[OPSAWG]Re: [IANA #1436513] expert review for draft-ietf-opsawg-prefix-lengths (smi-numbers)

Sean Turner <sean@sn3rd.com> Wed, 03 December 2025 21:30 UTC

Return-Path: <sean@sn3rd.com>
X-Original-To: opsawg@mail2.ietf.org
Delivered-To: opsawg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id B643494E2C68 for <opsawg@mail2.ietf.org>; Wed, 3 Dec 2025 13:30:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6g2SvV3NgRH6 for <opsawg@mail2.ietf.org>; Wed, 3 Dec 2025 13:30:09 -0800 (PST)
Received: from mail-qk1-x743.google.com (mail-qk1-x743.google.com [IPv6:2607:f8b0:4864:20::743]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 9EA7894E2C2C for <opsawg@ietf.org>; Wed, 3 Dec 2025 13:30:05 -0800 (PST)
Received: by mail-qk1-x743.google.com with SMTP id af79cd13be357-8b1bfd4b3deso16470085a.2 for <opsawg@ietf.org>; Wed, 03 Dec 2025 13:30:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; t=1764797405; x=1765402205; darn=ietf.org; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:from:to:cc:subject:date:message-id:reply-to; bh=MIip/1a3yGP444Axj5ahevb6jt1oHm8IeCof0TbRfck=; b=SYPWj8vfLUOKzjSEbej0KitqBEOc3k3J97HAEX9vEvu7GPCEV/uMFZIpM9fUFtzaAk Wf3xU/PPt72J7LDwuaxmhtTFMhuWvxqJ2Va4nk65/UpWF7/dwYZhZQjdO3kDADLngeYo TsZrZ0cwolucn2YCkgDL5gRtAqCKbqgRHOgjc=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1764797405; x=1765402205; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=MIip/1a3yGP444Axj5ahevb6jt1oHm8IeCof0TbRfck=; b=RTucXcpADSrjVQ6V6nbcvOfT4wUG30ekukpeSBRbu3U9xuBvvmKyoLSwmDXWJxIprK GM5Zk5QL+w8fxlSwY7y5ih00E0307Ld++98+dj/LPB4K6u+cn/6vjtrqdUipkvhY8psy fazMHWZOlBXUjzYVNgFz6s5qKkhcm3sNCUu44Mkzc1S1d41Bis2kSjq7BjOKvsYzrqSw D9E+SUTpLN+t/cjs6/J7NL4iQT7SzG0pa5opztfe+PcqTSpl+qit5hfxyc4tHrgTcNuC NRurvICipdeHqkOfvh05gZ1pK6y5GoY0Ywi8rG15ZdCeiRGmIkvp73M/mLOf4L2zZzzW SXmA==
X-Gm-Message-State: AOJu0Yx1AHZobnc63tdoJ8uQ2anB+t4pTcYgTW1P9g6gn1idDQhnVGg6 lO1avufJRWHXgQlVSrA53j3T57Ob2kW7kLYFJqvR7O57rVx6WXj373d5+WzIIJmfqHG0jH6cIHS 3snrTGSdW4g==
X-Gm-Gg: ASbGnct7IVOT3fjZ1PGIuo/iiwB1druB2gUAhChmbAbtj7UB7hfhzsdwBzfQWzVET+j WfQzdpimfAVfI3dzaZZQKgOCdZMrVX9LGh3jO0Xmk0b9K9nZBlFc5npy4HrMZkRMmXmxfU1lJ1a 5GTpTfVvmKyHyGRCRtIbYra+KjcdeqRFUVZ+tWWIv6Oe1uukLzEAzbrY98fN0s/PgcgQMnQh1zO PCClud7b8lkHs+gI3MOEw4Sx8T8dnw5MrH8mYRqdHZi4RGOf66Zl91T4ZjC83nmtVcMUmypJGXG zmxhime4NpGMJ12y80PP06AOqLoCOocl4fJMlmalvvkPM9y3Hw+fob3mY67i2dC5PPLtTtwVkep cSCOQ1cnT535nojNyi+SqXWGY2TUJ1Hr7WYGNFgMC8jPv9MEMeGcryqVSwB7NAYjExAVTt3KHfW sGOAIFBCOcvACgfTDgAT1I5QyWLb+fJpZnF0UCyRkc
