IETF Logo Mail Archive

Re: [certid] open issues

Bruno Harbulot <Bruno.Harbulot@manchester.ac.uk> Fri, 09 April 2010 12:39 UTC

Return-Path: <Bruno.Harbulot@manchester.ac.uk>
X-Original-To: certid@core3.amsl.com
Delivered-To: certid@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 18B6D3A690B for <certid@core3.amsl.com>; Fri, 9 Apr 2010 05:39:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level:
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G7atUwIE1IhC for <certid@core3.amsl.com>; Fri, 9 Apr 2010 05:39:30 -0700 (PDT)
Received: from serenity.mcc.ac.uk (serenity.mcc.ac.uk [130.88.200.93]) by core3.amsl.com (Postfix) with ESMTP id 298A53A67FC for <certid@ietf.org>; Fri, 9 Apr 2010 05:39:30 -0700 (PDT)
Received: from rankine.its.manchester.ac.uk ([130.88.25.196]) by serenity.mcc.ac.uk with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from <Bruno.Harbulot@manchester.ac.uk>) id 1O0DUa-0004XT-Rj for certid@ietf.org; Fri, 09 Apr 2010 13:39:24 +0100
Received: from 94-192-243-24.zone6.bethere.co.uk ([94.192.243.24]:58519 helo=mymachine) by rankine.its.manchester.ac.uk with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.69) (envelope-from <Bruno.Harbulot@manchester.ac.uk>) id 1O0DUa-0004gZ-N2 for certid@ietf.org; Fri, 09 Apr 2010 13:39:24 +0100
Message-ID: <4BBF1FFB.5080501@manchester.ac.uk>
Date: Fri, 09 Apr 2010 13:39:23 +0100
From: Bruno Harbulot <Bruno.Harbulot@manchester.ac.uk>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.1.9) Gecko/20100317 Lightning/1.0b1 Thunderbird/3.0.4
MIME-Version: 1.0
To: certid@ietf.org
References: <4BBE4CDE.5000703@stpeter.im>
In-Reply-To: <4BBE4CDE.5000703@stpeter.im>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Authenticated-Sender: Bruno Harbulot from 94-192-243-24.zone6.bethere.co.uk (mymachine) [94.192.243.24]:58519
X-Authenticated-From: Bruno.Harbulot@manchester.ac.uk
X-UoM: Scanned by the University Mail System. See http://www.itservices.manchester.ac.uk/email/filtering/information/ for details.
Subject: Re: [certid] open issues
X-BeenThere: certid@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Representation and verification of identity in certificates <certid.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/certid>, <mailto:certid-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/certid>
List-Post: <mailto:certid@ietf.org>
List-Help: <mailto:certid-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/certid>, <mailto:certid-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Apr 2010 12:39:31 -0000

Hi Peter,

On 08/04/2010 22:38, Peter Saint-Andre wrote:
> I'd like to come up with a complete list of the open issues related to
> draft-saintandre-tls-server-id-check. Please reply to this thread with
> additional open issues, then I will start a separate thread about each.
>
> Here's what I have so far:
> [...]
>
> Anything else?

I would suggest adding a couple of points:

- Use of 'MUST NOT' and ambiguity of 'represent', as I mentioned in:
   http://www.ietf.org/mail-archive/web/certid/current/msg00010.html

- Left-most/right-most should probably be replaced by ASN.1 ordering, 
since left/right ordering depends on the tools. (See Nelson Bolyard's 
e-mail.)


Best wishes,

Bruno.

v2.8.7 | Report a Bug | By Email