Re: [certid] Fwd: RFC 6125 on TLS Server ID Check

=JeffH <Jeff.Hodges@KingsMountain.com> Thu, 31 March 2011 13:56 UTC

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=kingsmountain.com; h=Received:Message-ID:Date:From:User-Agent:MIME-Version:To:Subject:Content-Type:Content-Transfer-Encoding:X-Identified-User; b=WxsTERnEFk0xZ/VaKcWzvjhCuX0e3kG7UygkID5J/9+BRMCHe54sW9jDBDXFhyem4FLmEbNO8JNAWi0zikpqoRbeBiLnDzzbqsbTCal0NAGL4BegMipPB2JxUsNygJHi;
Message-ID: <4D948866.6080203@KingsMountain.com>
Date: Thu, 31 Mar 2011 06:57:58 -0700
From: =JeffH <Jeff.Hodges@KingsMountain.com>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.14) Gecko/20110223 Thunderbird/3.1.8
MIME-Version: 1.0
To: IETF cert-based identity <certid@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: Re: [certid] Fwd: RFC 6125 on TLS Server ID Check
Precedence: list

 >>        Title:      Representation and Verification of Domain-Based
 >>                    Application Service Identity within Internet Public
 >>                    Key Infrastructure Using X.509 (PKIX) Certificates
 >>                    in the Context of
 >
 > tl;dr.

by which PeterG sez he means..

  "too long; didn't read."


lol, indeed.

Please note, tho..

1. yes, we overlooked having a short subtitle eg "TLS Server ID Check". mea 
culpa.  (

2. the title is verbose in part to facilitate maximizing hits when folks are 
searching/grep'g thru the RFC Index

3. the spec itself is (too) long due to PKIX/X.509 baroqueness and the variety 
of manners in which various protocols have decided to employ it. Nature of the 
beast and all.


But now the spec is done and all this folklore is finally written down in one 
place (hopefully rather than being re-invented over & over in individual 
protocol specs), and we can go pay attention to newer, hopefully more simple 
stuff (famous last words) e.g. DANE.

Thanks again for everyone's help in reviewing and contributing to 6125. By my 
count we have 58 or so ack'd contributors.

thanks again,

=JeffH

Re: [certid] Fwd: RFC 6125 on TLS Server ID Check =JeffH