[dane] email canonicalization for SMIMEA owner names

"Rose, Scott W." <scott.rose@nist.gov> Thu, 11 December 2014 19:51 UTC

Return-Path: <scott.rose@nist.gov>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAE441A8A5E for <dane@ietfa.amsl.com>; Thu, 11 Dec 2014 11:51:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.311
X-Spam-Level:
X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, GB_I_LETTER=-2, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nEUcao7o1Dsy for <dane@ietfa.amsl.com>; Thu, 11 Dec 2014 11:51:39 -0800 (PST)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D23E41A7028 for <dane@ietf.org>; Thu, 11 Dec 2014 11:51:38 -0800 (PST)
Received: from WSXGHUB1.xchange.nist.gov (129.6.18.96) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.3.210.2; Thu, 11 Dec 2014 14:51:17 -0500
Received: from postmark.nist.gov (129.6.16.94) by WSXGHUB1.xchange.nist.gov (129.6.18.96) with Microsoft SMTP Server (TLS) id 8.3.377.0; Thu, 11 Dec 2014 14:51:36 -0500
Received: from 6-140.antd.nist.gov (6-140.antd.nist.gov [129.6.140.6]) by postmark.nist.gov (8.13.8/8.13.1) with ESMTP id sBBJpTld025522 for <dane@ietf.org>; Thu, 11 Dec 2014 14:51:30 -0500
From: "Rose, Scott W." <scott.rose@nist.gov>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Message-ID: <95826148-4F06-4942-87A4-2F6601BA0F90@nist.gov>
Date: Thu, 11 Dec 2014 14:51:27 -0500
To: dane WG list <dane@ietf.org>
MIME-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
X-Mailer: Apple Mail (2.1878.6)
X-NIST-MailScanner-Information:
Archived-At: http://mailarchive.ietf.org/arch/msg/dane/Iolwc6x98UAxYHyETLr33f-c4Sc
Subject: [dane] email canonicalization for SMIMEA owner names
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Dec 2014 19:51:40 -0000

Realized the other action item I was assigned to from the interim meeting was email canonicalization for SMIMEA.  I believe it stems from Viktor Dukhovni's email to the endymail list:
http://www.ietf.org/mail-archive/web/endymail/current/msg00134.html

I was wondering if we can borrow a page from RFC 4034 Section 6.2 and include text in the draft Section 3, item 1 in the numbered list:

     1.   The user name (the "left-hand side" of the email address, called
       the "local-part" in the mail message format definition [RFC2822]
       and the "local part" in the specification for internationalized
       email [RFC6530]), is hashed using the SHA2-224 [RFC5754]
       algorithm (with the hash being represented in its hexadecimal
       representation, to become the left-most label in the prepared
       domain name.  This does not include the "@" character that
       separates the left and right sides of the email address.  The
       string that is used for the local part is a Unicode string
       encoded in UTF-8 **with all upper case letters converted to their
       corresponding lower case letters where appropriate.**


The text between the '**' is new.  The goal is to prevent a situation when the email address is "JRandom@example.com" and the SMIMEA is created using "jrandom" as the user name.   Would this be enough, or are there scripts where this would result in different or potentially conflicting owner names?  

Scott

===================================
Scott Rose
NIST
scott.rose@nist.gov
+1 301-975-8439
Google Voice: +1 571-249-3671
http://www.dnsops.gov/
https://www.had-pilot.com/
===================================