Re: [Acme] FW: [EXTERNAL] New Version Notification for draft-vanbrouwershaven-acme-auto-discovery-00.txt

Mike Ounsworth <Mike.Ounsworth@entrust.com> Tue, 22 August 2023 15:15 UTC

Return-Path: <Mike.Ounsworth@entrust.com>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E306C15106C for <acme@ietfa.amsl.com>; Tue, 22 Aug 2023 08:15:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.705
X-Spam-Level:
X-Spam-Status: No, score=-2.705 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=entrust.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oDcUHn4Kssq5 for <acme@ietfa.amsl.com>; Tue, 22 Aug 2023 08:15:48 -0700 (PDT)
Received: from mx08-0015a003.pphosted.com (mx08-0015a003.pphosted.com [185.183.30.227]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1191C151074 for <acme@ietf.org>; Tue, 22 Aug 2023 08:15:47 -0700 (PDT)
Received: from pps.filterd (m0242863.ppops.net [127.0.0.1]) by mx08-0015a003.pphosted.com (8.17.1.22/8.17.1.22) with ESMTP id 37MBmn5e030488; Tue, 22 Aug 2023 10:15:42 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=entrust.com; h= from:to:cc:subject:date:message-id:references:in-reply-to :content-type:mime-version; s=mail1; bh=mjossQOUhilSUxnI1nuThC4f Y9ZLDlahkkKqXElL6eM=; b=E3Prq5fkpQ6RAfO6Rwvd6ywtHvqg4qVJzpluqNUt /UL/Ix4uMorJlkRKnruPhnAYvxuNxHBGWMjQo6OKWdTm3rRadbGNjEgwkyXwzM7z cK4kQrLFJtZdw/RKWWmohLAzMoKpZ+lQq0vCVUn2ACNwZTDc3Z+rwuWIyJZQ7E3l FPDZp9plmrGqqRWjclRnYe969lu7KfzcmOlxPwRz5cl11hvpcqxUFOJs1bwmOx2c fZfP7GwmEc/3nIOIF+vKrdgNHJnxCxSUMc/WNq3CIH8FQ9RQyUSTPrTkWB1GxiRm gVeUqw7slDFOSdKm/QZiIC5uT3nzVRlgCOOUPnmj2443FA==
Received: from nam12-dm6-obe.outbound.protection.outlook.com (mail-dm6nam12lp2170.outbound.protection.outlook.com [104.47.59.170]) by mx08-0015a003.pphosted.com (PPS) with ESMTPS id 3skuatx517-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 22 Aug 2023 10:15:41 -0500 (CDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=j2zNEl9wQL3zfxZcgM2q+JuPelbSwpt3JVkNit3w1VoOdWjsQBkeyAffuYx+N3zEl5mZLQtwquPd9iTjlY98nzOmojkH8fhPVRKLdrHyrF/whS0GobfSoQ0L0kaPd4Vncd0yCw5zU3X+kWhCEFLdB55fFPKA3dV+2Mvb/yAFGkm/WASiqL4hkHGqkMiZ2kXqKsz9+lYdtq52L+Yv8sUbskVN7sYppAXB/npGrxAsG/OLKUkyrI4Aj0a0tfaIpcM+JTheSb9ewu4cr27e5oWqJSs3xT0brkNj/3Z5Ye5JHX4xPg/ZWHKy/E54wYV0br1zj11OXj+FBN00Z+st4mGwiA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=whfI1EKZ2hl4gIj990vSd06/mnYJfZIPBxrNxNhyV3M=; b=b63IYTnt60I8SzTUxoSQBps5mBBWits+comFyJaCEBGl9ga7TZ9sTaX13uktPSBrq4WL6r9NpZ3r974F0hZytF62DQfgoHIT7NtlSXJAk689L+a6kHgKUZNT647Glvivg7x42WrRAbgkqg4YNbWP+3RpNHgPHYzjcZ2L8g5M70oMjqy1FW8Zdfs33cs/nFi/rWwSkpxu+vPrd4YW1wQJEqap6o8iVRdpRv9bed+lOKRqvAy/TE3LOufyq1t/yLCy3ljIfr8O/mjcPAN9OBdIw8yYJmhmr+vx3q1vGao7CM8OJrkvC3fSIL2C8ZagznU8fMLPCvO4Z6kwQ5VgrOJf0Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=entrust.com; dmarc=pass action=none header.from=entrust.com; dkim=pass header.d=entrust.com; arc=none
Received: from CH0PR11MB5739.namprd11.prod.outlook.com (2603:10b6:610:100::20) by PH0PR11MB5000.namprd11.prod.outlook.com (2603:10b6:510:41::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6699.24; Tue, 22 Aug 2023 15:15:34 +0000
Received: from CH0PR11MB5739.namprd11.prod.outlook.com ([fe80::902f:f92b:8d48:f4bf]) by CH0PR11MB5739.namprd11.prod.outlook.com ([fe80::902f:f92b:8d48:f4bf%4]) with mapi id 15.20.6699.022; Tue, 22 Aug 2023 15:15:34 +0000
From: Mike Ounsworth <Mike.Ounsworth@entrust.com>
To: Q Misell <q=40as207960.net@dmarc.ietf.org>, Paul van Brouwershaven <Paul.vanBrouwershaven@entrust.com>
