IETF Logo Mail Archive

Re: [lamps] Call for adoption for draft-dkg-lamps-samples

Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 04 May 2021 16:30 UTC

Return-Path: <dkg@fifthhorseman.net>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17FBB3A1121 for <spasm@ietfa.amsl.com>; Tue, 4 May 2021 09:30:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.306
X-Spam-Level:
X-Spam-Status: No, score=-1.306 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RDNS_NONE=0.793, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=fifthhorseman.net header.b=jrEnqx7K; dkim=pass (2048-bit key) header.d=fifthhorseman.net header.b=SewJ1q14
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2tg4kYiQgcaG for <spasm@ietfa.amsl.com>; Tue, 4 May 2021 09:30:02 -0700 (PDT)
Received: from che.mayfirst.org (unknown [162.247.75.117]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A52D3A111C for <spasm@ietf.org>; Tue, 4 May 2021 09:30:02 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019; t=1620145799; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=a44vH9DcgPbgT2nSrgDnv2DFlNgMhNndvA6EG68AIbE=; b=jrEnqx7K4YomuJajzwO8N6BM0MJLmBAusl3Ag191zVBGECo/nHec+bYOhlg5rOQeV9ijX 421dviaLKJkGXQiBA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1620145799; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=a44vH9DcgPbgT2nSrgDnv2DFlNgMhNndvA6EG68AIbE=; b=SewJ1q14HBS2KCxlDWwnHX/tMVtfGx/t+FWDYkKq3uBTKASZqeAxRlhN9FYPoMCc/SJRN 5I30g6DuwUSszkRSnjCj9JpXSLtJSMNvYH2UdVXgBoMnwHYgnOzuzk/A/l4ai7cIh2Fqmem k4Zx4Bp1BrvOYzswOZ6InZj406tSiH+usuYiGZHnsQixA8/ThB4sIvJKINISNhaandyO7YV sQYLretRsNW1NmhpW+pqCYwrgt84W9+oIYxYoXVaN93iKgswwfXxrwjExbVctxy8cVSyraB 2TdPuBy3tEtHcnvb8HdUhJVj4uZ+NPPZ9FeumYs86OPEt2Oz7KYAfMfSe28g==
Received: from fifthhorseman.net (lair.fifthhorseman.net [108.58.6.98]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by che.mayfirst.org (Postfix) with ESMTPSA id C06C5F9A5; Tue, 4 May 2021 12:29:57 -0400 (EDT)
Received: by fifthhorseman.net (Postfix, from userid 1000) id 07AA2203B6; Tue, 4 May 2021 12:29:53 -0400 (EDT)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: Henning Krause <mail@henningkrause.eu>, Russ Housley <housley@vigilsec.com>, LAMPS WG <spasm@ietf.org>
In-Reply-To: <DB7PR08MB3498617696EF1529B7760328BB5A9@DB7PR08MB3498.eurprd08.prod.outlook.com>
References: <F1531D47-B2AC-43BC-8EE2-897F2D9A0974@vigilsec.com> <A9F9AA52-2350-4B27-8575-A61921B66D24@vigilsec.com> <8735v3betl.fsf@fifthhorseman.net> <DB7PR08MB3498617696EF1529B7760328BB5A9@DB7PR08MB3498.eurprd08.prod.outlook.com>
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata= mDMEX+i03xYJKwYBBAHaRw8BAQdACA4xvL/xI5dHedcnkfViyq84doe8zFRid9jW7CC9XBiI0QQf FgoAgwWCX+i03wWJBZ+mAAMLCQcJEOCS6zpcoQ26RxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNl cXVvaWEtcGdwLm9yZ/tr8E9NA10HvcAVlSxnox6z62KXCInWjZaiBIlgX6O5AxUKCAKbAQIeARYh BMKfigwB81402BaqXOCS6zpcoQ26AADZHQD/Zx9nc3N2kj13AUsKMr/7zekBtgfSIGB3hRCU74Su G44A/34Yp6IAkndewLxb1WdRSokycnaCVyrk0nb4imeAYyoPtBc8ZGtnQGZpZnRoaG9yc2VtYW4u