IETF Logo Mail Archive

Re: [Acme] WG meeting at IETF 93

John Mattsson <john.mattsson@ericsson.com> Mon, 06 July 2015 10:38 UTC

Return-Path: <john.mattsson@ericsson.com>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5714B1ACDCD for <acme@ietfa.amsl.com>; Mon, 6 Jul 2015 03:38:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LZdblLlLnW0D for <acme@ietfa.amsl.com>; Mon, 6 Jul 2015 03:38:21 -0700 (PDT)
Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60CA61ACDD0 for <acme@ietf.org>; Mon, 6 Jul 2015 03:38:20 -0700 (PDT)
X-AuditID: c1b4fb2d-f79176d00000321c-2e-559a5a9aa5a0
Received: from ESESSHC006.ericsson.se (Unknown_Domain [153.88.253.124]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 57.C3.12828.A9A5A955; Mon, 6 Jul 2015 12:38:18 +0200 (CEST)
Received: from ESESSMB307.ericsson.se ([169.254.7.44]) by ESESSHC006.ericsson.se ([153.88.183.36]) with mapi id 14.03.0210.002; Mon, 6 Jul 2015 12:38:17 +0200
From: John Mattsson <john.mattsson@ericsson.com>
To: Ted Hardie <ted.ietf@gmail.com>
Thread-Topic: [Acme] WG meeting at IETF 93
Thread-Index: AQHQsDky3s8uZ2wIBkCWnFgVL80YqZ3OLcWA
Date: Mon, 06 Jul 2015 10:38:17 +0000
Message-ID: <E4B7B9BC-8521-4889-8D4D-39AC19EAE70E@ericsson.com>
References: <CA+9kkMBtYC5-ExmAMcmX22C_CjwFXWJTpvCXyODxhE1QU0p-pQ@mail.gmail.com>
In-Reply-To: <CA+9kkMBtYC5-ExmAMcmX22C_CjwFXWJTpvCXyODxhE1QU0p-pQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [153.88.183.17]
Content-Type: multipart/alternative; boundary="_000_E4B7B9BC852148898D4D39AC19EAE70Eericssoncom_"
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprGIsWRmVeSWpSXmKPExsUyM+Jvje6sqFmhBj/3CVmseh5o8X9LJ4tF 41w7B2aPyUcWMHvsnHWX3WPJkp9MAcxRXDYpqTmZZalF+nYJXBmNM/4zF/zUrWhbcJ6lgfGv WhcjJ4eEgInElX2PWCBsMYkL99azdTFycQgJHGWUuPl/FlhCSGARo8T8+0YgNpuAgcTcPQ1s ILaIgLLE3is7wGxmgQKJJR9Os4LYwgKaEl9mbQOKcwDVaElM/BcAUW4k8fnWYSYQm0VAReL2 jf/MICW8AvYSM9dqQGwKkHh+fxrYFE6BQIn2k+3MIDYj0GnfT61hgtgkLnHryXwmiJMFJJbs Oc8MYYtKvHz8jxVkpISAosTyfjmI8mSJ+Ufes4PYvAKCEidnPmGZwCg6C8mkWUjKZiEpg4jr SCzY/YkNwtaWWLbwNTOMfebAY6hea4nTs3pZkdUsYORYxShanFpcnJtuZKyXWpSZXFycn6eX l1qyiREYkQe3/Nbdwbj6teMhRgEORiUe3gcrZoYKsSaWFVfmHmKU5mBREuedsTkvVEggPbEk NTs1tSC1KL6oNCe1+BAjEwenVANjzhOW+3sCSx3WnPpvejGU7eSk0yv+Gi3Innfr9ukvD072 XZJU8F+3bo2K5MWsi51vmZ3LVx4yk0qXvDj1x0fLT98YffYatCTmTJNf8z65JSRXyeSpxonL pnZOL5imXOkvU2E/L7zVw0tDjLN4TeznD9OjNbMPuuUV1Te6mWyeOn0/W4g4r6ufEktxRqKh FnNRcSIARFoqOKkCAAA=
Archived-At: <http://mailarchive.ietf.org/arch/msg/acme/VoGiX1PF_Zv7PHZ4dKNNENwfJQY>
Cc: "Salz, Rich" <rsalz@akamai.com>, "acme@ietf.org" <acme@ietf.org>, Robert Skog <robert.skog@ericsson.com>
Subject: Re: [Acme] WG meeting at IETF 93
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 06 Jul 2015 10:38:23 -0000

Howdy,

I request time to present https://datatracker.ietf.org/doc/draft-mattsson-acme-use-cases/ (focusing on the tunnelling illustrated in Figure 3).

I think there need be be a discussion on how ACME is supposed to work in domains with more than one web server. During the BoF Eric Rescorla briefly discussed how to tunnel the ACME protocol, i.e. the scenario illustrated in Figure 3 of draft-mattsson-use-cases. In this scenario the domain owner may like to put restrictions on the issued certificate (e.g. only certain subdomain and limited lifetime). To my understading, draft-barnes-acme would only allow the domain owner to forward or block the CSR from the web server, and then forward of block the issued certificate from the CA. And to my understanding, there is no mechanism to suggest the lifetime of the certificate.

Cheers,
John

On 26 Jun 2015, at 19:54, Ted Hardie <ted.ietf@gmail.com<mailto:ted.ietf@gmail.com>> wrote:

Howdy,

As you've seen from the IESG announcement, ACME has been approved as a working group, so our meeting in Prague will be as a working group rather than a BoF.  The IETF agenda is still tentative, but we're currently scheduled for Thursday, July 23rd, 15:20-17:20, in Karlin I/II.  (There is still a chance that will change, though, so please do not tailor travel to just that time frame!)

Our charter lists draft-barnes-acme as a starting point, and Rich and I are asking the authors to produce an update for the meeting.  We expect some of the working group time in Prague to be a document review/discussion of that draft.

If you have other agenda items you'd like to request time for, please send them to the list.

thanks,

Ted and Rich
_______________________________________________
Acme mailing list
Acme@ietf.org<mailto:Acme@ietf.org>
https://www.ietf.org/mailman/listinfo/acme

v2.23.0 | Report a Bug | By Email