[Rats] Fwd: [TLS] Draft TLS Extension for Path Validation

Ira McDonald <blueroofmusic@gmail.com> Wed, 25 May 2022 17:10 UTC

Return-Path: <blueroofmusic@gmail.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBFDBC26D470 for <rats@ietfa.amsl.com>; Wed, 25 May 2022 10:10:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.094
X-Spam-Level:
X-Spam-Status: No, score=-2.094 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bnutry1naH2L for <rats@ietfa.amsl.com>; Wed, 25 May 2022 10:10:40 -0700 (PDT)
Received: from mail-qk1-x729.google.com (mail-qk1-x729.google.com [IPv6:2607:f8b0:4864:20::729]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 32E35C26D46E for <rats@ietf.org>; Wed, 25 May 2022 10:10:40 -0700 (PDT)
Received: by mail-qk1-x729.google.com with SMTP id x65so13654517qke.2 for <rats@ietf.org>; Wed, 25 May 2022 10:10:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=CPujOLYugtJLIZ4EUdyXy0w6WYKrF2TQapl28P+B62Q=; b=eh10MHfKo8K3OVRHe3+nBLBcuoImh1Ds/hg3fo0mwZHwPRjnEE9/6Zbyj5+6p2BwWm HCYNmcY2v2mSDl3srQD3BfOpJ8KVdqwq9FVFrnAlGzsobMPcNxMXTXuHe6yjSkzx9iib f9DAlNPtV86Z/iPYzD/sfgxWltZBx9zxPOo3hjXtIMYo3LSqEfyNS7yOjJLpF8x5yBqf GDjGkN5OVl9JJlUEb1j05RQmPkx23Hd7tQ5U/uM3otXd/BWwiumSv0esii4DBgpscJJm yrf1r/0NJYMLTNm5VM7Kk1cQqzY21nlDmBhtJBw4bvEF/qje2/aoeGIPIzwLyZXT7nJp b1UQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=CPujOLYugtJLIZ4EUdyXy0w6WYKrF2TQapl28P+B62Q=; b=QoScQsIfKa+b4oPMrSMCl0AdKA/a3iAjagvKsf9rPSrhM9bEhetE0/NTrVkhCMJF5B yPOtmaCly7QipRKsdb95I6eT8JVAZ6AGFcMDamPRNCc+K2uvejM7Jdi/z9RIAbJ1ER3F CbXzjbjg3Vei1FeROBae+lBMjzMhqfjJX9+PM7f8vcs6e2Z3lHSUJlz/7zg3Wz+xqveO 60hbaAbB7IusxipTErLYBzVh3uFtIQdC/KE4YIaOrqnY9CFXze7fZsT9TtepmZukFePI MIe3pgZLk+ZHQZeQDPWLNfh/twfCG2rzEF9b7MxNNV8Eo3xlbffPsqCvBWCMwJSZ8XUo Qhyw==
X-Gm-Message-State: AOAM5332uR6JHZuOTIhN9QF5ZBtRE8gFkjTxVaO0Jjb5fgRIFVYJua85 uLrDrVvRLynV2oyTDGoBKhj0wx453is9SFinrGik1R5z
X-Google-Smtp-Source: ABdhPJy0jfeBSc+uITN8Kogq15w6iWtlzaY4krShBre6Emdax4CeQVqLlrrZIk7zq8KAEAGsrx3Go47EbxtQfFt4Uso=
X-Received: by 2002:a37:6714:0:b0:6a3:5a74:e626 with SMTP id b20-20020a376714000000b006a35a74e626mr15850762qkc.417.1653498639060; Wed, 25 May 2022 10:10:39 -0700 (PDT)
MIME-Version: 1.0
References: <2790C640-0841-43BC-94CA-0890ECEA672A@conceptsbeyond.com>
In-Reply-To: <2790C640-0841-43BC-94CA-0890ECEA672A@conceptsbeyond.com>
From: Ira McDonald <blueroofmusic@gmail.com>
Date: Wed, 25 May 2022 13:10:15 -0400
Message-ID: <CAN40gStAWeo1j9+ZpPwEq6j7m-vkgb2oTG00pp=2wCTFoQDy4A@mail.gmail.com>
To: rats <rats@ietf.org>, Ira McDonald <blueroofmusic@gmail.com>
Content-Type: multipart/alternative; boundary="00000000000004950c05dfd92756"
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/4SRAmS6DxlK5pni5SZXhueb2eT8>
Subject: [Rats] Fwd: [TLS] Draft TLS Extension for Path Validation
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 May 2022 17:10:43 -0000

Hi,

Potentially interesting to various RATS activities.

Note that SCVP is defined in RFC 5055:
https://datatracker.ietf.org/doc/rfc5055/

Also see:  https://en.wikipedia.org/wiki/SCVP

Cheers,
- Ira

---------- Forwarded message ---------
From: Ashley Kopman <akopman@conceptsbeyond.com>
Date: Wed, May 25, 2022 at 1:00 PM
Subject: [TLS] Draft TLS Extension for Path Validation
To: <tls@ietf.org>


Hi TLS,

I have just submitted a draft TLS Extension for Path Validation
https://www.ietf.org/archive/id/draft-segers-tls-cert-validation-ext-00.txt

The proposal is for a Path Validation Extension to provide a new protocol
for TLS/DTLS allowing inclusion of certificate path validation information
in the TLS/DTLS handshake. Specifically, it covers the use of Server-based
Certificate Validation Protocol (SCVP) for path validation.

We are also finalizing a use case for civil aviation air-to-ground
communications which should be submitted in the next day.

Please have a look at the draft and provide feedback.

Thank you,

Ashley Kopman



_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls