Re: [dane] Ben Campbell's Yes on draft-ietf-dane-ops-14: (with COMMENT)
Viktor Dukhovni <ietf-dane@dukhovni.org> Wed, 05 August 2015 03:57 UTC
Return-Path: <ietf-dane@dukhovni.org>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BD091B2BD2; Tue, 4 Aug 2015 20:57:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ko9_59TpBSmO; Tue, 4 Aug 2015 20:57:47 -0700 (PDT)
Received: from mournblade.imrryr.org (mournblade.imrryr.org [38.117.134.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE6891B2BCE; Tue, 4 Aug 2015 20:57:47 -0700 (PDT)
Received: by mournblade.imrryr.org (Postfix, from userid 1034) id D59B4284D68; Wed, 5 Aug 2015 03:57:46 +0000 (UTC)
Date: Wed, 05 Aug 2015 03:57:46 +0000
From: Viktor Dukhovni <ietf-dane@dukhovni.org>
To: The IESG <iesg@ietf.org>, draft-ietf-dane-ops.shepherd@ietf.org, draft-ietf-dane-ops.ad@ietf.org, dane@ietf.org
Message-ID: <20150805035746.GO19228@mournblade.imrryr.org>
References: <20150805034540.27866.98360.idtracker@ietfa.amsl.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <20150805034540.27866.98360.idtracker@ietfa.amsl.com>
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dane/nAVYkNhUzknaKlQwBDYaSZjx6IU>
Subject: Re: [dane] Ben Campbell's Yes on draft-ietf-dane-ops-14: (with COMMENT)
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Aug 2015 03:57:49 -0000
On Tue, Aug 04, 2015 at 08:45:40PM -0700, Ben Campbell wrote: > Thanks for this. I only have some editorial comments, and others have > beaten me to the punch on all save the following: > > -- Section 8, first paragraph: > > This section updates [RFC6698] by specifying a requirement on the > TLSA Publisher to ensure that each combination of Certificate Usage, > selector and matching type in the server's TLSA RRset MUST include at > least one record that matches the server's current certificate chain. > > "Requirement on the ... publisher to ensure...that each combination... > MUST include..." is sort of an odd construction for a 2119 MUST. Does > the following capture the intent? > > NEW: > This section updates [RFC6698] by specifying that the > TLSA Publisher MUST ensure that each combination of Certificate > Usage, selector and matching type in the server's TLSA RRset includes at > least one record that matches the server's current certificate chain. > END Yes. Thanks. -- Viktor.
- [dane] Ben Campbell's Yes on draft-ietf-dane-ops-… Ben Campbell
- Re: [dane] Ben Campbell's Yes on draft-ietf-dane-… Viktor Dukhovni
- Re: [dane] Ben Campbell's Yes on draft-ietf-dane-… Viktor Dukhovni