Re: [Danish] Proposed WG Charter

[Paul Wouters <[e-mail]>]

On Jun 13, 2021, at 16:52, Viktor Dukhovni <[e-mail]> wrote:
> 
> On Sat, Jun 12, 2021 at 08:25:07AM -0700, Ash Wilson wrote:
> 
>> This is the final text for the proposed charter. We are seeking
>> support for the formation of the working group, as well as support for
>> implementation, adoption, and documentation efforts.
> 
> I see that others have commented positively on the charter, and yet
> somehow for me it seems rather muddled.  It is not clear to me what
> the motivating use-cases really are, nor how DANISH would resolve
> the key difficulties in those use-cases.

Same here. I did give feedback in the past already but especially the “client verification with and without dnssec” seem to be two widely different problems. And the one without dnssec (webpki) already exists ?

> Extending DANE to client auth is certainly an option for "devices" that
> one might reasonably want to register in DNS.

I have given this some thought in the last few weeks and I haven’t been able to find a use case where one actually wants client authentication using some IoT device on mobile data network. All use cases I can think of would not want to expose the client via public dnssec key registry or via public CA certs. I’d love to hear an example practical use case for DANISH.

Paul