bmV0PojRBBMWCgCDBYJf6LTfBYkFn6YAAwsJBwkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3Rh dGlvbnMuc2VxdW9pYS1wZ3Aub3JnL0Gwxvypz2tu1IPG+yu1zPjkiZwpscsitwrVvzN3bbADFQoI ApsBAh4BFiEEwp+KDAHzXjTYFqpc4JLrOlyhDboAAPkXAP0Z29z7jW+YzLzPTQML4EQLMbkHOfU4 +s+ki81Czt0WqgD/SJ8RyrqDCtEP8+E4ZSR01ysKqh+MUAsTaJlzZjehiQ24MwRf6LTfFgkrBgEE AdpHDwEBB0DkKHOW2kmqfAK461+acQ49gc2Z6VoXMChRqobGP0ubb4kBiAQYFgoBOgWCX+i03wWJ BZ+mAAkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3Jnfvo+ nHoxDwaLaJD8XZuXiaqBNZtIGXIypF1udBBRoc0CmwICHgG+oAQZFgoAbwWCX+i03wkQPp1xc3He VlxHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnaheiqE7Pfi3Atb3GGTw+ jFcBGOaobgzEJrhEuFpXREEWIQQttUkcnfDcj0MoY88+nXFzcd5WXAAAvrsBAIJ5sBg8Udocv25N stN/zWOiYpnjjvOjVMLH4fV3pWE1AP9T6hzHz7hRnAA8d01vqoxOlQ3O6cb/kFYAjqx3oMXSBhYh BMKfigwB81402BaqXOCS6zpcoQ26AADX7gD/b83VObe14xrNP8xcltRrBZF5OE1rQSPkMNy+eWpk eCwA/1hxiS8ZxL5/elNjXiWuHXEvUGnRoVj745Vl48sZPVYMuDgEX+i03xIKKwYBBAGXVQEFAQEH QIGex1WZbH6xhUBve5mblScGYU+Y8QJOomXH+rr5tMsMAwEICYjJBBgWCgB7BYJf6LTfBYkFn6YA CRDgkus6XKENukcUAAAAAAAeACBzYWx0QG5vdGF0aW9ucy5zZXF1b2lhLXBncC5vcmcEAx9vTD3b J0SXkhvcRcCr6uIDJwic3KFKxkH1m4QW0QKbDAIeARYhBMKfigwB81402BaqXOCS6zpcoQ26AAAX mwD8CWmukxwskU82RZLMk5fm1wCgMB5z8dA50KLw3rgsCykBAKg1w/Y7XpBS3SlXEegIg1K1e6dR fRxL7Z37WZXoH8AH
Date: Tue, 04 May 2021 12:29:52 -0400
Message-ID: <87tunia2db.fsf@fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/_-TfG71DTlTKNTK7Zfe4t59NQHE>
Subject: Re: [lamps] Call for adoption for draft-dkg-lamps-samples
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 04 May 2021 16:30:07 -0000

On Tue 2021-05-04 15:36:41 +0000, Henning Krause wrote:
>> I have three asks for other members of LAMPS:
>> 
>>  - Do you agree that this document should have an additional set of
>>    certificates using curve25519?
>
> Yes please.

thanks for following up.  Unless I hear any objections from the list,
i'll produce a -01 draft that includes the 25519 key material.

Did you get a chance to try using the existing certificates with any
S/MIME-enabled MUA?

>>  - What else do you think this document needs before it is ready for
>>    publication?
>
> I think it would be great not only to have certificates and keys but also sample emails for rsa/ecc encryption and signing. I think this would help implementors tremendously and improve interoperability.

I'm separately working on sample e-mail messages using the RSA
certificates in draft-ietf-header-protection, which i'll follow up about
on-list soon.

It turns out sample e-mail messages can make a draft overwhelmingly
large, since there are *many* different variations that could affect
their validity and interpretation.  I'm personally inclined to avoid
those combinatorics for this particular draft, and have this draft just
focus on certificates for use in secure e-mail.  I think it makes the
draft more tractable and more finishable :) If other folks in LAMPS (or
the chairs) have an opinion on this suggestion, i'd be happy to hear it.

     --dkg

v2.23.0 | Report a Bug | By Email