[lamps] Re: [Technical Errata Reported] RFC9763 (8750)

Rebecca Guthrie <rmguthr@uwe.nsa.gov> Thu, 26 February 2026 15:40 UTC

Return-Path: <rmguthr@uwe.nsa.gov>
X-Original-To: spasm@mail2.ietf.org
Delivered-To: spasm@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id DD54BBECD72B for <spasm@mail2.ietf.org>; Thu, 26 Feb 2026 07:40:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_GOV_DKIM_AU=-0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=uwe.nsa.gov
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MNUyJcshdzHX for <spasm@mail2.ietf.org>; Thu, 26 Feb 2026 07:40:15 -0800 (PST)
Received: from BY5PR09CU001.outbound.protection.outlook.com (mail-westusazon11011055.outbound.protection.outlook.com [52.101.86.55]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 47AC4BECCE73 for <spasm@ietf.org>; Thu, 26 Feb 2026 07:34:56 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=EiMT5wwdnSx6MSv51WRBy98fp5wSHuFoZsDiBowfZ9lx9ECMWHgqNipzDW+CHYBLLneoFU6/2fnegWhsPu5NUkifgWipA19uL0hHqgx7pGd2PBVuJO9rH8npymRI9lxTNVclPAEsY6X8WmMNPFJJselhAOSUdPj1K7sYNntT+5gdphHYyqqdJ1BJ6eV4KByRbCJ4Hb0LKhlGtE5CAVycpUvOESCJMHlXRMXIQpGo/4v/p2NX6vm7l6dEb6uBiODl3zGbTrxJZeho0NH21eUeGsKiyKbeNcsMVkH2MsqLqtmo9MMUIY/skzPg0fCGlEspJKPNUmPtxRXgS220DWTwZA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=F/LFmkoBsBI438XqzofVFGEBiQ8JJYnVbcd3DxL8D1g=; b=Hfivn8S4n0TMpmOy6ugpG6unSXcErCrP6kB712lKZF9kNfr6JXI1eKVD4/sJBDCPvm6EZu+U3yDf4/vZn+b+oK4tbWgSpAXW9iM+v1+kq2uEH4wiQMeT5OB9zlKoeavSUztAgND7wdtbjETRMiWrDj8UAFCu7l8JQPXKylUlvcOU1zs/xNf6YwHq2u2Fh5CCtt/giP1Et63P2pa2RZoN9rWvPbYb29GShRU6BwVGF7mzKiCwXNgF8SN8CZ2tvJOy5/ctqfK3xrvEP1Lh2UTF6b0SAV7AU8yDbyCPyEAKQB/c+94zVQ0/m0Abm9q/gn2kwfoJ+oTkQxaVTSJi0znlLw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=uwe.nsa.gov; dmarc=pass action=none header.from=uwe.nsa.gov; dkim=pass header.d=uwe.nsa.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uwe.nsa.gov; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=F/LFmkoBsBI438XqzofVFGEBiQ8JJYnVbcd3DxL8D1g=; b=bWaIHq1YQWnceX8Ppd1XgVIgEY4eQr4LiREojxmltTisb6VP6sF3tK/0wY6RKln92Eq7lIpvlDRvrZMzrC9eYZymSZoMvHqotspTC5mXquvs4JHdBzA5RnsbTHcG601nJQMzmFGzJ6XcfYwSj7q3Xzul72Wa3pp6ttjPVkAA1h12TK7pSDwD/RNWP3cPdY3QM9Be6aMXFit2O+rnJSJUOWRtVup4eaOGO4uV0tklvw5ntI4FKzA85HR3TPyb3SlBlXvUqi8OzSd4Kf2eFQwjgNV31o2alN6ar95pXy3bSscc8Mdtwmii8/4o9n+AVEIVkuO41R288hrJxH+CPYsB9g==
Received: from PH8PR09MB9294.namprd09.prod.outlook.com (2603:10b6:510:18b::16) by LV0PR09MB12399.namprd09.prod.outlook.com (2603:10b6:408:372::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.14; Thu, 26 Feb 2026 15:34:46 +0000
Received: from PH8PR09MB9294.namprd09.prod.outlook.com ([fe80::e7cd:281f:aeb2:5aaf]) by PH8PR09MB9294.namprd09.prod.outlook.com ([fe80::e7cd:281f:aeb2:5aaf%7]) with mapi id 15.20.9654.014; Thu, 26 Feb 2026 15:34:46 +0000
From: Rebecca Guthrie <rmguthr@uwe.nsa.gov>
To: Deb Cooley <debcooley1@gmail.com>, "aebecke@uwe.nsa.gov" <aebecke@uwe.nsa.gov>, "mjjenki@cyber.nsa.gov" <mjjenki@cyber.nsa.gov>
Thread-Topic: [Technical Errata Reported] RFC9763 (8750)
Thread-Index: AQHcmqt+IKc/LuMXGUaMakfUFSxR1LWU7+oAgABFDoA=
Date: Thu, 26 Feb 2026 15:34:46 +0000
Message-ID: <PH8PR09MB9294D16F17165842BD610F6AFC72A@PH8PR09MB9294.namprd09.prod.outlook.com>
References: <20260210163700.395E2C000CC0@rfcpa.rfc-editor.org> <CAGgd1OdU2zCa194QAft9CE6NAGjNYdtiO8HJ__fBjBx2CC6e5Q@mail.gmail.com>
In-Reply-To: <CAGgd1OdU2zCa194QAft9CE6NAGjNYdtiO8HJ__fBjBx2CC6e5Q@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=uwe.nsa.gov;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH8PR09MB9294:EE_|LV0PR09MB12399:EE_
x-ms-office365-filtering-correlation-id: 41b63d31-f18d-4c85-c87f-08de754c9269
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|1800799024|8096899003|13003099007|7053199007|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH8PR09MB9294.namprd09.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(8096899003)(13003099007)(7053199007)(38070700021);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_PH8PR09MB9294D16F17165842BD610F6AFC72APH8PR09MB9294namp_"
MIME-Version: 1.0
X-OriginatorOrg: uwe.nsa.gov
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH8PR09MB9294.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 41b63d31-f18d-4c85-c87f-08de754c9269
X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Feb 2026 15:34:46.6939 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d61e9a6f-fc16-4f84-8a3e-6eeff33e136b
X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV0PR09MB12399
Message-ID-Hash: GVIJBACNQXJCF2ERMIM6KSOCDI74L2TD
X-Message-ID-Hash: GVIJBACNQXJCF2ERMIM6KSOCDI74L2TD
X-MailFrom: rmguthr@uwe.nsa.gov
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-spasm.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "housley@vigilsec.com" <housley@vigilsec.com>, "tim.hollebeek@digicert.com" <tim.hollebeek@digicert.com>, "spasm@ietf.org" <spasm@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [lamps] Re: [Technical Errata Reported] RFC9763 (8750)
List-Id: This is the mail list for the LAMPS Working Group <spasm.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/pE3NoJZZ5y7WM5Et-RmI3IQWytY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Owner: <mailto:spasm-owner@ietf.org>
List-Post: <mailto:spasm@ietf.org>
List-Subscribe: <mailto:spasm-join@ietf.org>
List-Unsubscribe: <mailto:spasm-leave@ietf.org>

