[Acme] Fwd: New Version Notification for draft-sweet-iot-acme-03.txt

Michael Sweet <msweet@msweet.org> Thu, 09 February 2023 12:07 UTC

From: Michael Sweet <msweet@msweet.org>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.400.51.1.1\))
Date: Thu, 09 Feb 2023 07:07:25 -0500
Message-Id: <3D7E9779-A91B-468C-B1BB-155D4121390B@msweet.org>
To: acme@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/BEBuWL3UwOdUneltEHAugffSopc>
Subject: [Acme] Fwd: New Version Notification for draft-sweet-iot-acme-03.txt
Precedence: list

All,

This is an I-D I've been working on sporadically to address trusted certificate generation for IoT devices like printers, cameras, etc.  As indicated in the abstract, it enables discovery and usage of a local ACME server that provides a trusted root certificate for the local network as well as signed certificates for any IoT devices that need them.

The goal is to provide something better than self-signed certificates while supporting simple home networks (where your router probably provides the ACME server for ".local") to enterprise networks with dedicated certificate and DNS servers.

I'm hoping to have some prototype code ready to post on Github in the coming months, but obviously would be grateful for any feedback you have.

Thanks!

(Also circulating in the IoT OPS WG  in the IETF, and the IEEE-ISTO Printer Working Group where I am secretary of the Internet Printing Protocol WG...)


> Begin forwarded message:
> 
> From: internet-drafts@ietf.org
> Subject: New Version Notification for draft-sweet-iot-acme-03.txt
> Date: February 6, 2023 at 4:42:33 PM EST
> To: "Michael Sweet" <msweet@msweet.org>
> 
> 
> A new version of I-D, draft-sweet-iot-acme-03.txt
> has been successfully submitted by Michael Sweet and posted to the
> IETF repository.
> 
> Name: draft-sweet-iot-acme
> Revision: 03
> Title: ACME-Based Provisioning of IoT Devices
> Document date: 2023-02-06
> Group: Individual Submission
> Pages: 12
> URL:            https://www.ietf.org/archive/id/draft-sweet-iot-acme-03.txt
> Status:         https://datatracker.ietf.org/doc/draft-sweet-iot-acme/
> Html:           https://www.ietf.org/archive/id/draft-sweet-iot-acme-03.html
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-sweet-iot-acme
> Diff:           https://author-tools.ietf.org/iddiff?url2=draft-sweet-iot-acme-03
> 
> Abstract:
>   This document extends the Automatic Certificate Management
>   Environment (ACME) [RFC8555] to provision X.509 certificates for
>   local Internet of Things (IoT) devices that are accepted by existing
>   web browsers and other software running on End User client devices.
> 
> 
> 
> 
> The IETF Secretariat
> 
> 


________________________
Michael Sweet

[Acme] Fwd: New Version Notification for draft-sw… Michael Sweet