Re: [certid] [Spam] Re: URI match
"Scott Cantor" <cantor.2@osu.edu> Thu, 01 April 2010 16:58 UTC
Return-Path: <cantor.2@osu.edu>
X-Original-To: certid@core3.amsl.com
Delivered-To: certid@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix)
with ESMTP id 4D73D3A697D for <certid@core3.amsl.com>;
Thu, 1 Apr 2010 09:58:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.02
X-Spam-Level:
X-Spam-Status: No,
score=-1.02 tagged_above=-999 required=5 tests=[BAYES_00=-2.599,
DNS_FROM_OPENWHOIS=1.13, MSGID_MULTIPLE_AT=1.449, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com
[127.0.0.1]) (amavisd-new, port 10024) with ESMTP id va9TKxkq4AZ4 for
<certid@core3.amsl.com>; Thu, 1 Apr 2010 09:58:36 -0700 (PDT)
Received: from defang20.it.ohio-state.edu (defang20.it.ohio-state.edu
[128.146.216.134]) by core3.amsl.com (Postfix) with ESMTP id 7EF913A67B4 for
<certid@ietf.org>; Thu, 1 Apr 2010 09:58:35 -0700 (PDT)
Received: from defang10.it.ohio-state.edu (defang10.it.ohio-state.edu
[128.146.216.79]) by defang20.it.ohio-state.edu (8.13.7/8.13.1) with ESMTP id
o31Gx6Vt025047 for <certid@ietf.org>; Thu, 1 Apr 2010 12:59:07 -0400
Received: from SNOWDOG (SNOWDOG.dyn.cio.osu.edu [164.107.161.86]) by
defang10.it.ohio-state.edu (8.13.7/8.13.1) with ESMTP id o31Gx6l8008509 for
<certid@ietf.org>; Thu, 1 Apr 2010 12:59:06 -0400
From: "Scott Cantor" <cantor.2@osu.edu>
To: <certid@ietf.org>
References: <201003231500.05187.ludwig.nussel@suse.de>
<4BB3C8D6.5030402@stpeter.im> <022c01cad12c$747102d0$5d530870$%2@osu.edu>
<002401cad17f$60048080$200d8180$@eu>
In-Reply-To: <002401cad17f$60048080$200d8180$@eu>
Date: Thu, 1 Apr 2010 12:59:11 -0400
Organization: The Ohio State University
Message-ID: <025501cad1bc$a6d6eb00$f484c100$@2@osu.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-index: AcrRH0oMYdKldPf1R0GoZtGAtcH9KAADLOagABS1oqAAD1378A==
Content-language: en-us
x-cr-hashedpuzzle: ArWi BB77 BvzW B/bs DOFU Dbiw Dcn+ EAih EJZu FLL8 FqAN G0Go
HPVs HkGD Iz2Q J2Mf; 1; YwBlAHIAdABpAGQAQABpAGUAdABmAC4AbwByAGcA; Sosha1_v1; 7;
{9B72AF8B-F752-4441-B6C8-B0A746909745};
YwBhAG4AdABvAHIALgAyAEAAbwBzAHUALgBlAGQAdQA=; Thu, 01 Apr 2010 16:59:09 GMT;
UgBFADoAIABbAGMAZQByAHQAaQBkAF0AIABbAFMAcABhAG0AXQAgAFIAZQA6ACAAIABVAFIASQAgAG0AYQB0AGMAaAA=
x-cr-puzzleid: {9B72AF8B-F752-4441-B6C8-B0A746909745}
X-CanIt-Geo: ip=128.146.216.79; country=US; region=OH; city=Columbus;
latitude=39.9968; longitude=-82.9882; metrocode=535; areacode=614;
http://maps.google.com/maps?q=39.9968,-82.9882&z=6
X-CanItPRO-Stream: outbound
X-Scanned-By: CanIt (www . roaringpenguin . com) on 128.146.216.134
Subject: Re: [certid] [Spam] Re: URI match
X-BeenThere: certid@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Representation and verification of identity in certificates
<certid.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/certid>,
<mailto:certid-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/certid>
List-Post: <mailto:certid@ietf.org>
List-Help: <mailto:certid-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/certid>,
<mailto:certid-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Apr 2010 16:58:37 -0000
> It seems that there is general requirement for URI matching. URIs are not > only used in subjectAltName, but are used in X.500 in general, i.e., for > RFID support. Defining uniformResourceIdentifier as just an IA5String may > also be a simplification. However, matching on URI makes a lot more sense as a certificate constraint if you also stop at that point rather than continuing to DNS or CN-based matching. If you just keep going, it's not worth much. I think it's very sensible to use URIs only but if that's not consistent with the intent of the draft, it's probably a simplification to just advise against it or leave it out. -- Scott
- [certid] URI match Ludwig Nussel
- Re: [certid] URI match Bruno Harbulot
- Re: [certid] URI match Peter Saint-Andre
- Re: [certid] URI match Scott Cantor
- Re: [certid] [Spam] Re: URI match Erik Andersen
- Re: [certid] [Spam] Re: URI match Scott Cantor
- Re: [certid] URI match Shumon Huque
- Re: [certid] [Spam] Re: URI match Shumon Huque
- Re: [certid] [Spam] Re: URI match Peter Saint-Andre
- Re: [certid] [Spam] Re: URI match Shumon Huque