Re: [dane] I-D Action: draft-ietf-dane-srv-14.txt

⌘ Matt Miller <mamille2@cisco.com> Thu, 23 April 2015 21:53 UTC

Return-Path: <mamille2@cisco.com>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 145381A895E for <dane@ietfa.amsl.com>; Thu, 23 Apr 2015 14:53:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.211
X-Spam-Level:
X-Spam-Status: No, score=-14.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uGSU4tovqJfS for <dane@ietfa.amsl.com>; Thu, 23 Apr 2015 14:53:02 -0700 (PDT)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2364E1A8820 for <dane@ietf.org>; Thu, 23 Apr 2015 14:52:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2620; q=dns/txt; s=iport; t=1429825975; x=1431035575; h=message-id:date:from:mime-version:to:subject:references: in-reply-to:content-transfer-encoding; bh=nF1bfM4h+SOZ0mGJIJQDkXOOdEIGWXgsA6cheYw0TmQ=; b=d6DfE5EfvYSpyL44X11HCSOU+DMAVvgSs+zwf7RRnRQaW+NYFpRxUkcF ndP9Nbyxl//8bSQ6SIy4i2ESQ2DOhxsZPvMR6jnZBcgxx0yrFN5SAC52E zKAYeHP2cUQtJwiOIs1V8dGCLGj+hwlbhchHxq/T1Se84ACswLdDiClAd c=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0BYBAAhaTlV/5xdJa1bgwxSVwUFgxXDCwmBRwqGBAKBNzgUAQEBAQEBAYEKhCEBAQQBAQEgSwoRCxgCAgUWCwICCQMCAQIBFTAGDQYCAQEFiCIIBbdXlQwBAQEBAQEBAwEBAQEBAQEbgSGKFoQ5GDoWglKBRQWLVIl3hjSBIjyDCYJPjhUjggIEHYFwUIFEgQABAQE
X-IronPort-AV: E=Sophos;i="5.11,634,1422921600"; d="scan'208";a="144032342"
Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by alln-iport-5.cisco.com with ESMTP; 23 Apr 2015 21:52:54 +0000
Received: from xhc-aln-x12.cisco.com (xhc-aln-x12.cisco.com [173.36.12.86]) by rcdn-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id t3NLqsDH024529 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <dane@ietf.org>; Thu, 23 Apr 2015 21:52:54 GMT
Received: from [64.101.72.55] (64.101.72.55) by xhc-aln-x12.cisco.com (173.36.12.86) with Microsoft SMTP Server (TLS) id 14.3.195.1; Thu, 23 Apr 2015 16:52:54 -0500
Message-ID: <553969B5.6040508@cisco.com>
Date: Thu, 23 Apr 2015 15:52:53 -0600
From: ⌘ Matt Miller <mamille2@cisco.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.6.0
MIME-Version: 1.0
To: dane@ietf.org
References: <20150423215036.22102.37702.idtracker@ietfa.amsl.com>
In-Reply-To: <20150423215036.22102.37702.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Originating-IP: [64.101.72.55]
Archived-At: <http://mailarchive.ietf.org/arch/msg/dane/amNFGAOAD-eIuySQFsQo361SW9Y>
Subject: Re: [dane] I-D Action: draft-ietf-dane-srv-14.txt
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Apr 2015 21:53:04 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

This revision addresses the feedback from IESG review.


- -- 
- - m&m

Matt Miller < mamille2@cisco.com >
Cisco Systems, Inc.

On 4/23/15 3:50 PM, internet-drafts@ietf.org wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts
> directories. This draft is a work item of the DNS-based
> Authentication of Named Entities Working Group of the IETF.
> 
> Title           : Using DNS-Based Authentication of Named Entities
> (DANE) TLSA Records with SRV Records Authors         : Tony Finch 
> Matthew Miller Peter Saint-Andre Filename        :
> draft-ietf-dane-srv-14.txt Pages           : 15 Date            :
> 2015-04-23
> 
> Abstract: The DANE specification (RFC 6698) describes how to use
> TLSA resource records secured by DNSSEC (RFC 4033) to associate a
> server's connection endpoint with its TLS certificate (thus
> enabling administrators of domain names to specify the keys used in
> that domain's TLS servers).  However, application protocols that
> use SRV records (RFC 2782) to indirectly name the target server
> connection endpoints for a service domain cannot apply the rules
> from RFC 6698. Therefore this document provides guidelines that
> enable such protocols to locate and use TLSA records.
> 
> 
> The IETF datatracker status page for this draft is: 
> https://datatracker.ietf.org/doc/draft-ietf-dane-srv/
> 
> There's also a htmlized version available at: 
> http://tools.ietf.org/html/draft-ietf-dane-srv-14
> 
> A diff from the previous version is available at: 
> http://www.ietf.org/rfcdiff?url2=draft-ietf-dane-srv-14
> 
> 
> Please note that it may take a couple of minutes from the time of
> submission until the htmlized version and diff are available at
> tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at: 
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________ dane mailing list 
> dane@ietf.org https://www.ietf.org/mailman/listinfo/dane
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - https://gpgtools.org

iQEcBAEBCgAGBQJVOWm1AAoJEDWi+S0W7cO1/7YH/2G2paEeLfMA74w4zNpmLeVw
TwJTyLzG5d6oNDoxMS0+qvX4tQ44ytdhJRnJfFHFXFtnBO4tdYBkGG+nbBqoM++6
EJMen7LOx126YBnuC1TWRY6/cRmw/ZgJC/iWKbtCVas91DBkB6RMn3dOB0cXoq2P
xBhgTRBS6qEG4MO7yzrag4NdXC9+JnWLvPHk1kSXuIaiCvCC0q1BRICY+jNGoI3H
LpLC9z/4B8fO4+NhKB43B3+d2YtCTodGwJ8nQUGfv4fvEF3N93IQ30JM1qI1zIBI
qjhz4YV5pX8O5QCJdlvuO5RLRyRSt7GaMsWGUVD7TF3WsmsEMcDXPkTBTllzD8s=
=g5sl
-----END PGP SIGNATURE-----