[Acme] Re: I-D Action: draft-ietf-acme-device-attest-03.txt

Mike Ounsworth <ounsworth+ietf@gmail.com> Mon, 27 April 2026 13:46 UTC

Return-Path: <ounsworth@gmail.com>
X-Original-To: acme@mail2.ietf.org
Delivered-To: acme@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id E2E6FE3F1877 for <acme@mail2.ietf.org>; Mon, 27 Apr 2026 06:46:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1777297615; bh=oaN0HYkYp72d+DzQH56VpXp5uz6bzSFevAuEF8Vy7VA=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=zPyjKskKfvmX3OHgiI0tGDRsFD20cQnwPgfVJr3A/JtL+2s7FmRrMPy4PWco4BpKA UMO/ZTP+cbbTpnlZYrRwktY4HXcqLYnWbSUJxUOfP089GlStYDF+0/9UkZQzmw8f6k 1La510TQJM5OLjZSVCrTAxxxyqIjv23BXScdy6gA=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -0.099
X-Spam-Level:
X-Spam-Status: No, score=-0.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, PDS_OTHER_BAD_TLD=1.999, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y76FcD65aziG for <acme@mail2.ietf.org>; Mon, 27 Apr 2026 06:46:55 -0700 (PDT)
Received: from mail-oo1-xc2e.google.com (mail-oo1-xc2e.google.com [IPv6:2607:f8b0:4864:20::c2e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 3B8D7E3F17E6 for <acme@ietf.org>; Mon, 27 Apr 2026 06:46:12 -0700 (PDT)
Received: by mail-oo1-xc2e.google.com with SMTP id 006d021491bc7-6948da50eb5so3780646eaf.1 for <acme@ietf.org>; Mon, 27 Apr 2026 06:46:12 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1777297571; cv=none; d=google.com; s=arc-20240605; b=B94r6Arwq+0i2mObPaKNsbOfOflEi+z7xAvCF6kdSe184qp8SKJL3V5MVCSOXTzN4Z Ygwme5KgSKsE26FqZxls2cmRJbQB2lG52aXyV5g4jeH5Sp49UCsSvUymDZLEIZSiqE3B aCKkEgVVWihNzPuL+ZzjaoEqepBdXkdJG1h3SPYz1FVxRggPB2HSpKLSfJaSBfuwi8i5 sOmhLr42zhq1kOdCOwWjD/m9P58R4b0nqLkOPf4v4uGeqnxrw8r7iKUO1+8RY485gQ3i 66D33Ghe1e4eM5xWpfXo0Rj0neeWthMjl7pcdK0OiCrb9IKkTcDTZJEodVWcSBcOCQIM wbmQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=smRyzhTtVZ6FpYTgPH/xezpjdT8FhJDtA0mys7FHNR8=; fh=z1BDrVGgkfjAAETRLlubOGfRTce26Bxy7A4mziEzwoU=; b=izzBC+0eISJqkaiX+BnoRmicvLE3jhZSyCbKOgdxIkbefya5DlhG8KEHzT0bbUJ5xt suSh8snWVZDdMgtwY6nPa+N5e2LLfClwCw5sMG8X4NvFbxkiufILc+aJOTAeHGAo0naJ 3tphGbTaBHi+McTjVs1+6SN5RW9QioE1xJQ4SDksEpkXVKa4tAzmB9pJyfQowukNR542 N1GmD9IqMAQeWO2olqLsICfYKaJTlhGqm48TdsjEjVMxMZkYcjeIKdm0bWAAClKBKF1i BZiRchf4LXprfwmEXMxHh4e/VZl2bOjcG4VKuXxwACAnFSl6xMBrjOYCY+7TisIsA8Dn 0cjQ==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1777297571; x=1777902371; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=smRyzhTtVZ6FpYTgPH/xezpjdT8FhJDtA0mys7FHNR8=; b=alt+Ta1Gb2ApgX4luOAwEftXH7sTlLew+TdemZhvMUpCy1eLQ9uUhRjZAUhskwTmcM YdZvpg6OmGhJZHvlogLfFJxI1paV/Nr8hjH7btHbQJtdawXJYVQrjrxebXLSy5LFgFhj irsIL4fwfmKDv1Z8Q/aO4ZCVP18CzYgn6vJUUCfNp5W0JFeBBhMDJ2pZCqBXFD/8gufd cJOo9kzh2MOLkFLJBUewJHcZPSp0nlSKjkRSKvAOuaDaeAAP/gmX07oZAZ2tY2cIIULi 