Re: [Spasm] certspec work (draft-seantek-certspec-06.txt)

Just some thoughts about this draft:

1. The title is a little bit confusing, as much of the document is about
naming certificates.  Perhaps "Naming and Metadata Specification for..."?
2. This document would do best when coupled with work on methods to access
certificates such as draft-bhjl-x509-srv-00 that would use it.
3. Modify the ABNF to clearly identify the certspec type vs data
4. Another naming method I'm aware of is CRLSets used in Chromium:
https://dev.chromium.org/Home/chromium-security/crlsets
This might be something to consider and possibly mention in section 6 "Other
Certificate Specifications".
5. Can more motivation be provided for attribute section 8?

thanks,
-Wei

On Wed, Jun 8, 2016 at 9:28 AM, Sean Leonard <dev+ietf@seantek.com> wrote:

> Hello SPASM:
>
> I would like to propose "certspec" as a work item for this WG, and that it
> be considered in-scope as we debate the WG's scope.
>
> certspec is a string specification for certificates. It allows protocols
> and systems to identify a certificate in a textual form, and is designed
> with human usability in mind (specifically, copy-and-paste operations).
>
> Previous versions of this draft tried to define certspec as a URN, and
> then as a series of URI schemes. Those approaches were not successful. This
> draft just calls it a string. You can look at the diffs (particularly the
> diff between 04 and 05) to see the differences.
>
> Thanks to Russ Housley for feedback on the most recent versions of this
> draft.
>
> Regards,
>
> Sean
>
> -------- Forwarded Message --------
> Subject:        New Version Notification for draft-seantek-certspec-06.txt
> Date:   Wed, 08 Jun 2016 09:16:29 -0700
> From:   internet-drafts@ietf.org
>
>
>
> A new version of I-D, draft-seantek-certspec-06.txt
> has been successfully submitted by Sean Leonard and posted to the
> IETF repository.
>
> Name:           draft-seantek-certspec
> Revision:       06
> Title:          String Specification for Certificates
> Document date:  2016-06-08
> Group:          Individual Submission
> Pages:          27
> URL:            https://www.ietf.org/internet-
> drafts/draft-seantek-certspec-06.txt
> Status:         https://datatracker.ietf.org/doc/draft-seantek-certspec/
> Htmlized:       https://tools.ietf.org/html/draft-seantek-certspec-06
> Diff:           https://www.ietf.org/rfcdiff?
> url2=draft-seantek-certspec-06
>
> Abstract:
>    Digital certificates are used in many systems and protocols to
>    identify and authenticate parties.  This document describes a string
>    format that identifies certificates, along with optional attributes.
>    This string format has been engineered to work without re-encoding in
>    a variety of protocol slots.
>
>
>
> _______________________________________________
> Spasm mailing list
> Spasm@ietf.org
> https://www.ietf.org/mailman/listinfo/spasm
>