[dane] Suggests modifications to -dane-smime Section 3
Dave Crocker <dhc@dcrocker.net> Wed, 12 November 2014 23:43 UTC
Return-Path: <dhc@dcrocker.net>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 135781A1B6A for <dane@ietfa.amsl.com>; Wed, 12 Nov 2014 15:43:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.301
X-Spam-Level:
X-Spam-Status: No, score=-2.301 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EHd1Va2_NuKV for <dane@ietfa.amsl.com>; Wed, 12 Nov 2014 15:43:00 -0800 (PST)
Received: from sbh17.songbird.com (sbh17.songbird.com [72.52.113.17]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81CB11A1B6E for <dane@ietf.org>; Wed, 12 Nov 2014 15:43:00 -0800 (PST)
Received: from [192.168.1.66] (76-218-8-156.lightspeed.sntcca.sbcglobal.net [76.218.8.156]) (authenticated bits=0) by sbh17.songbird.com (8.13.8/8.13.8) with ESMTP id sACNgu7F031167 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Wed, 12 Nov 2014 15:43:00 -0800
Message-ID: <5463F07A.5040804@dcrocker.net>
Date: Wed, 12 Nov 2014 15:42:50 -0800
From: Dave Crocker <dhc@dcrocker.net>
Organization: Brandenburg InternetWorking
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: Paul Hoffman <paul.hoffman@vpnc.org>, Jakob Schlyter <jakob@kerei.se>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 8bit
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0 (sbh17.songbird.com [72.52.113.66]); Wed, 12 Nov 2014 15:43:00 -0800 (PST)
Archived-At: http://mailarchive.ietf.org/arch/msg/dane/ORTC4GfC61ffcEL6Cs-Oo8bJ8F0
X-Mailman-Approved-At: Wed, 12 Nov 2014 15:46:02 -0800
Cc: dane@ietf.org
Subject: [dane] Suggests modifications to -dane-smime Section 3
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: dcrocker@bbiw.net
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Nov 2014 23:43:02 -0000
I reflected on my confusions about per-user vs. per-domain keys for
smime use and suggest the following changes to Section 3 of the
-dane-smime draft:
From:
3. Domain Names for S/MIME Certificate Associations
Domain names are prepared for requests in the following manner.
1. ...
2. ...
3. ...
To:
3. Email Address Key Lookup
Keys are stored in the DNS on a per-user basis, underneath the
the email address domain name.
The general form of the lookup name is formulated from the
user’s email address:
<local-part-hash>.smimecert.<domain>
The algorithm for formulating the lookup name is:
1. ... existing algorithm text
2.
3.
d/
--
Dave Crocker
Brandenburg InternetWorking
bbiw.net
- [dane] Suggests modifications to -dane-smime Sect… Dave Crocker
- Re: [dane] Suggests modifications to -dane-smime … Tony Hansen
- Re: [dane] Suggests modifications to -dane-smime … Paul Hoffman