IETF Logo Mail Archive

[SCITT] Re: SCITT Working Group adoption call for MMR Receipt Profile

Blake Morrison <blake@truealter.com> Fri, 09 October 2026 07:31 UTC

Received: from mail-4323.protonmail.ch (mail-4323.protonmail.ch [185.70.43.23]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id 7D8A246; Fri, 09 Oct 2026 07:31:02 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=truealter.com header.s=protonmail2 header.b=on4Lj05A; dmarc=pass (policy=reject) header.from=truealter.com; spf=pass (mx.ietf.org: domain of blake@truealter.com designates 185.70.43.23 as permitted sender) smtp.mailfrom=blake@truealter.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=truealter.com; s=protonmail2; t=1791531055; x=1791790255; bh=+Wt8jqUTGDr4+YZ51sgPYFYAiEIwV/QtexmKI1wZczk=; h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References: Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID: Message-ID:BIMI-Selector; b=on4Lj05AoelAmr00oZSrk+kkgPzbMIWZaTsgVrwk2kT8dVHpQn1NXygMy1eMjRQ7R UnIbyVb6wHCQ0Z0bwR3BMClJOk+KND23Osma1NWQ1wuKcqU36Vn+juWEfOBsdx4IlT LMLM9c/Hjdq3Jzp2cj0H6g0gDbGoa6jMuJ7+Oe6X+jtpfgdRiOoHs0FZdUSt28evKH 5yYIAThsyYbbeWktDr5BLcLOA6aOLzi6d4V7q/6C8utq7K7tCE6e5ZyKFvRPYtExf4 HSNavx26UEDPbn0uZOigVrcEfR0tYlWZB8jMrGCAK7wEX+VgFq5cD+V68Y7x1T0KxI mHPbnfAly36cw==
To: "nicolebates@microsoft.com" <nicolebates@microsoft.com>
From: Blake Morrison <blake@truealter.com>
Message-ID: <hhbnkRfr3pJCvlBEkGjhZ8NfoZeGTvTQBntRhyjjDuhneS-81_r4gDizjBK2hZX0ZaAl6fzG9sByASaeGKvKfXpNKzuwfhpm4TnXVOPVbuE=@truealter.com>
In-Reply-To: <SA1PR21MB610482988B1337566E65BED8A2802@SA1PR21MB6104.namprd21.prod.outlook.com>
References: <SA1PR21MB610482988B1337566E65BED8A2802@SA1PR21MB6104.namprd21.prod.outlook.com>
Feedback-ID: 187617253:user:proton
X-Pm-Message-ID: 51b08ae7490e08720696f92a9009f76c15ff46a3
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Spamd-Bar: --------------------
X-Original-From: Blake Morrison <blake@truealter.com>
X-MailFrom: forwardingalgorithm@dmarc.ietf.org
X-Mailman-Rule-Hits: header-match-scitt.ietf.org-3
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-scitt.ietf.org-0; header-match-scitt.ietf.org-1; header-match-scitt.ietf.org-2
Message-ID-Hash: BDH6XIGBEDO3YFD7JHE5ONRV4V4WFIUZ
X-Message-ID-Hash: BDH6XIGBEDO3YFD7JHE5ONRV4V4WFIUZ
X-Mailman-Approved-At: Sun, 11 Oct 2026 09:57:22 +0000
CC: 'scitt' <scitt@ietf.org>, "scitt-chairs@ietf.org" <scitt-chairs@ietf.org>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [SCITT] Re: SCITT Working Group adoption call for MMR Receipt Profile
List-Id: "Supply Chain Integrity, Transparency, and Trust" <scitt.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/scitt/72kSBeawWIsuHPvL914Ez52wiI0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scitt>
List-Help: <mailto:scitt-request@ietf.org?subject=help>
List-Owner: <mailto:scitt-owner@ietf.org>
List-Post: <mailto:scitt@ietf.org>
List-Subscribe: <mailto:scitt-join@ietf.org>
List-Unsubscribe: <mailto:scitt-leave@ietf.org>
Date: Fri, 09 Oct 2026 07:31:03 -0000
X-Original-Date: Fri, 09 Oct 2026 07:30:52 +0000

Hi Nicole, Jon,

I support adoption and I'm willing to review.

Sections 5.1 and 7.1 of -03 recommend a single boolean result for
receipt verification. We took that out of our own verifier in August
after this list found a check that couldn't run being reported as
valid or invalid. PR 463 on the architecture repo asks Receipt Profiles
for a third result. Once this is adopted the WG can settle that in its
own document.

https://github.com/ietf-wg-scitt/draft-ietf-scitt-architecture/pull/463

Blake

v2.46.0 | Report a Bug | By Email | System Status