1D1MIvh28FSvF4MJf3pPxMEzceQDpCDW1s+MkjqKajm0Ps1rThERgEFW1M/sGUrJozTc eUSw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1777297571; x=1777902371; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=smRyzhTtVZ6FpYTgPH/xezpjdT8FhJDtA0mys7FHNR8=; b=d0RdfFJzZZvaqMFH16DshZq4CeE5wVnSQdaXG3/xWt4B8UUQDCbpQDSxS59ZY0HkgZ Y8+cKvyeKZNI0kNCtIHb7l3UD6WMS1Cb/XmBifUrf3z6ueI60uRqbgKZ+J66+N6eoVNC VlY46IX1h6ZSQsADPdF+0aDpLQXMIsZ6X4Y1rL7HYr4bbuBsXFFiqxslCcOoJ3ZzxRQr U+hWJVh7CJt+lfGYPZZo7o4iTgxqRaADTw52yNkXDrkkP5u+RYCpM1Xl9UJ5acodFwWD EMgp3Al+kzgwPVgB9QRMvOI1UZFLAk4ptLuGxCPf5B19+hKwss210HFjjMXwruvO9a2+ trRA==
X-Gm-Message-State: AOJu0YxracbtilpGK4TZ474yjOnpjtxCtKJGWQDjUf+iCg3oDfWxQdDn M1AziYUfSi21HzBiQH1wcZX9lf4WBP0+t6vDv+ng5s8t1b4s9sAUNfmtzoUiEopQvng41zv006i e/G/ZM/ZMki6aLHhEjg6gSMtFL27cpXOGNeEw
X-Gm-Gg: AeBDievgagu9tIMZpDCpKa8E4PIqzTPlpjyStJ+P3qaP0d7by4YJDmcEO7ce9mrpWIf 0PQetaCtS7kou0+ZXIfvQCGIxaGTQeikzj98XzQPs1aZK8N79R8OSHNQxc2R5aq4IJZqTuGDEke Lp+JleQOxejLBFyrHxp+voGlvuU4aOm8o+Exc0RVvs0DzX51NpPqgcIc8m4x8/PsURzt9V2QTTY PDr3qt7u0uIm2oBQ4vXXxXv99A2A36JJ9lRbypFZLtvnQzgvpokU09uPsQmk7w33q7tKEiPMoXE O9YRqkUduq7rRHscUgvB
X-Received: by 2002:a05:6820:6701:b0:695:94b4:d4e7 with SMTP id 006d021491bc7-69594b4df95mr8256384eaf.11.1777297571301; Mon, 27 Apr 2026 06:46:11 -0700 (PDT)
MIME-Version: 1.0
References: <177685999780.999399.14528998783583263758@dt-datatracker-b45949c58-5szpr> <DS0PR14MB621690A340985FFD04BDCF9D922D2@DS0PR14MB6216.namprd14.prod.outlook.com>
In-Reply-To: <DS0PR14MB621690A340985FFD04BDCF9D922D2@DS0PR14MB6216.namprd14.prod.outlook.com>
From: Mike Ounsworth <ounsworth+ietf@gmail.com>
Date: Mon, 27 Apr 2026 08:46:00 -0500
X-Gm-Features: AVHnY4L9lzl6G7-FCMMNEkOoWk0kJ7RmTk0iFwEIwe6RzFogrDBvuxPZtIsKRYY
Message-ID: <CAKZgXHqS1hweQvpB29WFZowFB0=8F-eF3JKWmSiaWYXLhF7Wxg@mail.gmail.com>
To: Corey Bonnell <Corey.Bonnell=40digicert.com@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="00000000000065cdfb0650715650"
Message-ID-Hash: YHUXXOQOOCHFW3HUAE5B6PVKCAJF4LIO
X-Message-ID-Hash: YHUXXOQOOCHFW3HUAE5B6PVKCAJF4LIO
X-MailFrom: ounsworth@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-acme.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "acme@ietf.org" <acme@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Acme] Re: I-D Action: draft-ietf-acme-device-attest-03.txt
List-Id: Automated Certificate Management Environment <acme.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/tweZdIVaP5ALkUvAF9Jl1DUdF7g>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Owner: <mailto:acme-owner@ietf.org>
List-Post: <mailto:acme@ietf.org>
List-Subscribe: <mailto:acme-join@ietf.org>
List-Unsubscribe: <mailto:acme-leave@ietf.org>

Hello ACME,

This new version was posted 5 days ago.

