[lamps] Re: [Technical Errata Reported] RFC9810 (9044)
"Brockhaus, Hendrik" <hendrik.brockhaus@siemens.com> Thu, 30 July 2026 06:46 UTC
Return-Path: <hendrik.brockhaus@siemens.com>
X-Original-To: spasm@mail2.ietf.org
Delivered-To: spasm@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D0258120E2AB5 for <spasm@mail2.ietf.org>; Wed, 29 Jul 2026 23:46:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1785394013; bh=w9TSBejxrDn0mqGi1ySDolv430bI3CTfDOJTN9bIJ4w=; h=From:To:CC:Subject:Date:References:In-Reply-To; b=syJ5Wls7HlG2HCOiLjE5BOCPX3+HvIH372XVlL7Iy1EMyRj58HtQh6DfJB0byMdkw nV/26NgtbGpc0P1dp/Vdyo01tH32srKR5OxKJTXafudyx37BcZwwX7PspQCS8GxHFB RKYpIfXuIXxfWTUVciFP7T+EqJBqybaEllLxWhF8=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=siemens.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0iS6q_pc8xVd for <spasm@mail2.ietf.org>; Wed, 29 Jul 2026 23:46:53 -0700 (PDT)
Received: from AM0PR83CU005.outbound.protection.outlook.com (mail-westeuropeazon11010068.outbound.protection.outlook.com [52.101.69.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 2EC21120E2AAF for <spasm@ietf.org>; Wed, 29 Jul 2026 23:46:52 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=wk0ATJL4oUlYlfhJmmVW02MGvoQzCk+85Vvs1RwDaplF6BerLHI0F6LmX0S/rm8s86nndkBoCTCnIKlbgZgT3Xirg/F+iAN24g1RRPrVQ8Cgkypj4Do3FIxmrEV+kL2x3l+vlvw2Gki+/vNw6bepGMJHFvOETKk/WXoxFs3Hwxc3jC4+NAjZtx8hF4Z/t2VyDddsDq9A8rDnEGBV6lpPO8sY6K8njHhUnGYxvKgntYTY6NMVg492dLtRyKirT9AGgFYq+Etr13rwt7Kj1IfPAlzFMDuT8dkFb9xLHNmTvtfCd8OovpEG+F3iBcYjC4TuIRkRMqwra6LYlYcll2PQig==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=odiGIRfnFMGnsknFmGZ8h8x/DlulJEqxAhwPg0ai11s=; b=oZfsb8F9wc6ATsXwjHnq6f7Dy68l6fLUPNlUZdDyO2UXM13NYi+hHYpi/PHDvpwFa7/DEibTED1Qr5u0V63+ZEc45drUbadUMwUju1burq0g4lMuq+83mWVlU1vF0VZbXjVZns6XLVL8EZs5SJ4+DnOkzB1mM56q983Fv5StQ1ntwAGdmyBLTmL59ssJsPLRx2p4tdaPxIHcxb7Ll52tkUoEzvkYukpLmo3ycy9N7OPv9FItiPXtW48Kzt8V8p6obrTt6RCS81aD2Dhb6CNzQE05Io01UTqJnqRvkJKNLUhHiRjykPHg1aUGrFSg1iHIZ9nL8oR5mLTFy7eLWLOjZQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=odiGIRfnFMGnsknFmGZ8h8x/DlulJEqxAhwPg0ai11s=; b=nAF1Mt/9jFP8jJTKiGVDbyWxEtOl7SeYFI7PF3rx47K4duOEVLhUJssKc7RKMwRSJut81AgSdDzUhyTXGowS3i/zyZ184zZFmwBJtjoQOb5qhdNq/2JeWCI5lHmgnRsud5dOsydb7AM5SzvkZIuW9NuQBhyzfhkjJ/iW0w3CJ9WNuPQe2mo79ig9iOVyiaa7MjnB8dcOS/AZyHQTiq9kCNTpIvrf5MZVe6efeU6YRr2HPxKPtoQ0WpK6ZIfWMB+u2yt3ZmMjBTTht1BPGN0OQoNkBLQ0tTUk2yP+wNnzOPsBUdLhfRZN/HDUkNfKYQHJGkPLDiOPtg6Gk+s7CiczFA==
Received: from PAXPR10MB4898.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:20b::15) by VI2PR10MB9214.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:800:296::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.12; Thu, 30 Jul 2026 06:46:44 +0000
Received: from PAXPR10MB4898.EURPRD10.PROD.OUTLOOK.COM ([fe80::2cef:2a20:7906:5db5]) by PAXPR10MB4898.EURPRD10.PROD.OUTLOOK.COM ([fe80::2cef:2a20:7906:5db5%3]) with mapi id 15.21.0270.012; Thu, 30 Jul 2026 06:46:44 +0000
From: "Brockhaus, Hendrik" <hendrik.brockhaus@siemens.com>
To: "rfc-editor@rfc-editor.org" <rfc-editor@rfc-editor.org>, "mike@ounsworth.ca" <mike@ounsworth.ca>, "john.gray@entrust.com" <john.gray@entrust.com>, "von Oheimb, David" <david.von.oheimb@siemens.com>, "stndrds-inacio@andrew.cmu.edu" <stndrds-inacio@andrew.cmu.edu>, "housley@vigilsec.com" <housley@vigilsec.com>, "debcooley1@gmail.com" <debcooley1@gmail.com>
Thread-Topic: [Technical Errata Reported] RFC9810 (9044)
Thread-Index: AQHdH2FDN1SWHj8u9EuhYiHZ0rIY0raFnzpg
Date: Thu, 30 Jul 2026 06:46:43 +0000
Message-ID: <PAXPR10MB48982BE914CC4576FEABE408FEC92@PAXPR10MB4898.EURPRD10.PROD.OUTLOOK.COM>
References: <178533298711.12.7638138031626269447@rfc-editor.org>
In-Reply-To: <178533298711.12.7638138031626269447@rfc-editor.org>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ActionId=e52a59e0-23f9-47f6-82b5-968c0d5c015d;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ContentBits=0;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Enabled=true;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Method=Standard;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Name=restricted;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SetDate=2026-07-30T06:45:22Z;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Tag=10, 3, 0, 1;
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=siemens.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PAXPR10MB4898:EE_|VI2PR10MB9214:EE_
x-ms-office365-filtering-correlation-id: e1160c05-7309-422e-7bf6-08deee0651af
x-ms-exchange-atpmessageproperties: SA
