Re: [Sidrops] draft-ietf-sidrops-signed-tal-10.txt

Chris Morrow <morrowc@ops-netman.net> Wed, 13 July 2022 05:19 UTC

Return-Path: <morrowc@ops-netman.net>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12AEAC1527AF; Tue, 12 Jul 2022 22:19:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.106
X-Spam-Level:
X-Spam-Status: No, score=-7.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (4096-bit key) header.d=ops-netman.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UpDeFoe-2zBq; Tue, 12 Jul 2022 22:18:59 -0700 (PDT)
Received: from relay.ops-netman.net (relay.ops-netman.net [192.110.255.59]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C8D55C157B48; Tue, 12 Jul 2022 22:18:51 -0700 (PDT)
Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by relay.ops-netman.net (Postfix) with ESMTPS id AA1C43C20C4; Wed, 13 Jul 2022 05:18:49 +0000 (UTC)
Received: from mailserver.ops-netman.net.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id D4BE41EA; Wed, 13 Jul 2022 05:18:48 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ops-netman.net; s=2021; t=1657689528; bh=N9qSBSm5ei1T/9+qt+U+EXOh4/i5EDNO4jtlsudwGfg=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=QqSjG65u2UK9alkjssxFAkTGZT2RCg9WFnm/4NHxrriZsaP9QelmLKZiqxhjQA9QD KDDL3aw7pDmMqqclU9/Ojt/Zysd6ExW8iVgbNF2IAV9sj8MMPWsW6GaLd+0A0/CXOW y20HF7j46eVrB4iSddaGcVYcOGoULBxo7zogSY5sSdLZsTEVe6OWUUtcScPdZ4E6jL BTp3abdMyxcG96OaIvbkL8w6PKs3ovWSAS2FxCooscWsRN4XGfeT9q/Ke1An9PX7qD 4i8L/1apd6HJbYY5jyhfm5on/AYbRzm+/F9Gpi3u9qReES+9YS2AcSSOSOg459B5xi x1S/lGbTndduYKw8qsiMOgBUCxE2f6uyS1K8v9ToD+lu0BRvWDTnjaJfe01HlMlalZ dKFLo2XWu/Q5B0PPZOEqYBBNbsN4pETQIhtQej2citIa1RArsFVrbmrAZAs6SZ8Uo2 d2cNoNQTSgxhw2uX+IzgZyiZGhAqpnu/00/buq3h2zUeR0xrsYK8HILuAVjHu7MJIV 1CIeRQP3S5m0LLBLgBZgm9kpCnzIzWCN71yb6IQxCKlhv2gqXP33uHIpN7NW0fApDz 9MmIQMVk8gYqpJjUb7RZ/ZCNr+aTXfbCcyXcgbL+4S2FYAEWiv8Ccy29VYnKvrqUQQ W2U3nuP2DHqYZy+QvCN32HKo=
Date: Wed, 13 Jul 2022 05:18:48 +0000
Message-ID: <87k08h6153.wl-morrowc@ops-netman.net>
From: Chris Morrow <morrowc@ops-netman.net>
To: Russ Housley <housley@vigilsec.com>
Cc: SIDROps Chairs <sidrops-chairs@ietf.org>, SIDR Operations WG <sidrops@ietf.org>
In-Reply-To: <252FDA4D-12C2-4B46-848D-AECDC6233DF4@vigilsec.com>
References: <165757888277.5020.13307456649922069639@ietfa.amsl.com> <252FDA4D-12C2-4B46-848D-AECDC6233DF4@vigilsec.com>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/25.2 Mule/6.0 (HANACHIRUSATO)
Organization: Operations Network Management, Ltd.
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset="US-ASCII"
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/eSbkDLYwIOCsLacKvettKcwQGKU>
Subject: Re: [Sidrops] draft-ietf-sidrops-signed-tal-10.txt
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jul 2022 05:19:04 -0000

On Tue, 12 Jul 2022 20:41:38 +0000,
Russ Housley <housley@vigilsec.com> wrote:
> 
> Dear SIDRops Chairs:
> 
> I recall a request for early allocation of OIDs for this document.  Did that happen?

Oh yargh! that got lost in my mail :( I'll go search and ACK the IANA request.

> 
> Russ
> 
> 
> > On Jul 11, 2022, at 6:34 PM, internet-drafts@ietf.org wrote:
> > 
> > 
> > A New Internet-Draft is available from the on-line Internet-Drafts directories.
> > This draft is a work item of the SIDR Operations WG of the IETF.
> > 
> >       Title           : RPKI Signed Object for Trust Anchor Key
> >       Authors         : Carlos Martinez
> >                         George G. Michaelson
> >                         Tom Harrison
> >                         Tim Bruijnzeels
> >                         Rob Austein
> > Filename        : draft-ietf-sidrops-signed-tal-10.txt
> > Pages           : 19
> > Date            : 2022-07-11
> > 
> > Abstract:
> >  A Trust Anchor Locator (TAL) is used by Relying Parties (RPs) in the
> >  Resource Public Key Infrastructure (RPKI) to locate and validate a
> >  Trust Anchor (TA) Certification Authority (CA) certificate used in
> >  RPKI validation.  This document defines an RPKI signed object for a
> >  Trust Anchor Key (TAK), that can be used by a TA to signal the
> >  location(s) of the accompanying CA certificate for the current key to
> >  RPs, as well as the successor key and the location(s) of its CA
> >  certificate.  This object helps to support planned key rolls without
> >  impacting RPKI validation.
> > 
> > 
> > The IETF datatracker status page for this draft is:
> > https://datatracker.ietf.org/doc/draft-ietf-sidrops-signed-tal/
> > 
> > There is also an HTML version available at:
> > https://www.ietf.org/archive/id/draft-ietf-sidrops-signed-tal-10.html
> > 
> > A diff from the previous version is available at:
> > https://www.ietf.org/rfcdiff?url2=draft-ietf-sidrops-signed-tal-10
> > 
> > 
> > Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts