[pkix] [Errata Held for Document Update] RFC7030 (5107)

RFC Errata System <rfc-editor@rfc-editor.org> Wed, 19 August 2020 20:00 UTC

To: sean@sn3rd.com, pritikin@cisco.com, peter@akayla.com, dharkins@arubanetworks.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: rdd@cert.org, iesg@ietf.org, pkix@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20200819195942.31E7AF4078B@rfc-editor.org>
Date: Wed, 19 Aug 2020 12:59:42 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/pkix/Tw6K6OJdZKqt_2tF89Y3BIukV40>
Subject: [pkix] [Errata Held for Document Update] RFC7030 (5107)
Precedence: list

The following errata report has been held for document update
for RFC7030, "Enrollment over Secure Transport".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid5107

--------------------------------------
Status: Held for Document Update
Type: Technical

Reported by: Sean Turner <sean@sn3rd.com>
Date Reported: 2017-09-07
Held by: Roman Danyliw (IESG)

Section: 3.2.1

Original Text
-------------

Corrected Text
--------------
Add the following is as the last paragraph of Section 3.2.1:

[RFC2616] indicates "HTTP does not use the
Content-Transfer-Encoding (CTE) field of RFC 2045”; nevertheless, this
document was published specifying the use of the
Content-Transfer-Encoding header with a value of ‘base64' in Sections
4.1.3, 4.3.1, 4.3.2, 4.4.2, 4.5.2, as well as in the examples in
Appendices A.1-A.4. As HTTP is binary-clean transport, there is no
need to indicate this for HTTP-based protocols like EST. EST server
implementations SHOULD omit the Content-Transfer-Encoding header if
they know a priori that EST clients do not rely this field. EST
Clients SHOULD expect that the Content-Transfer-Encoding header will
be absent unless they have an a priori agreement with the EST server.
The mechanism to establish this client dependency is out-of-scope.

Notes
-----
EST, which is an HTTP-based protocol, erroneous used CTE. This errata addresses this error.

Note that the text was reviewed by a RAI AD as well as multiple EST implementors.

--------------------------------------
RFC7030 (draft-ietf-pkix-est-09)
--------------------------------------
Title : Enrollment over Secure Transport
Publication Date : October 2013
Author(s) : M. Pritikin, Ed., P. Yee, Ed., D. Harkins, Ed.
Category : PROPOSED STANDARD
Source : Public-Key Infrastructure (X.509)
Area : Security
Stream : IETF
Verifying Party : IESG

[pkix] [Errata Held for Document Update] RFC7030 … RFC Errata System
Re: [pkix] [Errata Held for Document Update] RFC7… Eliot Lear