Return-Path: X-Original-To: acme@mail2.ietf.org Delivered-To: acme@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 49C4CEDE5AE9 for ; Wed, 13 May 2026 11:01:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1778695280; bh=peC7EWUnHE615pyOvMyyTobrFXWNOJR9fNgQijCm/Gg=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=T7o88YTo5HfmbjTPzQEgRi5Q2mO636VuNXLPrcbf/YBgl194hoxQMikh9pn5FELuL /AMWJ19DYovzTo5/k+A1UxgyDE2eMwOHECjmjhmFGcfI5LYBekKIg4IVk5xpZKgyyq 3KJ6MSFU5Xx4/h1oD7qS4D4VZD87QpfWVShZZn30= X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -1.098 X-Spam-Level: X-Spam-Status: No, score=-1.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FORGED_GMAIL_RCVD=1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ec8LnEx8AII5 for ; Wed, 13 May 2026 11:01:16 -0700 (PDT) Received: from mail-ed1-x52f.google.com (mail-ed1-x52f.google.com [IPv6:2a00:1450:4864:20::52f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 21E4BEDE5AD9 for ; Wed, 13 May 2026 11:01:16 -0700 (PDT) Received: by mail-ed1-x52f.google.com with SMTP id 4fb4d7f45d1cf-67f94c078e8so6218298a12.1 for ; Wed, 13 May 2026 11:01:16 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1778695275; cv=none; d=google.com; s=arc-20240605; b=g9k4fb0F+3bsVjNM/9xfftuUK//5qX4c5oiz02oKdheeSc4mU4idqETv/PyRz+Df+/ p58Ef4Fw0hHCDXUC3byThAjdRGrW4SM1PHWcIRgBCSD2zrcwRftil5b3sW6oMkAtFdci RwnKXA9Nn2+0xDW6WdoqAI/83zIYCrhEcIrEt6ijBBVJR811Q3v6+XMx0edbdgOICLdJ JiCEE/CqY/hPHGCOEiz+e9BI5wEF4X3Zx7HzGHWjR/SqoQ5a/GXg3NJyvFTvfM9sm7aw g4Pya6zcqh+8vBc7kF7l+HTw0STD/VInz9vjcLdNwdvbU6ItNVFLmAMRt8BR2y1Sg7j6 Cdug== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=peC7EWUnHE615pyOvMyyTobrFXWNOJR9fNgQijCm/Gg=; fh=O+98MLEsH1s5rVDIADNVVblEYKSk/OuoWg1eYbHwkng=; b=OdTrvb6K4fMeS+FKUzH425xVr7iemae0bVpGn9uo+D3KyQO5lCvb73jGYdysp9B3NT O+fuM2FjGI/QnsGC5EaVmfuWW0PwfBTVx57kUIRjVnJP4EGGRxLuBiTQf/SLjbUqvlTx NS3be77bXAFrlj5KFJAPyrxixCfXr8h0AooBWTnCqoj9mIT1QTvgWRjGs/QjzOvNwL4F GXK2MM/kr1q5CTj4ffXcm152xVOUEAbRHcOVp5oWUz4Buzk3/k4E6p63q5zdigoH+465 sOT76Hhgfpm/Yyci3HOOMlVWZyQrDJ4MIos6ZX0r3sApy+M5z3oYxT8uBenpEy6inJot BS/A==; darn=ietf.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1778695275; x=1779300075; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=peC7EWUnHE615pyOvMyyTobrFXWNOJR9fNgQijCm/Gg=; b=LUWIPC6Nu+UJzp6a84ZHRJeOGUKe0sn4Ek0YPg9LlY7Zze2kQnBAGG5Bfv6XBK+0kV xRllBQ9JdVIJnix2KSKAf/Ifzrir+UeP7YuCKPBtq72W3gAI7jdytua4uI/dqV2FE1ub n7es9kZDGivLy9KvA3olhvYI4JCHiqGcVTXzXPRpg+AhjYdr4pwysNDHlYRbSZ0MH7gL ToyAaF0K52VyF/U6hgAeywK2YG4m9St87YSxDuB0U3gIc19z5kW1h0vJVdS/Yhj5m+BU gJjJ2enfYPBZ0KobWv2v1lueOXWN7tEZb+//lzj4kB8Qn4nTQANUVPXi8pUmqOuYPIWT +laQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778695275; x=1779300075; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=peC7EWUnHE615pyOvMyyTobrFXWNOJR9fNgQijCm/Gg=; b=ZVxWKGAlMP3QkmU6HDuyaUij09HGQl2mZl2vXKKA+EddsYvF2OoCCOnUv/GotufM0p vhBGJOLGTGxzIWuNai2li6e2LBWcz5X9tRYC17X8UtfuwKSsLiFy35BYqaGHj4mKWT1q f0reRF74+QyHNykrSwo2t7QXYMKLWFg4I8BzP9qh4E9yDvU6I0gLu2SAkOOBKCGhF8H4 v0vnxYFfpotSwEkEL14X+GCFKcYwaqzF7rei2Yn2o4Oaf1btq3UhW39oC9O9eeCmPjoe s0YlVg8yQfofBnXgbM+/+bNqraqXvlNDyKDl8ZEHFmwySuvv+0faiR2H4HHkVD+NAmLm 2uVQ== X-Forwarded-Encrypted: i=1; AFNElJ9I+rv5lwokT5TVtVrgsvf2fLa+b4Mp197ps5Z3cYZQdOAt/BUj/SZn0B9XbIa2IM9ZjhqY@ietf.org X-Gm-Message-State: AOJu0YziNGhkp3uKG6V9UmtOXKSJeKRKTLAfl7CyiII/3LfzVoxYzWB0 QOynxquR4ZlETuKehw9ovfmCTEMUzB2YAeNSdwpMkgX4rJGS4UzMAI5akumToHjh8w2P+qlFnA/ HjFnjJ9A5vURy0AoFZ+Y+oD4DKKqWjO0= X-Gm-Gg: Acq92OEjfhDWPO40G3mKIS4AKD6piMMIQxm1okJJaHHKxA00lXRCsurx1jeus0bbJwj PfzSL4aNzHguE+QmRlRh49wp9qMQcJk3lOc5WHDnLifLDYsGvH8MDSo3k1StxHdgq4n+WJBQYFB ygX+KqPrti1dX61++94+KC6gYTXsGQjXX87omJp6hxCNK48+jTPEbP0zjY9zgFDG7rwmHAuWkl1 kNeJYQlygIEeWsc7SrCuwX2NVSKa0eO8HhWK/EWSUKQkKaaoqBCN4edCkcEwD20kiFuQUk/3NFJ VkMJ41AA X-Received: by 2002:aa7:d359:0:b0:67f:97eb:b0ef with SMTP id 4fb4d7f45d1cf-68256d55472mr1949148a12.15.1778695274653; Wed, 13 May 2026 11:01:14 -0700 (PDT) MIME-Version: 1.0 References: <78B9C32C-BBF2-4447-906C-114FE982E529@daknob.net> In-Reply-To: From: Mike Ounsworth Date: Wed, 13 May 2026 13:01:02 -0500 X-Gm-Features: AVHnY4IK2E_ZVAWqI4Scuyt2G3npYVFJIahVVlg0DQW5RTezdSQVNrd4rFCaPiM Message-ID: To: Sven A Rajala Content-Type: multipart/related; boundary="00000000000002fe310651b6c4e9" Message-ID-Hash: DE47XYQCTD7K4VZBOFSWQPBEOVKNKT2E X-Message-ID-Hash: DE47XYQCTD7K4VZBOFSWQPBEOVKNKT2E X-MailFrom: ounsworth@gmail.