Re: [Anima] Alexey Melnikov's Discuss on draft-ietf-anima-bootstrapping-keyinfra-22: (with DISCUSS and COMMENT)

["Alexey Melnikov" <[e-mail]>]

Hi Michael,

On Tue, Jul 16, 2019, at 6:12 PM, Michael Richardson wrote:
> Alexey Melnikov via Datatracker <[e-mail]> wrote:
>     > 1) In Section 5:
> 
>     >    o In the language of [RFC6125] this provides for a SERIALNUM-ID
>     > category of identifier that can be included in a certificate and
>     > therefore that can also be used for matching purposes.  The
>     > SERIALNUM-ID whitelist is collated according to manufacturer trust
>     > anchor since serial numbers are not globally unique.
> 
>     > I think now you are just inventing things. Please define what exactly
>     > SERIALNUM-ID is. Cut & paste text from RFC 6125, if needed.
> 
> https://github.com/anima-wg/anima-bootstrap/commit/2f4cee70fc583c60a4589c983043a346ac0145ea
> 
> new text reads:
>         This extends the informal set of "identifer type" values defined in
>         <xref target="RFC6125" /> to include a SERIALNUM-ID
>         category of identifier that can be
>         included in a certificate and
>         therefore that can also be used for matching
>         purposes. As noted
>         in that document this is not a formal definition as
>         the underlying
>         types have been previously defined elsewhere. The
>         SERIALNUM-ID whitelist is collated
>         according to manufacturer
>         trust anchor since serial numbers are not globally
>         unique.

This is actually not helping. I was looking for something like:

  DNS-ID = a subjectAltName entry of type dNSName

Basically I was asking for a definition of SERIALNUM-ID somewhere.

Best Regards,
Alexey