X-Google-Smtp-Source: AGHT+IErVvt/eup+Af0uvI4a+H25JOkp+qdBE8A3MxKSYYiqBzEushLluz3icBA+mUoFAqAYrlsQxg==
X-Received: by 2002:a05:620a:31a5:b0:8a6:ee41:1b48 with SMTP id af79cd13be357-8b5e554d6ecmr507913885a.26.1764797404720; Wed, 03 Dec 2025 13:30:04 -0800 (PST)
Received: from smtpclient.apple ([2600:4040:2527:300:90b9:6b1c:7afd:4548]) by smtp.gmail.com with ESMTPSA id af79cd13be357-8b5299946dbsm1441006585a.7.2025.12.03.13.30.03 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 03 Dec 2025 13:30:03 -0800 (PST)
From: Sean Turner <sean@sn3rd.com>
Message-Id: <22603352-1856-4CB0-AC3F-75D48115B3A7@sn3rd.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_70A3B2A8-F31D-42F6-AE1B-A91019D35895"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.700.81.1.3\))
Date: Wed, 03 Dec 2025 16:29:43 -0500
In-Reply-To: <rt-5.0.3-854363-1764785976-770.1436513-9-0@icann.org>
To: drafts-expert-review-comment@iana.org, Russ Housley <housley@vigilsec.com>
References: <RT-Ticket-1436513@icann.org> <rt-5.0.3-934507-1762977932-611.1436513-9-0@icann.org> <rt-5.0.3-1122021-1763075441-1034.1436513-9-0@icann.org> <rt-5.0.3-528182-1764633058-1138.1436513-9-0@icann.org> <43F16EFA-55BC-461C-BCCC-D1E24C4E5B3A@sn3rd.com> <rt-5.0.3-683364-1764708344-859.1436513-9-0@icann.org> <rt-5.0.3-694469-1764713397-809.1436513-9-0@icann.org> <DB0B5736-94D8-4B70-AC53-9258E57B9D75@vigilsec.com> <rt-5.0.3-850033-1764783714-706.1436513-9-0@icann.org> <rt-5.0.3-854363-1764785976-770.1436513-9-0@icann.org>
X-Mailer: Apple Mail (2.3826.700.81.1.3)
Message-ID-Hash: HHSUO45ILJXVYX5CI3YJYUPP4TKMVV4D
X-Message-ID-Hash: HHSUO45ILJXVYX5CI3YJYUPP4TKMVV4D
X-MailFrom: sean@sn3rd.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-opsawg.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: opsawg@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OPSAWG]Re: [IANA #1436513] expert review for draft-ietf-opsawg-prefix-lengths (smi-numbers)
List-Id: OPSA Working Group Mail List <opsawg.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/gC8DM1qg6h3voS-KqIwOGMhZmOE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsawg>
List-Help: <mailto:opsawg-request@ietf.org?subject=help>
List-Owner: <mailto:opsawg-owner@ietf.org>
List-Post: <mailto:opsawg@ietf.org>
List-Subscribe: <mailto:opsawg-join@ietf.org>
List-Unsubscribe: <mailto:opsawg-leave@ietf.org>

