Subject: Re: [Last-Call] Last Call: <draft-ietf-jmap-smime-07.txt> (S/MIME signature verification extension to JMAP) to Proposed Standard

From: Russ Housley <[email-masked]>
Date: Tue, 24 Aug 2021 15:24:41 -0400

If the server performs a signature verification, and then the client performs a signature verification, the results might not be the same due to different trust anchor stores or a revocation that takes place between the two verifications.  I think this situation should be described in the Security Considerations.

Russ

> On Aug 23, 2021, at 12:34 PM, The IESG <[email-masked]> wrote:
> 
> 
> The IESG has received a request from the JSON Mail Access Protocol WG (jmap)
> to consider the following document: - 'S/MIME signature verification
> extension to JMAP'
>  <draft-ietf-jmap-smime-07.txt> as Proposed Standard
> 
> The IESG plans to make a decision in the next few weeks, and solicits final
> comments on this action. Please send substantive comments to the
> [email-masked] mailing lists by 2021-09-04. Exceptionally, comments may
> be sent to [email-masked] instead. In either case, please retain the beginning
> of the Subject line to allow automated sorting.
> 
> Abstract
> 
>   This document specifies an extension to JMAP for returning S/MIME
>   signature verification status.
> 
> The file can be obtained via
> https://datatracker.ietf.org/doc/draft-ietf-jmap-smime/
>