Re: [Spasm] Updated draft-melnikov-spasm-eai-addresses

Sean Leonard <dev+ietf@seantek.com> Fri, 08 July 2016 16:19 UTC

Return-Path: <dev+ietf@seantek.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 566AF12D57B for <spasm@ietfa.amsl.com>; Fri, 8 Jul 2016 09:19:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zm2msTcwqeCO for <spasm@ietfa.amsl.com>; Fri, 8 Jul 2016 09:19:49 -0700 (PDT)
Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E8DE12D0C9 for <spasm@ietf.org>; Fri, 8 Jul 2016 09:19:49 -0700 (PDT)
Received: from [192.168.123.7] (unknown [75.83.2.34]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id C7CE7509B8; Fri, 8 Jul 2016 12:19:47 -0400 (EDT)
To: Erik Andersen <era@x500.eu>, 'Wei Chuang' <weihaw@google.com>, spasm@ietf.org
References: <CAAFsWK09LKHtmCj5SXLZOKPUd7HYzq+83KMZEv8BXur80FE4vg@mail.gmail.com> <000e01d1d92f$251fb3e0$6f5f1ba0$@x500.eu>
From: Sean Leonard <dev+ietf@seantek.com>
Message-ID: <8dda99f6-b88f-5e97-1af7-5b6d75aca273@seantek.com>
Date: Fri, 08 Jul 2016 09:19:08 -0700
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0
MIME-Version: 1.0
In-Reply-To: <000e01d1d92f$251fb3e0$6f5f1ba0$@x500.eu>
Content-Type: multipart/alternative; boundary="------------116274AE436055A4E0A8010B"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/hkKdvA8o9D2YdqwoCCku8r6rmNY>
Subject: Re: [Spasm] Updated draft-melnikov-spasm-eai-addresses
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Jul 2016 16:19:52 -0000

Hi Erik,

I actually advocated for exactly that, but pointed out it will require 
ITU-T cooperation. Is ITU-T willing to cooperate? :)

The other issue is that it will break software that was compiled with 
"pre-ellipsis technology". This likely includes most flavors of Windows 
up through and including Windows 10. It's also possible that software 
will choke but will return a successful partial decode of GeneralName 
productions prior to the [9] one, in which case, the proposal is doable 
as long as [9] is the last GeneralName. (Conveniently, it is likely that 
[9] will get sorted to the end in DER, which might save us.)

It would be good to do a comprehensive survey; I have not actually done 
any testing.

Regards,

Sean

On 7/8/2016 8:41 AM, Erik Andersen wrote:
>
> Hi,
>
> I wonder why you did not add a new component to the GeneralName data 
> type as shown below. Processing will be easier and you do not have to 
> defined a (long) IETF OID.
>
> GeneralName ::= CHOICE {
>
>   otherName                  [0]  INSTANCE OF OTHER-NAME,
>
>   rfc822Name                 [1]  IA5String,
>
>   dNSName                    [2]  IA5String,
>
>   x400Address                [3]  ORAddress,
>
>   directoryName              [4]  Name,
>
>   ediPartyName               [5]  EDIPartyName,
>
>   uniformResourceIdentifier  [6]  IA5String,
>
>   iPAddress                  [7]  OCTET STRING,
>
>   registeredID               [8]  OBJECT IDENTIFIER,
>
>   ...,
>
>    *smtputf8Name name          [9]  UTF8String (SIZE (1..MAX))*
>
> }
>
> Erik
>
> *Fra:*Spasm [mailto:spasm-bounces@ietf.org] *På vegne af *Wei Chuang
> *Sendt:* 08 July 2016 09:17
> *Til:* spasm@ietf.org
> *Emne:* [Spasm] Updated draft-melnikov-spasm-eai-addresses
>
> Hi all,
>
> This draft incorporates feedback about internationalization, unicode 
> and language updates.
>
> Your feedback is very much welcome.
>
> -Wei and Alexey
>
> ---------- Forwarded message ----------
> From: <internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>>
> Date: Thu, Jul 7, 2016 at 11:35 PM
> Subject: New Version Notification for 
> draft-melnikov-spasm-eai-addresses-03.txt
> To: Alexey Melnikov <alexey.melnikov@isode.com 
> <mailto:alexey.melnikov@isode.com>>, Weihaw Chuang <weihaw@google.com 
> <mailto:weihaw@google.com>>, Alexey Melnikov 
> <Alexey.Melnikov@isode.com <mailto:Alexey.Melnikov@isode.com>>
>
>
>
> A new version of I-D, draft-melnikov-spasm-eai-addresses-03.txt
> has been successfully submitted by Weihaw Chuang and posted to the
> IETF repository.
>
> Name:           draft-melnikov-spasm-eai-addresses
> Revision:       03
> Title:          Internationalized Email Addresses in X.509 certificates
> Document date:  2016-07-07
> Group:          Individual Submission
> Pages:          6
> URL: 
> https://www.ietf.org/internet-drafts/draft-melnikov-spasm-eai-addresses-03.txt
> Status: 
> https://datatracker.ietf.org/doc/draft-melnikov-spasm-eai-addresses/
> Htmlized: 
> https://tools.ietf.org/html/draft-melnikov-spasm-eai-addresses-03
> Diff: 
> https://www.ietf.org/rfcdiff?url2=draft-melnikov-spasm-eai-addresses-03
>
> Abstract:
>    This document defines a new name form for inclusion in the otherName
>    field of an X.509 Subject Alternative Name extension that allows a
>    certificate subject to be associated with an Internationalized Email
>    Address.
>
>
>
>
> Please note that it may take a couple of minutes from the time of 
> submission
> until the htmlized version and diff are available at tools.ietf.org 
> <http://tools.ietf.org>.
>
> The IETF Secretariat
>
>
>
> _______________________________________________
> Spasm mailing list
> Spasm@ietf.org
> https://www.ietf.org/mailman/listinfo/spasm