Re: [lamps] [EXTERNAL] Re: CAA processing for email addresses

[Mike Ounsworth <[e-mail]>]

I just skimmed too.


> how many email providers/operators have been involved in developing this approach and how many of those have experience deploying smime or other applications that call for certs containing email addresses?

The gmails and yahoos don't do S/MIME right?, so are probably out of scope here. It's probably the @<gov-dept>.gov's or @<massivecorp>.com's who have robust enough S/MIME deployments to care about restricting which PKI can issue for them.



@Corey Bonnell can you expand on why CA/B wants a CAA `issuemail` separate from the CAA `issue`?


I notice that CAA `issuevmc` was registered [1], [2] to specify which CA can issue VMCs for you, so it seems to be following the pattern to allow CAA to specify different CAs for different purposes.


[1]: https://bimigroup.org/resources/VMC_Requirements_latest.pdf
[2]: https://www.iana.org/assignments/pkix-parameters/pkix-parameters.xml

---
Mike Ounsworth

-----Original Message-----
From: Spasm <[e-mail]> On Behalf Of Stephen Farrell
Sent: November 30, 2022 5:19 PM
To: Corey Bonnell <Corey.Bonnell=[e-mail]>; Seo Suchan <[e-mail]>; [e-mail]
Subject: [EXTERNAL] Re: [lamps] CAA processing for email addresses

WARNING: This email originated outside of Entrust.
DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.

______________________________________________________________________

Hiya,

On 30/11/2022 23:12, Stephen Farrell wrote:
> I guess I should go and read the draft now:-)

Just did that - it's nice and short:-)

I'm not liking the idea tbh. But I have a question: how many email providers/operators have been involved in developing this approach and how many of those have experience deploying smime or other applications that call for certs containing email addresses?

As you might guess from the question I think such involvement is kinda needed as there are so many odd corner cases in email services as they've grown up over the last half century.

Thanks,
S.
Any email and files/attachments transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.