[Sidrops] Last Call: <draft-ietf-sidrops-https-tal-07.txt> (Resource Public Key Infrastructure (RPKI) Trust Anchor Locator) to Proposed Standard

The IESG <iesg-secretary@ietf.org> Mon, 04 March 2019 20:53 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Auto-Submitted: auto-generated
Precedence: bulk
CC: morrowc@ops-netman.net, sidrops@ietf.org, sidrops-chairs@ietf.org, Chris Morrow <morrowc@ops-netman.net>, draft-ietf-sidrops-https-tal@ietf.org, warren@kumari.net
Reply-To: ietf@ietf.org
Sender: iesg-secretary@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Reply-To: ietf@ietf.org
Message-ID: <155173282523.5114.18298777805376987899.idtracker@ietfa.amsl.com>
Date: Mon, 04 Mar 2019 12:53:45 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/k6tqF8A_mxdc9msMMJORgWP3nVU>
Subject: [Sidrops] Last Call: <draft-ietf-sidrops-https-tal-07.txt> (Resource Public Key Infrastructure (RPKI) Trust Anchor Locator) to Proposed Standard

The IESG has received a request from the SIDR Operations WG (sidrops) to
consider the following document: - 'Resource Public Key Infrastructure (RPKI)
Trust Anchor Locator'
  <draft-ietf-sidrops-https-tal-07.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
ietf@ietf.org mailing lists by 2019-03-18. Exceptionally, comments may be
sent to iesg@ietf.org instead. In either case, please retain the beginning of
the Subject line to allow automated sorting.

Abstract


   This document defines a Trust Anchor Locator (TAL) for the Resource
   Public Key Infrastructure (RPKI).  TALs allow Relying Parties in the
   RPKI to download the current Trust Anchor (TA) CA certificate from
   one or more locations, and verify that the key of this self-signed
   certificate matches the key on the TAL.  Thus, Relying Parties can be
   configured with TA keys, but allow these TAs to change the content of
   their CA certificate.  In particular it allows TAs to change the set
   of Internet Number Resources included in the RFC3779 extension of
   their certificate.

   This document obsoletes the previous definition of Trust Anchor
   Locators in RFC 7730 by adding support for HTTPS URIs.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-sidrops-https-tal/

IESG discussion can be tracked via
https://datatracker.ietf.org/doc/draft-ietf-sidrops-https-tal/ballot/


No IPR declarations have been submitted directly on this I-D.

[Sidrops] Last Call: <draft-ietf-sidrops-https-ta… The IESG