Ballot SMC07: Align Logging Requirement and Key Escrow clarification

Overview

• Ballot SMC07 aims to clarify what data needs to be logged as part of the Firewall and router activities logging requirement in the S/MIME Baseline Requirements and align with a recent update within the TLS Baseline Requirements.
• The ballot also aims to clarify that maximum certificate validity periods do not affect maximum key escrow duration periods.

Adoption and IP review outcome

• The Intellectual Property Review (IPR) period for Ballot SMC07 has completed.
• No IPR Exclusion Notices were filed.
• The ballot is adopted as of July 15, 2024.

Voting result

• The voting period has completed and the ballot has passed.
• Bylaws requirements listed on the ballot page were MET for both Certificate Issuers and Certificate Consumers, including quorum.

Changes described in the ballot materials

• Logging requirement clarification:
  • The ballot summary and redline indicate router and firewall activities logging is clarified, including specifying relevant router and firewall activities logs.
• Key escrow clarification:
  • The redline text states that where escrow is supported in accordance with Section 4.12, the CA MAY retain Subscriber Private Keys past the Certificate Maximum Validity Period.

Document publication

• The new S/MIME BR v.1.0.5 has been published to the CABF public website.
• The published document is Version 1.0.5 and is dated July 15, 2024.