[lamps] Protocol Action: 'No Revocation Available for X.509 Public Key Certificates' to Proposed Standard (draft-ietf-lamps-norevavail-04.txt)

The IESG <iesg-secretary@ietf.org> Thu, 04 April 2024 19:53 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Auto-Submitted: auto-generated
Precedence: bulk
Cc: The IESG <iesg@ietf.org>, draft-ietf-lamps-norevavail@ietf.org, lamps-chairs@ietf.org, rdd@cert.org, rfc-editor@rfc-editor.org, spasm@ietf.org, tim.hollebeek@digicert.com
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <171226039450.11242.54831119448047134@ietfa.amsl.com>
Date: Thu, 04 Apr 2024 12:53:14 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/CLl7Im0jyyx2dEPH_ODuC4CP3Ss>
Subject: [lamps] Protocol Action: 'No Revocation Available for X.509 Public Key Certificates' to Proposed Standard (draft-ietf-lamps-norevavail-04.txt)

The IESG has approved the following document:
- 'No Revocation Available for X.509 Public Key Certificates'
  (draft-ietf-lamps-norevavail-04.txt) as Proposed Standard

This document is the product of the Limited Additional Mechanisms for PKIX
and SMIME Working Group.

The IESG contact persons are Paul Wouters, Deb Cooley and Roman Danyliw.

A URL of this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-lamps-norevavail/




Technical Summary

   X.509v3 public key certificates are profiled in RFC 5280.  Short-
   lived certificates are seeing greater use in the Internet.  The
   Certification Authority (CA) that issues these short-lived
   certificates do not publish revocation information because the
   certificate lifespan that is shorter than the time needed to detect,
   report, and distribute revocation information.  Some long-lived
   X.509v3 public key certificates never expire, and they are never
   revoked.  This specification defines the noRevAvail certificate
   extension so that a relying party can readily determine that the CA
   does not publish revocation information for the certificate.

Working Group Summary

Nothing of note to mention in the WG's development of this document.

Document Quality

This extension is broadly applicable to existing PKI protocols.  There was interest in the the use case this extension enables from IEEE.

Personnel

   The Document Shepherd for this document is Tim Hollebeek. The
   Responsible Area Director is Roman Danyliw.

[lamps] Protocol Action: 'No Revocation Available… The IESG