IETF Logo Mail Archive

[Acme] Short WGLC review of draft-ietf-acme-email-smime-13

"Salz, Rich" <rsalz@akamai.com> Thu, 10 December 2020 18:23 UTC

Return-Path: <rsalz@akamai.com>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 022753A11A4 for <acme@ietfa.amsl.com>; Thu, 10 Dec 2020 10:23:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jISMfp39KJl6 for <acme@ietfa.amsl.com>; Thu, 10 Dec 2020 10:23:11 -0800 (PST)
Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDC873A118B for <acme@ietf.org>; Thu, 10 Dec 2020 10:23:11 -0800 (PST)
Received: from pps.filterd (m0122331.ppops.net [127.0.0.1]) by mx0b-00190b01.pphosted.com (8.16.0.43/8.16.0.43) with SMTP id 0BAIFS6j019716 for <acme@ietf.org>; Thu, 10 Dec 2020 18:23:11 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : subject : date : message-id : content-type : mime-version; s=jan2016.eng; bh=6SbYP96YoT79N0tQxukKWxIOMq5j63+5M7hbiE2nvZM=; b=hNkVowux8MEvvaJqLbdSOlZ7WR6vNt2xXn5Rs1cVJZnBwhs/Bs+JxqBdsYntM84cRbs8 8c7+rmUTdQhFrsRQuR+0jF7z6ubVXSJCAboSPOf185+xd/cPnvI2mBiErIVF9jvKU0oa Gdwl49sR6vV/QKcJtE7zEtm3w9XHcHjR+nUlSDJzUAPimhwwc0FA69Ci/Y6rlMKdNDpP GTEpaLHfsXPwwGofNuAnT4MliJJFdXiYhDqyhlG19/Db+n3v/veyW/21L/JQZeL/bFPl MSNH/Sa5GwFsWQm59MG4f53mHs5gVh3eDInXjmHCRUMpBbC0z2DnhDUq/0mhvlxA0j5E 0w==
Received: from prod-mail-ppoint5 (prod-mail-ppoint5.akamai.com [184.51.33.60] (may be forged)) by mx0b-00190b01.pphosted.com with ESMTP id 3583m0kuh2-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <acme@ietf.org>; Thu, 10 Dec 2020 18:23:10 +0000
Received: from pps.filterd (prod-mail-ppoint5.akamai.com [127.0.0.1]) by prod-mail-ppoint5.akamai.com (8.16.0.42/8.16.0.42) with SMTP id 0BAIJh1Z016066 for <acme@ietf.org>; Thu, 10 Dec 2020 10:23:10 -0800
Received: from email.msg.corp.akamai.com ([172.27.123.57]) by prod-mail-ppoint5.akamai.com with ESMTP id 35892eu6m5-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT) for <acme@ietf.org>; Thu, 10 Dec 2020 10:23:09 -0800
Received: from USMA1EX-DAG1MB5.msg.corp.akamai.com (172.27.123.105) by usma1ex-dag3mb3.msg.corp.akamai.com (172.27.123.58) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 10 Dec 2020 13:23:09 -0500
Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb5.msg.corp.akamai.com (172.27.123.105) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 10 Dec 2020 13:23:09 -0500
Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1497.008; Thu, 10 Dec 2020 13:23:09 -0500
From: "Salz, Rich" <rsalz@akamai.com>
To: "acme@ietf.org" <acme@ietf.org>
Thread-Topic: Short WGLC review of draft-ietf-acme-email-smime-13
Thread-Index: AQHWzyGCl9JpJPXRZU6qawVmrHINrQ==
Date: Thu, 10 Dec 2020 18:23:08 +0000
Message-ID: <0C99CBF3-A8D3-4BB2-9A57-A9F946BED27D@akamai.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.44.20120703
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [172.27.164.43]
Content-Type: multipart/alternative; boundary="_000_0C99CBF3A8D34BB29A57A9F946BED27Dakamaicom_"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.343, 18.0.737 definitions=2020-12-10_07:2020-12-09, 2020-12-10 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 phishscore=0 mlxscore=0 mlxlogscore=682 malwarescore=0 suspectscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2012100113
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.343, 18.0.737 definitions=2020-12-10_07:2020-12-09, 2020-12-10 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 bulkscore=0 phishscore=0 spamscore=0 impostorscore=0 priorityscore=1501 clxscore=1011 suspectscore=0 malwarescore=0 mlxlogscore=597 lowpriorityscore=0 adultscore=0 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2012100113
X-Agari-Authentication-Results: mx.akamai.com; spf=${SPFResult} (sender IP is 184.51.33.60) smtp.mailfrom=rsalz@akamai.com smtp.helo=prod-mail-ppoint5
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/4OsC1KSjjP3blpGPAnE2U-hkqSs>
Subject: [Acme] Short WGLC review of draft-ietf-acme-email-smime-13
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Dec 2020 18:23:24 -0000

In order to address feedback that came up during AD and WGLC review, Alexey posted a new draft.
This link will show the differences: https://tools.ietf.org/rfcdiff?difftype=--hwdiff&url2=draft-ietf-acme-email-smime-13.txt

Summary is that it adds text about putting the right keyUsage extensions (signing, encryption) so that different keys/certs can be used for signing and encryption. It’s important to be able to have separate signing and encryption keys.

Please send feedback by the end of next week.  Thanks!

v2.23.0 | Report a Bug | By Email