IETF Logo Mail Archive

[Acme] Re: I-D Action: draft-ietf-acme-device-attest-05.txt

Corey Bonnell <Corey.Bonnell@digicert.com> Tue, 19 May 2026 12:22 UTC

Return-Path: <Corey.Bonnell@digicert.com>
X-Original-To: acme@mail2.ietf.org
Delivered-To: acme@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 18D08F0AF091 for <acme@mail2.ietf.org>; Tue, 19 May 2026 05:22:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1779193351; bh=jfSvEWcnStXy0NwSsFi7IawXXX59FXP/LHsEtCUyZx4=; h=From:To:Subject:Date:References:In-Reply-To; b=GV97Z2OT9x1p/S5RGcN+u2mB58yJRvtwMK6310aDukIp1naE4OXFGIy3Pfp5e0lY4 4wsxyvmoYHlmZ20Uj5ge0wdU2E0CUy1EFuAF30cVH4e4cq6BJ+Txgiz2d9k+SRonZ0 fVuH0gQ3xkD8W/s+8b5TlIp2drx01zqly7sBOLUc=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -0.098
X-Spam-Level:
X-Spam-Status: No, score=-0.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, PDS_OTHER_BAD_TLD=1.999, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=digicert.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nRSW-tuLfGPm for <acme@mail2.ietf.org>; Tue, 19 May 2026 05:22:30 -0700 (PDT)
Received: from SA9PR02CU001.outbound.protection.outlook.com (mail-southcentralusazon11023138.outbound.protection.outlook.com [40.93.196.138]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 9191FF0AEF6C for <acme@ietf.org>; Tue, 19 May 2026 05:21:20 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=HYUNeKjvc4mpYBdE1qgvpK5KM/jar4yEr7LwNB6tLqzppuJFzI1rsJDjBGV4RNyRn3Wa5fqw/gzEdn4ZvUNU/PvmB/z2BT0DYE3ilhU1xjz+qDp7CbSV2eTXAauNbBIKE6WpZFEETKM0oLJg1XdreySQS/5RWwGx0z7g7BMwq11pijJL53sKgmeNTpPmAc7mp5gtXp+L5y1NEJUo1A3ZkV1n3uebLvR10v8Xs+HrPAab0fFV6s7Zl27zIDoqIRsB3mTIcqunFETsPi7WRUu6lOPuVyIj4gllslCpFqIWuL5ClJ3zwEg1c4UBD9JZMYmERrXpn67Z8ZZEsymjBa58Pw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=mlxftehxl6UeFZL6TX0NPhMbp3PTQEqAQaotk/bP+MM=; b=JIRVzHIAOq8Yi3heM4WMEXldbDAeC0hnuC2AqvDqVxZWhobVr3CcHUMLo9FnpK0UereMDO9lW/QHWHUiWgeXWkWTCL8VK0hSw5B3/xgC5WfH6q8PoBiYzzjUUUSHQQPf4vCbp4Kz4XUeIn501f2VFf8HKW3wOl9Jp/icEytyuL++TZl/x1oEnHIE9kGjaGImN0yRuA4Ql6hqcjTBDbib6ANhTud+MOi+etZfbFfnft9RwIL+tnL86JpK/gzf31NsK/7+53xqO3ANfV2mCLvrxIWgjIkQUDCoB6eEq7Qc3B0nIYYXKQJeAYHdENmZ4K35nAQ9F2KXCtK6zTc2Hu7xww==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=digicert.com; dmarc=pass action=none header.from=digicert.com; dkim=pass header.d=digicert.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digicert.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mlxftehxl6UeFZL6TX0NPhMbp3PTQEqAQaotk/bP+MM=; b=KMuwNhIqFfNX09HFKvFyIjUkiXB9NKja2y0Oh2IRrLleF47HZyDFALTgn2aKRE/p5nwjHrNch0IPb/B/m4dHLti5wtZujb3wmhZRFiXUy/Arj9bMWtP1CTkKfiv/j97Bz1IcgyBSGxQu4iLopYX4ky6uqTdlh/bPEq4TOT+5QR2xDBEC/M+ujtRRCNASUGfdxx/sAZZCiS1fxDcegTLrEtefOy2rBkR16/aCD5wrW4d9wx0SzYmX81bcmtB5uDR4SjWI11wSK4vqH9eo55RSlq0+YYyBEXGHC0T3QqTkLuj0Zc9fmwBZa0on/WAFH6wXamuWEgS8Y6lHAQ3QbRCwhQ==
Received: from MW4PR14MB5280.namprd14.prod.outlook.com (2603:10b6:303:184::18) by MW4PR14MB5926.namprd14.prod.outlook.com (2603:10b6:303:218::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.25.24; Tue, 19 May 2026 12:21:10 +0000
Received: from MW4PR14MB5280.namprd14.prod.outlook.com ([fe80::cb2e:d903:e88d:3245]) by MW4PR14MB5280.namprd14.prod.outlook.com ([fe80::cb2e:d903:e88d:3245%4]) with mapi id 15.21.0048.013; Tue, 19 May 2026 12:21:10 +0000
From: Corey Bonnell <Corey.Bonnell@digicert.com>
To: "acme@ietf.org" <acme@ietf.org>
Thread-Topic: [Acme] I-D Action: draft-ietf-acme-device-attest-05.txt
Thread-Index: AQHc54nVS4k60/uTtUiYKrKm4SXCH7YVRKew
Date: Tue, 19 May 2026 12:21:10 +0000
Message-ID: <MW4PR14MB528022D0ADF2BAA5B9D73CA192002@MW4PR14MB5280.namprd14.prod.outlook.com>
References: <177919317452.755278.10403335206502635581@dt-datatracker-7688897f84-l74h4>
In-Reply-To: <177919317452.755278.10403335206502635581@dt-datatracker-7688897f84-l74h4>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=digicert.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: MW4PR14MB5280:EE_|MW4PR14MB5926:EE_
x-ms-office365-filtering-correlation-id: 795deb86-b6d9-447d-d4ae-08deb5a11c4f
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|4022899009|366016|1800799024|6049299003|376014|4013099003|4053099003|38070700021|22082099003|18002099003|56012099003|3023799003|4133799003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MW4PR14MB5280.namprd14.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(4022899009)(366016)(1800799024)(6049299003)(376014)(4013099003)(4053099003)(38070700021)(22082099003)(18002099003)(56012099003)(3023799003)(4133799003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="2.16.840.1.101.3.4.2.1"; boundary="----=_NextPart_000_0062_01DCE768.71DDD250"
MIME-Version: 1.0
X-OriginatorOrg: digicert.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MW4PR14MB5280.namprd14.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 795deb86-b6d9-447d-d4ae-08deb5a11c4f
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 May 2026 12:21:10.2204 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cf813fa1-bde5-4e75-9479-f6aaa8b1f284
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: GRywzuODRHfoJ3twNlgCGIIT3t9Zf5mwaruW7MhYB6PDx6QQ9heWLbR0F8ZYb87abLWUZQJVglttVpmJeKkhM7wwdJFHiHX34nRb7C3FyL4=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR14MB5926
Message-ID-Hash: 4PU442BJSKLXVELZ4YIVFDEPHD47KHGD
X-Message-ID-Hash: 4PU442BJSKLXVELZ4YIVFDEPHD47KHGD
X-MailFrom: Corey.Bonnell@digicert.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-acme.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Acme] Re: I-D Action: draft-ietf-acme-device-attest-05.txt
List-Id: Automated Certificate Management Environment <acme.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/tgXOF8aqDUb2YPc35o9yG7vDQwo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Owner: <mailto:acme-owner@ietf.org>
List-Post: <mailto:acme@ietf.org>
List-Subscribe: <mailto:acme-join@ietf.org>
List-Unsubscribe: <mailto:acme-leave@ietf.org>