Yep, this errata is correct.

Rebecca Guthrie
she/her
Center for Cybersecurity Standards (CCSS)
Cybersecurity Collaboration Center (CCC)
National Security Agency (NSA)

From: Deb Cooley <debcooley1@gmail.com>
Sent: Thursday, February 26, 2026 6:26 AM
To: Alison Becker (GOV) <aebecke@uwe.nsa.gov>; Rebecca Guthrie (GOV) <rmguthr@uwe.nsa.gov>; Michael Jenkins (GOV) <mjjenki@cyber.nsa.gov>
Cc: housley@vigilsec.com; tim.hollebeek@digicert.com; spasm@ietf.org
Subject: Re: [Technical Errata Reported] RFC9763 (8750)

Can I get an opinion on this errata?  Valid?  not valid?

Deb

On Tue, Feb 10, 2026 at 11:37 AM RFC Errata System <rfc-editor@rfc-editor.org<mailto:rfc-editor@rfc-editor.org>> wrote:
The following errata report has been submitted for RFC9763,
"Related Certificates for Use in Multiple Authentications within a Protocol".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid8750

--------------------------------------
Type: Technical
Reported by: Guiliano Lehmann <guilianolehmann@live.de<mailto:guilianolehmann@live.de>>

Section: Appendix A. ASN.1 M

Original Text
-------------
RequesterCertificate ::= SEQUENCE {
  certID        IssuerAndSerialNumber,
  requestTime   BinaryTime,
  locationInfo  UniformResourceIdentifiers,
  signature     BIT STRING }

UniformResourceIdentifiers ::= SEQUENCE SIZE (1..MAX) OF URI

Corrected Text
--------------
RequesterCertificate ::= SEQUENCE {
  certID        IssuerAndSerialNumber,
  requestTime   BinaryTime,
  locationInfo  UniformResourceIdentifier,
  signature     BIT STRING }

UniformResourceIdentifier ::= IA5String

Notes
-----
Or please update Section 3.1, if the structure should be `SEQUENCE SIZE (1..MAX) OF URI`.

Instructions:
-------------
This erratum is currently posted as "Reported". (If it is spam, it
will be removed shortly by the RFC Production Center.) Please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party
will log in to change the status and edit the report, if necessary.

--------------------------------------
RFC9763 (draft-ietf-lamps-cert-binding-for-multi-auth-06)
--------------------------------------
Title               : Related Certificates for Use in Multiple Authentications within a Protocol
Publication Date    : June 2025
Author(s)           : A. Becker, R. Guthrie, M. Jenkins
Category            : PROPOSED STANDARD
Source              : Limited Additional Mechanisms for PKIX and SMIME
Stream              : IETF
Verifying Party     : IESG