[Secdispatch] Re: Request for Review and Adoption of Internet Draft: High Assurance DIDs with DNS

[Jacques Latour <[e-mail]>]

Hi,

ACME recommended this should be sent here for considerations.

Looking forward to see what you think and where home is 😉.

Jacques


From: Jacques Latour <[e-mail]>
Sent: August 28, 2024 4:30 PM
To: [e-mail]
Cc: Jacques Latour <[e-mail]>; Jesse Carter <[e-mail]>; Mathieu Glaude <[e-mail]>; Tim Bouma <[e-mail]>
Subject: Request for Review and Adoption of Internet Draft: High Assurance DIDs with DNS

Hi all!

First time asking for an internet draft adoption.


·         https://datatracker.ietf.org/doc/draft-carter-high-assurance-dids-with-dns/

As one of the authors of the internet draft titled "High Assurance DIDs with DNS" (draft-carter-high-assurance-dids-with-dns), I am writing to request the ACME Working Group to review and consider adopting this draft as part of your working group.

The draft proposes a method for integrating high assurance Decentralized Identifiers (DIDs) with the Domain Name System (DNS), aiming to enhance the security and reliability of DIDs by leveraging the established trust infrastructure of DNS. We believe that this integration aligns well with the goals and expertise of the ACME Working Group, particularly in the areas of secure and automated certificate management.
We would greatly appreciate the opportunity to present this draft to the working group and discuss its potential benefits and implementation details. Your feedback and guidance would be invaluable in refining the draft and ensuring its alignment with the broader objectives of the IETF.
Please let us know if there are any specific procedures or additional information required for this request. We are eager to collaborate with the ACME Working Group and contribute to the advancement of secure and reliable internet standards.
In terms of support and reference for this draft, we have the following references that may help justify our ask.


·         https://dhs-svip.github.io/requirements-for-decentralized-identity/TrustArchitecture/

·         DID Specification Registries (w3c.github.io)<https://w3c.github.io/did-spec-registries/#dnsvalidationdomain>

·         Trust DID Web - The did:tdw DID Method (bcgov.github.io)<https://bcgov.github.io/trustdidweb/>

Example DNS implementation:

$ dig _did.trustroot.ca uri +dnssec +multi

_did.trustroot.ca.      3518 IN URI 0 0 "did:web:trustroot.ca"
_did.trustroot.ca.      3518 IN RRSIG URI 13 3 3600 (
                                20240905000000 20240815000000 17999 trustroot.ca.
                                4CJsquY7BEcA2YX1iWHIKzXx4lEvWa7k8JWNbp4zu3dp
                                KQXdwZ73geTKgzfNz9g5+HyckxTyNyz8LU8lA+G4lg== )

$ dig _did.trustroot.ca tlsa +dnssec +multi

_did.trustroot.ca.      3527 IN TLSA 3 1 1 (
                                CEEAD59AAE176DDD8889DF0B02083CB393D07655CBA9
                                D668EA334ABDBDB72A39 )
_did.trustroot.ca.      3527 IN TLSA 3 1 0 (
                                302A300506032B6570032100C300A443F0427440AC90
                                BDA85B4F97896879564A7AB649B976FA7D15FEAFC225 )
_did.trustroot.ca.      3527 IN RRSIG TLSA 13 3 3600 (
                                20240905000000 20240815000000 17999 trustroot.ca.
                                z/E+jECtQzNi0zcBcrVa8P8UKiHx5SHcSEmN2vR6Oe4t
                                nfvjso/8/ZXo/IlWtoqgIYrCeJJ9NLFTu/q0cGwUIg== )

Thank you for your time and consideration.
Best regards,
Jacques, Jesse, Mathieu and Tim.




CLASSIFICATION:CONFIDENTIAL