Re: [DNSOP] Expiration impending: <draft-jabley-dnssec-trust-anchor-11.txt>

George Michaelson <ggm@algebras.org> Mon, 05 October 2015 15:06 UTC

Return-Path: <ggm@algebras.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 234F81ACEEC for <dnsop@ietfa.amsl.com>; Mon, 5 Oct 2015 08:06:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.978
X-Spam-Level:
X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yXN5PhwMsqoR for <dnsop@ietfa.amsl.com>; Mon, 5 Oct 2015 08:06:35 -0700 (PDT)
Received: from mail-qg0-f51.google.com (mail-qg0-f51.google.com [209.85.192.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF1DC1ACEED for <dnsop@ietf.org>; Mon, 5 Oct 2015 08:06:34 -0700 (PDT)
Received: by qgx61 with SMTP id 61so152091327qgx.3 for <dnsop@ietf.org>; Mon, 05 Oct 2015 08:06:33 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=0bRZFPPLPhlA4iYRPasTNg21XHMMohxSGgJXFpSso7I=; b=lDVu6aOBef4xJMIdwFSCIvg0Xjn/pkRHJi+hKkHW64QA8ikUurKLJSy5pwpeaiM7zu 8YuteLR/G4P/ovO8kwmJLMLfhqNtVfHB1YsAq/AVkIOtAjBVqMeZsj9fEWp9g3ORr9Cj XXNbn3jhbtHqE7bOKkO9M9Grq7VxEokXrdHK5PEXBqH7gkGCP2JgCvH+CseX1GXPwwNT xHFOVDonakMw8bQIjFJ7uTclLBIkWXYcURqklgR+GpIR8ftiLu64lIhxAcob/DHeShNj MgMMzc7RDP/OZ9lENEIp/7VrdAvSEi9dPqr3I9obTQYyDXoVo68mTthxwclAQnEWi+2r G29Q==
X-Gm-Message-State: ALoCoQnpOVRSFi9tEy41fg4C10ZS1qh3o7TAEoSLBu0Zz05cZNvkYk8cz7lM+ZHRE3w4+nT4re3s
MIME-Version: 1.0
X-Received: by 10.140.232.150 with SMTP id d144mr41969286qhc.17.1444057593803; Mon, 05 Oct 2015 08:06:33 -0700 (PDT)
Received: by 10.55.101.207 with HTTP; Mon, 5 Oct 2015 08:06:33 -0700 (PDT)
X-Originating-IP: [2001:13c7:7001:5192:943:642c:2e4d:dac7]
In-Reply-To: <93B4F751-C7EA-4081-A1B6-1AB9FCED4340@hopcount.ca>
References: <20150928114202.823.19868.idtracker@ietfa.amsl.com> <0E4AA958-7740-4602-A3CF-D2E481DBC15E@hopcount.ca> <20150928155325.GA63874@gaon.net> <20150929095301.32c3e6a3@casual> <13F1D87F-1C07-40EB-86B0-564C4109C9B0@virtualized.org> <1973252D-924F-4EF1-A38F-5EC01AD331F6@gmail.com> <FDD04DCC-59C5-41F5-8CAF-1EF31CD65A34@virtualized.org> <63E1E01E-C172-4A0F-B434-F796546BB657@gmail.com> <C4FA9FA6-76E3-4FF3-862B-C5C0DF75C761@kirei.se> <D1C15986-603E-4932-B551-0497638D9849@vpnc.org> <02869F43-87A4-4797-8FD3-276C02DF665D@kirei.se> <EEA946B1-8BF3-4AB7-99D2-4C8CDCCF0EC0@vpnc.org> <F412CE02-C0BA-425E-BBF9-3A40B2B5FEA7@vpnc.org> <9F52E6FC-E503-4E3A-9998-363BF514CC1A@hopcount.ca> <CAKr6gn2HG9apg9Kz9wAk-mhyCFFXKk_ZthfwdMaU+daULarhsg@mail.gmail.com> <93B4F751-C7EA-4081-A1B6-1AB9FCED4340@hopcount.ca>
Date: Mon, 05 Oct 2015 10:06:33 -0500
Message-ID: <CAKr6gn3MgO1m4--cwRo9LSAUDJ7cmbPMy4jYzX55=3z3U_UnkQ@mail.gmail.com>
From: George Michaelson <ggm@algebras.org>
To: Joe Abley <jabley@hopcount.ca>
Content-Type: multipart/alternative; boundary="001a11354852ea109b05215cdba4"
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/ioHEyv4Kt226uT89GJcWx1H-fRk>
Cc: dnsop WG <dnsop@ietf.org>, Paul Hoffman <paul.hoffman@vpnc.org>
Subject: Re: [DNSOP] Expiration impending: <draft-jabley-dnssec-trust-anchor-11.txt>
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 05 Oct 2015 15:06:36 -0000

If its on the internet, its not out of band.

On Mon, Oct 5, 2015 at 9:55 AM, Joe Abley <jabley@hopcount.ca> wrote:

>
>
> On 5 Oct 2015, at 10:42, George Michaelson wrote:
>
> > Something very left field for me, but I believe important, is that we
> need
> > to also publish the out-of-band publication point of the trust material.
>
> This draft is exclusively concerned with publishing trust anchors
> out-of-band of the protocol.
>
> > I mentioned this to Joe some time ago and was very correctly told "out of
> > scope" but I believe its nonsensical to exclude physical publication, eg
> in
> > newspapers of record for at least 3 economies worldwide, of the hash of
> the
> > public key as a standing event.
>
> This draft aims to document current practice. To my knowledge, nobody has
> ever published a trust anchor (or even a pointer to it) in print media.
>
> > In-band only has some issues for me, if we are talking about trust.
>
> Me too, hence the decision by ICANN to publish trust anchors using
> out-of-band mechanisms in 2009/2010, as this draft aims to document.
>
>
> Joe
>