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-acme.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Antonis Chariton , "draft-ietf-acme-dns-account-label@ietf.org" , IETF ACME X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5BAcme=5D_Re=3A_Status_of_draft-ietf-acme-dns-account-label_=3F?= List-Id: Automated Certificate Management Environment Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --00000000000002fe310651b6c4e9 Content-Type: multipart/alternative; boundary="00000000000002fe300651b6c4e8" --00000000000002fe300651b6c4e8 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks Antonis. I suspect what happened is that I came in as WG Chair in Aug 2025, and this draft was already essentially done, so I never saw much discussion, and it didn't really enter my radar. Sounds like I could open a WGLC today and we can quickly move it along. @Antonis, if you agree, then I'll go ahead and do that. On Wed, 13 May 2026 at 11:53, Sven A Rajala wrote: > I=E2=80=99m in favor of this draft moving forward. I like how it solves c= name > delegation conflicts with short lived records like the dns-01 challenge a= nd > how it would help cloud infrastructures with cert provisioning. I like > interoperability and having options to pick what works best for a given > environment. > > Kindly, > > Sven Rajala > > Deputy PKI Officer > > > > *M:* +1 540 687 0761 > > sven.rajala@*keyfactor.com* > > > *From: *Antonis Chariton > *Date: *Wednesday, 2026 May 13 at 05:28 > *To: *Mike Ounsworth > *Cc: *draft-ietf-acme-dns-account-label@ietf.org < > draft-ietf-acme-dns-account-label@ietf.org>; IETF ACME > *Subject: *[Acme] Re: Status of draft-ietf-acme-dns-account-label ? > > This Message Is From an External Sender > This message came from outside your organization. > Report Suspicious > > > > Hello Mike, > > Here=E2=80=99s the current status as far as I'm aware of: > > - We have incorporated all of this feedback and finished that process a f= ew years ago > - The current spec has been added to the CA/B Forum BRs and issuance by p= ublicly trusted CAs is allowed with the text as-is > - At least 3 CAs that I know of have deployed this > - There are at least 2 different interoperable implementations on the ser= ver side > - There are at least 3 different interoperable implementations on the cli= ent side > > We have asked for this to proceed once, but it didn=E2=80=99t go into a v= ote. > > I will be at IETF in Vienna, but at this point I am not sure what else is= required from us. This is already being used for certificates by CAs for y= ears, and it seems to have been stuck in IETF for a while. > > Any help appreciated to move this forward by anyone on this list would be= appreciated. > > Thanks, > Antonis > > > On 12 May 2026, at 14:47, Mike Ounsworth wro= te: > > > > Hi authors of draft-ietf-acme-dns-account-label, > > > > I notice that the draft is due to expire within the week. Could you ple= ase give a status update on this draft? Are there active deployments? Are t= here open issues and active work being done on the document? > > > > -Mike Ounsworth > > ACME Co-Chair > > _______________________________________________ > Acme mailing list -- acme@ietf.org > To unsubscribe send an email to acme-leave@ietf.org > > --00000000000002fe300651b6c4e8 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks Antonis.

