IETF Logo Mail Archive

Re: [dane] Fwd: New Version Notification for draft-york-dane-deployment-observations-00.txt

Dan York <york@isoc.org> Mon, 10 November 2014 23:49 UTC

Return-Path: <york@isoc.org>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 230F01AD0BE for <dane@ietfa.amsl.com>; Mon, 10 Nov 2014 15:49:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bo6xOLM9QyzK for <dane@ietfa.amsl.com>; Mon, 10 Nov 2014 15:49:18 -0800 (PST)
Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0075.outbound.protection.outlook.com [207.46.100.75]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D55B61AD0BB for <dane@ietf.org>; Mon, 10 Nov 2014 15:49:17 -0800 (PST)
Received: from BLUPR06MB244.namprd06.prod.outlook.com (10.242.191.153) by BLUPR06MB532.namprd06.prod.outlook.com (10.141.204.146) with Microsoft SMTP Server (TLS) id 15.1.16.15; Mon, 10 Nov 2014 23:49:16 +0000
Received: from BLUPR06MB243.namprd06.prod.outlook.com (10.242.191.154) by BLUPR06MB244.namprd06.prod.outlook.com (10.242.191.153) with Microsoft SMTP Server (TLS) id 15.1.16.15; Mon, 10 Nov 2014 23:49:16 +0000
Received: from BLUPR06MB243.namprd06.prod.outlook.com ([169.254.7.121]) by BLUPR06MB243.namprd06.prod.outlook.com ([169.254.7.121]) with mapi id 15.01.0016.006; Mon, 10 Nov 2014 23:49:15 +0000
From: Dan York <york@isoc.org>
To: "shuque@gmail.com" <shuque@gmail.com>
Thread-Topic: [dane] Fwd: New Version Notification for draft-york-dane-deployment-observations-00.txt
Thread-Index: AQHP8jjOFMsq3jadb06FZXJoaiV9rJxEmBKAgBWPLYCAAFHugIAAG7OAgAAIiwA=
Date: Mon, 10 Nov 2014 23:49:15 +0000
Message-ID: <6CBA9FB4-212E-4021-BDF5-5AF37A717556@isoc.org>
References: <20141027225310.29285.24437.idtracker@ietfa.amsl.com> <F0C0FC32-FAA7-4D07-A230-59A538754BCD@isoc.org> <20141027233223.GL19158@mournblade.imrryr.org> <20141110164617.GZ161@mournblade.imrryr.org> <20141110213931.GJ161@mournblade.imrryr.org> <CAHPuVdU-Oqc3qqDFDF6EwfKdpec5VqF5iZ7WRphF=bVDuYqwKA@mail.gmail.com>
In-Reply-To: <CAHPuVdU-Oqc3qqDFDF6EwfKdpec5VqF5iZ7WRphF=bVDuYqwKA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [31.133.161.90]
x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BLUPR06MB244;UriScan:;
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa: BCL:0;PCL:0;RULEID:;SRVR:BLUPR06MB244;
x-forefront-prvs: 039178EF4A
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(199003)(2473001)(189002)(377454003)(24454002)(62966003)(36756003)(92566001)(77096003)(2420400002)(82746002)(15975445006)(122556002)(110136001)(77156002)(97736003)(19617315012)(16236675004)(19580405001)(19580395003)(83716003)(87936001)(33656002)(40100003)(76176999)(101416001)(2656002)(2501002)(50986999)(54356999)(99396003)(46102003)(66066001)(21056001)(4396001)(15202345003)(95666004)(1411001)(120916001)(99286002)(106356001)(106116001)(230783001)(92726001)(105586002)(64706001)(107046002)(93886004)(20776003)(2351001)(31966008)(86362001)(104396001); DIR:OUT; SFP:1101; SCL:1; SRVR:BLUPR06MB244; H:BLUPR06MB243.namprd06.prod.outlook.com; FPR:; MLV:sfv; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
Content-Type: multipart/alternative; boundary="_000_6CBA9FB4212E4021BDF55AF37A717556isocorg_"
MIME-Version: 1.0
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BLUPR06MB532;
X-OriginatorOrg: isoc.org
Archived-At: http://mailarchive.ietf.org/arch/msg/dane/CclmA1A8jPrUWTYxXfJ5IsC0R4A
Cc: "dane@ietf.org" <dane@ietf.org>
Subject: Re: [dane] Fwd: New Version Notification for draft-york-dane-deployment-observations-00.txt
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Nov 2014 23:49:23 -0000

Shumon (& also replying to Viktor),

On Nov 10, 2014, at 1:18 PM, Shumon Huque <shuque@gmail.com<mailto:shuque@gmail.com>> wrote:

My site (www.huque.com<http://www.huque.com/>.) also falls into that latter category. The annotation on Dan York's page should be updated - it currently says I don't have a secure delegation, which was true at one time in the past (blame a DNSSEC oblivious registrar), but no longer.

Yes, I noticed that when I looked at Viktor's test results this morning.  I updated the page to move your site into the appropriate category:

http://www.internetsociety.org/deploy360/resources/dane-test-sites/

Based on Viktor's recent test (Thank you, Viktor!), I'm updating the page with other information.

I find it interesting that 3 of the 5 out-of-date sites would seem to be be operational errors.  Two of the sites Viktor tags as:

  - Recent key rotation, no corresponding TLSA RR update.

and one is:

  - Certificate unrelated to TLSA RR.

All of these would seem to be related to operational processes where some part of the security layers get updated without other corresponding layers being also updated.  I don't know that this is really anything that we as the IETF can do anything to help with... but it's interesting to understand where the breakdown in the process occurs.

Dan

v2.23.0 | Report a Bug | By Email