Re: [Acme] Current Charter language

⌘ Matt Miller <mamille2@cisco.com> Fri, 15 May 2015 19:31 UTC

Return-Path: <mamille2@cisco.com>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 953E51A884D for <acme@ietfa.amsl.com>; Fri, 15 May 2015 12:31:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.211
X-Spam-Level:
X-Spam-Status: No, score=-14.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id syMfB5oNP2U6 for <acme@ietfa.amsl.com>; Fri, 15 May 2015 12:31:25 -0700 (PDT)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2AB551A8879 for <acme@ietf.org>; Fri, 15 May 2015 12:31:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2802; q=dns/txt; s=iport; t=1431718275; x=1432927875; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=41xUkOZ8wj46yU+ZO40nPN2r5bOZrZY/QkdsG66dbkY=; b=gw4aD+hc7LfM06ceCDsWDl9tA4EI4I8LvNS31cWhE0yD4YM0AWioJJIo 7biPgHyt996KpJCoBUVPU8o4I6PxZAZXVyaPNEMjpxK086/r8UR8k7RZo pLVbTN2GzH4KmerHrxWOUBIe4JfIVy5ZY7qVu+HEJdcF6JFq4PjrXCNAn k=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0B6DAAUSVZV/4YNJK1cgxBUXgaDGMMhhX4CgTVMAQEBAQEBgQtBBINeAQEEIw8BRQEQCw4KAgIFFggDAgIJAwIBAgE0EQYBDAEFAgEBiCiydqRFAQEBAQEBAQEBAQEBAQEBAQEBAQEBEwSBIYoZhDoJDzMHgmiBRQWMKIpihkqHZ48YI4IJHYFxUIEFQIEBAQEB
X-IronPort-AV: E=Sophos;i="5.13,436,1427760000"; d="scan'208";a="417000729"
Received: from alln-core-12.cisco.com ([173.36.13.134]) by rcdn-iport-9.cisco.com with ESMTP; 15 May 2015 19:31:02 +0000
Received: from xhc-rcd-x15.cisco.com (xhc-rcd-x15.cisco.com [173.37.183.89]) by alln-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id t4FJV2jS004526 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 15 May 2015 19:31:02 GMT
Received: from [10.129.24.109] (10.129.24.109) by xhc-rcd-x15.cisco.com (173.37.183.89) with Microsoft SMTP Server (TLS) id 14.3.195.1; Fri, 15 May 2015 14:31:02 -0500
Message-ID: <55564974.7090803@cisco.com>
Date: Fri, 15 May 2015 13:31:00 -0600
From: ⌘ Matt Miller <mamille2@cisco.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.6.0
MIME-Version: 1.0
To: Richard Barnes <rlb@ipv.sx>, Stephen Farrell <stephen.farrell@cs.tcd.ie>
References: <CA+9kkMBvwLexviH97=dqj40-3-6i6+UMp7hFVzfCpY5_WJAaFQ@mail.gmail.com> <c3f7361df02b4ecfacf86c9ff655ea8f@ustx2ex-dag1mb2.msg.corp.akamai.com> <55563AB8.4050608@cs.tcd.ie> <CA+9kkMARqdWSqK1O-k5OmdmzUXQzx91in6P4Di237tTmzoEQKQ@mail.gmail.com> <55563ECE.2020708@cs.tcd.ie> <CAL02cgRMSZNe0JugjxYMvAFAS+wgKxO2dRQhohfshKk5E0b6hg@mail.gmail.com>
In-Reply-To: <CAL02cgRMSZNe0JugjxYMvAFAS+wgKxO2dRQhohfshKk5E0b6hg@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Originating-IP: [10.129.24.109]
Archived-At: <http://mailarchive.ietf.org/arch/msg/acme/RIo_sGQdwsKiv9JKvzZ-RKROubg>
Cc: "Salz, Rich" <rsalz@akamai.com>, Ted Hardie <ted.ietf@gmail.com>, "acme@ietf.org" <acme@ietf.org>, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Subject: Re: [Acme] Current Charter language
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 May 2015 19:31:27 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 5/15/15 1:20 PM, Richard Barnes wrote:
> 
> 
> On Fri, May 15, 2015 at 2:45 PM, Stephen Farrell 
> <stephen.farrell@cs.tcd.ie <mailto:stephen.farrell@cs.tcd.ie>>
> wrote:
> 
> 
> 
> On 15/05/15 19:38, Ted Hardie wrote:
>> On Fri, May 15, 2015 at 11:28 AM, Stephen Farrell 
>> <stephen.farrell@cs.tcd.ie <mailto:stephen.farrell@cs.tcd.ie>>
>> wrote:
>> 
>> 
>> 
>> On 15/05/15 19:09, Salz, Rich wrote:
>>>> Any other obvious edits needed?
>>> 
>>> LGTM
>> 
>> (no hats)
>> 
>> Me too. I like it and figure it's good enough.
>> 
>> The only thing I'd suggest maybe adding is the illustrative goal 
>> that an "apt-get install apache" should be able to get the 
>> required certificates for a web server automatically, if there is
>> an acme server that is willing to automate that far. And that a
>> subsequent "apt-get upgrade" on that box should ensure that the
>> certificate stuff needed for that apache install gets renewed if
>> necessary.
>> 
>> I can see that it might be tricky to phrase that in language that
>> works in a charter though, but maybe someone's feeling nicely 
>> creative.
>> 
>> 
>> ​ Well, at the moment we says this:
>> 
>> "All of the processing must be done in a manner that is
>> compatible with common service deployment environments, such as
>> hosting environments.​"
>> 
>> Perhaps we can add something just after like this:
>> 
>> "Simplicity in certificate installation and maintenance are key
>> design goals.  Enabling this process to be incorporated into the
>> standard installation and upgrades of web servers via a single
>> command line invocation or flag would be especially desirable".
>> 
>> That's less catchy than "apt-get install acme-cert", but it may
>> be more charter-y.
>> 
>> Is that worth doing?
> I like it anyway. I'm fine if you'd prefer to go ahead without it
> though,
> 
> 
> I like the charter better without it, tbh.  I don't think there's
> any ambiguity in what we're after in this dimension :)
> 
> 

I agree with Richard, FWIW.

And +1 on the rest of the existing charter.  SHIPIT.


- -- 
- - m&m

Matt Miller < mamille2@cisco.com >
Cisco Systems, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - https://gpgtools.org

iQEcBAEBCgAGBQJVVkl0AAoJEDWi+S0W7cO1mA4H/R85YcL8VDmICG6ebl/G1tSn
NksrqJJBBxtsQtw6R2xXWDhJ4QGRPG+Eu3wypQd92uUSb++JwcyF+7B1/pk2gDOO
jWbVjJLzgYsynegMGLYtAiWmOJKK/Ysz/t6UgrqQAtqh83ShqMFCT/dACKfjIAPR
JbZN+AsgIyxCx3jzjjebaHszcy4yBQi91CK8dq/Ok8TKuBs/0D4j+faadcg7QO4o
mtJePv+typLcyWFdE0jg2JxkWSVlVLcjsAWgtMnlTlWCvhaQSyXr9Qlwdp45LptE
MvcYg9xtzOM1bIp1jg2kqeBoK2V2tvjQTSxfsVG46wGnb/Ow1xB5606Zb1jcTQs=
=ryWD
-----END PGP SIGNATURE-----