Authors state that it resolves all open points -- including, I believe
Pull/21 [1] which addresses the point raised by Skye a couple days before
that.

Unless anyone has any further points to raise, I will close the WGLC and
move this document back to IESG.

[1]: https://github.com/ietf-wg-acme/draft-bweeks-acme-device-attest/pull/21

On Wed, 22 Apr 2026 at 07:28, Corey Bonnell <Corey.Bonnell=
40digicert.com@dmarc.ietf.org> wrote:

> Hello,
> We just released -03, which includes two major changes:
>
>  - We have asked Ryan Hurst to join the author group to help ensure that
> we
> align the challenge method in the document to the core ACME specification
> without breaking existing implementations. Ryan has extensive
> implementation
> experience with this specification. He has provided text to better
> describe
> the challenge/attestation content and processing.
> -We added a privacy considerations section on the use and potential
> inclusion
> of identifiers in order requests, CSRs, and certificates.
>
> With these changes, we believe this version of the document resolves all
> open
> issues.
>
> Thanks,
> Corey
>
>
> -----Original Message-----
> From: internet-drafts@ietf.org <internet-drafts@ietf.org>
> Sent: Wednesday, April 22, 2026 8:13 AM
> To: i-d-announce@ietf.org
> Cc: acme@ietf.org
> Subject: [Acme] I-D Action: draft-ietf-acme-device-attest-03.txt
>
> Internet-Draft draft-ietf-acme-device-attest-03.txt is now available. It
> is a
> work item of the Automated Certificate Management Environment (ACME) WG of
> the
> IETF.
>
>    Title:   Automated Certificate Management Environment (ACME) Device
> Attestation Extension
>    Authors: Brandon Weeks
>             Ganesh Mallaya
>             Sven Rajala
>             Corey Bonnell
>             Ryan Hurst
>    Name:    draft-ietf-acme-device-attest-03.txt
>    Pages:   20
>    Dates:   2026-04-22
>
> Abstract:
>
>    This document specifies new identifiers and a challenge for the
>    Automated Certificate Management Environment (ACME) protocol which
>    allows validating the identity of a device using attestation.
>
> The IETF datatracker status page for this Internet-Draft is:
>
> https://url.avanan.click/v2/r01/___https://datatracker.ietf.org/doc/draft-ietf-acme-device-attest/___.YXAzOmRpZ2ljZXJ0OmE6bzoxMTQ0Y2E3OGU3MDcwZjQyOWIwZDcwMGJiZmY2ZmIyYTo3OmYxODE6ODE4MTZjMTY0ZTQ0Y2U5YWFlNDYzMDdmZjdmYmM1MWExYmRjMmRmNWM0MGM0NmU3MzI4MDMyYmI4ZDc3NmZjYzpwOlQ6Tg
>
> There is also an HTML version available at:
>
> https://url.avanan.click/v2/r01/___https://www.ietf.org/archive/id/draft-ietf-acme-device-attest-03.html___.YXAzOmRpZ2ljZXJ0OmE6bzoxMTQ0Y2E3OGU3MDcwZjQyOWIwZDcwMGJiZmY2ZmIyYTo3OjQ0YTA6YTJmNGNmY2U3ZWRlOTA1Y2Y3NjU5YTJkZmY0NjYyYjc0MTgyMjMyN2VlZWVmNTYxNTYxYTk3ZmM4Mzg4ZWE5YTpwOlQ6Tg
>
> A diff from the previous version is available at:
>
> https://url.avanan.click/v2/r01/___https://author-tools.ietf.org/iddiff?url2=draft-ietf-acme-device-attest-03___.YXAzOmRpZ2ljZXJ0OmE6bzoxMTQ0Y2E3OGU3MDcwZjQyOWIwZDcwMGJiZmY2ZmIyYTo3Ojk2OTE6ZTY1MjJjOWYwYzMyMjA2MTRhMjQ1ZWZjMWZiMTFjN2M1NzE2MTgyYmYzODBhNjQ5MzllM2FiZDg3Y2RhNmE1YzpwOlQ6Tg
>
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
>
>
> _______________________________________________
> Acme mailing list -- acme@ietf.org
> To unsubscribe send an email to acme-leave@ietf.org
> _______________________________________________
> Acme mailing list -- acme@ietf.org
> To unsubscribe send an email to acme-leave@ietf.org
>