[regext] Re: I-D Action: draft-albanna-regext-eku-mtls-in-epp-02.txt
"AlBanna, Zaid" <zalbanna@verisign.com> Mon, 30 March 2026 16:43 UTC
Return-Path: <zalbanna@verisign.com>
X-Original-To: regext@mail2.ietf.org
Delivered-To: regext@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 74BEBD3907D6 for <regext@mail2.ietf.org>; Mon, 30 Mar 2026 09:43:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1774889011; bh=5JKBFmFgDSfhz196Sg2sKsVJdbD8Xhg+kdMgWPe2mPU=; h=Subject:From:To:CC:Date:References:In-Reply-To; b=IHkFolWNwRDFFQe2XYu4CdI0v6TA2I5BZKs/zNGKlB0axqTx76MNiyIwbH/FX6XX+ uiijjY1l4i5L9HSENYahmsSAntLUtEXBtMkEa7hBj3Fa3zU/KYHzSnv+7W0rwStqLr ermcPiBYZj4cK8HxXcqKRV3CsCqi34Y6AfEhKh90=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.398
X-Spam-Level:
X-Spam-Status: No, score=-4.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ofGHN_0tcad7 for <regext@mail2.ietf.org>; Mon, 30 Mar 2026 09:43:30 -0700 (PDT)
Received: from mail3.verisign.com (mail3.verisign.com [72.13.63.32]) by mail2.ietf.org (Postfix) with ESMTP id 2633DD38E886 for <regext@ietf.org>; Mon, 30 Mar 2026 09:38:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=5982; q=dns/txt; s=VRSN; t=1774888717; h=from:to:cc:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version:subject; bh=5JKBFmFgDSfhz196Sg2sKsVJdbD8Xhg+kdMgWPe2mPU=; b=LC4IwvttA5Kv2LwGvpD8+3lsoh7bH2iy6q4RVQuwiv15q+FrIA5nBecn tFLN+h9dOpfPzKl2PtbLRU6KQ9bhWmVyjGaeyr/VkMfvPZJnytL9DKhT/ 4i7xPMqonQMqdI7IqC+4FMDstEXr4UFiMUJKJK2kqVEzB7sCTgac6ThxN GIUf53gkUfgV/jxRlOI+ljAAtQptx4y40MFrK1N4Sphy6KvvXkUWMrFOs lFowELhAB823ZFQJ65bQgeabM0fx6zLsnXJEx8Z7VLPCZ0os1SNl6OqY/ pwxhnzGfJLNYFWUbTabR4vkeCqn4EJ18aIpbk0qg7JSZStEYdhOHJ6hVU Q==;
X-CSE-ConnectionGUID: Zwk8414xRE2H483BtegTKQ==
X-CSE-MsgGUID: Ms/UJl2BQimFgJK9cTeBVA==
X-ThreatScanner-Verdict: Negative
IronPort-Data: A9a23:oQt1UK51TzOXeJJxDUhqQgxRtC/GchMFZxGqfqrLsTDasY5as4F+v mdLCmDUb/nbN2Wgedtzb4m+8xlVuJ+En4BkTFdqrC9jEysa+MHIO4+Ufxz6V8+wwm8vb2o8t plDNYOQRCwQZiWBzvt4GuG59RGQ7YnRGPykTrKCYnkvLeNdYH9JoQp5nOIkiZJfj9G8Agec0 fv/uMS31GWNglaYCUpKrfjYwP9TlK6q4m1A5QdmPaojUGL2zBH5MrpOfcldEFOlGuG4LsbiL 87fwbew+H/u/htFIruNjrbhf0QWdaXZNA6Ih2A+c/DKbs9q/3FaPg4TbZLwWG8P49m7t4kZJ OZl7PRcfTwU0pjkw4zxZTEDSn0jYvcWkFPwCSPXXcS7lyUqelOym6k+VBle0Ycwoo6bCkkWn RAUxaxkgrluSItazZriItSAiPjPI+HZI4BP5ig83Qv0V9Z6EcvpX6jF2fxhiWJYasBmRZ4yZ uI8QAFPNyvmTi0XYBEJA5UkhKGhij/haSZe7lmSoMLb4UCKlEogj/60bYCTIY3iqcZ9xy50o krU9mDzCxccPfSBxCCE6XOjgKnEmiaTtIc6SOPmrKE33Ab7Kmo7LQZRaHm/+9OAi0uQVPB8e kco9wAQhP1nnKCsZpynN/Gim1aesxERS8Z4EuAm5keK0KW8yx6VGUABXyJBaddjvsI/XiAxk FSOmrvBCjVrrryTYX+Z96yIvXW5Pi19EIMZTSoNVgte/N/usNlpyBfOVZNpF+i8ld2uXy/q2 DbMpy8771kOsfM2O2yA1Qivq1qRSlLhF2bZOi2/srqZ0z5E
IronPort-HdrOrdr: A9a23:jp88Uqp0yLp8AQFHGwHHfi0aV5r2eYIsimQD101hICG9Ffbo8v xG/c5rtyMc5wxwZJhNo7690cq7Lk80nKQdibX5Vo3SPzUO1lHIEKhSqaXvxDH6EzDz+6p3xc 5bH5RWOZnVAUJhhcj3pCu1A78bquWvweSNif3Fx3lgCTt2bbpthj0VNi+AHlZoSBJ9CZ01KZ qZ6qN8zAadRQ==
X-Talos-CUID: 9a23:wG5NMmwmGNH32x3eAC+VBgUmBcN1LiSB3E39eW/kWT1DVLCadXyprfY=
X-Talos-MUID: 9a23:28FvOAzrb6r6YjN/Kt0UTGVl/c6aqIG1T30vlc8sgsiBGyNSGGaWsDmdfKZyfw==
X-IronPort-AV: E=Sophos;i="6.23,150,1770595200"; d="scan'208";a="46627543"
