IETF Logo Mail Archive

Re: [certid] CN fallback

"Scott Cantor" <cantor.2@osu.edu> Tue, 06 April 2010 16:35 UTC

Return-Path: <cantor.2@osu.edu>
X-Original-To: certid@core3.amsl.com
Delivered-To: certid@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 941013A690C for <certid@core3.amsl.com>; Tue, 6 Apr 2010 09:35:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.45
X-Spam-Level: *
X-Spam-Status: No, score=1.45 tagged_above=-999 required=5 tests=[BAYES_50=0.001, MSGID_MULTIPLE_AT=1.449]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q5n2xaANEh-o for <certid@core3.amsl.com>; Tue, 6 Apr 2010 09:35:32 -0700 (PDT)
Received: from defang2.it.ohio-state.edu (defang2.it.ohio-state.edu [128.146.216.82]) by core3.amsl.com (Postfix) with ESMTP id C35E83A677E for <certid@ietf.org>; Tue, 6 Apr 2010 09:35:32 -0700 (PDT)
Received: from defang9.it.ohio-state.edu (defang9.it.ohio-state.edu [128.146.216.78]) by defang2.it.ohio-state.edu (8.13.7/8.13.1) with ESMTP id o36GZULj032098 for <certid@ietf.org>; Tue, 6 Apr 2010 12:35:30 -0400
Received: from SNOWDOG (dhcp-128-146-207-191.osuwireless.ohio-state.edu [128.146.207.191]) by defang9.it.ohio-state.edu (8.13.7/8.13.1) with ESMTP id o36GZUTU030543 for <certid@ietf.org>; Tue, 6 Apr 2010 12:35:30 -0400
From: "Scott Cantor" <cantor.2@osu.edu>
To: <certid@ietf.org>
References: <201003231544.05651.ludwig.nussel@suse.de> <4BB3C21E.90502@stpeter.im> <4BBA5673.7020403@isode.com> <00d401cad517$7ee680c0$7cb38240$%2@osu.edu> <alpine.DEB.2.00.1004060908370.2761@lil-red-x>
In-Reply-To: <alpine.DEB.2.00.1004060908370.2761@lil-red-x>
Date: Tue, 6 Apr 2010 12:35:37 -0400
Organization: The Ohio State University
Message-ID: <012c01cad5a7$3049fb50$90ddf1f0$@2@osu.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AcrVpR5pXXJhQowKQG23vQffHAf5RAAAS5iw
Content-Language: en-us
X-CanIt-Geo: ip=128.146.216.78; country=US; region=OH; city=Columbus; latitude=39.9968; longitude=-82.9882; metrocode=535; areacode=614; http://maps.google.com/maps?q=39.9968,-82.9882&z=6
X-CanItPRO-Stream: outbound
X-Scanned-By: CanIt (www . roaringpenguin . com) on 128.146.216.82
Subject: Re: [certid] CN fallback
X-BeenThere: certid@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Representation and verification of identity in certificates <certid.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/certid>, <mailto:certid-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/certid>
List-Post: <mailto:certid@ietf.org>
List-Help: <mailto:certid-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/certid>, <mailto:certid-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Apr 2010 16:35:33 -0000

> Because this isn't a brand new subject area.  This doc is intended (IMHO)
> to clarify (lots and lots of) existing practice and nudge it in the right
> direction, not start with a clean sheet.

If something "adopts" this as an approach, it then inherits all the
practices, and would need to do its own profiling to then limit the options
further. I don't see that happening as much as if the "best practice" were
already here, so the effect is to leave things pretty much as they are.

> People will be looking to this spec to clarify this naming mystery.
> Leaving out traditional practice because it's icky just leaves the mystery
> to be documented in alleyways instead.

Precluding something doesn't necessarily mean leaving it undocumented or
unmentioned though.

-- Scott

v2.8.7 | Report a Bug | By Email