Re: [100attendees] Side Meeting on considerations on using short-term certificates.

Robert Moskowitz <rgm@labs.htt-consult.com> Tue, 14 November 2017 02:17 UTC

Return-Path: <rgm@labs.htt-consult.com>
X-Original-To: 100attendees@ietfa.amsl.com
Delivered-To: 100attendees@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4508129AFE for <100attendees@ietfa.amsl.com>; Mon, 13 Nov 2017 18:17:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.751
X-Spam-Level:
X-Spam-Status: No, score=-2.751 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BReN4ZKAlJ7V for <100attendees@ietfa.amsl.com>; Mon, 13 Nov 2017 18:17:13 -0800 (PST)
Received: from z9m9z.htt-consult.com (z9m9z.htt-consult.com [50.253.254.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A2F912954B for <100attendees@ietf.org>; Mon, 13 Nov 2017 18:17:13 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by z9m9z.htt-consult.com (Postfix) with ESMTP id B21B462162; Mon, 13 Nov 2017 21:17:11 -0500 (EST)
X-Virus-Scanned: amavisd-new at htt-consult.com
Received: from z9m9z.htt-consult.com ([127.0.0.1]) by localhost (z9m9z.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id qHW4mPUOP6BQ; Mon, 13 Nov 2017 21:17:05 -0500 (EST)
Received: from lx120e.htt-consult.com (dhcp-80f0.meeting.ietf.org [31.133.128.240]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by z9m9z.htt-consult.com (Postfix) with ESMTPSA id BE77762167; Mon, 13 Nov 2017 21:17:03 -0500 (EST)
To: Yoav Nir <ynir.ietf@gmail.com>
Cc: 100attendees@ietf.org
References: <7AEE0333-EF1B-49CF-A9D6-88D0A491C541@gmail.com> <6242d566-37bb-a81b-5ed5-1b50b2d0eff7@labs.htt-consult.com> <B77F0C65-A7F3-4419-83AF-234CACD4F069@gmail.com>
From: Robert Moskowitz <rgm@labs.htt-consult.com>
Message-ID: <008dd0f8-44b7-9176-8f0f-1273cd3d5cb0@labs.htt-consult.com>
Date: Tue, 14 Nov 2017 10:16:59 +0800
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1
MIME-Version: 1.0
In-Reply-To: <B77F0C65-A7F3-4419-83AF-234CACD4F069@gmail.com>
Content-Type: multipart/alternative; boundary="------------C3D20CEA3B29BBE2B611A261"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/100attendees/kba6tHwwZrYvqhiXA0qdQRN1hrs>
Subject: Re: [100attendees] Side Meeting on considerations on using short-term certificates.
X-BeenThere: 100attendees@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Mailing list of IETF 100 attendees that have opted in on this list." <100attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/100attendees>, <mailto:100attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/100attendees/>
List-Post: <mailto:100attendees@ietf.org>
List-Help: <mailto:100attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/100attendees>, <mailto:100attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Nov 2017 02:17:16 -0000

ARGH!  you are right.

And CURDLE has been canceled, so there is only MILE.  I will see what I 
can do, would like to join you.

Bob

On 11/13/2017 09:21 PM, Yoav Nir wrote:
> CBOR and ACME both end at 17:50, 10 minutes before we begin.
>
>
>
>> On 13 Nov 2017, at 11:17, Robert Moskowitz <rgm@labs.htt-consult.com 
>> <mailto:rgm@labs.htt-consult.com>> wrote:
>>
>> Conflicts with CBOR and ACME.  And Melinda's TRANS conflicts with SUIT.
>>
>> Always conflicts.  This is way in the old days of BAR BOFS, they were 
>> held around 10pm...
>>
>> Bob
>>
>> On 11/13/2017 10:45 AM, Yoav Nir wrote:
>>> Hi, all
>>>
>>> In recent years there’s been growing interest in short-term automatically-renewed (STAR) certificates.  The idea is to renew certificates often and forego revocation checking.
>>>
>>> ACME has a draft for such certificate, and STIR has a candidate among others.
>>>
>>> STAR certificates have somewhat different operational and security properties compared to regular PKI.  I’ve tried to document some of them in a draft:
>>> https://tools.ietf.org/html/draft-nir-saag-star-00
>>> This draft is in a very initial state, and I’m looking for input about this.
>>>
>>> I’ve reserved the Hullet room on Thursday at 18:00.  Anyone who’s interested is invited.
>>>
>>> Hope to see you there
>>>
>>> Yoav
>>>
>>> _______________________________________________
>>> 100attendees mailing list
>>> 100attendees@ietf.org
>>> https://www.ietf.org/mailman/listinfo/100attendees
>>
>> -- 
>> Standard Robert Moskowitz
>> Owner
>> HTT Consulting
>> C:248-219-2059
>> F:248-968-2824
>> E:rgm@labs.htt-consult.com
>>
>> There's no limit to what can be accomplished if it doesn't matter who 
>> gets the credit
>

-- 
Standard Robert Moskowitz
Owner
HTT Consulting
C:248-219-2059
F:248-968-2824
E:rgm@labs.htt-consult.com

There's no limit to what can be accomplished if it doesn't matter who 
gets the credit