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|23010399003|376014|1800799024|366016|38070700021|10067099003|11063799006|56012099006|55112099003|18002099003|22082099003|4133799003|3023799007;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PAXPR10MB4898.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(376014)(1800799024)(366016)(38070700021)(10067099003)(11063799006)(56012099006)(55112099003)(18002099003)(22082099003)(4133799003)(3023799007);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: siemens.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PAXPR10MB4898.EURPRD10.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: e1160c05-7309-422e-7bf6-08deee0651af
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2026 06:46:44.0506 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: QomTCe7p1WSsh8gv6zEFYlXYS2cO1ispwNGHHoU6byCIKb6gCUvGzc2Q8VSO/vb+3SOHhQ/nfHm9HdTOXKkzjWOVlsi9uTetdzNQudvhOKE=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI2PR10MB9214
Message-ID-Hash: SSG5JWDMQNYEMZWMRYDVTUWYCO76HAZO
X-Message-ID-Hash: SSG5JWDMQNYEMZWMRYDVTUWYCO76HAZO
X-MailFrom: hendrik.brockhaus@siemens.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-spasm.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "spasm@ietf.org" <spasm@ietf.org>, "von Oheimb, David" <david.von.oheimb@siemens.com>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [lamps] Re: [Technical Errata Reported] RFC9810 (9044)
List-Id: This is the mail list for the LAMPS Working Group <spasm.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/SZodduGUwErwuGpZDh8eVv6W2lo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Owner: <mailto:spasm-owner@ietf.org>
List-Post: <mailto:spasm@ietf.org>
List-Subscribe: <mailto:spasm-join@ietf.org>
List-Unsubscribe: <mailto:spasm-leave@ietf.org>
As a co-author of this RFC, I support the erratum. Hendrik > -----Ursprüngliche Nachricht----- > Von: rfc-editor@rfc-editor.org <rfc-editor@rfc-editor.org> > Gesendet: Mittwoch, 29. Juli 2026 15:50 > An: mike@ounsworth.ca; Brockhaus, Hendrik (FT RPD CST SEA-DE) > <hendrik.brockhaus@siemens.com>; john.gray@entrust.com; von Oheimb, David > (FT RPD CST SEA-DE) <david.von.oheimb@siemens.com>; stndrds- > inacio@andrew.cmu.edu; housley@vigilsec.com; debcooley1@gmail.com > Cc: spasm@ietf.org; rfc-editor@rfc-editor.org; von Oheimb, David (FT RPD CST > SEA-DE) <david.von.oheimb@siemens.com> > Betreff: [Technical Errata Reported] RFC9810 (9044) > > The following errata report has been submitted for RFC9810, > "Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP)" > > -------------------------------------- > You may review the report below and at: > https://errata.rfc-/ > editor.org%2Feid9044%2F&data=05%7C02%7Chendrik.brockhaus%40siemens.co > m%7C278747f3663b411572a208deed7863b5%7C38ae3bcd95794fd4addab42e1 > 495d55a%7C1%7C0%7C639209298503491033%7CUnknown%7CTWFpbGZsb3 > d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIj > oiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=2Zg3UG4h9%2BTdX > s44d%2FGqAzHs2iy6qsQntyJhRO9hw%2Fk%3D&reserved=0 > > -------------------------------------- > Type: Technical > Reported by: David von Oheimb <David.von.Oheimb@siemens.com> > > Section 5.1.1 says: > > Original Text > ------------- > In such > a case, the senderKID field MUST hold an identifier (i.e., a > reference number) that indicates to the receiver the appropriate > shared secret information to use to verify the message. > > Corrected Text > -------------- > If the sender does not know its own DN and > it protects the message using a shared secret, > the senderKID field MUST hold an identifier (i.e., a > reference number) that indicates to the receiver the appropriate > shared secret information to use to verify the message. > > Notes > ----- > The above extension allows for the following case: > If the sender does not know its own DN > and does not protect the message, providing a senderKID is not relevant. > > Instructions: > ------------- > This erratum is currently posted as "Reported". Please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party > will log in to change the status and edit the report, if necessary. > > -------------------------------------- > RFC9810 (draft-ietf-lamps-rfc4210bis) > -------------------------------------- > Title : Internet X.509 Public Key Infrastructure -- Certificate Management > Protocol (CMP) > Publication Date : July 2025 > Author(s) : H. Brockhaus, D. von Oheimb, M. Ounsworth, J. Gray > Category : Proposed Standard > Source : lamps (sec) > Stream : IETF > Verifying Party : IESG
- [lamps] [Technical Errata Reported] RFC9810 (9044) rfc-editor
- [lamps] Re: [Technical Errata Reported] RFC9810 (… Brockhaus, Hendrik
- [lamps] Re: [Technical Errata Reported] RFC9810 (… Deb Cooley