Ballot SMC08: Deprecate Legacy Generation Profiles and Minor Updates

Ballot overview

• Ballot SMC08 is titled Deprecate Legacy Generation Profiles and Minor Updates.
• It modifies the S/MIME Baseline Requirements based on Version 1.0.5.
• The ballot proposes a Final Maintenance Guideline.

What the ballot changes

• It sets a date by which issuance of certificates following the Legacy generation profiles must cease.
• It pins the domain validation procedures to Version 2.0.5 of the TLS Baseline Requirements while the ballot activity for multi-perspective validation is concluded and the SMCWG determines its corresponding course of action.
• It updates the reference for SmtpUTF8Mailbox from RFC 8398 to RFC 9598.
• It includes small text corrections in the Reference section.

Voting and IPR status

• The voting period completed and the ballot passed.
• Bylaw requirements were met for Certificate Issuers, Certificate Consumers, and quorum.
• The IPR period completed.
• No IPR Exclusion Notices were filed.
• The ballot was adopted as of August 29, 2024.
• The new S/MIME BR v.1.0.6 was published to the CABF public website.

Requirement timing

• The ballot states that effective July 15, 2025, S/MIME Subscriber Certificates SHALL NOT be issued using the Legacy Generation profiles.
• The redline and published requirements identify the Legacy Generation profiles as 2.23.140.1.5.1.1, 2.23.140.1.5.2.1, 2.23.140.1.5.3.1, and 2.23.140.1.5.4.1.
• The ballot also states that starting on September 15, 2024, the CA SHALL state its policy or practice on processing CAA Records for Mailbox Addresses in Section 4.2 of its CP and/or CPS.

Minor updates included in the published requirements

• The S/MIME Baseline Requirements version was updated to 1.0.6.
• The document date in the redline is shown as TBD.
• The TLS Baseline Requirements reference was updated to Version 2.0.5.
• The SmtpUTF8Mailbox reference was updated to RFC 9598.
• The ballot includes reference and formatting corrections.