Re: [Acme] Alexey Melnikov's No Objection on draft-ietf-acme-acme-14: (with COMMENT)

Corey Bonnell <CBonnell@trustwave.com> Thu, 30 August 2018 13:01 UTC

Return-Path: <CBonnell@trustwave.com>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBACD130E95 for <acme@ietfa.amsl.com>; Thu, 30 Aug 2018 06:01:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=trustwave.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SLzU-sHXaIRn for <acme@ietfa.amsl.com>; Thu, 30 Aug 2018 06:01:46 -0700 (PDT)
Received: from seg-node-chi-03.trustwave.com (seg-node-chi-03.trustwave.com [204.13.200.108]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29B81130F4F for <acme@ietf.org>; Thu, 30 Aug 2018 06:01:46 -0700 (PDT)
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (Not Verified[207.46.163.118]) by seg-node-chi-03.trustwave.com with Trustwave SEG (v8, 0, 6, 10791) (using TLS: TLSv1.2, AES256-GCM-SHA384) id <B5b87eab70003>; Thu, 30 Aug 2018 08:01:43 -0500
Received: from SN6PR07MB4575.namprd07.prod.outlook.com (52.135.95.19) by SN6PR07MB4333.namprd07.prod.outlook.com (52.135.90.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1080.15; Thu, 30 Aug 2018 13:01:42 +0000
Received: from SN6PR07MB4575.namprd07.prod.outlook.com ([fe80::d90a:bf73:bb21:af72]) by SN6PR07MB4575.namprd07.prod.outlook.com ([fe80::d90a:bf73:bb21:af72%2]) with mapi id 15.20.1080.015; Thu, 30 Aug 2018 13:01:42 +0000
From: Corey Bonnell <CBonnell@trustwave.com>
To: Richard Barnes <rlb@ipv.sx>, "Manger, James H" <James.H.Manger@team.telstra.com>
CC: IETF ACME <acme@ietf.org>
Thread-Topic: [Acme] Alexey Melnikov's No Objection on draft-ietf-acme-acme-14: (with COMMENT)
Thread-Index: AQHUP4mInYsDF7AmDEqs0QZdul79haTW08mAgAAGcACAABI9AIAAql+AgACh1wD//8hkAA==
Date: Thu, 30 Aug 2018 13:01:42 +0000
Message-ID: <AD58DE14-B7AD-4218-9ACC-8228021B5086@trustwave.com>
References: <153554127552.14913.5752261334380280625.idtracker@ietfa.amsl.com> <CAL02cgRZsexAbNhwb08ROxTSYLqpJEJv2D9-s-sdkZx6SumPOg@mail.gmail.com> <bcff02b8-7dc9-9606-1e73-2b1ba3bb76e1@isode.com> <CAL02cgSCOnp4a_NnxzV+oufhooB1=QC6X5WSX=+_BpX0te0CGQ@mail.gmail.com> <MEAPR01MB3542E26A4ECD6FBFBAE60E4AE5080@MEAPR01MB3542.ausprd01.prod.outlook.com> <CAL02cgSJAnfwPC-LNFkgH_x4cxbGfgom+7DK5u+LAwCemYowfA@mail.gmail.com>
In-Reply-To: <CAL02cgSJAnfwPC-LNFkgH_x4cxbGfgom+7DK5u+LAwCemYowfA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=CBonnell@trustwave.com;
x-originating-ip: [50.243.167.1]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; SN6PR07MB4333; 6:1zvj2VlB7QZBjaUqzti1qtPDM0bU3kqALwVMCtRkCoIWcCiFimXF97V8XxVEEwjKXatu7TnxSOlxdUiyz9oGHUMlE5EqlClYLAhNpJZalGNUxQdUwrFKcU7mFZ7niU9vHR8oZBqrBYHsfjoEY0npFoX+CkeB7mZQZatqrhLNYmIOHC6tfExoFhi4spsggFeVA4PpuDO+WMqsR9OWJ8zDfMeLrVmJ+G3ZK3BX1YCKBJl15kUFTFxED4NmKHs9oT6EcJrqr1Zdd1JUyua+yFzG3Ajm7tVduW70LneiOup9/TQs3kvvCL4KhV4VjUOwtoQ1krhHmGj8B9Vkq4A9RsO6GVn5mDWdi5sY3NtSAEJ4wdq11mOb+FwEGterQoiAcm4bumJ/jGQ0pfvMBbV5tro+X8CGrqUMWl99S/5F/32U8js2QDafCtruqkn1bG7GV0dtnRPb6tPlG6vzSuj4VX+3LQ==; 5:O3PSAWvutakrpfR9azxfRulZbyIGeazmzWjoraFebbHEY9gha54ChUnXHTzACFpJodVEi5+2MZk3vV6khuLEXo1JX1vhz5WNrs1jPSCaEQjDVeQfNm5fB8SWOZmkhal++MCM53usJidO+J5fDw/GPT7YT5sdnLTA3Cq+z75qqAk=; 7:xCnHmQh37VY+hOEnQs+1GKa8D+6dXmzbyclHtuuZjcmLEwg/E4DaGKBMyQIQY2ZUUUTbyliTuU3Ou0Vvih4b2pgFT89shhcZcJmBio9bvQIcamJalGnn0YcbTKnXoiS8a43Ogj/Yb8fgajCk3bIarummcPi0uscuK6YuF0W98FfZuhMMrRE1sxCRAVzEWaEnODi1CE9XIBAmxSFJ2uhtMh4aOdBQRDn5u39UubWzkxJIUAaJQ8ke21JYimWfs/9Q
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 1f70e5a1-379f-4ca3-db85-08d60e78bba1
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989137)(5600074)(711020)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(2017052603328)(7153060)(7193020); SRVR:SN6PR07MB4333;
x-ms-traffictypediagnostic: SN6PR07MB4333:
x-microsoft-antispam-prvs: <SN6PR07MB433385C1E82B1606C681AA8DCF080@SN6PR07MB4333.namprd07.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(28532068793085)(272811157607776)(21748063052155)(67441168502697);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(5005006)(8121501046)(3002001)(10201501046)(93006095)(93001095)(3231311)(944501410)(52105095)(149027)(150027)(6041310)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(20161123560045)(201708071742011)(7699016); SRVR:SN6PR07MB4333; BCL:0; PCL:0; RULEID:; SRVR:SN6PR07MB4333;
