Re: [dane] Suggests modifications to -dane-smime Section 3
Tony Hansen <tony@att.com> Wed, 12 November 2014 23:53 UTC
Return-Path: <tony@att.com>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36DCA1A004C for <dane@ietfa.amsl.com>; Wed, 12 Nov 2014 15:53:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.473
X-Spam-Level:
X-Spam-Status: No, score=-1.473 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MISSING_HEADERS=1.021, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.594] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nqzu8PHFjxHl for <dane@ietfa.amsl.com>; Wed, 12 Nov 2014 15:53:42 -0800 (PST)
Received: from egssmtp01.att.com (egssmtp01.att.com [144.160.112.12]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 466F91A0016 for <dane@ietf.org>; Wed, 12 Nov 2014 15:53:42 -0800 (PST)
Received: from mailgw1.maillennium.att.com (maillennium.att.com [135.25.114.99]) by egssmtp01.att.com ( egs 8.14.5 TLS/8.14.5) with ESMTP id sACNrfeI009651 for <dane@ietf.org>; Wed, 12 Nov 2014 17:53:41 -0600
Received: from vpn-135-70-97-201.vpn.swst.att.com ([135.70.97.201]) by maillennium.att.com (mailgw1) with ESMTP id <20141112235340gw100r93h8e>; Wed, 12 Nov 2014 23:53:40 +0000
X-Originating-IP: [135.70.97.201]
Message-ID: <5463F300.1090008@att.com>
Date: Wed, 12 Nov 2014 18:53:36 -0500
From: Tony Hansen <tony@att.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
CC: dane@ietf.org
References: <5463F07A.5040804@dcrocker.net>
In-Reply-To: <5463F07A.5040804@dcrocker.net>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: http://mailarchive.ietf.org/arch/msg/dane/iw_hVZXgyiTFxuVoBYqmHQc6cSU
Subject: Re: [dane] Suggests modifications to -dane-smime Section 3
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Nov 2014 23:53:43 -0000
On 11/12/14, 6:42 PM, Dave Crocker wrote:
> I reflected on my confusions about per-user vs. per-domain keys for
> smime use and suggest the following changes to Section 3 of the
> -dane-smime draft:
>
>
> From:
>
> 3. Domain Names for S/MIME Certificate Associations
>
> Domain names are prepared for requests in the following manner.
>
> 1. ...
>
> 2. ...
>
> 3. ...
>
>
> To:
>
> 3. Email Address Key Lookup
>
> Keys are stored in the DNS on a per-user basis, underneath the
> the email address domain name.
>
> The general form of the lookup name is formulated from the
> user’s email address:
>
> <local-part-hash>.smimecert.<domain>
>
> The algorithm for formulating the lookup name is:
>
> 1. ... existing algorithm text
> 2.
> 3.
+1
Tony Hansen
- [dane] Suggests modifications to -dane-smime Sect… Dave Crocker
- Re: [dane] Suggests modifications to -dane-smime … Tony Hansen
- Re: [dane] Suggests modifications to -dane-smime … Paul Hoffman