[Acme] Re: WG Last Call: draft-ietf-acme-profiles-02 (Ends 2026-09-16)
Aaron Gable <aaron@letsencrypt.org> Thu, 10 September 2026 18:08 UTC
Return-Path: <aaron@letsencrypt.org>
X-Original-To: acme@mail2.ietf.org
Delivered-To: acme@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 19AA013887710 for <acme@mail2.ietf.org>; Thu, 10 Sep 2026 11:08:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1789063726; bh=0NHUuKLfBSZJia5l6dMcQ8nQXWRorCbjZ8+T1iTArN8=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=yD1aShsjBUBB1nMnciFH/IsKCoPY/0+KIztwFaTlaPVbQ4GLjC1X9OQgGDgrx00y+ Ml61B2fD4Mu1O0KpLNI0ZJA4nwavgH9KOFadG5t5h/1X2eZOLnlXSVR9QW0HATe9UX R/n7YumpNkdv5GeIQn0n2VfiSigampO0WSuWStfY=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=letsencrypt.org
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NlxuGd1rKbCy for <acme@mail2.ietf.org>; Thu, 10 Sep 2026 11:08:45 -0700 (PDT)
Received: from mail-yx2-x10.google.com (mail-yx2-x10.google.com [IPv6:2607:f8b0:4864:41::10]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 840F513887702 for <acme@ietf.org>; Thu, 10 Sep 2026 11:08:45 -0700 (PDT)
Received: by mail-yx2-x10.google.com with SMTP id 956f58d0204a3-66e4ab19127so2118555d50.1 for <acme@ietf.org>; Thu, 10 Sep 2026 11:08:45 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1789063725; cv=none; d=google.com; s=arc-20260327; b=UluWALr6bUPOsDo+U5yvJoR2HJkQKmKAo/MpR0kEiDSGKIYVnN7xY1JgbnTcJydgyw P3twufXgwvWAxpVMBN6tEkqpr/Dnay9SMnrkbXSXG1lOnHr3jpcYoprTC/+JwwLZBnQ3 EQgpIViWA1sMVlt5DDnzeucw/ERS70lPyUVm+UuION2n3bQ/VMr/Z82Ag+Wfh/h6Sy3/ GdD5s4AmDCj9Sjbcq9xavpPE8bV0g5I32KN6gGoxZ95eOvgfj11naBU2XEIONLDpGPnY d2nUViuZNBLhxk3jDljdJ8wL0u7qJGkknJ7vMsZabV18sWpzNrXg6viEG/MnrC2joQJt KhzQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=mPWIlSeQLXC3NS/sgYM95WDN9NLbSaWVEfqVExlRVwo=; fh=1Hktko5f5JVFPnPPCwLNtN0MMCf4xL52Oj7K+z4nPCM=; b=TQGho65ocqZaFJ0BFnxzN6mwap5sdFDadgLN5xySnxHrFWXKfE7k4GHWXpD6KKp+zK SDkq3Mb3iSFDlogos6a4w6xoNuVuaTN8fJgi5ayb+HRlEdQpcxA2d0JhCPLPhaI/Wemd pQPAzEB73VKIcJ7/rq5lImVbvck12R2XPDfZ8VEs76wQfkbZFA8WrIlzXvfFnd4uDvX3 VzwjSGlDEcnE0CzcSW+3F+CFGVhBiOeio184n1UaMNWFwlaEQrzA/1PqA+t3NBXd9gmL 8UXECTGWJZbRCGqUsEtY+shmh1zY5GWy5I11ON1vT6JeWfgcENzJOAXkKradJZ84BCtE koYQ==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=letsencrypt.org; s=google; t=1789063725; x=1789668525; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=mPWIlSeQLXC3NS/sgYM95WDN9NLbSaWVEfqVExlRVwo=; b=Az0Bs55Gn445Jq2CwYxN9tlXL45wqc4NTnQ1fl8b365I2q8d+BXCCqY1nQaJylKWEp lbPPlB3FTQgPHTSiRn3kQuen1SPXJKgZmmhQySPwmcBhHAY1OIg8NmpsB4PRUkJM7gW/ mDXrX4FtD1FqTDj+0rMn3+41/Qqq5kOSDy5aw=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1789063725; x=1789668525; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=mPWIlSeQLXC3NS/sgYM95WDN9NLbSaWVEfqVExlRVwo=; b=lnnmB+JFzX918By/Lu8bJtNrNyw93tSZXKy5Zy8PmQUszLcxXnawuhIR8F+t6jhXR/ 7FTxjL7GIhviaVKQbaLD2/sw6lXFIK2IVyeH4toySD4RN+qeBw7ix8qh5HjKoDEbhuix AfNBMZVLtk9ec33fWZkhnRq216a6OMOGlYKIGySYcq871q/JsjhsBZKgXRQ2zayx97t2 cj7fDjWqA+GpRQl1uGSlPD5ddzuOIAgXETzdoTOY0IEkcGvGzCqwJ6EzXS7H9fAJabk4 L9zzDSVnWJnt78W/YXlT/g1USoqnOc4tXkfIfc1Wx/ekgR0+GeLyqcuRgJG6yvlW8Opz crog==
X-Gm-Message-State: AFuF++kTTvwPFq7m5T+TiD9/qVz/X3sjxFYbRqU1uSpZmD+8PXss1o32 GhvPE420X8DMiDndJxz36y3lckKPW5DriBAZ53wRybiER1ajsIWGcLHF2OZuoEoRRXdbC9PCArN u1dw7BAiPFL3BqUxF/5wWjZjM6k0jx+BPc0TDp+9EKtEIrKfOklIQrjA=
X-Gm-Gg: AYBFou0ktLRM/3+7LGjGWOTwNzeOPCfoabmAHcvQhjbsaginRNj4211k4lEdwVuINMZ WCfRr3e8QcCs/iNHHfCudnuej/qU2DP1ZAFaL8l+SsEC89Vtd18jHkgugYWird6GhiFGjkDAhVV vKXYBdDIhBOCYK5zsn8N8T3YcmEuab22DZpDOeeBC/3XCtdanm3rehu9HYDPNi+1A9FCE1xaLJl wfgr5x/zkPSFKmq9xq/p/Sd71nacs3rKrS+QZBQsYvUk+LjEkJLL78q8N+QlulzBxgkj7WUAYrP rAAj33YvyvHRUyjM5xS34cQ5IocdGHZJZJigISUHe7TLXAR4NFNHXvS3EcREhswgBqY=
X-Received: by 2002:a05:690e:134f:b0:66e:645c:a8d4 with SMTP id 956f58d0204a3-67124674a16mr218175d50.28.1789063724818; Thu, 10 Sep 2026 11:08:44 -0700 (PDT)
MIME-Version: 1.0
References: <178837509514.598674.15351352214274867598@dt-datatracker-6669c7b496-4m6kd> <P0YWeab--N-9@cbonnell.com>
In-Reply-To: <P0YWeab--N-9@cbonnell.com>
From: Aaron Gable <aaron@letsencrypt.org>