I suspect wh= at happened is that I came in as WG Chair in Aug 2025, and this draft was a= lready=C2=A0essentially done, so I never saw much discussion, and it didn&#= 39;t really enter my radar.

Sounds like I could op= en a WGLC today and we can quickly move it along.=C2=A0@Antonis, if you agr= ee, then I'll go ahead and do that.

On Wed, = 13 May 2026 at 11:53, Sven A Rajala <Sven.Rajala@keyfactor.com> wrote:
I=E2=80=99m in favor of this draft moving forward. I like how it solves cna= me delegation conflicts with short lived records like the dns-01 challenge = and how it would help cloud infrastructures with cert provisioning. I like = interoperability and having options to pick what works best for a given environment.=C2=A0

Kindly,

Sven=C2=A0Rajala

Deputy PKI Officer

=C2=A0

M:=C2=A0+1 540 687 0761

sven.rajala@keyfactor.com=C2=A0=

=C2=A0

From: Antonis Chariton <daknob=3D40daknob.net@dmarc.ietf.org>
Date: Wednesday, 2026 May 13 at 05:28
To: Mike Ounsworth <ounsworth+ietf@gmail.com>
Cc: draft-ietf-acme-dns-account-label@ietf.org <dr= aft-ietf-acme-dns-account-label@ietf.org>; IETF ACME <acme@ietf.org>
Subject: [Acme] Re: Status of draft-ietf-acme-dns-account-label ?
This Message Is From an External Sender
This message came from outside your organization.
=C2=A0
Hello Mike,

Here=E2=80=99s the current status as far as I'm aware of:

- We have incorporated all of this feedback and finished that process a few=
 years ago
- The current spec has been added to the CA/B Forum BRs and issuance by pub=
licly trusted CAs is allowed with the text as-is
- At least 3 CAs that I know of have deployed this
- There are at least 2 different interoperable implementations on the serve=
r side
- There are at least 3 different interoperable implementations on the clien=
t side

We have asked for this to proceed once, but it didn=E2=80=99t go into a vot=
e.

I will be at IETF in Vienna, but at this point I am not sure what else is r=
equired from us. This is already being used for certificates by CAs for yea=
rs, and it seems to have been stuck in IETF for a while.

Any help appreciated to move this forward by anyone on this list would be a=
ppreciated.

Thanks,
Antonis

> On 12 May 2026, at 14:47, Mike Ounsworth <ounsworth+ietf@gmail.com> wro=
te:
>=20
> Hi authors of draft-ietf-acme-dns-account-label,
>=20
> I notice that the draft is due to expire within the week. Could you pl=
ease give a status update on this draft? Are there active deployments? Are =
there open issues and active work being done on the document?
>=20
> -Mike Ounsworth
> ACME Co-Chair

_______________________________________________
Acme mailing list -- acm=
e@ietf.org
To unsubscribe send an email to acme-leave@ietf.org
--00000000000002fe300651b6c4e8-- --00000000000002fe310651b6c4e9 Content-Type: image/png; name="image001.png" Content-Disposition: inline; filename="image001.png" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: ii_19e227dd6d34cff311 iVBORw0KGgoAAAANSUhEUgAAABIAAAASCAYAAABWzo5XAAAAAXNSR0IArs4c6QAAAHhlWElmTU0A KgAAAAgABQESAAMAAAABAAEAAAEaAAUAAAABAAAASgEbAAUAAAABAAAAUgEoAAMAAAABAAIAAIdp AAQAAAABAAAAWgAAAAAAAACQAAAAAQAAAJAAAAABAAKgAgAEAAAAAQAAABKgAwAEAAAAAQAAABIA AAAAP0JqHQAAAAlwSFlzAAAWJQAAFiUBSVIk8AAAABhJREFUOBFjYBgFoyEwGgKjITAaAthDAAAF IgAByPUp7wAAAABJRU5ErkJggg== --00000000000002fe310651b6c4e9--