CC: Fraser Tweedale <frase@frase.id.au>, Richard Barnes <rlb@ipv.sx>, "acme@ietf.org" <acme@ietf.org>
Thread-Topic: [Acme] FW: [EXTERNAL] New Version Notification for draft-vanbrouwershaven-acme-auto-discovery-00.txt
Thread-Index: AQHZsBeqgO/Qy8UW2EKh0oZ3cvLhkK+s0GpwgAAuOwCAABHCgIAAXRqAgEL/VgCABkj8gIAAAKRQ
Date: Tue, 22 Aug 2023 15:15:34 +0000
Message-ID: <CH0PR11MB57396FFE506C4F380CC671CE9F1FA@CH0PR11MB5739.namprd11.prod.outlook.com>
References: <168865435873.61106.2850041921157081937@ietfa.amsl.com> <CH0PR11MB5739FDB26BF675925C449AA69F2CA@CH0PR11MB5739.namprd11.prod.outlook.com> <CAL02cgSH1XM0krpYuCVP1VNpZ8EpprHog1+-oeQkN0a5bX8vHA@mail.gmail.com> <LV2PR11MB5975C3F165D41FBA2BEED912F82CA@LV2PR11MB5975.namprd11.prod.outlook.com> <ZKdW965KnS_C1P6n@bacardi.hollandpark.frase.id.au> <LV2PR11MB597593121DDD6C510A187D16F81BA@LV2PR11MB5975.namprd11.prod.outlook.com> <CAMEWqGsMAbDXP10WWbXNkceN7f2u9n8fHJi8zfRURvPJhLCEuA@mail.gmail.com>
In-Reply-To: <CAMEWqGsMAbDXP10WWbXNkceN7f2u9n8fHJi8zfRURvPJhLCEuA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: CH0PR11MB5739:EE_|PH0PR11MB5000:EE_
x-ms-office365-filtering-correlation-id: d6d4c1cb-5e70-45d1-0285-08dba322a1c9
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CH0PR11MB5739.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(396003)(39850400004)(136003)(376002)(346002)(366004)(1800799009)(186009)(451199024)(54906003)(76116006)(66446008)(66476007)(66556008)(6636002)(64756008)(316002)(66946007)(9686003)(110136005)(8676002)(8936002)(4326008)(966005)(41300700001)(122000001)(478600001)(55016003)(71200400001)(38100700002)(38070700005)(166002)(15650500001)(53546011)(6506007)(83380400001)(66574015)(2906002)(7696005)(86362001)(5660300002)(26005)(33656002)(52536014); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_CH0PR11MB57396FFE506C4F380CC671CE9F1FACH0PR11MB5739namp_"
MIME-Version: 1.0
X-OriginatorOrg: entrust.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CH0PR11MB5739.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d6d4c1cb-5e70-45d1-0285-08dba322a1c9
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Aug 2023 15:15:34.1038 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f46cf439-27ef-4acf-a800-15072bb7ddc1
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: XLVb51PHlljL/G4noDAc+CstmqBFD2I4rBR3qOSuwddGb8gybau9Lj0HaEmIwYv53niYDnX1X3hAv/g+Qs+RnAasyT+MCRgRUkj+fPpC1n8=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR11MB5000
X-Proofpoint-ORIG-GUID: R6Vp9lrKZFEFPrDMjOX6g7znNWVflVJx
X-Proofpoint-GUID: R6Vp9lrKZFEFPrDMjOX6g7znNWVflVJx
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.267,Aquarius:18.0.957,Hydra:6.0.601,FMLib:17.11.176.26 definitions=2023-08-22_13,2023-08-22_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 bulkscore=0 spamscore=0 clxscore=1011 phishscore=0 priorityscore=1501 impostorscore=0 adultscore=0 suspectscore=0 malwarescore=0 mlxscore=0 lowpriorityscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2306200000 definitions=main-2308220116
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/UV5ET0T7cOnVjh-SfkdbRIgrtfw>
Subject: Re: [Acme] FW: [EXTERNAL] New Version Notification for draft-vanbrouwershaven-acme-auto-discovery-00.txt
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Aug 2023 15:15:51 -0000

At 117, I spoke with Phillip Hallam-Baker (the IANA Designated Expert for the CAA registry) and he’s ok with creating whatever registries for whatever parameters we need to make this work.

