[POSH] Fwd: I-D Action: draft-miller-posh-03.txt
"Matt Miller (mamille2)" <mamille2@cisco.com> Tue, 12 November 2013 22:42 UTC
Return-Path: <mamille2@cisco.com>
X-Original-To: posh@ietfa.amsl.com
Delivered-To: posh@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32E5021E80D8 for <posh@ietfa.amsl.com>; Tue, 12 Nov 2013 14:42:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.561
X-Spam-Level:
X-Spam-Status: No, score=-10.561 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lFpToGm1Zyts for <posh@ietfa.amsl.com>; Tue, 12 Nov 2013 14:42:36 -0800 (PST)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) by ietfa.amsl.com (Postfix) with ESMTP id E53A821E80BD for <posh@ietf.org>; Tue, 12 Nov 2013 14:42:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4281; q=dns/txt; s=iport; t=1384296155; x=1385505755; h=from:to:subject:date:message-id:references:mime-version; bh=Rw9+HWVYcfGCcXQFBu/HyxacJ8Lt1FsqJwc4TyUI1DA=; b=A6K1FlDcHXYljo1xlic99iW5a/RUTYAx6s9jPMJdDDmjYf6dj/V+htKu TsAokxu0kghGx0YWbUnFpJwFNDDZE/p11zi7DBsEy1x32Jv1p91PMdAbz reCyeVdsDFYIpvEuFufr+lu4GGaltvLtVpqiUUHwlbmQNhmpKFMRqTbKv k=;
X-Files: signature.asc : 496
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AjMFAESuglKtJXHB/2dsb2JhbABQAQmDBzhNBr8lgSoWdIIlAQEBAwEBAQFrEAsCARkDAQIvJwsUBwIIAgQRAgkFh20GCAW/PY4WBgGBMRMLgxqBEQOQMIEwhi+BL4smhTWDJkCBMTk
X-IronPort-AV: E=Sophos; i="4.93,688,1378857600"; d="asc'?scan'208"; a="283963401"
Received: from rcdn-core2-6.cisco.com ([173.37.113.193]) by rcdn-iport-6.cisco.com with ESMTP; 12 Nov 2013 22:42:35 +0000
Received: from xhc-rcd-x11.cisco.com (xhc-rcd-x11.cisco.com [173.37.183.85]) by rcdn-core2-6.cisco.com (8.14.5/8.14.5) with ESMTP id rACMgZYs019472 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <posh@ietf.org>; Tue, 12 Nov 2013 22:42:35 GMT
Received: from xmb-aln-x11.cisco.com ([169.254.6.19]) by xhc-rcd-x11.cisco.com ([173.37.183.85]) with mapi id 14.03.0123.003; Tue, 12 Nov 2013 16:42:34 -0600
From: "Matt Miller (mamille2)" <mamille2@cisco.com>
To: "<posh@ietf.org>" <posh@ietf.org>
Thread-Topic: I-D Action: draft-miller-posh-03.txt
Thread-Index: AQHO3/czbIgeC8ua8Uu/m7+WbWWgwA==
Date: Tue, 12 Nov 2013 22:42:34 +0000
Message-ID: <BE4B30F2-130B-44B7-A6FF-921CA6DEE459@cisco.com>
References: <20131112223059.28813.29567.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [64.101.72.44]
Content-Type: multipart/signed; boundary="Apple-Mail=_980DC871-72CC-4010-9DCF-568BAA0EE687"; protocol="application/pgp-signature"; micalg="pgp-sha512"
MIME-Version: 1.0
Subject: [POSH] Fwd: I-D Action: draft-miller-posh-03.txt
X-BeenThere: posh@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Discussion about PKIX Over Secure HTTP <posh.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/posh>, <mailto:posh-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/posh>
List-Post: <mailto:posh@ietf.org>
List-Help: <mailto:posh-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/posh>, <mailto:posh-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Nov 2013 22:42:41 -0000
FYI; a minor update to note it's primary applicability to XMPP, but can still be used by other protocols. - m&m Matt Miller < mamille2@cisco.com > Cisco Systems, Inc. Begin forwarded message: > From: <internet-drafts@ietf.org> > Subject: I-D Action: draft-miller-posh-03.txt > Date: November 12, 2013 at 3:30:59 PM MST > To: <i-d-announce@ietf.org> > Reply-To: <internet-drafts@ietf.org> > > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > > > Title : PKIX over Secure HTTP (POSH) > Author(s) : Matthew Miller > Peter Saint-Andre > Filename : draft-miller-posh-03.txt > Pages : 15 > Date : 2013-11-12 > > Abstract: > Experience has shown that it is extremely difficult to deploy proper > PKIX certificates for TLS in multi-tenanted environments, since > certification authorities will not issue certificates for hosted > domains to hosting services, hosted domains do not want hosting > services to hold their private keys, and hosting services wish to > avoid liability for holding those keys. As a result, domains hosted > in multi-tenanted environments often deploy non-HTTP applications > such as email and instant messaging using certificates that identify > the hosting service, not the hosted domain. Such deployments force > end users and peer services to accept a certificate with an improper > identifier, resulting in obvious security implications. This > document defines two methods that make it easier to deploy > certificates for proper server identity checking in non-HTTP > application protocols. The first method enables the TLS client > associated with a user agent or peer application server to obtain the > end-entity certificate of a hosted domain over secure HTTP as an > alternative to standard PKIX techniques. The second method enables a > hosted domain to securely delegate a non-HTTP application to a > hosting service using redirects provided by HTTPS itself or by a > pointer in a file served over HTTPS at the hosted domain. While this > approach is developed for use in the Extensible Messaging and > Presence Protocol (XMPP) as a Domain Name Association prooftype, it > can be applied to any non-HTTP application protocol. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-miller-posh > > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-miller-posh-03 > > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=draft-miller-posh-03 > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html > or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
- [POSH] Fwd: I-D Action: draft-miller-posh-03.txt Matt Miller (mamille2)