Hi all, I am currently aligned with Wendy’s and Judith’s concerns expressed on the recent call about sunsetting the Legacy profile, but I look forward to discussing this further in Bergamo. The Legacy profile provides greater flexibility, and migrating to only the Multipurpose and Strict profiles may have unforeseen consequences. While no one else has explicitly stated they are not ready for this move, the Mozilla Root Program has integrated the S/MIME BRs into our root store policy, necessitating support for diverse use cases while ensuring broad compliance. We need to ensure that everyone not involved in the S/MIME WG is prepared for such a significant move, and we might find out about problems when it is too late to address them. For instance, we could see compliance issues in Bugzilla from CA operators who are currently enabled with the email trust bit, or we might receive a root inclusion request from a CA operator unwilling or unable to restrict issuance to only strict or multipurpose certificates.
In summary, I'd just like to understand the issues better and minimize disruption and compliance issues down the road. I look forward to your thoughts and suggestions. Thanks, Ben On Thu, Apr 11, 2024 at 8:40 AM Stephen Davidson via Smcwg-public < smcwg-public@cabforum.org> wrote: > Hello all: > > > > I attach the summary that we reviewed in the SMCWG call yesterday. > > > > It highlights the differences between the Legacy generation profiles and > the Multipurpose/Strict profiles, including links to the relevant text > sections in the S/MIME BR. > > > > > https://cabforum.org/posts/2024/2024-04-10-legacy-deprecation/SMCWG_20240410_Final.pdf > > > > This should facilitate review and feedback to help the SMCWG determine > appropriate steps and timelines to migrate to the Multipurpose/Strict > profiles. > > > > Regards, Stephen > _______________________________________________ > Smcwg-public mailing list > Smcwg-public@cabforum.org > https://lists.cabforum.org/mailman/listinfo/smcwg-public >
_______________________________________________ Smcwg-public mailing list Smcwg-public@cabforum.org https://lists.cabforum.org/mailman/listinfo/smcwg-public
