IETF Logo Mail Archive

[Acme] Re: AD comments on draft-ietf-acme-device-attest

Mike Ounsworth <mike@ounsworth.ca> Fri, 23 January 2026 16:51 UTC

Return-Path: <mike@ounsworth.ca>
X-Original-To: acme@mail2.ietf.org
Delivered-To: acme@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 8C9AFAC10780; Fri, 23 Jan 2026 08:51:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -0.9
X-Spam-Level:
X-Spam-Status: No, score=-0.9 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=ounsworth.ca
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pooh8p-Ra4y6; Fri, 23 Jan 2026 08:51:49 -0800 (PST)
Received: from mail-24420.protonmail.ch (mail-24420.protonmail.ch [109.224.244.20]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 9AB1EAC1077B; Fri, 23 Jan 2026 08:51:49 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ounsworth.ca; s=protonmail; t=1769187100; x=1769446300; bh=Q0VxdBVOyaLeSwdXvCVKMSqnX9vkIiecoohwontpinE=; h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References: Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID: Message-ID:BIMI-Selector; b=uP8pcDSgLxTBQw/1qLn6NWMe4/4JQcO7w5EWsoUP/fk789BI0NxXzLBBH3zSmbV25 b2kFE5vx6bRvEN8zkjk4oht6r4nXE1lgrEoBqb2AM2B9PhhvvhVk/78x48N3TyMF8I /Jx27yQ0Wk7PhMqmSltEZlNe03vSX1b0H7FWcHSdaPiyq8o51jhsC7Hq8U849NZ3wx bK5t1MaXGuuX1kKLfVkI2nyACPnix+7QJ0rX2aK4BFCovr9Fnfn0JP1M5zgRiFVKSD l1Pqb/4xM5NW/zTI0shq17/hSuSF1UWrgg2TeQVYkjSfsZoJWtmwsvRQOnnAywtuaV yJYESEjLeDGLQ==
Date: Fri, 23 Jan 2026 16:51:38 +0000
To: Deb Cooley <debcooley1@gmail.com>
From: Mike Ounsworth <mike@ounsworth.ca>
Message-ID: <jskgrQS8nYq2tKHit0oreoHt--UJDEpmwEGJgi1eP828U4JkTrCLeTxJc9Ry4DozkyZ6rpgRRn97M5U6AEcH7FUUsyt7oF_SZOKX0zpXL3w=@ounsworth.ca>
In-Reply-To: <CAGgd1OdSxrtzvS0rPN2qDZHbc9aOz65k0eKxuZPR_jRAx+Hv+Q@mail.gmail.com>
References: <CAGgd1Oc2mJebUP07_QdU+rD2du6=rLY=jLGGbExYj4y10f2S4A@mail.gmail.com> <10927.1766855792@obiwan.sandelman.ca> <CAGgd1OeiFjsQ2XhwkPHny1R+D9NPg-MeKsvhxQq1Nb8UV+O1_w@mail.gmail.com> <CO6PR22MB2497965580C854DB35B4A799FA84A@CO6PR22MB2497.namprd22.prod.outlook.com> <CO6PR22MB249744AA617B8242ADA573BBFA96A@CO6PR22MB2497.namprd22.prod.outlook.com> <CAGgd1OdSxrtzvS0rPN2qDZHbc9aOz65k0eKxuZPR_jRAx+Hv+Q@mail.gmail.com>
Feedback-ID: 61358882:user:proton
X-Pm-Message-ID: 43a13c10e3eb017f1e2d642fd31f428e2bd818ba
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: VL3EIRNYPQY4G52MFQ4Q5QRVAKYB2XPN
X-Message-ID-Hash: VL3EIRNYPQY4G52MFQ4Q5QRVAKYB2XPN
X-MailFrom: mike@ounsworth.ca
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-acme.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Sven A Rajala <Sven.Rajala@keyfactor.com>, "draft-ietf-acme-device-attest.authors@ietf.org" <draft-ietf-acme-device-attest.authors@ietf.org>, acme-chairs@ietf.org, IETF ACME <acme@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Acme] Re: AD comments on draft-ietf-acme-device-attest
List-Id: Automated Certificate Management Environment <acme.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/4Ya7JH8x6Zw1WHNV33rVKwZ4mkk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Owner: <mailto:acme-owner@ietf.org>
List-Post: <mailto:acme@ietf.org>
List-Subscribe: <mailto:acme-join@ietf.org>
List-Unsubscribe: <mailto:acme-leave@ietf.org>

I can take the lead on contacting Brandon.



-Mike
"Knowing is a barrier which prevents learning" -- Frank Herbert, Dune.


On Friday, January 23rd, 2026 at 10:49 AM, Deb Cooley <debcooley1@gmail.com> wrote:

> I've left a couple of little comments on the PR.
> 
> Once you up issue the draft, I'll put it into IETF Last Call (the next step
> in the process).
> 
> At some point soon, I suggest that you all reach out to Brandon Weeks to
> find out if he's interested in continuing as an author (happy to have him,
> but he will need to be responsive at some point).
> 
> Deb
> 
> p.s. I do love the sig file. I'll leave it at that.
> 
> On Wed, Jan 21, 2026 at 10:40 AM Sven A Rajala Sven.Rajala@keyfactor.com
> 
> wrote:
> 
> > Hej Debs & Michael,
> > 
> > I created a PR from the comments you shared here:
> > https://github.com/ietf-wg-acme/draft-bweeks-acme-device-attest/pull/10
> > 
> > > *Section 1, last para: I am assuming that the authors believe the
> > rats
> > > work is substantially far into the future? (Or why would we publish
> > the
> > > challenge device-attest-01 if the rats work would replace it?).
> > With any
> > > 'SHOULD' one needs to outline when one might ignore the SHOULD.
> > 
> > This is already deployed at scale by large vendors and has been for years

v2.46.0 | Report a Bug | By Email | System Status