[dispatch] Fwd: New Version Notification for draft-johansson-dispatch-dane-sip-01.txt

"Olle E. Johansson" <oej@edvina.net> Thu, 09 January 2014 16:09 UTC

Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 7.1 \(1827\))
From: "Olle E. Johansson" <oej@edvina.net>
Date: Thu, 09 Jan 2014 17:09:25 +0100
Content-Transfer-Encoding: quoted-printable
Message-Id: <2ECFFECF-84DE-4F74-B515-716EE03800B3@edvina.net>
References: <20140109154214.22968.46430.idtracker@ietfa.amsl.com>
To: "dispatch@ietf.org list" <dispatch@ietf.org>
Subject: [dispatch] Fwd: New Version Notification for draft-johansson-dispatch-dane-sip-01.txt
Precedence: list

Hi!

Just a tiny edit to remove the "updates 5922" label.

Taking this to sipcore seems perfect to me.

/O

Begin forwarded message:

> From: internet-drafts@ietf.org
> Subject: New Version Notification for draft-johansson-dispatch-dane-sip-01.txt
> Date: 9 Jan 2014 16:42:14 GMT+1
> To: Olle E. Johansson <oej@edvina.net>, "Olle E. Johansson" <oej@edvina.net>
> 
> 
> A new version of I-D, draft-johansson-dispatch-dane-sip-01.txt
> has been successfully submitted by Olle E. Johansson and posted to the
> IETF repository.
> 
> Name:		draft-johansson-dispatch-dane-sip
> Revision:	01
> Title:		TLS sessions in SIP using DNS-based Authentication of Named Entities (DANE) TLSA records
> Document date:	2014-01-09
> Group:		Individual Submission
> Pages:		9
> URL:            http://www.ietf.org/internet-drafts/draft-johansson-dispatch-dane-sip-01.txt
> Status:         https://datatracker.ietf.org/doc/draft-johansson-dispatch-dane-sip/
> Htmlized:       http://tools.ietf.org/html/draft-johansson-dispatch-dane-sip-01
> Diff:           http://www.ietf.org/rfcdiff?url2=draft-johansson-dispatch-dane-sip-01
> 
> Abstract:
>   Use of TLS in the SIP protocol is defined in multiple documents,
>   starting with RFC 3261.  The actual verification that happens when
>   setting up a SIP TLS connection to a SIP server based on a SIP URI is
>   described in detail in RFC 5922 - SIP Domain Certificates.
> 
>   In this document, an alternative method is defined, using DNS-Based
>   Authentication of Named Entities (DANE).  By looking up TLSA DNS
>   records and using DNSsec protection of the required queries,
>   including lookups for NAPTR and SRV records, a SIP Client can verify
>   the identity of the TLS SIP server in a different way, matching on
>   the SRV host name in the X.509 PKIX certificate instead of the SIP
>   domain.  This provides more scalability in hosting solutions and make
>   it easier to use standard CA certificates (if needed at all).
> 
> 
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> The IETF Secretariat
>

[dispatch] Fwd: New Version Notification for draf… Olle E. Johansson