Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
Content-Type: text/plain; charset=us-ascii
From: Oleg Muravskiy <oleg@ripe.net>
In-Reply-To: <20160708225123.32075.21604.idtracker@ietfa.amsl.com>
Date: Sat, 9 Jul 2016 01:04:52 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <100F7109-D601-478A-959D-7260AC21A31A@ripe.net>
References: <20160708225123.32075.21604.idtracker@ietfa.amsl.com>
To: internet-drafts@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidr/qGDTH4OH2dThmWjVAjGxLus-Lq8>
Cc: sidr@ietf.org, i-d-announce@ietf.org
Subject: Re: [sidr] I-D Action: draft-ietf-sidr-rpki-tree-validation-01.txt
Precedence: list

This is an update to the draft-ietf-sidr-rpki-tree-validation.

No major changes, mostly clarifications that address comments from Steve =
Kent, and additional information as requested at the previous WG =
session.  Hope this version is more clear and close to final.


Oleg


> On 09 Jul 2016, at 00:51, internet-drafts@ietf.org wrote:
>=20
>=20
> A New Internet-Draft is available from the on-line Internet-Drafts =
directories.
> This draft is a work item of the Secure Inter-Domain Routing of the =
IETF.
>=20
>        Title           : RPKI Certificate Tree Validation by a Relying =
Party Tool
>        Authors         : Oleg Muravskiy
>                          Tim Bruijnzeels
> 	Filename        : draft-ietf-sidr-rpki-tree-validation-01.txt
> 	Pages           : 12
> 	Date            : 2016-07-08
>=20
> Abstract:
>   This document describes the approach to validate the content of the
>   RPKI certificate tree, as used by the RIPE NCC RPKI Validator.  This
>   approach is independent of a particular object retrieval mechanism.
>   This allows it to be used with repositories available over the rsync
>   protocol, the RPKI Repository Delta Protocol, and repositories that
>   use a mix of both.
>=20
>   This algorithm does not rely on content of repository directories,
>   but uses the Authority Key Identifier (AKI) field of a manifest and =
a
>   certificate revocation list (CRL) objects to discover manifest and
>   CRL objects issued by a particular Certificate Authority (CA).  It
>   further uses the hashes of manifest entries to discover other =
objects
>   issued by the CA.
>=20
>=20
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-sidr-rpki-tree-validation/
>=20
> There's also a htmlized version available at:
> https://tools.ietf.org/html/draft-ietf-sidr-rpki-tree-validation-01
>=20
> A diff from the previous version is available at:
> =
https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-sidr-rpki-tree-validation-0=
1
>=20
>=20
> Please note that it may take a couple of minutes from the time of =
submission
> until the htmlized version and diff are available at tools.ietf.org.
>=20
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>=20
> _______________________________________________
> sidr mailing list
> sidr@ietf.org
> https://www.ietf.org/mailman/listinfo/sidr
>=20