x-forefront-prvs: 07807C55DC
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(39860400002)(346002)(396003)(366004)(376002)(189003)(199004)(72206003)(186003)(86362001)(25786009)(4326008)(81166006)(66066001)(8676002)(6436002)(7736002)(5250100002)(106356001)(6486002)(105586002)(99286004)(53936002)(236005)(53546011)(81156014)(76176011)(2900100001)(26005)(6506007)(102836004)(229853002)(33656002)(14454004)(478600001)(6116002)(6246003)(93886005)(82746002)(5660300001)(110136005)(6306002)(2616005)(54896002)(316002)(36756003)(3846002)(476003)(9326002)(606006)(80792005)(97736004)(68736007)(2906002)(446003)(256004)(486006)(83716003)(6512007)(8936002)(11346002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR07MB4333; H:SN6PR07MB4575.namprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: trustwave.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: Ve9AYURKfDRarD4Iv5MFShbRUDOzwn5XyH8gLbezAlCl6Lz0SsTcBdMer4/q2gLMo/jhC3tQmMuVY7wahG8o9MNnf0FYjV1Yqo82WE7yTgusaNHSkjnfwmiH2WFrlwCWmwcamBtbXwaqUuKsKDuRlaZPxGyEYtnbB2NEjTyMBfHX1llmcilWs5co55tQCDKsf1w3IieKdRhNTp4s/MdnxV/WffIRwxmW6pfySj515xjZNt282LshpZOBdzmiQoclEDdmc7e8rjzxiymZWtVQ6ts6r6HmE3xzbuSTcPGS4ApCS5oyZSlDlQ1LM0pmTKYDYoQjSxxWiC3y0BSlgeBu1cXtxhH9Pzxl9usHgx03OIE=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_AD58DE14B7AD42189ACC8228021B5086trustwavecom_"
MIME-Version: 1.0
X-OriginatorOrg: trustwave.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 1f70e5a1-379f-4ca3-db85-08d60e78bba1
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Aug 2018 13:01:42.5084 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cb1dab68-a067-4b6b-ae7e-c012e8c33f6a
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR07MB4333
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=trustwave.com; s=080318_segcloud; t=1535634104; bh=dIpDaZEaG9J4ZVj+evdKPdLv6/ZtQ9VyutsJWsl2Bcs=; h=From:To:CC:Subject:Thread-Topic:Thread-Index:Date:Message-ID: References:In-Reply-To:Accept-Language:Content-Language: X-MS-Has-Attach:X-MS-TNEF-Correlator:authentication-results: x-originating-ip:x-ms-publictraffictype: x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:MIME-Version:X-OriginatorOrg: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id: X-MS-Exchange-Transport-CrossTenantHeadersStamped; b=c4q+ld/dUjY+VuSI8Qe9QIPpZRR6vtCs2fe/iZqlmey0BpHsBAV4/lO+pFF88zFQS 34T/+DNQwAqsc2Vkbm/xN7qXR+rQ/jCoHhGwojaUa1GdeADU8xad8zRGL94fqu+Tiu Jw5qSd3oniJS97dH7nTP02ED8br/kI7rtM6vkyo/y30cPp8O75KS0zk/ijGIEXgwdX nq1RI3xHXzMX5YOmrjHlWb9JwrzXlnEf2Um7SsoirzfEpPD3q58XLV8kSCjyEWY7V0 7dHTdRcDq0X7w+zPF2jC0ASisf+l/WSy5f5jr3Y0uZ2NzU00KaystbGZycuV/+6G/Z eYut9LgSAYnAQ==
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/o8wEH54_WFB6WAr8O-6YvYAmqhA>
Subject: Re: [Acme] Alexey Melnikov's No Objection on draft-ietf-acme-acme-14: (with COMMENT)
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Aug 2018 13:01:49 -0000

Hello,
I just wanted to point out that RFC 5234 defines a core set of production rules in Appendix B (https://tools.ietf.org/html/rfc5234#appendix-B) that define commonly used rules such as “DIGIT”, “ALPHA”, etc. Using them would make the base64url rule clearer:

base64url = ALPHA / DIGIT / “-“ / “_”

Thanks,
Corey

From: Acme <acme-bounces@ietf.org> on behalf of Richard Barnes <rlb@ipv.sx>
Date: Thursday, August 30, 2018 at 8:21 AM
To: "Manger, James H" <James.H.Manger@team.telstra.com>
Cc: IETF ACME <acme@ietf.org>
Subject: Re: [Acme] Alexey Melnikov's No Objection on draft-ietf-acme-acme-14: (with COMMENT)

Thanks, James.  Fixed in the PR.

On Wed, Aug 29, 2018 at 10:41 PM Manger, James <James.H.Manger@team.telstra.com<mailto:James.H.Manger@team.telstra.com>> wrote:
>>     base64url = [A-Z] / [a-z] / [0-9] / "-" / "_"

> base64url = (%x40-5A) / (%x61-7A) / (%x30-39) / "-" / "_"

“A” is %x41 (not %x40)

--
James Manger