Return-Path: X-Original-To: acme@ietfa.amsl.com Delivered-To: acme@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 726441A6EE8 for ; Fri, 15 May 2015 11:38:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hcdAOc430bwK for ; Fri, 15 May 2015 11:38:47 -0700 (PDT) Received: from mail-wg0-x22a.google.com (mail-wg0-x22a.google.com [IPv6:2a00:1450:400c:c00::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B65B1A1B5D for ; Fri, 15 May 2015 11:38:47 -0700 (PDT) Received: by wgin8 with SMTP id n8so123309075wgi.0 for ; Fri, 15 May 2015 11:38:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=GJ5/kGAH/J3Xy9uF0ShdGOtP4OO17sQp/1YCtsskzOQ=; b=LON1iYUZkVbeWh1UJb4+Oq238oQp+VMMSRDM+6Z7IOdyW0Bb14dHNkGcga9FMpYtQY Ki6t0s36RMzQfSBI7RSWoHCOetqH28fsiJOO4IMVghU9DZmxcVNhhXSAX5JTejczIzMX xKKWW6HaemJlkFlq9cUp8iGdUCI9y0LEMryZTGbIie+mJe2nkq7d3ZJf1yHwLKl5SV06 GmmcJe1puH+Zcidm9SLYmBcnrZy6ag1YaHN3JAfHvQ0/rI/jJCk/4iBsbUTumezPSaiS QzJ9uK5qBEN800hYYgRJcC1Ht6CuZpgJy1r9ReFSIuU0fVs0FAZUDt4Sz8xBWMTPLimG m21A== MIME-Version: 1.0 X-Received: by 10.180.84.168 with SMTP id a8mr21057654wiz.40.1431715125867; Fri, 15 May 2015 11:38:45 -0700 (PDT) Received: by 10.194.185.171 with HTTP; Fri, 15 May 2015 11:38:45 -0700 (PDT) In-Reply-To: <55563AB8.4050608@cs.tcd.ie> References: <55563AB8.4050608@cs.tcd.ie> Date: Fri, 15 May 2015 11:38:45 -0700 Message-ID: From: Ted Hardie To: Stephen Farrell Content-Type: multipart/alternative; boundary=f46d041827f27f3a5f051623278e Archived-At: Cc: "Salz, Rich" , Kathleen Moriarty , "acme@ietf.org" Subject: Re: [Acme] Current Charter language X-BeenThere: acme@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Automated Certificate Management Environment List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 May 2015 18:38:49 -0000 --f46d041827f27f3a5f051623278e Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Fri, May 15, 2015 at 11:28 AM, Stephen Farrell wrote: > > > On 15/05/15 19:09, Salz, Rich wrote: > >> Any other obvious edits needed? > > > > LGTM > > (no hats) > > Me too. I like it and figure it's good enough. > > The only thing I'd suggest maybe adding is the illustrative goal > that an "apt-get install apache" should be able to get the required > certificates for a web server automatically, if there is an acme > server that is willing to automate that far. And that a subsequent > "apt-get upgrade" on that box should ensure that the certificate > stuff needed for that apache install gets renewed if necessary. > > I can see that it might be tricky to phrase that in language > that works in a charter though, but maybe someone's feeling nicely > creative. > > =E2=80=8BWell, at the moment we says this: "All of the processing must be done in a manner that is compatible with common service deployment environments, such as hosting environments.=E2=80=8B" Perhaps we can add something just after like this: "Simplicity in certificate installation and maintenance are key design goals. Enabling this process to be incorporated into the standard installation and upgrades of web servers via a single command line invocation or flag would be especially desirable". That's less catchy than "apt-get install acme-cert", but it may be more charter-y. Is that worth doing? Ted > The reason to want this in (for me) is that I think that example > can ground the work and be useful to head off some potential rat > holes that might otherwise crop up. And it captures the by far > most important requirement for acme to meet which is good to keep > in front of us. > > Cheers, > S > > > > > -- > > Senior Architect, Akamai Technologies > > IM: richsalz@jabber.at Twitter: RichSalz > > _______________________________________________ > > Acme mailing list > > Acme@ietf.org > > https://www.ietf.org/mailman/listinfo/acme > > > > > --f46d041827f27f3a5f051623278e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On Fri, May 15, 2015 at 11:28 A= M, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote= :


On 15/05/15 19:09, Salz, Rich wrote:
>> Any other obvious edits needed?
>
> LGTM

(no hats)

Me too. I like it and figure it's good enough.

The only thing I'd suggest maybe adding is the illustrative goal
that an "apt-get install apache" should be able to get the requir= ed
certificates for a web server automatically, if there is an acme
server that is willing to automate that far. And that a subsequent
"apt-get upgrade" on that box should ensure that the certificate<= br> stuff needed for that apache install gets renewed if necessary.

I can see that it might be tricky to phrase that in language
that works in a charter though, but maybe someone's feeling nicely
creative.


=E2=80=8BWell, at the moment we says th= is:

"All of the processing must be done in a manner that is com= patible
with common service deployment environments, such as hosting environments.=E2=80=8B"

Perhaps we can add so= mething just after like this:

"Simplicity in ce= rtificate installation and maintenance are
key design go= als.=C2=A0 Enabling this process to be incorporated
into= the standard installation and upgrades of web servers
= via a single command line invocation or flag would be
= especially desirable".

That's less catchy t= han "apt-get install acme-cert", but it
may be= more charter-y.

Is that worth doing?

<= div class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;font-siz= e:small">Ted


=C2=A0
The reason to want this in (for me) is that I think that example
can ground the work and be useful to head off some potential rat
holes that might otherwise crop up. And it captures the by far
most important requirement for acme to meet which is good to keep
in front of us.

Cheers,
S

>
> --
> Senior Architect, Akamai Technologies
> IM: richsalz@jabber.at Twitt= er: RichSalz
> _______________________________________________
> Acme mailing list
> Acme@ietf.org
> https://www.ietf.org/mailman/listinfo/acme
>
>

--f46d041827f27f3a5f051623278e--