Re: [Acme] Second AD Review: draft-ietf-acme-star

<frederic.fieau@orange.com> Wed, 03 July 2019 12:13 UTC

Return-Path: <frederic.fieau@orange.com>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 020B6120114 for <acme@ietfa.amsl.com>; Wed, 3 Jul 2019 05:13:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level:
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M8-loOGYNnaj for <acme@ietfa.amsl.com>; Wed, 3 Jul 2019 05:13:15 -0700 (PDT)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BF7D120072 for <acme@ietf.org>; Wed, 3 Jul 2019 05:13:15 -0700 (PDT)
Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar23.francetelecom.fr (ESMTP service) with ESMTP id 45f0PP3pPSzBsvD for <acme@ietf.org>; Wed, 3 Jul 2019 14:13:13 +0200 (CEST)
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.32]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id 45f0PP2mywz5vMq for <acme@ietf.org>; Wed, 3 Jul 2019 14:13:13 +0200 (CEST)
Received: from OPEXCAUBM24.corporate.adroot.infra.ftgroup ([fe80::b43f:9973:861e:42af]) by OPEXCAUBM7C.corporate.adroot.infra.ftgroup ([fe80::2c53:f99a:e2a9:19c6%21]) with mapi id 14.03.0439.000; Wed, 3 Jul 2019 14:13:13 +0200
From: frederic.fieau@orange.com
To: "acme@ietf.org" <acme@ietf.org>
Thread-Topic: [Acme] Second AD Review: draft-ietf-acme-star
Thread-Index: AQHVME+pqBBnRgjCJECNx8HuPcPLiaa4zf2w
Date: Wed, 03 Jul 2019 12:13:12 +0000
Message-ID: <15913_1562155993_5D1C9BD9_15913_189_1_1BD328329726EF4E91AE924BB1B4CB9E64276408@OPEXCAUBM24.corporate.adroot.infra.ftgroup>
References: <AA4F08D4-5890-4ADA-93FD-CF6DFD631884@arm.com>
In-Reply-To: <AA4F08D4-5890-4ADA-93FD-CF6DFD631884@arm.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.13.247]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/oDz0Q0qqeYZ6NNW9hJWG4sN6RBI>
Subject: Re: [Acme] Second AD Review: draft-ietf-acme-star
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jul 2019 12:13:17 -0000

Hi Roman,

> I conducted as second AD review of draft-ietf-acme-star per the AD
> hand-off.  I have the following feedback:
>
> ** (From the first AD review) Per the issue of PS vs. Experimental
> status - I reviewed Section 5, Shepherd Write-up and the ML thread of
> the previous AD review
> (https://mailarchive.ietf.org/arch/msg/acme/ZWRzPxrWBrp_xjEn98A4HOBxkc4).
> From that I see there was one prototype implementation (from MAMI,
> thanks!) and a hackathon.  To following up, who has indicated interest
> in implementing this draft?

I do think telcos are very interested in having a standardized solution to create short-term certificates based on ACME. For instance, in CDNI, we are looking to enable the delegation of secured traffic between an uCDN and a dCDN. ACME-STAR enables it and complies with CDNI requirements for controlling revocation. Moreover, as far as OpenCaching is concerned, CDNs will need open and standard interfaces to enable delegation from other parties. I believe that ACME-STAR needs to be in STD track.


Regards,
Frederic


_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.