[Acme] Re: I-D Action: draft-ietf-acme-dns-account-label-00.txt

Benjamin Kaduk <kaduk@mit.edu> Tue, 26 November 2024 22:41 UTC

Date: Tue, 26 Nov 2024 14:40:09 -0800
From: Benjamin Kaduk <kaduk@mit.edu>
To: acme@ietf.org
Message-ID: <Z0ZN3lcq-OOHrR92@kduck.mit.edu>
References: <173153791646.1068266.13137272409568943240@dt-datatracker-5f77bcf4bd-4q5pd>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <173153791646.1068266.13137272409568943240@dt-datatracker-5f77bcf4bd-4q5pd>
Message-ID-Hash: 6N66KRC5DKLHM7UI67MHK6VTTRUDRPYC
Precedence: list
Subject: [Acme] Re: I-D Action: draft-ietf-acme-dns-account-label-00.txt
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/_NtXBZqB9P0EmDbhTwhJGTOz0hQ>

Hi all,

This draft is marked as "Replaces: draft-ietf-acme-scoped-dns-challenges".
Is the intent only to replace that document to the extent that it
previously defined the dns-account-01 challenge (but to continue to
progress draft-ietf-acme-scoped-dns-challenges for the dns-02 challenge)?
I think the incorporation of the guidance from
draft-ietf-dnsop-domain-verification-techniques back in February was good
and would like to see it progress, but having
draft-ietf-acme-scoped-dns-challenges marked as "replaced by" a document
that does not cover dns-02 makes it look like dns-02 is not going to be
pursued further.

What are your plans for dns-02?

Thanks,

Ben


On Wed, Nov 13, 2024 at 02:45:16PM -0800, internet-drafts@ietf.org wrote:
> Internet-Draft draft-ietf-acme-dns-account-label-00.txt is now available. It
> is a work item of the Automated Certificate Management Environment (ACME) WG
> of the IETF.
> 
>    Title:   Automated Certificate Management Environment (ACME) DNS Labeled With ACME Account ID Challenge
>    Authors: Antonios A. Chariton
>             Amir A. Omidi
>             James Kasten
>             Fotis Loukos
>             Stanislaw A. Janikowski
>    Name:    draft-ietf-acme-dns-account-label-00.txt
>    Pages:   9
>    Dates:   2024-11-13
> 
> Abstract:
> 
>    This document outlines a new DNS-based challenge type for the ACME
>    protocol that enables multiple independent systems to authorize a
>    single domain name concurrently.  By adding a unique label to the DNS
>    validation record name, the dns-account-01 challenge avoids CNAME
>    delegation conflicts inherent to the dns-01 challenge type.  This is
>    particularly valuable for multi-region or multi-cloud deployments
>    that wish to rely upon DNS-based domain control validation and need
>    to independently obtain certificates for the same domain.
> 
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-acme-dns-account-label/
> 
> There is also an HTMLized version available at:
> https://datatracker.ietf.org/doc/html/draft-ietf-acme-dns-account-label-00
> 
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> 
> 
> _______________________________________________
> Acme mailing list -- acme@ietf.org
> To unsubscribe send an email to acme-leave@ietf.org

[Acme] I-D Action: draft-ietf-acme-dns-account-la… internet-drafts
[Acme] Re: I-D Action: draft-ietf-acme-dns-accoun… Benjamin Kaduk