Received: from MASH3WNEX01.vcorp.ad.vrsn.com (10.97.152.20) by MASH3WNEX02.vcorp.ad.vrsn.com (10.97.152.39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Mon, 30 Mar 2026 12:38:30 -0400
Received: from MASH3WNEX01.vcorp.ad.vrsn.com ([10.97.152.20]) by MASH3WNEX01.vcorp.ad.vrsn.com ([10.97.152.20]) with mapi id 15.02.2562.037; Mon, 30 Mar 2026 12:38:30 -0400
From: "AlBanna, Zaid" <zalbanna@verisign.com>
To: "regext@ietf.org" <regext@ietf.org>
Thread-Topic: [EXTERNAL] I-D Action: draft-albanna-regext-eku-mtls-in-epp-02.txt
Thread-Index: AQHcwGJ8WP4eq3gYV0CMN/Cd9gMlLLXHRoMA
Date: Mon, 30 Mar 2026 16:38:30 +0000
Message-ID: <9E1B0CC5-9808-4454-8C22-06997915845A@verisign.com>
References: <177488814769.1383657.613012427059109133@dt-datatracker-5775bcb475-pnkww>
In-Reply-To: <177488814769.1383657.613012427059109133@dt-datatracker-5775bcb475-pnkww>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.246.152.17]
Content-Type: text/plain; charset="utf-8"
Content-ID: <4E7E6086C50E2B46959B2987F5E3679B@verisign.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Message-ID-Hash: CTQ3ZPHNC2I7P7VY2Z2XKC6MA625DQYP
X-Message-ID-Hash: CTQ3ZPHNC2I7P7VY2Z2XKC6MA625DQYP
X-MailFrom: zalbanna@verisign.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-regext.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "pdw@mythic-beasts.com" <pdw@mythic-beasts.com>, "galvin@elistx.com" <galvin@elistx.com>, "Hollenbeck, Scott" <shollenbeck@verisign.com>, "Gould, James" <jgould@verisign.com>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [regext] Re: I-D Action: draft-albanna-regext-eku-mtls-in-epp-02.txt
List-Id: Registration Protocols Extensions Working Group <regext.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/nsNl5s3Zf9A4KWfKOXKbdNDPmYY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Owner: <mailto:regext-owner@ietf.org>
List-Post: <mailto:regext@ietf.org>
List-Subscribe: <mailto:regext-join@ietf.org>
List-Unsubscribe: <mailto:regext-leave@ietf.org>
Hello All, A new version of this draft was just posted. This includes comments and suggestions from James Galvin, and Paul Warren (Thanks to both for the input). Please review and share comments or questions. Thanks Zaid On 3/30/26, 12:30 PM, "internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>" <internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>> wrote: Caution: This email originated from outside the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. Internet-Draft draft-albanna-regext-eku-mtls-in-epp-02.txt is now available. Title: Extended Key Usage and Mutual TLS in EPP Authors: Zaid AlBanna James Gould Scott Hollenbeck Name: draft-albanna-regext-eku-mtls-in-epp-02.txt Pages: 11 Dates: 2026-03-30 Abstract: This document describes the state of the Mutual Transport Layer Security (mTLS) client authentication mechanism in the Extensible Provisioning Protocol (EPP) with respect to a recent change in the client certificates published by some Certificate Authorities (CAs). The issue is described and options are presented to address the operational impact of the change. The IETF datatracker status page for this Internet-Draft is: