Re: [dane] Anyone interested in writing a DANE tutorial?
Viktor Dukhovni <viktor1dane@dukhovni.org> Tue, 16 April 2013 13:29 UTC
Return-Path: <viktor1dane@dukhovni.org>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43BB921F968D for <dane@ietfa.amsl.com>; Tue, 16 Apr 2013 06:29:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.299
X-Spam-Level:
X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_43=0.6]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GXSWNrzbXfsp for <dane@ietfa.amsl.com>; Tue, 16 Apr 2013 06:29:15 -0700 (PDT)
Received: from mournblade.imrryr.org (mournblade.imrryr.org [208.77.212.107]) by ietfa.amsl.com (Postfix) with ESMTP id B759D21F9709 for <dane@ietf.org>; Tue, 16 Apr 2013 06:29:15 -0700 (PDT)
Received: by mournblade.imrryr.org (Postfix, from userid 1034) id B5DC92AAB99; Tue, 16 Apr 2013 13:29:14 +0000 (UTC)
Date: Tue, 16 Apr 2013 13:29:14 +0000
From: Viktor Dukhovni <viktor1dane@dukhovni.org>
To: dane@ietf.org
Message-ID: <20130416132914.GF23574@mournblade.imrryr.org>
References: <699F0F4D-3E06-44F5-88A4-40C1FC569E98@danyork.org> <516BFBE9.5010509@hermes.nic.fr> <20130415183025.GD23574@mournblade.imrryr.org> <516CEDDE.1080605@hermes.nic.fr>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <516CEDDE.1080605@hermes.nic.fr>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [dane] Anyone interested in writing a DANE tutorial?
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: dane@ietf.org
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dane>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Apr 2013 13:29:16 -0000
On Tue, Apr 16, 2013 at 08:21:18AM +0200, Sandoche Balakrichenan wrote: > > Is the document a paper for academic publication or a How-To guide > > for system administrators? It seems to be a strange mixture of > > the two. > > ==> More as an How-To guide? And yet it is written in the style of an academic paper. If it is a How-To, it needs to be HTML not PDF, with links at the top to each section and links to references in-line, not in a references section at the end. A How-To guide is rarely read in full. Since this How-To guide is not for implementors of client-side browser implementations, it does not need to discuss the features or tests of such a client. The not generally pre-installed SWEDE tool is not needed to compute the certificate and public-key digests, for example with OpenSSL: # Certificate digest with with OpenSSL: $ openssl x509 -in /tmp/cert.pem -outform DER | openssl dgst -sha256 | awk -v L=www.example.com '{printf "%s. IN TLSA 3 0 1 %s\n", L, $NF}' # Public key digest with OpenSSL 1.0.x with all certificate types. $ openssl x509 -in cert.pem -noout -pubkey | openssl pkey -pubin -outform DER | openssl dgst -sha256 | awk -v L=www.example.com '{printf "%s. IN TLSA 3 1 1 %s\n", L, $NF}' # Public key digest with OpenSSL 0.9.8 with RSA certificates. $ openssl x509 -in cert.pem -noout -pubkey | openssl rsa -pubin -outform DER | openssl dgst -sha256 | awk -v L=www.example.com '{printf "%s. IN TLSA 3 1 1 %s\n", L, $NF}' The guide needs to be more concise with sections clearly focused on the limited attention of a How-To reader. -- Viktor.
- Re: [dane] Anyone interested in writing a DANE tu… Paul Wouters
- [dane] Anyone interested in writing a DANE tutori… Dan York
- Re: [dane] Anyone interested in writing a DANE tu… Pieter Lexis
- Re: [dane] Anyone interested in writing a DANE tu… Dan York
- Re: [dane] Anyone interested in writing a DANE tu… Paul Wouters
- Re: [dane] Anyone interested in writing a DANE tu… Dan York
- Re: [dane] Anyone interested in writing a DANE tu… Dan York
- Re: [dane] Anyone interested in writing a DANE tu… Sandoche Balakrichenan
- Re: [dane] Anyone interested in writing a DANE tu… Christian Heutger
- Re: [dane] Anyone interested in writing a DANE tu… Phil Regnauld
- Re: [dane] Anyone interested in writing a DANE tu… Viktor Dukhovni
- Re: [dane] Anyone interested in writing a DANE tu… Christian Heutger
- Re: [dane] Anyone interested in writing a DANE tu… Sandoche Balakrichenan
- Re: [dane] Anyone interested in writing a DANE tu… Sandoche Balakrichenan
- Re: [dane] Anyone interested in writing a DANE tu… Viktor Dukhovni
- Re: [dane] Anyone interested in writing a DANE tu… Richard Barnes