Date: Thu, 10 Sep 2026 11:08:32 -0700
X-Gm-Features: AcwNN1VrOMSSRwpisyjkoN6N-6NpsAnGe0sGdOhZYhPfNrE187vJBh6DJLJLKsU
Message-ID: <CAEmnErckSpZ5g7+=8-W4vZ53vx=aOg4yqRrs5Um-hzV4CteqBw@mail.gmail.com>
To: Corey Bonnell <dev=40cbonnell.com@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="000000000000cc7a5e065b24db3a"
Message-ID-Hash: YF3KMT55PJKEEPM3RTBA7OCZQ7HK4DPN
X-Message-ID-Hash: YF3KMT55PJKEEPM3RTBA7OCZQ7HK4DPN
X-MailFrom: aaron@letsencrypt.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-acme.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Acme <acme@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Acme] Re: WG Last Call: draft-ietf-acme-profiles-02 (Ends 2026-09-16)
List-Id: Automated Certificate Management Environment <acme.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/tA50a83sweNcVaT8JD3MqQ8LjY0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Owner: <mailto:acme-owner@ietf.org>
List-Post: <mailto:acme@ietf.org>
List-Subscribe: <mailto:acme-join@ietf.org>
List-Unsubscribe: <mailto:acme-leave@ietf.org>
Thanks for the support, Daniel and Corey! I'll incorporate these comments along with any others received during the last call. Aaron On Wed, Sep 2, 2026 at 12:10 PM Corey Bonnell <dev= 40cbonnell.com@dmarc.ietf.org> wrote: > I reviewed -02 and think it's ready to ship, modulo a few (nitty?) > comments: > > > 1. "data URI" in section 3 should have a reference to RFC 2397. An > example demonstrating its use would also be helpful. > 2. Section 5 says "this document reduces the need for ACME Clients and > Servers to parse and process x509 ASN.1". "x509 ASN.1" should be cleaned > up, as CSRs are not defined in X.509. I suggest "...process the contents of > CSRs" or "...process ASN.1". > > > Thanks, > Corey > > > > Sep 2, 2026, 14:51 by noreply@ietf.org: > > This message starts a WG Last Call for: > draft-ietf-acme-profiles-02 > > This Working Group Last Call ends on 2026-09-16 > > Abstract: > This document defines how an ACME Server may offer a selection of > different certificate profiles to ACME Clients, and how those clients > may indicate which profile they want. > > File can be retrieved from: > https://www.ietf.org/archive/id/draft-ietf-acme-profiles-02.txt > > Please review and indicate your support or objection to proceed with the > publication of this document by replying to this email keeping > acme@ietf.org > in copy. Objections should be explained and suggestions to resolve them are > highly appreciated. > > Authors, and WG participants in general, are reminded of the Intellectual > Property Rights (IPR) disclosure obligations described in BCP 79 [1]. > Appropriate IPR disclosures required for full conformance with the > provisions > of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any. > Sanctions available for application to violators of IETF IPR Policy can be > found at [3]. > > Thank you. > > [1] https://datatracker.ietf.org/doc/bcp78/ > [2] https://datatracker.ietf.org/doc/bcp79/ > [3] https://datatracker.ietf.org/doc/rfc6701/ > > The IETF datatracker status page for this Internet-Draft is: > https://datatracker.ietf.org/doc/draft-ietf-acme-profiles/ > > There is also an HTML version available at: > https://www.ietf.org/archive/id/draft-ietf-acme-profiles-02.html > > A diff from the previous version is available at: > https://author-tools.ietf.org/iddiff?url2=draft-ietf-acme-profiles-02 > > _______________________________________________ > Acme mailing list -- acme@ietf.org > To unsubscribe send an email to acme-leave@ietf.org > > > _______________________________________________ > Acme mailing list -- acme@ietf.org > To unsubscribe send an email to acme-leave@ietf.org >
- [Acme] WG Last Call: draft-ietf-acme-profiles-02 … Mike Ounsworth via Datatracker
- [Acme] Re: WG Last Call: draft-ietf-acme-profiles… Daniel McCarney
- [Acme] Re: WG Last Call: draft-ietf-acme-profiles… Corey Bonnell
- [Acme] Re: WG Last Call: draft-ietf-acme-profiles… Aaron Gable
- [Acme] Re: WG Last Call: draft-ietf-acme-profiles… Mike Ounsworth