Re: [lamps] DRAFT LAMPS Recharter Text

Russ Housley <housley@vigilsec.com> Mon, 28 August 2017 14:08 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04A4F132D0E for <spasm@ietfa.amsl.com>; Mon, 28 Aug 2017 07:08:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I12TCWnjj1oJ for <spasm@ietfa.amsl.com>; Mon, 28 Aug 2017 07:07:59 -0700 (PDT)
Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4EF3132D0D for <spasm@ietf.org>; Mon, 28 Aug 2017 07:07:58 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 4AC073004D1 for <spasm@ietf.org>; Mon, 28 Aug 2017 10:07:58 -0400 (EDT)
X-Virus-Scanned: amavisd-new at mail.smeinc.net
Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id p_av9UEbqyVN for <spasm@ietf.org>; Mon, 28 Aug 2017 10:07:56 -0400 (EDT)
Received: from [10.5.245.234] (wsip-98-172-24-238.dc.dc.cox.net [98.172.24.238]) by mail.smeinc.net (Postfix) with ESMTPSA id 70A083002A3; Mon, 28 Aug 2017 10:07:56 -0400 (EDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <691aeea4-8b96-b0c9-6171-b9d06f414b46@openca.org>
Date: Mon, 28 Aug 2017 10:07:57 -0400
Cc: spasm@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <2E78D706-3ED3-4596-8E86-2B5D3D6C365A@vigilsec.com>
References: <3EC3EBBE-D17D-4A25-A61C-27872613FB4D@vigilsec.com> <02CCCC92-7487-444A-A14A-0CC0D4118104@vigilsec.com> <691aeea4-8b96-b0c9-6171-b9d06f414b46@openca.org>
To: "Dr. Pala" <madwolf@openca.org>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/57tHsIV0ZxEZGu24AJYNmNH9hzA>
Subject: Re: [lamps] DRAFT LAMPS Recharter Text
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Aug 2017 14:08:01 -0000

For the current items, "active support" meant that more than one party was willing to implement the RFC produced by the group.

Russ


> On Aug 24, 2017, at 2:31 PM, Dr. Pala <madwolf@openca.org> wrote:
> 
> Hi Russ, all,
> 
> I am sorry I was not able to send in the items right away - I think there has been some e-mails about supporting the work we are proposing, in particular adding a work item related to revocation. When you say "active support" what does that actually mean ? I think we demonstrated interest around the specific topic (there have been several messages across the different mailing lists - i.e., pkix, lamps, and saag).
> 
> However, we still need the charter and milestones for the proposed work to see if we can adopt it in this WG. I will send in the charter text and milestones soon.. sorry again for the delay, but I hope the items will be considered for the charter :)
> 
> Cheers,
> Max
> 
> 
> On 8/17/17 6:40 AM, Russ Housley wrote:
>> I have seen people voice support for the two work items listed in the draft charter text.  I have seen Max and Dmitry offer additional work items, but there has been almost no discussion of their suggestions.  Without active support, the suggested items will not be added.
>> 
>> Russ
>> 
>> 
>>> On Aug 6, 2017, at 12:51 PM, Russ Housley <housley@vigilsec.com> wrote:
>>> 
>>> At IETF 99, the LAMPS WG considered several potential recharter work items.  The attached draft is a result of that discussion.  Please review and comment.
>>> 
>>> Russ
>>> 
>>> = = = = = = = =
>>> 
>>> The PKIX and S/MIME Working Groups have been closed for some time. Some
>>> updates have been proposed to the X.509 certificate documents produced
>>> by the PKIX Working Group and the electronic mail security documents
>>> produced by the S/MIME Working Group.
>>> 
>>> The LAMPS (Limited Additional Mechanisms for PKIX and SMIME) Working
>>> Group is chartered to make updates where there is a known constituency
>>> interested in real deployment and there is at least one sufficiently
>>> well specified approach to the update so that the working group can
>>> sensibly evaluate whether to adopt a proposal.
>>> 
>>> Having completed the S/MIME 4.0 specifications and updates to support
>>> i18n email addresses in PKIX certificates, the LAMPS WG is now:
>>> 
>>> 1. Specify a discovery mechanism for CAA records to replace the one
>>>   described in RFC 6844.
>>> 
>>> 2. Specify the use of SHAKE128/256 and SHAKE256/512 for PKIX and S/MIME.
>>> 
>>> RFC 6844 describes the mechanism by which CAA records relating to a
>>> domain are discovered.  Implementation experience has demonstrated an
>>> ambiguity in the current processing of CNAME and DNAME records during
>>> discovery.  Subsequent discussion has suggested that a different
>>> discovery approach would resolve limitations inherent in the current
>>> approach.
>>> 
>>> Unlike the previous hashing standards, the SHA-3 functions are the
>>> outcome of an open competition.  They have a clear design rationale and
>>> have received a lot of public analysis, resulting in great confidence
>>> that the SHA-3 family of functions are very secure.  Also, since the
>>> design of the SHA-3 functions use a very different construction from the
>>> SHA-2 functions, they offer an excellent alternative to the SHA-2 family
>>> of functions.  In particular, SHAKE128/256 and SHAKE256/512 offer
>>> security and performance benefits.
>>> 
>>> In addition, the LAMPS Working Group may investigate other updates to
>>> the documents produced by the PKIX and S/MIME Working Groups, but the
>>> LAMPS Working Group shall not adopt any of these potential work items
>>> without rechartering.
>>> 
>>> MILESTONES
>>> 
>>> Nov 2017: Adopt a draft for rfc6844bis
>>> Dec 2017: Adopt a PKIX draft for SHAKE128/256 and SHAKE256/512
>>> Dec 2017: Adopt a S/MIME draft for SHAKE128/256 and SHAKE256/512
>>> Apr 2018: rfc6844bis sent to IESG for standards track publication
>>> Sep 2018: SHAKE128/256 and SHAKE256/512 for PKIX sent to IESG for
>>>             standards track publication
>>> Sep 2018: SHAKE128/256 and SHAKE256/512 for S/MIME sent to IESG for
>>>             standards track publication
>>> _______________________________________________
>>> Spasm mailing list
>>> Spasm@ietf.org
>>> https://www.ietf.org/mailman/listinfo/spasm
>> _______________________________________________
>> Spasm mailing list
>> Spasm@ietf.org
>> https://www.ietf.org/mailman/listinfo/spasm
> 
> _______________________________________________
> Spasm mailing list
> Spasm@ietf.org
> https://www.ietf.org/mailman/listinfo/spasm