaties
........................................................................
M 06-22796535
........................................................................
Logius is continu op zoek naar nieuwe collega’s. Bekijk alle vacatures op onze website.
Samen zorgen we voor een digitale overheid die werkt voor iedereen
--
You received this message because you are subscribed to the Google Groups "S/MIME Certificate WG - Public (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
smcwg-public...@groups.cabforum.org.
To view this discussion visit
https://groups.google.com/a/groups.cabforum.org/d/msgid/smcwg-public/BL1PR14MB51438C829FA4C0F104A78F18E549A%40BL1PR14MB5143.namprd14.prod.outlook.com.
Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten.
This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.
Adriano Santoni
Actalis votes "yes" to ballot SMC016.
--
Pedro FUENTES
From: 'Stephen Davidson' via S/MIME Certificate WG - Public (CA/B Forum) <smcwg-...@groups.cabforum.org>
Sent: Wednesday, March 25, 2026 7:00 PM
To: smcwg-...@groups.cabforum.org
--
You received this message because you are subscribed to the Google Groups "S/MIME Certificate WG - Public (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to smcwg-public...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/smcwg-public/BL1PR14MB51438C829FA4C0F104A78F18E549A%40BL1PR14MB5143.namprd14.prod.outlook.com.
WISeKey SA
Tim Hollebeek
Ben Wilson
--
Scott Rea
Date: Wednesday, 25 March 2026 at 9:01 PM
To: smcwg-...@groups.cabforum.org <smcwg-...@groups.cabforum.org>
Subject: [Smcwg-public] [Voting for Approval] Ballot SMC016: Equivalence with Ballots SC096 and SC097
|
CAUTION: This email is originated from outside of the organization. Do not open the links or the attachments unless you recognize the sender and know the content is safe.
|
You received this message because you are subscribed to the Google Groups "S/MIME Certificate WG - Public (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to smcwg-public...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/smcwg-public/BL1PR14MB51438C829FA4C0F104A78F18E549A%40BL1PR14MB5143.namprd14.prod.outlook.com.
Tom Zermeno
Tom Z.
- SSL.com
To: smcwg-...@groups.cabforum.org <smcwg-...@groups.cabforum.org>
Subject: [Smcwg-public] [Voting for Approval] Ballot SMC016: Equivalence with Ballots SC096 and SC097
Mrugesh Chandarana
To: smcwg-...@groups.cabforum.org <smcwg-...@groups.cabforum.org>
Subject: [External][Possible SPAM][Smcwg-public] [Voting for Approval] Ballot SMC016: Equivalence with Ballots SC096 and SC097
Ashish Dhiman
GlobalSign Votes Yes SMC016
Ashish
--
大野 文彰
SECOM Trust Systems votes YES on Ballot SMC016.
Best regards,
ONO Fumiaki / 大野 文彰
(Japanese name order: family name first, in uppercase)
SECOM Trust Systems CO., LTD.
From: 'Stephen Davidson' via S/MIME
Certificate WG - Public (CA/B Forum) <smcwg-...@groups.cabforum.org>
Sent: Thursday, March 26, 2026 3:00 AM
To: smcwg-...@groups.cabforum.org
--
Martijn Katerbarg
You received this message because you are subscribed to the Google Groups "S/MIME Certificate WG - Public (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to smcwg-public...@groups.cabforum.org.
Henschel, Andreas
D-Trust votes yes on Ballot SMC016
KR,
Andreas
--
You received this message because you are subscribed to the Google Groups "S/MIME Certificate WG - Public (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
smcwg-public...@groups.cabforum.org.
Hazhar Ismail
Best regards,
Hazhar Ismail
Sent: Thursday, 26 March, 2026 2:00 AM
To: smcwg-...@groups.cabforum.org <smcwg-...@groups.cabforum.org>
Subject: [Smcwg-public] [Voting for Approval] Ballot SMC016: Equivalence with Ballots SC096 and SC097
Lahtiharju, Pekka
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/smcwg-public/c3904eb6d54b4153a15799555b218622%40d-trust.net.
This email may contain information which is privileged or protected against unauthorized disclosure or communication. If you are not the intended recipient, please notify the sender and delete this message and any attachments from your system without producing, distributing or retaining copies thereof or disclosing its contents to any other person.
Telia Company processes emails and other files that may contain personal data in accordance with Telia Company’s Privacy Policy.
