Re: [dane] Draft for serializing DNSSEC chains

"Jim Schaad" <ietf@augustcellars.com> Thu, 19 April 2012 01:12 UTC

Return-Path: <ietf@augustcellars.com>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 161E821F8455 for <dane@ietfa.amsl.com>; Wed, 18 Apr 2012 18:12:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.151
X-Spam-Level:
X-Spam-Status: No, score=-3.151 tagged_above=-999 required=5 tests=[AWL=0.448, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rGdZtO4THvJL for <dane@ietfa.amsl.com>; Wed, 18 Apr 2012 18:12:36 -0700 (PDT)
Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) by ietfa.amsl.com (Postfix) with ESMTP id A423421F8445 for <dane@ietf.org>; Wed, 18 Apr 2012 18:12:36 -0700 (PDT)
Received: from Tobias (50-54-163-224.evrt.wa.frontiernet.net [50.54.163.224]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: schaad@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id 43B122C9F7; Wed, 18 Apr 2012 18:12:36 -0700 (PDT)
From: Jim Schaad <ietf@augustcellars.com>
To: 'Adam Langley' <agl@imperialviolet.org>, dane@ietf.org
References: <BANLkTinugTJB-xhSekN4jn6c9Bv7KcJEFsCa+ZxnwTBcydtXjQ@mail.gmail.com>
In-Reply-To: <BANLkTinugTJB-xhSekN4jn6c9Bv7KcJEFsCa+ZxnwTBcydtXjQ@mail.gmail.com>
Date: Wed, 18 Apr 2012 18:11:41 -0700
Message-ID: <024b01cd1dc9$61299700$237cc500$@augustcellars.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQGRp3jjGu7gCmCGYD/SJjgigRFB9JcYQqkg
Content-Language: en-us
Subject: Re: [dane] Draft for serializing DNSSEC chains
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dane>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Apr 2012 01:12:41 -0000

Adam,


In another context I am looking at using a dane serialization, however one
of the things that I don't have a good handle on at the moment is the size
of the serialized chain.  I realize that this is highly dependent on things
like the type of key and number of keys.  However did you develop any
metrics on the size of chains based on what you did?

Jim


> -----Original Message-----
> From: dane-bounces@ietf.org [mailto:dane-bounces@ietf.org] On Behalf Of
> Adam Langley
> Sent: Tuesday, June 28, 2011 11:23 AM
> To: dane@ietf.org
> Subject: [dane] Draft for serializing DNSSEC chains
> 
> As promised. (This is also the format that Chrome is using for it's DNSSEC
> stapled certificate support.)
> 
> http://tools.ietf.org/html/draft-agl-dane-serializechain-00
> 
> 
> Cheers
> 
> AGL
> 
> --
> Adam Langley agl@imperialviolet.org http://www.imperialviolet.org
> _______________________________________________
> dane mailing list
> dane@ietf.org
> https://www.ietf.org/mailman/listinfo/dane