Re: [CDNi] [EXTERNAL] Re: I-D Action: draft-ietf-cdni-https-delegation-subcerts-05.txt

["Kevin J. Ma" <[e-mail]>]

Hi Mike,

  Awesome!  Thanks so much!

Christoph,

  Once we make those updates I think we should be good to go.

thanx!

--  Kevin J. Ma

Sent from my iPhone

On Jan 2, 2024, at 3:44 PM, Mike Ounsworth <[e-mail]> wrote:



Hi Kevin,

 

I’m very sorry that I missed the ping about this draft from October.

 

I have reviewed the new -05 and I think it is ready with nits. My updated SecDir review is here:

https://datatracker.ietf.org/doc/review-ietf-cdni-https-delegation-subcerts-04-secdir-early-ounsworth-2023-09-06/01/" rel="nofollow">https://datatracker.ietf.org/doc/review-ietf-cdni-https-delegation-subcerts-04-secdir-early-ounsworth-2023-09-06/01/

 

The nits are that the Security Considerations don’t seem to have been updated to reflect the security changes in -05, and there are a couple small things that could be worth mentioning.

 

---

Mike Ounsworth

 

From: Kevin Ma <[e-mail]>
Sent: Monday, January 1, 2024 9:50 PM
To: Mike Ounsworth <[e-mail]>; Christoph Neumann <[e-mail]>
Cc: [e-mail]; <[e-mail]> <[e-mail]>
Subject: [EXTERNAL] Re: [CDNi] I-D Action: draft-ietf-cdni-https-delegation-subcerts-05.txt

 

Hi Christoph, The updated text looks good to me. Hi Mike, Could you please confirm if the updated text is acceptable from a secdir perspective; or please let us know if we need to submit a new early review request to get a re-review?thanx!--

Hi Christoph,

 

  The updated text looks good to me.

 

Hi Mike,

 

  Could you please confirm if the updated text is acceptable from a secdir perspective; or please let us know if we need to submit a new early review request to get a re-review?

 

thanx!

 

--  Kevin J. Ma

 

 

On Thu, Oct 5, 2023 at 3:57 AM Christoph Neumann <[e-mail]> wrote:

Hi all,

I submitted a new version of the internet draft related to delegated credentials.
This update takes into account the secdir reviews of the previous draft.
The draft now specifies that, if used, the private key must be encrypted using JWE, whereas the public key used for encryption can be announced in the FCI.DelegatedCredentials.

Christoph

-----Original Message-----
From: CDNi <[e-mail]> On Behalf Of [e-mail]
Sent: Thursday, October 5, 2023 9:54 AM
To: [e-mail]
Cc: [e-mail]
Subject: [CDNi] I-D Action: draft-ietf-cdni-https-delegation-subcerts-05.txt

Internet-Draft draft-ietf-cdni-https-delegation-subcerts-05.txt is now available. It is a work item of the Content Delivery Networks Interconnection
(CDNI) WG of the IETF.

   Title:   CDNI Metadata for Delegated Credentials
   Authors: Frederic Fieau
            Emile Stephan
            Guillaume Bichot
            Christoph Neumann
   Name:    draft-ietf-cdni-https-delegation-subcerts-05.txt
   Pages:   12
   Dates:   2023-10-05

Abstract:

   The delivery of content over HTTPS involving multiple CDNs raises
   credential management issues.  This document defines metadata in the
   CDNI Control and Metadata interface to setup HTTPS delegation using
   Delegated Credentials from an Upstream CDN (uCDN) to a Downstream CDN
   (dCDN).

