Re: [certid] version -11
Peter Saint-Andre <stpeter@stpeter.im> Mon, 29 November 2010 23:23 UTC
Return-Path: <stpeter@stpeter.im>
X-Original-To: certid@core3.amsl.com
Delivered-To: certid@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix)
with ESMTP id D2C113A6BCF for <certid@core3.amsl.com>;
Mon, 29 Nov 2010 15:23:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.449
X-Spam-Level:
X-Spam-Status: No, score=-102.449 tagged_above=-999 required=5 tests=[AWL=0.150,
BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com
[127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j5+EI59W7TXI for
<certid@core3.amsl.com>; Mon, 29 Nov 2010 15:23:02 -0800 (PST)
Received: from stpeter.im (stpeter.im [207.210.219.233]) by core3.amsl.com
(Postfix) with ESMTP id ACC553A6BCD for <certid@ietf.org>;
Mon, 29 Nov 2010 15:23:01 -0800 (PST)
Received: from dhcp-64-101-72-234.cisco.com (dhcp-64-101-72-234.cisco.com
[64.101.72.234]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with
ESMTPSA id 3295D4009B; Mon, 29 Nov 2010 16:35:16 -0700 (MST)
Message-ID: <4CF4361A.8010802@stpeter.im>
Date: Mon, 29 Nov 2010 16:24:10 -0700
From: Peter Saint-Andre <stpeter@stpeter.im>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US;
rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6
MIME-Version: 1.0
To: Paul Hoffman <paul.hoffman@vpnc.org>
References: <4CF0ABD4.3030300@KingsMountain.com>
<p06240802c916d999b48f@[10.20.30.249]>
In-Reply-To: <p06240802c916d999b48f@[10.20.30.249]>
X-Enigmail-Version: 1.1.1
OpenPGP: url=http://www.saint-andre.com/me/stpeter.asc
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
micalg=sha1; boundary="------------ms070904070702040908040509"
Cc: IETF cert-based identity <certid@ietf.org>,
=JeffH <Jeff.Hodges@KingsMountain.com>
Subject: Re: [certid] version -11
X-BeenThere: certid@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Representation and verification of identity in certificates
<certid.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/certid>,
<mailto:certid-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/certid>
List-Post: <mailto:certid@ietf.org>
List-Help: <mailto:certid-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/certid>,
<mailto:certid-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Nov 2010 23:23:06 -0000
On 11/27/10 8:52 AM, Paul Hoffman wrote: > At 10:57 PM -0800 11/26/10, =JeffH wrote: >> Thanks for the prompt review :) >> >>> - The sentence that was added to 2.3 beginning with "However..." needs clarification. >>> Current: >>> However, the Common Name might contain a human-readable string for >>> the service, rather than a string whose form matches that of a fully- >>> qualified DNS domain name: >>> >>> Proposed: >>> However, the Common Name might contain a human-readable string for >>> the service, rather than a string whose form matches that of a fully- >>> qualified DNS domain name, and a certificate with such a Common Name >>> SHOULD have a subjectAltName that contains the fully-qualified domain >>> name: >> >> Nominally agree. >> >> Those sections (2.*) are effectively a non-normative, so perhaps the "SHOULD" ought to be "will typically". > > Ah, I had missed that. "will typically" works for me. In our working copy I now have: However, the Common Name might contain a human-readable string for the service, rather than a string whose form matches that of a fully- qualified DNS domain name (a certificate with such a Common Name will typically have at least one subjectAltName entry that contains the fully-qualified domain name): Peter -- Peter Saint-Andre https://stpeter.im/
- [certid] version -11 Peter Saint-Andre
- Re: [certid] version -11 Paul Hoffman
- Re: [certid] version -11 =JeffH
- Re: [certid] version -11 Paul Hoffman
- Re: [certid] version -11 Peter Saint-Andre
- Re: [certid] version -11 Peter Saint-Andre
- Re: [certid] version -11 Peter Saint-Andre
- Re: [certid] version -11 Matt McCutchen
- Re: [certid] version -11 Peter Saint-Andre