> The problem is harder and we have not settled on any good usability standard for this. Actually the CA/B Forum S/MIME workgroup just recently agreed upon the

> The problem is harder and we have not settled on any good usability standard for this. Actually the CA/B Forum S/MIME workgroup just recently agreed upon the baseline requirements for future S/MIME certificate issuance. This also means an ACME-like process for mailbox-validated S/MIME certificates is or will be possible in the future. Identity validation is a much more difficult, human problem. Some countries have solved that for their citizens, but due to how shit S/MIME has been so far, encrypted/signed containers have been used (a lot) instead.