The IETF datatracker status page for this Internet-Draft is:
https://urldefense.com/v3/__https:/datatracker.ietf.org/doc/draft-ietf-cdni-https-delegation-subcerts/__;!!FJ-Y8qCqXTj2!Y_RuZ0hPX77rYjXmAjN8xXh1AueWJgn7LVE5OJrSfg8Yy7KK_jaYRQabpTGcDNYwOQGKqFPes3PR1qn6Zr2NNB2W4mlOHMc$" target="_blank" rel="nofollow">https://datatracker.ietf.org/doc/draft-ietf-cdni-https-delegation-subcerts/

There is also an HTMLized version available at:
https://urldefense.com/v3/__https:/datatracker.ietf.org/doc/html/draft-ietf-cdni-https-delegation-subcerts-05__;!!FJ-Y8qCqXTj2!Y_RuZ0hPX77rYjXmAjN8xXh1AueWJgn7LVE5OJrSfg8Yy7KK_jaYRQabpTGcDNYwOQGKqFPes3PR1qn6Zr2NNB2W90irJbo$" target="_blank" rel="nofollow">https://datatracker.ietf.org/doc/html/draft-ietf-cdni-https-delegation-subcerts-05

A diff from the previous version is available at:
https://urldefense.com/v3/__https:/author-tools.ietf.org/iddiff?url2=draft-ietf-cdni-https-delegation-subcerts-05__;!!FJ-Y8qCqXTj2!Y_RuZ0hPX77rYjXmAjN8xXh1AueWJgn7LVE5OJrSfg8Yy7KK_jaYRQabpTGcDNYwOQGKqFPes3PR1qn6Zr2NNB2WYtjpF6I$" target="_blank" rel="nofollow">https://author-tools.ietf.org/iddiff?url2=draft-ietf-cdni-https-delegation-subcerts-05

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
CDNi mailing list
[e-mail]
https://urldefense.com/v3/__https:/www.ietf.org/mailman/listinfo/cdni__;!!FJ-Y8qCqXTj2!Y_RuZ0hPX77rYjXmAjN8xXh1AueWJgn7LVE5OJrSfg8Yy7KK_jaYRQabpTGcDNYwOQGKqFPes3PR1qn6Zr2NNB2WiTKKEjQ$" target="_blank" rel="nofollow">https://www.ietf.org/mailman/listinfo/cdni
Broadpeak, S.A. Registered offices at 15 rue Claude Chappe, Zone des Champs Blancs, 35510 Cesson-Sévigné, France | Rennes
Trade Register: 524 473 063
This e-mail and its attachments contain confidential information from Broadpeak S.A. and/or its affiliates (Broadpeak), which is intended only for the person to whom it is addressed.
If you are not the intended recipient of this email, please notify immediately the sender by phone or email and delete it. Any use of the information contained herein in any way, including, but not limited to, total or partial disclosure, reproduction, or dissemination, by persons other than the intended recipient(s) is prohibited, unless expressly authorized by Broadpeak. Broadpeak, S.A. and its affiliates respect privacy laws, and is committed to the protection of personal data. Emails and/or attachments thereof exchanged between us may include your personal data which may be processed by Broadpeak and/or its affiliates according to applicable privacy laws & regulations.
In compliance with Regulation (EU) 2016/679 (GDPR) and applicable implementation in local legislations, you can exercise at any time your rights of access, rectification or erasure of your personal data, as well as your rights to restriction, portability or object to the processing.
For such purpose, or to know more about how Broadpeak processes your personal data, you may contact Broadpeak by email [e-mail].
Local authority : Commission Nationale Informatique et Libertés (CNIL): 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 or https://urldefense.com/v3/__http:/www.cnil.fr/__;!!FJ-Y8qCqXTj2!Y_RuZ0hPX77rYjXmAjN8xXh1AueWJgn7LVE5OJrSfg8Yy7KK_jaYRQabpTGcDNYwOQGKqFPes3PR1qn6Zr2NNB2Wb5u0KPw$" target="_blank" rel="nofollow">http://www.cnil.fr/
_______________________________________________
CDNi mailing list
[e-mail]
https://urldefense.com/v3/__https:/www.ietf.org/mailman/listinfo/cdni__;!!FJ-Y8qCqXTj2!Y_RuZ0hPX77rYjXmAjN8xXh1AueWJgn7LVE5OJrSfg8Yy7KK_jaYRQabpTGcDNYwOQGKqFPes3PR1qn6Zr2NNB2WiTKKEjQ$" target="_blank" rel="nofollow">https://www.ietf.org/mailman/listinfo/cdni