Re: [certid] [Gen-art] Gen-ART LC Review of draft-saintandre-tls-server-id-check-11

Ben Campbell <ben@nostrum.com> Wed, 08 December 2010 21:38 UTC

Return-Path: <ben@nostrum.com>
X-Original-To: certid@core3.amsl.com
Delivered-To: certid@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D5DB43A698E; Wed, 8 Dec 2010 13:38:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.095
X-Spam-Level:
X-Spam-Status: No, score=-102.095 tagged_above=-999 required=5 tests=[AWL=-0.095, BAYES_00=-2.599, J_CHICKENPOX_93=0.6, SPF_PASS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LNHU0Yu6KbwB; Wed, 8 Dec 2010 13:38:04 -0800 (PST)
Received: from nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by core3.amsl.com (Postfix) with ESMTP id E5ED43A6988; Wed, 8 Dec 2010 13:37:54 -0800 (PST)
Received: from dn3-174.estacado.net (vicuna-alt.estacado.net [75.53.54.121]) (authenticated bits=0) by nostrum.com (8.14.3/8.14.3) with ESMTP id oB8LdMu3076714 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 8 Dec 2010 15:39:22 -0600 (CST) (envelope-from ben@nostrum.com)
Mime-Version: 1.0 (Apple Message framework v1082)
Content-Type: text/plain; charset="us-ascii"
From: Ben Campbell <ben@nostrum.com>
In-Reply-To: <4CFFE784.20302@stpeter.im>
Date: Wed, 08 Dec 2010 15:39:21 -0600
Content-Transfer-Encoding: quoted-printable
Message-Id: <AC83817E-5166-49CD-AA5D-2833FDBA89AF@nostrum.com>
References: <4CFFE19F.1060603@KingsMountain.com> <4CFFE784.20302@stpeter.im>
To: Peter Saint-Andre <stpeter@stpeter.im>
X-Mailer: Apple Mail (2.1082)
Received-SPF: pass (nostrum.com: 75.53.54.121 is authenticated by a trusted mechanism)
Cc: draft-saintandre-tls-server-id-check.all@tools.ietf.org, General Area Review Team <gen-art@ietf.org>, certid@ietf.org, =JeffH <Jeff.Hodges@KingsMountain.com>
Subject: Re: [certid] [Gen-art] Gen-ART LC Review of draft-saintandre-tls-server-id-check-11
X-BeenThere: certid@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Representation and verification of identity in certificates <certid.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/certid>, <mailto:certid-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/certid>
List-Post: <mailto:certid@ietf.org>
List-Help: <mailto:certid-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/certid>, <mailto:certid-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Dec 2010 21:38:06 -0000

On Dec 8, 2010, at 2:16 PM, Peter Saint-Andre wrote:

[...]

>> For example, given an input URI of
>> "sip:alice:pswd@example.net;transport=tcp?subject=project%20x&priority=urgent",
>> the client derives the service type "sip" from the scheme, and the
>> domain name "example.net" from the authority component. 
> 
> Looks good. I love gnarly URIs. :)
> 

See my comment to Jeff. A simpler URI would be good enough, as long as its got _something_ beyond just the scheme and authority parts. And we should be careful with transport=tcp lest someone ask why we are connecting via TLS. How about just "sips:alice@example.net"? (the "sips" scheme both shows that we intend to use TLS, and illustrates how a user input scheme of "sips" might result in a reference id scheme of "sip".)

>> Also, given an
>> input URI of "im:alice@example.net", the derived service type is "sip"
>> (since the "im" scheme is defined as an abstract scheme in the SIP
>> context by [SIP-IM] (RFC 3428)), and the domain name is again
>> "example.net".
> 
> Well, the im: and pres: URIs can result in a derived service type of
> "xmpp", too. It depends on what a service has deployed...
> 

If my SIP client derives an XMPP service, it will violate the principle of least surprise :-) But on reflection, I think the "im" example may delve to far into the esoteric even for me. 

> http://tools.ietf.org/html/rfc3860
> 
> http://www.iana.org/assignments/im-srv-labels/im-srv-labels.xhtml
> 
> Peter
> 
> -- 
> Peter Saint-Andre
> https://stpeter.im/
> 
> 
> 
> _______________________________________________
> Gen-art mailing list
> Gen-art@ietf.org
> https://www.ietf.org/mailman/listinfo/gen-art