Re: [Acme] [Technical Errata Reported] RFC8555 (5771)

"stefan@eissing.org" <stefan@eissing.org> Thu, 04 July 2019 08:09 UTC

Return-Path: <stefan@eissing.org>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40F171201BB for <acme@ietfa.amsl.com>; Thu, 4 Jul 2019 01:09:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=greenbytes.de header.b=mUYIMji4; dkim=pass (1024-bit key) header.d=greenbytes.de header.b=mUYIMji4
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i9lj0rYbiHWn for <acme@ietfa.amsl.com>; Thu, 4 Jul 2019 01:09:47 -0700 (PDT)
Received: from mail.greenbytes.de (mail.greenbytes.de [217.91.35.233]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A26B1200E3 for <acme@ietf.org>; Thu, 4 Jul 2019 01:09:47 -0700 (PDT)
Received: by mail.greenbytes.de (Postfix, from userid 117) id EE23615A1181; Thu, 4 Jul 2019 10:09:44 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=greenbytes.de; s=mail; t=1562227784; bh=cO6FjFBZnvLFP60wKwHqi2Vzb3T0egwLnukzWrbc28s=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=mUYIMji40ts6bCJgZy+bAjlISnyUp1/lb5FwCv33RVAi2qAOK9AagKOQcG2gXCAn3 Fgm20b6LTGpDUVwkheeGrALMqFJjmfsBy/9g31jcXjOJrq4NH1J3gtF2AGyuCoCwda Bx4BrXsqNdsWAcFZVfoOwykFE2yCoFfiuN7NS6/w=
Received: from resistance.greenbytes.local (unknown [192.168.1.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mail.greenbytes.de (Postfix) with ESMTPSA id 8818215A10E1; Thu, 4 Jul 2019 10:09:43 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=greenbytes.de; s=mail; t=1562227784; bh=cO6FjFBZnvLFP60wKwHqi2Vzb3T0egwLnukzWrbc28s=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=mUYIMji40ts6bCJgZy+bAjlISnyUp1/lb5FwCv33RVAi2qAOK9AagKOQcG2gXCAn3 Fgm20b6LTGpDUVwkheeGrALMqFJjmfsBy/9g31jcXjOJrq4NH1J3gtF2AGyuCoCwda Bx4BrXsqNdsWAcFZVfoOwykFE2yCoFfiuN7NS6/w=
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
From: "stefan@eissing.org" <stefan@eissing.org>
In-Reply-To: <323a3a4d-93f6-0ab6-496d-83f03ca32759@sectigo.com>
Date: Thu, 04 Jul 2019 10:09:43 +0200
Cc: Salz Rich <rsalz@akamai.com>, RFC Errata System <rfc-editor@rfc-editor.org>, "rlb@ipv.sx" <rlb@ipv.sx>, "jsha@eff.org" <jsha@eff.org>, "cpu@letsencrypt.org" <cpu@letsencrypt.org>, "jdkasten@umich.edu" <jdkasten@umich.edu>, "rdd@cert.org" <rdd@cert.org>, "kaduk@mit.edu" <kaduk@mit.edu>, "ynir.ietf@gmail.com" <ynir.ietf@gmail.com>, "acme@ietf.org" <acme@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <80B62119-819E-4E39-AD71-7F0B3092C6A5@eissing.org>
References: <20190702140400.527D3B81CB0@rfc-editor.org> <015B3FA2-45AA-4D06-9C18-99693FB2B785@akamai.com> <368f9853-11e4-1367-9ad0-7dc6f4fa343c@sectigo.com> <F2724322-7533-4D0D-9637-E44E31F3192B@akamai.com> <323a3a4d-93f6-0ab6-496d-83f03ca32759@sectigo.com>
To: Rob Stradling <rob@sectigo.com>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/-53HoSSVRcYdFMuVIYcD8m8y2LQ>
X-Mailman-Approved-At: Thu, 04 Jul 2019 07:40:06 -0700
Subject: Re: [Acme] [Technical Errata Reported] RFC8555 (5771)
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Jul 2019 08:09:51 -0000

> Am 03.07.2019 um 15:43 schrieb Rob Stradling <rob@sectigo.com>:
> 
> The idea behind the erratum is to force HTTP caching rules to apply to 
> directory objects, so that servers can update their directory objects 
> and expect clients to take note.

Is this a theoretical concern or do you have examples where current clients cache directory information that would harm a server update?

Cheers, Stefan