Re: [lamps] CAA tags

Rob Stradling <rob.stradling@comodo.com> Mon, 18 December 2017 22:02 UTC

Return-Path: <rob.stradling@comodo.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 100A512AF83 for <spasm@ietfa.amsl.com>; Mon, 18 Dec 2017 14:02:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1BTxnsft_uAy for <spasm@ietfa.amsl.com>; Mon, 18 Dec 2017 14:02:08 -0800 (PST)
Received: from mmextmx2.mcr.colo.comodoca.net (mmextmx2.mcr.colo.comodoca.net [IPv6:2a02:1788:402:c00::c0a8:9cd6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6ADAF124B0A for <spasm@ietf.org>; Mon, 18 Dec 2017 14:02:08 -0800 (PST)
Received: (qmail 18039 invoked by uid 1004); 18 Dec 2017 22:02:06 -0000
Received: from rmdccgwarp1.reyn.mcr.dc.comodo.net (HELO maileu.comodo.net) (10.1.72.82) by mmextmx2.mcr.colo.comodoca.net (qpsmtpd/0.84) with ESMTP; Mon, 18 Dec 2017 22:02:06 +0000
Received: from [192.168.0.72] ([178.255.87.226]) by maileu.comodo.net (IceWarp 11.4.6.0 DEB8 x64) with ASMTP (SSL) id 201712182202069492 for <spasm@ietf.org>; Mon, 18 Dec 2017 22:02:06 +0000
To: spasm@ietf.org
References: <DM5PR14MB1289FA2B76543ABAF16FD0EF830E0@DM5PR14MB1289.namprd14.prod.outlook.com> <0ab8efa3-378c-ece7-4fa3-913308f81c22@eff.org> <DM5PR14MB12895320D99FC570E797373F830E0@DM5PR14MB1289.namprd14.prod.outlook.com> <CAErg=HGMOVmvEoD=hy3rnTb=J1uQeu-SHrTn1JEeRnQuXzqg-Q@mail.gmail.com>
From: Rob Stradling <rob.stradling@comodo.com>
Message-ID: <7531d7e2-2bdd-559a-2e40-286a3fe4a4f2@comodo.com>
Date: Mon, 18 Dec 2017 22:02:05 +0000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.5.0
MIME-Version: 1.0
In-Reply-To: <CAErg=HGMOVmvEoD=hy3rnTb=J1uQeu-SHrTn1JEeRnQuXzqg-Q@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/6MvCO0UyEN2VlH7CtmFIfnTGE30>
Subject: Re: [lamps] CAA tags
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Dec 2017 22:02:11 -0000

On 18/12/17 20:42, Ryan Sleevi wrote:
<snip>
> I think Jacob's suggestion of OIDs is not at all unreasonable, and 
> avoids the ambiguities you raise and allows them to be addressed by 
> policy in the Forum.

We had policy OIDs in early versions of the I-D [1] that later became 
RFC6844, but we had to strip this out in favour of domain names when the 
document was adopted by PKIX.  WG consensus and all that.

I'm not sure what that decision might mean for any other proposals to 
use OIDs with CAA.


[1] https://www.ietf.org/archive/id/draft-hallambaker-donotissue-04.txt

-- 
Rob Stradling
Senior Research & Development Scientist
COMODO - Creating Trust Online