Kateryna Aleksieieva
Certum votes YES on Ballot SMC016
With regards,
Kateryna Aleksieieva
--
陳立群
Chunghwa Telecom Votes Yes on Ballot SMC016: Equivalence with Ballots SC096 and SC097. Thanks.
Li-Chun Chen
Chunghwa Telecom
--
You received this message because you are subscribed to the Google
Groups "S/MIME Certificate WG - Public (CA/B Forum)"
group.
To unsubscribe from this group and stop receiving emails from it,
send an email to smcwg-public...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/smcwg-public/BL1PR14MB5143336607D1012AD2DB0F1BE541A%40BL1PR14MB5143.namprd14.prod.outlook.com.
本信件可能包含中華電信股份有限公司機密資訊,非指定之收件者,請勿蒐集、處理或利用本信件內容,並請銷毀此信件. 如為指定收件者,應確實保護郵件中本公司之營業機密及個人資料,不得任意傳佈或揭露,並應自行確認本郵件之附檔與超連結之安全性,以共同善盡資訊安全與個資保護責任.
Please be advised that this email message (including any attachments) contains confidential information and may be legally privileged. If you are not the intended recipient, please destroy this message and all attachments from your system and do not further collect, process, or use them. Chunghwa Telecom and all its subsidiaries and associated companies shall not be liable for the improper or incomplete transmission of the information contained in this email nor for any delay in its receipt or damage to your system. If you are the intended recipient, please protect the confidential and/or personal information contained in this email with due care. Any unauthorized use, disclosure or distribution of this message in whole or in part is strictly prohibited. Also, please self-inspect attachments and hyperlinks contained in this email to ensure the information security and to protect personal information.
Stephen Davidson
Based on the current results, the ballot has PASSED. Please use the below generated email to send the results to the member list:
The voting period for SMC016: Equivalence with Ballots SC096 and SC097 has completed. The ballot has: PASSED
Voting Results
Certificate Issuers
19 votes in total:
* 19 voting YES: Actalis S.p.A., Asseco Data Systems SA (Certum), Chunghwa Telecom, DigiCert, D-TRUST, eMudhra, GlobalSign, HARICA, IdenTrust, Logius PKIoverheid, MSC Trustgate Sdn Bhd, OISTE Foundation, SECOM Trust Systems, Sectigo, SSL.com, SwissSign, Telia
Company, TrustAsia, TWCA
* 0 voting NO:
* 0 ABSTAIN:
Certificate Consumers
2 votes in total:
* 2 voting YES: Mozilla, rundQuadrat
* 0 voting NO:
* 0 ABSTAIN:
Bylaws Requirements
1. Bylaw 2.3(6) requires:
* In order for a ballot to be adopted by the Forum, two‐thirds (2/3) or more of the votes cast by the Voting Members in the Certificate Issuer category must be in favor of the ballot. This requirement was MET.
* at least fifty percent (50%) plus one (1) of the votes cast by the Voting Members in the Certificate Consumer category must be in favor of the ballot. This requirement was MET.
* At least one (1) Voting Member in each category must vote in favor of a ballot for the ballot to be adopted. This requirement was MET.
2. Bylaw 2.3(7) requires:
* A ballot result will be considered valid only when more than half of the number of currently active Voting Members has participated. The number of currently active Voting Members is the average number of Voting Member organizations that have participated
in the previous three (3) Forum Meetings and Forum Teleconferences.
* the quorum was 9 for this ballot. This requirement was MET.
This ballot now enters the IP Rights Review Period to permit members to review the ballot for relevant IP rights issues. This will be notified in a separate email.
Stephen Davidson
NOTICE OF REVIEW PERIOD
This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this
Review Notice is attached to this email, both in red-line and changes-accepted draft format.
Summary of Review
Ballot for Review: Ballot SMC016: Equivalence with Ballots SC096 and SC097
Start of Review Period: 2026-04-01 19:00:00 UTC
End of Review Period: 2026-05-01 19:00:00 UTC
Members with any Essential Claim(s) to exclude must forward a written Notice to Exclude Essential Claims to the Working Group Chair (email to stephen.davidson at digicert.com) and also submit a copy to the CA/B Forum public mailing list (email to public at
cabforum.org) before the end of the Review Period.
For details, please see the current version of the CA/Browser Forum Intellectual Property Rights Policy.
(An optional template for submitting an Exclusion Notice is available at
https://cabforum.org/wp-content/uploads/Template-for-Exclusion-Notice.pdf)