Hello,
This version addresses the three concerns raised by Aaron's IANA expert review 
(thanks again, Aaron!).

Thanks,
Corey

-----Original Message-----
From: internet-drafts@ietf.org <internet-drafts@ietf.org>
Sent: Tuesday, May 19, 2026 8:20 AM
To: i-d-announce@ietf.org
Cc: acme@ietf.org
Subject: [Acme] I-D Action: draft-ietf-acme-device-attest-05.txt

Internet-Draft draft-ietf-acme-device-attest-05.txt is now available. It is a 
work item of the Automated Certificate Management Environment (ACME) WG of the 
IETF.

   Title:   Automated Certificate Management Environment (ACME) Device 
Attestation Extension
   Authors: Brandon Weeks
            Ganesh Mallaya
            Sven Rajala
            Corey Bonnell
            Ryan Hurst
   Name:    draft-ietf-acme-device-attest-05.txt
   Pages:   21
   Dates:   2026-05-19

Abstract:

   This document specifies new identifiers and a challenge for the
   Automated Certificate Management Environment (ACME) protocol which
   allows validating the identity of a device using attestation.

The IETF datatracker status page for this Internet-Draft is:
https://url.avanan.click/v2/r01/___https://datatracker.ietf.org/doc/draft-ietf-acme-device-attest/___.YXAzOmRpZ2ljZXJ0OmE6bzo5ZGJkZDlkZDQ3OTM0MDYzNjYxMDg0ZDM4NTcyN2Q0Yzo3Ojg3YzA6ZDNmMzkwYjYxMTRjOWM1N2QzZTkyOGU4ZDg5MWRmNWFhZWI5NzcxOGVjNzJiZGI3Y2NiMzM0NTE5MTEyODUwNjpwOlQ6Rg

There is also an HTML version available at:
https://url.avanan.click/v2/r01/___https://www.ietf.org/archive/id/draft-ietf-acme-device-attest-05.html___.YXAzOmRpZ2ljZXJ0OmE6bzo5ZGJkZDlkZDQ3OTM0MDYzNjYxMDg0ZDM4NTcyN2Q0Yzo3OjFmNTk6YmE4OGIyYTA5OTYwY2Y2ZjRjMDI1MjIwMmI2NTBlZTJlMDVlMTY5MzBjNTI5Njg3ODRjNjc5ODY3YTE4YWNmZDpwOlQ6Rg

A diff from the previous version is available at:
https://url.avanan.click/v2/r01/___https://author-tools.ietf.org/iddiff?url2=draft-ietf-acme-device-attest-05___.YXAzOmRpZ2ljZXJ0OmE6bzo5ZGJkZDlkZDQ3OTM0MDYzNjYxMDg0ZDM4NTcyN2Q0Yzo3OmQ2YWY6OGU0YmUzZDQyZDA4Nzg0YTE5ODUxYWNkMjZkNDdiYTg5NWRjYzA5ODU3N2Q4ZjVjYjYxODQ0NGI4MDMxNjE4NTpwOlQ6Rg

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
Acme mailing list -- acme@ietf.org
To unsubscribe send an email to acme-leave@ietf.org

v2.46.0 | Report a Bug | By Email | System Status