Re: [Acme] Call for adoption of draft-misell-acme-onion-02

Amir Omidi <aaomidi@google.com> Thu, 08 June 2023 19:08 UTC

Return-Path: <aaomidi@google.com>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C0E5C14EB17 for <acme@ietfa.amsl.com>; Thu, 8 Jun 2023 12:08:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -22.597
X-Spam-Level:
X-Spam-Status: No, score=-22.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7bjEqDtqaPyD for <acme@ietfa.amsl.com>; Thu, 8 Jun 2023 12:08:38 -0700 (PDT)
Received: from mail-vk1-xa2e.google.com (mail-vk1-xa2e.google.com [IPv6:2607:f8b0:4864:20::a2e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10C09C14CE54 for <acme@ietf.org>; Thu, 8 Jun 2023 12:08:38 -0700 (PDT)
Received: by mail-vk1-xa2e.google.com with SMTP id 71dfb90a1353d-462a2998bceso361428e0c.2 for <acme@ietf.org>; Thu, 08 Jun 2023 12:08:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20221208; t=1686251316; x=1688843316; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=n8+kmuT99cWfTX1zKvTSP4yVPySmtvmnoba97XMNNFo=; b=ivwKJHrJhHcesNYGXUjv+xFKCXqkxjbPqCtkeJgpAzCddhsIm0DIQZalXag1dmY1o4 NFlxeq5qNtXTfQYTv9xSX04gwb4/CX7rj9xiRoT9IECSI9VIBI3t3WrvOVbRQu3lUXSV mZTj7iQHQwqmQ6p/1Q6BuxMRIsJXZT7liqtfM7FCHGaOsYer0Ixm5tMQ8i/Cm+TZF2Mu /O2LWqgH33TqBMT9GfYF+t3uZ0pCIefZkCjJfmSsAerRydnacO48Jm6L6LLZuS5XjCH0 sSAgGvanmAOy/rB/jyxix1iUkj9Sp23c1WTmwPpvNyDGok760E1E3tCZuBhOlGm9d1B+ 03nw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1686251316; x=1688843316; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=n8+kmuT99cWfTX1zKvTSP4yVPySmtvmnoba97XMNNFo=; b=k35LasKDFQCHOiB2Plhp5t3S3DiRzdRu5EoWxN4K4OCStOkrzoAwiD4lWizc7IoKUd eqVJ/AjRd5Eb/c8PwiReuSfGSq2sIxXevUk0rRMUjX7mx/wCiuLZUAVkJ2Fkpg+EUVOg Gnz8quIt4n1gRZoqKPiq4dFU/P3r8HRpggp0gQ7XP8zHAPrY5luIwm1ouhpj/zDghXwu fCeJqsZYS5sC1V6T8RknF6+BYaV/nsyANqyniIYCWnsn53PuIno6JWpEMKow12q4tXTC xqbwxLwxp27p2TjBhWO1XRQWA3xNDSfOy+w4IH5k0JzM2S8GP//GjQfse11Wic58twrd s1WQ==
X-Gm-Message-State: AC+VfDwEp/SnW9kV00y7k5g3zi2IWVCCPpexKr6ywuswMvDg0JlQRNam Pif490n+ortSpWjYSIH+M4y6ZWetigf5FItosvLPZQ==
X-Google-Smtp-Source: ACHHUZ7GY6uUrsZFzb+oCz4/HRbKDvmPlGSlylEhYw/vCfV60obSz1L/5Z/tA1Z2Vxu9W2yWRZFHidpevrWK6woDKzE=
X-Received: by 2002:a67:f24a:0:b0:43b:46b0:988d with SMTP id y10-20020a67f24a000000b0043b46b0988dmr2857606vsm.29.1686251316211; Thu, 08 Jun 2023 12:08:36 -0700 (PDT)
MIME-Version: 1.0
References: <CAGgd1OdHCZg=g+2E56YyMdizNgm0_K+cOtcqJCEJD=NBrAo-6w@mail.gmail.com> <6495f609-b9a3-cb0e-da36-b076277f8bfb@cs.tcd.ie>
In-Reply-To: <6495f609-b9a3-cb0e-da36-b076277f8bfb@cs.tcd.ie>
From: Amir Omidi <aaomidi@google.com>
Date: Thu, 08 Jun 2023 15:08:25 -0400
Message-ID: <CAMh843vCkMvDxUOKCg7ME1tUMGNR_k7icDR97d2OOtc104m7HA@mail.gmail.com>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Cc: Deb Cooley <debcooley1@gmail.com>, IETF ACME <acme@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000b4ed0905fda2fa9a"
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/QwcHpLaSf79vbB3px3hr5fBkQYU>
Subject: Re: [Acme] Call for adoption of draft-misell-acme-onion-02
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Jun 2023 19:08:42 -0000

I support the draft as it is for adoption. I’m also curious if
https://www.hi.cn/hica-vs-letsencrypt/ is potentially using the draft as
well for their onion support?

On Sun, Jun 4, 2023 at 08:07 Stephen Farrell <stephen.farrell@cs.tcd.ie>
wrote:

>
> Hiya,
>
> On 04/06/2023 12:06, Deb Cooley wrote:
> >   This will be a two week call for adoption ending on 16 June.   Please
> > speak up either for or against adopting this draft.
>
> I had a read of the draft. I support adoption.
>
> I'm not sure I understand the security of the challenge
> schemes sufficiently from reading the draft, but that's
> something that can be addressed as the WG works on it.
>
> To be clear: I'm not asking that the draft fully set out
> why these challenge types are (or are not, for dns-01)
> secure, but I reckon it's important the WG satisfy itself
> about that as the work proceeds, given that have been
> subtle issues with challenges in the past.
>
> There're also some terminology things to get right, e.g.
> that .onion is not a TLD but a special-use domain name.
> (SUDNs are controversial enough things that it'll be
> worth trying to get that text to where it irritates
> the smallest number of people possible, even if that'll
> never be zero:-)
>
> Cheers,
> S.
>
> >
> > Thanks,
> > Deb
> >
> >
> > _______________________________________________
> > Acme mailing list
> > Acme@ietf.org
> > https://www.ietf.org/mailman/listinfo/acme
> _______________________________________________
> Acme mailing list
> Acme@ietf.org
> https://www.ietf.org/mailman/listinfo/acme
>
-- 

Amir Omidi
Software & Security Engineer
aaomidi@google.com