IETF Logo Mail Archive

Re: [Acme] WG last call for draft-ietf-acme-email-smime-06

"A. Schulze" <sca@andreasschulze.de> Tue, 31 March 2020 22:24 UTC

Return-Path: <sca@andreasschulze.de>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98A4D3A0AAD for <acme@ietfa.amsl.com>; Tue, 31 Mar 2020 15:24:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.199
X-Spam-Level:
X-Spam-Status: No, score=-0.199 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=andreasschulze.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ig4jYztJZcGz for <acme@ietfa.amsl.com>; Tue, 31 Mar 2020 15:24:18 -0700 (PDT)
Received: from mta.somaf.de (mta.somaf.de [IPv6:2001:470:77b3:103::25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 545A13A0AA5 for <acme@ietf.org>; Tue, 31 Mar 2020 15:24:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=andreasschulze.de; s=202003-05B6D237; t=1585693452; x=1590693452; bh=kSJdQ6iVppM6nT3qHn4LeGkCuIu7cbaJfv0u+LTdqDI=; h=Subject:To:References:From:Message-ID:Date:MIME-Version: In-Reply-To:Content-Type:Content-Transfer-Encoding:autocrypt:cc: content-transfer-encoding:content-type:date:from:in-reply-to: message-id:mime-version:openpgp:references:subject:to; b=DqcpnnEbY7lwmbyh13MQtiBXpSzUbWaGaF/5VtJW5oY8w0OpxSuHe9YQEadtsjbpS yloAyuMlgeOvJE0u/ESCmDaz6qCgc2XqyoAJcEFgKX90ao0hp20D7u3r2XrBA4Uwcd XS2g5ZuC9lqjKyoAu4dpmcL0H1aKABnskSE16fHxNoWUB0QIm7K9oEoxv7RJc/iJCg lbqF32owi2baTB3fLJW85GLE3gHOsr1Secv3vwFU5Jw11MUTJkNDadflzIiurZ4B/V LSHgx0/uPajAevnX4HZv2Mu4qTtIzh+Z3je60hvyxlJ9KvRiXAFT0vyUJuMnqrpNju 0YGjN3zxIh0CA==
To: acme@ietf.org
References: <3703708B-4454-4AC9-87AF-961C73B1F331@akamai.com>
From: "A. Schulze" <sca@andreasschulze.de>
Message-ID: <4bf765aa-4325-ed9e-c705-1d0e4734b6ad@andreasschulze.de>
Date: Wed, 01 Apr 2020 00:24:16 +0200
MIME-Version: 1.0
In-Reply-To: <3703708B-4454-4AC9-87AF-961C73B1F331@akamai.com>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/DtJQa56xq49VMDw_gNRo1-LWMiU>
Subject: Re: [Acme] WG last call for draft-ietf-acme-email-smime-06
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Mar 2020 22:24:21 -0000


Am 12.03.20 um 19:51 schrieb Salz, Rich:
> This mail begins a one-week working group last call on https://datatracker.ietf.org/doc/draft-ietf-acme-email-smime/?include_text=1
(hopefully not to late ...)

Hello @all,

I became aware of a privacy problem once an ACME instance will implement this draft: CT logs.
Usually the space of local parts for a domains email addresses is private. Enumeration is impossible and unwanted.
But CT logs change some assumptions people may have...

On the other side the problem isn't really new.
Similar applies to the hosts available inside a domain.
Similar applies to DNSSEC signed domains. But at least there is an option to make a zone-walk harder: NSEC3

Is this at least a point to be mentioned in the drafts security section?

Andreas

v2.29.0 | Report a Bug | By Email | System Status