Re: [pkix] New version of the TLS feature draft
Gervase Markham <gerv@mozilla.org> Tue, 09 September 2014 14:24 UTC
Return-Path: <gerv@mozilla.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 582331A02F1 for <pkix@ietfa.amsl.com>; Tue, 9 Sep 2014 07:24:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.278
X-Spam-Level:
X-Spam-Status: No, score=-3.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_ORG=0.611, HOST_MISMATCH_COM=0.311, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WjXhzIPEUPw9 for <pkix@ietfa.amsl.com>; Tue, 9 Sep 2014 07:24:13 -0700 (PDT)
Received: from smtp.mozilla.org (mx2.corp.phx1.mozilla.com [63.245.216.70]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 58E991A02EC for <pkix@ietf.org>; Tue, 9 Sep 2014 07:24:13 -0700 (PDT)
Received: from [192.168.0.101] (93.243.187.81.in-addr.arpa [81.187.243.93]) (Authenticated sender: gerv@mozilla.org) by mx2.mail.corp.phx1.mozilla.com (Postfix) with ESMTPSA id 2D507F2303 for <pkix@ietf.org>; Tue, 9 Sep 2014 07:24:11 -0700 (PDT)
Message-ID: <540F0D8B.3030002@mozilla.org>
Date: Tue, 09 Sep 2014 15:24:11 +0100
From: Gervase Markham <gerv@mozilla.org>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:32.0) Gecko/20100101 Thunderbird/32.0
MIME-Version: 1.0
To: pkix@ietf.org
OpenPGP: id=9DF43DBB
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Archived-At: http://mailarchive.ietf.org/arch/msg/pkix/4qnm7Eo5Avx5BpvquDJMv078dYk
Subject: Re: [pkix] New version of the TLS feature draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix/>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Sep 2014 14:24:15 -0000
Mozilla is in favour of changing TLS to provide a "must-staple" indicator. We feel it's necessary to be able to get to hard-fail on revocation problems, as part of our future integrated strategy to improve how revocation works: https://wiki.mozilla.org/CA:RevocationPlan (I reference that page for information; this list is probably not the place for discussing other aspects of our revocation plan if you have questions or concerns about it. You probably want mozilla.dev.security.policy[0] for that.) Gerv [0] https://www.mozilla.org/about/forums/#dev-security-policy
- [pkix] New version of the TLS feature draft Phillip Hallam-Baker
- Re: [pkix] [TLS] New version of the TLS feature d… Nikos Mavrogiannopoulos
- Re: [pkix] New version of the TLS feature draft Gervase Markham
- Re: [pkix] [TLS] New version of the TLS feature d… Tom Ritter
- Re: [pkix] [TLS] New version of the TLS feature d… Phillip Hallam-Baker
- Re: [pkix] [TLS] New version of the TLS feature d… Nikos Mavrogiannopoulos
- Re: [pkix] [TLS] New version of the TLS feature d… Nikos Mavrogiannopoulos
- Re: [pkix] [TLS] New version of the TLS feature d… Phillip Hallam-Baker
- Re: [pkix] [TLS] New version of the TLS feature d… Dr. Massimiliano Pala