Re: [Acme] [Errata Held for Document Update] RFC8555 (6843)

Rob Sayre <sayrer@gmail.com> Fri, 12 January 2024 03:21 UTC

Return-Path: <sayrer@gmail.com>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0A62C14F6A0 for <acme@ietfa.amsl.com>; Thu, 11 Jan 2024 19:21:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.107
X-Spam-Level:
X-Spam-Status: No, score=-2.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1DFvc0yuuzHv for <acme@ietfa.amsl.com>; Thu, 11 Jan 2024 19:21:47 -0800 (PST)
Received: from mail-lf1-x135.google.com (mail-lf1-x135.google.com [IPv6:2a00:1450:4864:20::135]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51E64C14F69D for <acme@ietf.org>; Thu, 11 Jan 2024 19:21:47 -0800 (PST)
Received: by mail-lf1-x135.google.com with SMTP id 2adb3069b0e04-50e7e55c0f6so7165938e87.0 for <acme@ietf.org>; Thu, 11 Jan 2024 19:21:47 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1705029705; x=1705634505; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=UiPaAqx62Ld2Ywt52DbcAFBj1UlRLEMhADZU8VY4M1U=; b=YdOkACDTuiYSr0NJMI1aPk0bXAtqYPA5aXxAiFr0oPVjsdC9jmhFRcb+lLc+T5pQ2M /8zEkEWNyEbITiPeyiILkRK8EB/oxVhwn+GQpVhZLUC+c3zk7LcnhbDZnWIOZhhtWcEU QkCHNgJ25A6cs2s/WrnWBqNSFK0B0EGYFrTxrh1bR6cLClHufR9WJq/s9OkC1zzvHrs8 HfNkATo2N/0hCJvJLKPlPZm4vUdyDkwCgTfDgzk9Jhwdm85304tH/WeecpIawXe9hHvv zRyCOt9g4BcLfc+1mnJTDFEpdFQRm8pd/6GBUY+GaHfpN11HlenSK2TvXf42ky4nobPu qWdw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1705029705; x=1705634505; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=UiPaAqx62Ld2Ywt52DbcAFBj1UlRLEMhADZU8VY4M1U=; b=DDpUsPpNpnqyh+FBOWJCIpvWpUZQmPXfDOu3DpffLcKKLIf/eA2MvjupdR5fqSm29n esMELmZUKdsXyjAIOHeAkdzcLhCa0Tsh0QUS5didjNFriqcMOPJ/QzFcmXudNzly3bNv awS2JUyAFw8AC5vfre5N9Nk6i6xmg5ugfsKlfTeU1rX97jprqjwaFHR7JaxGoU2V6Fiz 55V1M5CziRwiKg8nYbiS/+bpfZ4l1n681ww3iAUSQFPFbLYlL13oTZLmw2/pHUNvi1pE Tgxq4KRaAKfvx1hWeOfcTLAkL6bgbzeJZ/V8F+/CSVxl8itO8ewNRznG5IaIemeOY53i /CWw==
X-Gm-Message-State: AOJu0Yzj1neLfxhZ4WeCTlZlE4Ww34ThUA7CM+KyAeBM0Hz1dtsuUiLC oaVeHkiwEIh2elc70z1WogApVGqiJSUbKdEe3fk=
X-Google-Smtp-Source: AGHT+IHoye/0xpLxy7Kn6CBAepz3e3c5T+iEO1W9L45LPQx3wQw95rqUoyhByn0JailgEhaS3+CVGkjAMQ2MZpfWfm8=
X-Received: by 2002:ac2:5a01:0:b0:50e:7736:a96c with SMTP id q1-20020ac25a01000000b0050e7736a96cmr112475lfn.172.1705029705142; Thu, 11 Jan 2024 19:21:45 -0800 (PST)
MIME-Version: 1.0
References: <CAChr6SypX6PN_00OQUzRbtyXeQYsuVeZeRjg9Xosk8uRTkzr2Q@mail.gmail.com> <CAEmnErfE=-HMKkf4MHUfYCLam0baWA+QnAA7tg_tREtPFvRhdQ@mail.gmail.com> <CAChr6SzGo-4RZ0TwfqcJhy4FzL53LmsWHpe9EmN5eN_GDhdLzw@mail.gmail.com> <CAOG=JU+YFE826M7aW_KJRXNw639QjvVgH4WryPJ++Xq+BGS+Uw@mail.gmail.com>
In-Reply-To: <CAOG=JU+YFE826M7aW_KJRXNw639QjvVgH4WryPJ++Xq+BGS+Uw@mail.gmail.com>
From: Rob Sayre <sayrer@gmail.com>
Date: Thu, 11 Jan 2024 19:21:34 -0800
Message-ID: <CAChr6Syg80PWYDBDA872gyUkPoVKWvr2zsRmOUs16mGawQPa6g@mail.gmail.com>
To: Amir Omidi <amir@aaomidi.com>
Cc: Aaron Gable <aaron@letsencrypt.org>, acme@ietf.org
Content-Type: multipart/alternative; boundary="000000000000e816f3060eb729a6"
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/opYTEgnva5CF9w57FqmA8i87vi0>
Subject: Re: [Acme] [Errata Held for Document Update] RFC8555 (6843)
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Jan 2024 03:21:47 -0000

On Thu, Jan 11, 2024 at 7:15 PM Amir Omidi <amir@aaomidi.com> wrote:

> There is nothing blocking .dev domains responding over http. To be
> specific, a TLD can not block a protocol like that.
>

Right, but one should not expect to get a redirect response. The server
shouldn't answer (many of them do, which is a bug). I filed the bug on iOS
for this one. They did fix it in short order. :)

thanks,
Rob