Re: [pkix] In-the-wild implementations of RFC6955?

Anders Rundgren <anders.rundgren.net@gmail.com> Fri, 27 May 2022 04:47 UTC

Return-Path: <anders.rundgren.net@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F072C15AE3C for <pkix@ietfa.amsl.com>; Thu, 26 May 2022 21:47:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.956
X-Spam-Level:
X-Spam-Status: No, score=-8.956 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-1.857, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uQEaypLgXQZ8 for <pkix@ietfa.amsl.com>; Thu, 26 May 2022 21:47:45 -0700 (PDT)
Received: from mail-wr1-x433.google.com (mail-wr1-x433.google.com [IPv6:2a00:1450:4864:20::433]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E49A1C159525 for <pkix@ietf.org>; Thu, 26 May 2022 21:47:45 -0700 (PDT)
Received: by mail-wr1-x433.google.com with SMTP id k30so4382962wrd.5 for <pkix@ietf.org>; Thu, 26 May 2022 21:47:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=message-id:date:mime-version:user-agent:subject:content-language :from:to:references:in-reply-to:content-transfer-encoding; bh=iu8CMeVAIkUh5tMOv87z4YdR6ZiB3IlDQ+f2kSCpNSc=; b=LPJzNhQQsAFKS9xld+IJIw1+97AGRuUpMKQw+bCaCMUWZsfdgV6haUP+c90VBFkV+H 5epAgqCxj6rXsZdW+tP6Oj9X6O5EK2o9A854vVnfAXSs0uDg1akvnz2UJbnh/lDMVTjN 0aKE2wA8ty8l6p/UdU5XV8zTdPJOJ69YKkaPNDmtR15Tey7R1uTJRnoTSYK0aq5dwtoI kxjajka1sxfbmCxIkmjkQJWQW9WYQwhxvwjInCcOuW+Cj/Is6o0iRUZ+B3V/lnfo7rZz WI3IfVQWgrKEQfjiN/NbW21JSAU95+a6SnFgdKQ0XKo/PwHntn2Q7FWQCA5b1bDhtc1x su6w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:date:mime-version:user-agent:subject :content-language:from:to:references:in-reply-to :content-transfer-encoding; bh=iu8CMeVAIkUh5tMOv87z4YdR6ZiB3IlDQ+f2kSCpNSc=; b=fpwTGRJj6mvmM9TCeBna8pyYwB/n7/+e+6Uva1dGORgV+msIPbBJhZH9gcqoTTs6Iq SA2fuIWcm+xB8okxsSSDvKm9FWnyhd6vv1r0xHkXhubFuAsNWw6sbwxfF/fJFfVbe9zM qT71xf33tCCvWo+f13mUafkVQNE9y77yyTmkASpZSMxUhdg3aeoCQscJVoGM1j5p7Mkk iT5KHeb3zXg57OPMDZt1OGicRTX0NJPQWdMuMpk98okn+mYD9rfBVp9Z9hENSXt3mS3S F6JQYe9O04thrhH1JYC33chHo/zkvC8p6Wjx3h8EvT5o8wgYlrVYYTiv1Q9csQi71gGs Ylow==
X-Gm-Message-State: AOAM533tF/YOm4vLhaNkLj3E2vx9JX6UDVTGOuL12peYC5ye5C8HbYY5 J3rAP/D+LwvvxYeibQT3PzpllNrAbHw=
X-Google-Smtp-Source: ABdhPJx/VexlKV+VzEvxeqZZsXmtbfQVXZ2DZQxFJajFJe0vBSIrz6GAfAKptVpFElyr+4fwnG5yfQ==
X-Received: by 2002:adf:f948:0:b0:20f:f964:7621 with SMTP id q8-20020adff948000000b0020ff9647621mr11570620wrr.235.1653626864079; Thu, 26 May 2022 21:47:44 -0700 (PDT)
Received: from [192.168.1.67] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id g16-20020adfe410000000b0020c5253d8bdsm816996wrm.9.2022.05.26.21.47.43 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 26 May 2022 21:47:43 -0700 (PDT)
Message-ID: <da258c5e-f585-0370-3132-b3bf7ddc5b96@gmail.com>
Date: Fri, 27 May 2022 06:47:43 +0200
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.9.1
Content-Language: en-US
From: Anders Rundgren <anders.rundgren.net@gmail.com>
To: Michael StJohns <msj@nthpermutation.com>, Peter Gutmann <pgut001@cs.auckland.ac.nz>, IETF PKIX <pkix@ietf.org>
References: <61955a76-232b-81e0-9fff-afea5cd6790b@nthpermutation.com> <SY4PR01MB6251FD54A917409C51BBCBC2EED79@SY4PR01MB6251.ausprd01.prod.outlook.com> <ef9d463f-5abf-b8d8-16fa-3db7980a767e@nthpermutation.com> <SY4PR01MB6251F64ACF9D954D0D6B5CDFEED99@SY4PR01MB6251.ausprd01.prod.outlook.com> <3134770a-4ebb-671d-7c8b-9945737416fe@gmail.com> <94b64d59-67b7-67ae-658d-fa2c0472ed33@nthpermutation.com> <c68951a2-6bbc-30fc-4ceb-832e45618c86@gmail.com>
In-Reply-To: <c68951a2-6bbc-30fc-4ceb-832e45618c86@gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/pkix/ivrJdYhxSKWzIRQTxkcSqx2A6vc>
Subject: Re: [pkix] In-the-wild implementations of RFC6955?
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pkix/>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 May 2022 04:47:50 -0000

BTW, doesn't encryption solutions for applications like S/MIME need private key backup to be practical?
It appears that RFC6995 squarely address the market.

PGP is a better solution for e-mail encryption.

Anders