---
Mike Ounsworth

From: Q Misell <q=40as207960.net@dmarc.ietf.org>
Sent: Tuesday, August 22, 2023 10:12 AM
To: Paul van Brouwershaven <Paul.vanBrouwershaven@entrust.com>
Cc: Fraser Tweedale <frase@frase.id.au>; Richard Barnes <rlb@ipv.sx>; Mike Ounsworth <Mike.Ounsworth@entrust.com>; acme@ietf.org
Subject: Re: [Acme] FW: [EXTERNAL] New Version Notification for draft-vanbrouwershaven-acme-auto-discovery-00.txt

I think another RFC defining the existence of this registry would be the best approach. Any statements contained in this email are personal to the author and are not necessarily the statements of the company unless specifically stated. AS207960

I think another RFC defining the existence of this registry would be the best approach.
________________________________

Any statements contained in this email are personal to the author and are not necessarily the statements of the company unless specifically stated. AS207960 Cyfyngedig, having a registered office at 13 Pen-y-lan Terrace, Caerdydd, Cymru, CF23 9EU, trading as Glauca Digital, is a company registered in Wales under № 12417574<https://urldefense.com/v3/__https:/find-and-update.company-information.service.gov.uk/company/12417574__;!!FJ-Y8qCqXTj2!cq6PNdD0buWytA9oZExMWf-8K7lmk_kwPaVriQS6hjZYizFKrT0vItOARebexN5I-bBjjduvvC8nU02b7PWtr2tpXmzCAgWB5sva$>, LEI 875500FXNCJPAPF3PD10. ICO register №: ZA782876<https://urldefense.com/v3/__https:/ico.org.uk/ESDWebPages/Entry/ZA782876__;!!FJ-Y8qCqXTj2!cq6PNdD0buWytA9oZExMWf-8K7lmk_kwPaVriQS6hjZYizFKrT0vItOARebexN5I-bBjjduvvC8nU02b7PWtr2tpXmzCApQFJXKj$>. UK VAT №: GB378323867. EU VAT №: EU372013983. Turkish VAT №: 0861333524. South Korean VAT №: 522-80-03080. AS207960 Ewrop OÜ, having a registered office at Lääne-Viru maakond, Tapa vald, Porkuni küla, Lossi tn 1, 46001, trading as Glauca Digital, is a company registered in Estonia under № 16755226. Estonian VAT №: EE102625532. Glauca Digital and the Glauca logo are registered trademarks in the UK, under № UK00003718474 and № UK00003718468, respectively.


On Fri, 18 Aug 2023 at 17:13, Paul van Brouwershaven <Paul.vanBrouwershaven=40entrust.com@dmarc.ietf.org<mailto:40entrust.com@dmarc.ietf.org>> wrote:
Hi Fraser,

I have not replied to this part of your message:

> Regarding registration of CAA attributes (IANA considerations): they need to be registered in the "Certification Authority Restriction Properties" registry:
> https://www.iana.org/assignments/pkix-parameters/pkix-parameters.xhtml#caa-properties<https://urldefense.com/v3/__https:/www.iana.org/assignments/pkix-parameters/pkix-parameters.xhtml*caa-properties__;Iw!!FJ-Y8qCqXTj2!cq6PNdD0buWytA9oZExMWf-8K7lmk_kwPaVriQS6hjZYizFKrT0vItOARebexN5I-bBjjduvvC8nU02b7PWtr2tpXmzCAgEezh8x$>

In the draft we are defining a parameter and not a property, I don't think there is a registry for parameters as these can be CA specific.

However, I think it could be valuable to define a registry as we know have multiple documents (such as RFC 8657) defining parameters, but I'm not sure how we would initiate that.

Paul

Any email and files/attachments transmitted with it are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.
_______________________________________________
Acme mailing list
Acme@ietf.org<mailto:Acme@ietf.org>
https://www.ietf.org/mailman/listinfo/acme<https://urldefense.com/v3/__https:/www.ietf.org/mailman/listinfo/acme__;!!FJ-Y8qCqXTj2!cq6PNdD0buWytA9oZExMWf-8K7lmk_kwPaVriQS6hjZYizFKrT0vItOARebexN5I-bBjjduvvC8nU02b7PWtr2tpXmzCAv69t6Kl$>