Yes. This would work great! Can I suggest the following string for the module:

id-mod-plm-2025 (TBD0)

That would make the registrations:

id-mod-plm-2025 (86) in https://www.iana.org/assignments/smi-numbers/smi-numbers.xhtml#security-smime-0

and

id-ct-prefixlenCSVwithCRLF (57) in https://www.iana.org/assignments/smi-numbers/smi-numbers.xhtml#security-smime-1

spt

> On Dec 3, 2025, at 13:19, David Dong via RT <drafts-expert-review-comment@iana.org> wrote:
> 
> Hi Sean,
> 
> Would this proposed update from Russ be OK if they were to implement it? This is still on the telechat agenda for tomorrow, if you would be able to let us know today.
> 
> Thank you!
> 
> Best regards,
> 
> David Dong
> IANA Services Sr. Specialist
> 
> On Wed Dec 03 17:41:54 2025, housley@vigilsec.com wrote:
>> I suggest an Appendix with this ASN.1 Module:
>> 
>> ~~~
>>   PrefixLengthsModule-2025
>>     { iso(1) member-body(2) us(840) rsadsi(113549)
>>       pkcs(1) pkcs9(9) smime(16) mod(0) TBD0 }
>> 
>> DEFINITIONS IMPLICIT TAGS ::=
>> BEGIN
>> 
>> -- EXPORTS ALL --
>> 
>> IMPORTS
>>  CONTENT-TYPE
>>  FROM CryptographicMessageSyntax-2010 -- in [RFC6268]
>>  { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)
>>    pkcs-9(9) smime(16) modules(0) id-mod-cms-2009(58) } ;
>> 
>> ContentSet CONTENT-TYPE ::= { ct-prefixlenCSVwithCRLF, ... }
>> 
>> ct-prefixlenCSVwithCRLF CONTENT-TYPE ::=
>>  { TYPE OCTET STRING IDENTIFIED BY id-ct-prefixlenCSVwithCRLF }
>> 
>> id-ct-prefixlenCSVwithCRLF OBJECT IDENTIFIER ::=
>>  { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)
>>    pkcs-9(9) smime(16) ct(1) TBD1 }
>> 
>> END
>> ~~~
>> 
>> We will also need IANA to assign an OID for the module.  This is a
>> minor update to the IANA considerations section.
>> 
>> Russ
>> 
>>> On Dec 2, 2025, at 5:09 PM, David Dong via RT <drafts-expert-review-
>>> comment@iana.org> wrote:
>>> 
>>> Dear Authors/Chairs/ADs,
>>> 
>>> Please see below for feedback for the SMI Security for S/MIME CMS
>>> Content Type registration from the expert.
>>> 
>>> Best regards,
>>> 
>>> David Dong
>>> IANA Services Sr. Specialist
>>> 
>>> On Tue Dec 02 20:45:44 2025, sean@sn3rd.com wrote:
>>>> Did a quick look at this and have a questions about why there’s no
>>>> ASN.1 module that formally defines the content type? The knock on
>>>> effects for adding a module that come to mind would be:
>>>> - another section for the ASN.1 module
>>>> - another IANA request for SMIME ASN.1 Module Arc
>>>> - normative refs to X.680, X.690, & RFC 5911 (imports CONTENT-TYPE)
>>>> 
>>>> Cheers,
>>>> spt
>>>> 
>>>>> On Dec 1, 2025, at 18:50, David Dong via RT <drafts-expert-review-
>>>>> comment@iana.org> wrote:
>>>>> 
>>>>> Dear Sean Turner (cc: opsawg WG),
>>>>> 
>>>>> As the backup designated expert for the SMI Security for S/MIME CMS
>>>>> Content Type registry, can you review the proposed registration in
>>>>> draft-ietf-opsawg-prefix-lengths-08 for us? Would you be able to
>>>>> review this before the IESG telechat this week?
>>>>> 
>>>>> Please note that Russ is a co-author on this document.
>>>>> 
>>>>> Please see:
>>>>> 
>>>>> https://datatracker.ietf.org/doc/draft-ietf-opsawg-prefix-lengths/
>>>>> 
>>>>> If this is OK, when the IESG approves the document for publication,
>>>>> we'll make the registration at:
>>>>> 
>>>>> https://www.iana.org/assignments/smi-numbers/
>>>>> 
>>>>> With thanks,
>>>>> 
>>>>> David Dong
>>>>> IANA Services Sr. Specialist
>>>>> 
>>>>> On Thu Nov 13 23:10:41 2025, david.dong wrote:
>>>>>> Dear Sean Turner (cc: opsawg WG),
>>>>>> 
>>>>>> As the backup designated expert for the SMI Security for S/MIME
>>>>>> CMS
>>>>>> Content Type registry, can you review the proposed registration in
>>>>>> draft-ietf-opsawg-prefix-lengths-08 for us? Please note that Russ
>>>>>> is
>>>>>> a
>>>>>> co-author on this document.
>>>>>> 
>>>>>> Please see:
>>>>>> 
>>>>>> https://datatracker.ietf.org/doc/draft-ietf-opsawg-prefix-lengths/
>>>>>> 
>>>>>> The due date is November 27th.
>>>>>> 
>>>>>> If this is OK, when the IESG approves the document for
>>>>>> publication,
>>>>>> we'll make the registration at:
>>>>>> 
>>>>>> https://www.iana.org/assignments/smi-numbers/
>>>>>> 
>>>>>> With thanks,
>>>>>> 
>>>>>> David Dong
>>>>>> IANA Services Sr. Specialist
>>>>> 
>>> 
>