Protocol Action: 'General Purpose Extended Key Usage (EKU) for Document Signing X.509 Certificates' to Proposed Standard (draft-ietf-lamps-documentsigning-eku-06.txt)

The IESG <iesg-secretary@ietf.org> Thu, 29 September 2022 19:15 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Protocol Action: 'General Purpose Extended Key Usage (EKU) for Document Signing X.509 Certificates' to Proposed Standard (draft-ietf-lamps-documentsigning-eku-06.txt)
Auto-Submitted: auto-generated
Precedence: bulk
Cc: The IESG <iesg@ietf.org>, draft-ietf-lamps-documentsigning-eku@ietf.org, housley@vigilsec.com, lamps-chairs@ietf.org, rdd@cert.org, rfc-editor@rfc-editor.org, spasm@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <166447893308.48363.9913104431442847872@ietfa.amsl.com>
Date: Thu, 29 Sep 2022 12:15:33 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/hd19Wlh4YkY62rRV61RiNA-JEo8>

The IESG has approved the following document:
- 'General Purpose Extended Key Usage (EKU) for Document Signing X.509
Certificates'
(draft-ietf-lamps-documentsigning-eku-06.txt) as Proposed Standard

This document is the product of the Limited Additional Mechanisms for PKIX
and SMIME Working Group.

The IESG contact persons are Paul Wouters and Roman Danyliw.

A URL of this Internet Draft is:
https://datatracker.ietf.org/doc/draft-ietf-lamps-documentsigning-eku/

Technical Summary

RFC5280 specifies several extended key purpose identifiers
(KeyPurposeIds) for X.509 certificates. This document defines a
general purpose document signing KeyPurposeId for inclusion in the
Extended Key Usage (EKU) extension of X.509 public key certificates.
Document Signing applications may require that the EKU extension be
present and that a document signing KeyPurposeId be indicated in
order for the certificate to be acceptable to that Document Signing
application.

Working Group Summary

There is broad support for this document in the LAMPS WG.

During document adoption, a few peoples against the key idea, but no objections have been raised in the last year or during WGLC.

Document Quality

Several Certification Authorities (CAs) have expressed an intention to support this new extended key usage value.

This document makes use of ASN.1. The document shepherd compiled the ASN.1 module after inserting placeholder values for the ones that need to be assigned by IANA. It compiles without errors.

Personnel

* Document Shepherd: Russ Housley
* Responsible Area Director: Roman Danyliw

Protocol Action: 'General Purpose Extended Key Us… The IESG