Re: [dane] Ben Campbell's Yes on draft-ietf-dane-ops-14: (with COMMENT)
Viktor Dukhovni <ietf-dane@dukhovni.org> Thu, 06 August 2015 05:23 UTC
Return-Path: <ietf-dane@dukhovni.org>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44C9C1B3983; Wed, 5 Aug 2015 22:23:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QF6lm-Br99ve; Wed, 5 Aug 2015 22:23:53 -0700 (PDT)
Received: from mournblade.imrryr.org (mournblade.imrryr.org [38.117.134.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBD441B3982; Wed, 5 Aug 2015 22:23:53 -0700 (PDT)
Received: by mournblade.imrryr.org (Postfix, from userid 1034) id 5D783284D71; Thu, 6 Aug 2015 05:23:52 +0000 (UTC)
Date: Thu, 06 Aug 2015 05:23:52 +0000
From: Viktor Dukhovni <ietf-dane@dukhovni.org>
To: The IESG <iesg@ietf.org>, draft-ietf-dane-ops.shepherd@ietf.org, draft-ietf-dane-ops.ad@ietf.org, dane@ietf.org
Message-ID: <20150806052352.GG24415@mournblade.imrryr.org>
References: <20150805034540.27866.98360.idtracker@ietfa.amsl.com> <20150805035746.GO19228@mournblade.imrryr.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <20150805035746.GO19228@mournblade.imrryr.org>
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dane/NMIhwgDiSLj6PCdUO12EmZf14u4>
Subject: Re: [dane] Ben Campbell's Yes on draft-ietf-dane-ops-14: (with COMMENT)
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Aug 2015 05:23:55 -0000
On Wed, Aug 05, 2015 at 03:57:46AM +0000, Viktor Dukhovni wrote:
> > NEW:
> > This section updates [RFC6698] by specifying that the
> > TLSA Publisher MUST ensure that each combination of Certificate
> > Usage, selector and matching type in the server's TLSA RRset includes at
> > least one record that matches the server's current certificate chain.
> > END
>
> Yes. Thanks.
All suggestions received so far are I believe merged.
Preview of -15 changes at:
https://github.com/vdukhovni/ietf/compare/master~2...master?diff=unified&name=master
I'm ready to push -15 when advised to proceed.
--
Viktor.
- [dane] Ben Campbell's Yes on draft-ietf-dane-ops-… Ben Campbell
- Re: [dane] Ben Campbell's Yes on draft-ietf-dane-… Viktor Dukhovni
- Re: [dane] Ben Campbell's Yes on draft-ietf-dane-… Viktor Dukhovni