[Dance] draft-ietf-dance-client-auth-01 sec 8
Robert Moskowitz <rgm-sec@htt-consult.com> Thu, 04 May 2023 13:50 UTC
Return-Path: <rgm-sec@htt-consult.com>
X-Original-To: dance@ietfa.amsl.com
Delivered-To: dance@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6721BC137397 for <dance@ietfa.amsl.com>; Thu, 4 May 2023 06:50:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level:
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m2ESoKH0W9Ox for <dance@ietfa.amsl.com>; Thu, 4 May 2023 06:49:58 -0700 (PDT)
Received: from z9m9z.htt-consult.com (z9m9z.htt-consult.com [23.123.122.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C78D6C137395 for <dance@ietf.org>; Thu, 4 May 2023 06:49:58 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by z9m9z.htt-consult.com (Postfix) with ESMTP id A79B96267D for <dance@ietf.org>; Thu, 4 May 2023 09:49:34 -0400 (EDT)
X-Virus-Scanned: amavisd-new at htt-consult.com
Received: from z9m9z.htt-consult.com ([127.0.0.1]) by localhost (z9m9z.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 8UQO15eZOvQM for <dance@ietf.org>; Thu, 4 May 2023 09:49:30 -0400 (EDT)
Received: from [192.168.160.29] (unknown [192.168.160.29]) (using TLSv1.2 with cipher AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by z9m9z.htt-consult.com (Postfix) with ESMTPSA id D346B62653 for <dance@ietf.org>; Thu, 4 May 2023 09:49:27 -0400 (EDT)
Message-ID: <5cbfe2ef-6582-c0b7-181a-fb2fbdb521e1@htt-consult.com>
Date: Thu, 04 May 2023 09:49:47 -0400
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.10.0
To: dance@ietf.org
Content-Language: en-US
From: Robert Moskowitz <rgm-sec@htt-consult.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dance/s1S5dYdHjvC7XPfEqm_1TLsihlo>
Subject: [Dance] draft-ietf-dance-client-auth-01 sec 8
X-BeenThere: dance@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: DANE Authentication for Network Clients Everywhere <dance.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dance>, <mailto:dance-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dance/>
List-Post: <mailto:dance@ietf.org>
List-Help: <mailto:dance-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dance>, <mailto:dance-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 May 2023 13:50:03 -0000
Raw Public Keys Should Matching Type Field of '0' be included here that then it is 3 1 0 (SPKI) ? Since I am using EdDSA25519, the SPKI is 44 bytes. Note I am busy defining a test DNS setup for DRIP and will be having lots of HIP and TLSA RR. We also have an Endorsement structure defined in ietf-drip-registries (sec B.3) of 136 bytes. For now this will be managed in a CERT RR with a private OID. Once we get some more usage figured out, we may go for a specific RR. I suppose we COULD add a new Selector Field value for them... Bob
- [Dance] draft-ietf-dance-client-auth-01 sec 8 Robert Moskowitz
- Re: [Dance] draft-ietf-dance-client-auth-01 sec 8 Shumon Huque
- Re: [Dance] draft-ietf-dance-client-auth-01 sec 8 Robert Moskowitz