https://secure-web.cisco.com/13cr2fgd7ys4xpctqx40HW-sn29LvakSMMG2QuRMdcuzkKFV343ShE86_9hNv1pxG8kP1tvYv1M7BEpXKGlhmoVh8oDskXfZYDcCxnOPJ_twPviX-0oV-y7qaYsst-PP5w-po468eQIk1E8bvpuGKIwZWYnsVrBYWTUrflFppaXX7s70VtvpKhkGy9ixRKCAgcJNhb9bn41bmmhBJEjakpqdffMZ5F9ZX-lnPxNvestEof3y9YCIgMVDLZeOKpo6NldUagOLQdEiqwMaXHKiWsLIjyNrl4DL8zNsg1D0cWGsAgeas0ODIsyUAYXT_ndCn/https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-albanna-regext-eku-mtls-in-epp%2F <https://secure-web.cisco.com/13cr2fgd7ys4xpctqx40HW-sn29LvakSMMG2QuRMdcuzkKFV343ShE86_9hNv1pxG8kP1tvYv1M7BEpXKGlhmoVh8oDskXfZYDcCxnOPJ_twPviX-0oV-y7qaYsst-PP5w-po468eQIk1E8bvpuGKIwZWYnsVrBYWTUrflFppaXX7s70VtvpKhkGy9ixRKCAgcJNhb9bn41bmmhBJEjakpqdffMZ5F9ZX-lnPxNvestEof3y9YCIgMVDLZeOKpo6NldUagOLQdEiqwMaXHKiWsLIjyNrl4DL8zNsg1D0cWGsAgeas0ODIsyUAYXT_ndCn/https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-albanna-regext-eku-mtls-in-epp%2F> There is also an HTMLized version available at: https://secure-web.cisco.com/1oqtzZD3BjtE3MgnsIxJcDMoTHf9q8m2f3T79lIjgM92ZrmtcJoXmAeoLuWnT8jOf_URV4BI2Z-IQ1DcZG15o5davhNnlUOL60e-BLV23sN7wD7hezij6kGWePUEVP_0MYG3rVSo8b8cLddHG4M9StbPFbFeKejKrFxC2XQ_r_vBQhD-dBbCz_StsczEsNMjKUU-w_jF2GmnpEYbeDs3TbH-mL_drMdeZSPtN-GrlhtBf8tvE3gvUuau83N2-jLat3ph4abRWapLk-bVsURUD4Jcnyf3E56P5Q9jc0QgWCa-1DfyZ9PDwR-O5XhMrYVOA/https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Fdraft-albanna-regext-eku-mtls-in-epp-02 <https://secure-web.cisco.com/1oqtzZD3BjtE3MgnsIxJcDMoTHf9q8m2f3T79lIjgM92ZrmtcJoXmAeoLuWnT8jOf_URV4BI2Z-IQ1DcZG15o5davhNnlUOL60e-BLV23sN7wD7hezij6kGWePUEVP_0MYG3rVSo8b8cLddHG4M9StbPFbFeKejKrFxC2XQ_r_vBQhD-dBbCz_StsczEsNMjKUU-w_jF2GmnpEYbeDs3TbH-mL_drMdeZSPtN-GrlhtBf8tvE3gvUuau83N2-jLat3ph4abRWapLk-bVsURUD4Jcnyf3E56P5Q9jc0QgWCa-1DfyZ9PDwR-O5XhMrYVOA/https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Fdraft-albanna-regext-eku-mtls-in-epp-02> A diff from the previous version is available at: https://secure-web.cisco.com/1I2ILOO8TWHRVzsYRKrPVfMCttZ5eqvazcr8fINvn2YBDlLs3msUMOC5iRDrGT02QaDgYbsKpJWgnosezu5OVcS_m0ELhedRJQ00KFBJ0XyEct4GLWadZYg5X-BtXB605k8ExTZqIRDD7xwUTRNOou6g6ett3UQOHA4SfQCm50KrRwb8YGcSpN_CGWsx2tgmYc9mbDYCtfUUPvJQWVi7ALw9teo5GJYcO3H1mCIQ_fo7KoZuwItpQdAG39c7k6vo_Gf7FQFPY7_Z2bVEhIsi60BqQfW_CEkjTE11VogIm9qSM2ES79GDdVWzDbGZm-ttx/https%3A%2F%2Fauthor-tools.ietf.org%2Fiddiff%3Furl2%3Ddraft-albanna-regext-eku-mtls-in-epp-02 <https://secure-web.cisco.com/1I2ILOO8TWHRVzsYRKrPVfMCttZ5eqvazcr8fINvn2YBDlLs3msUMOC5iRDrGT02QaDgYbsKpJWgnosezu5OVcS_m0ELhedRJQ00KFBJ0XyEct4GLWadZYg5X-BtXB605k8ExTZqIRDD7xwUTRNOou6g6ett3UQOHA4SfQCm50KrRwb8YGcSpN_CGWsx2tgmYc9mbDYCtfUUPvJQWVi7ALw9teo5GJYcO3H1mCIQ_fo7KoZuwItpQdAG39c7k6vo_Gf7FQFPY7_Z2bVEhIsi60BqQfW_CEkjTE11VogIm9qSM2ES79GDdVWzDbGZm-ttx/https%3A%2F%2Fauthor-tools.ietf.org%2Fiddiff%3Furl2%3Ddraft-albanna-regext-eku-mtls-in-epp-02> Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ I-D-Announce mailing list -- i-d-announce@ietf.org <mailto:i-d-announce@ietf.org> To unsubscribe send an email to i-d-announce-leave@ietf.org <mailto:i-d-announce-leave@ietf.org>
- [regext] Re: I-D Action: draft-albanna-regext-eku… AlBanna, Zaid
- [regext] Re: I-D Action: draft-albanna-regext-eku… Scott Hollenbeck