[lamps] Protocol Action: 'Certification Authority Authorization (CAA) Processing for Email Addresses' to Proposed Standard (draft-ietf-lamps-caa-issuemail-07.txt)

The IESG <iesg-secretary@ietf.org> Wed, 16 August 2023 21:33 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Auto-Submitted: auto-generated
Precedence: bulk
Cc: The IESG <iesg@ietf.org>, draft-ietf-lamps-caa-issuemail@ietf.org, housley@vigilsec.com, lamps-chairs@ietf.org, rdd@cert.org, rfc-editor@rfc-editor.org, spasm@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <169222158342.11637.15410810269380223741@ietfa.amsl.com>
Date: Wed, 16 Aug 2023 14:33:03 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/r8qgF1N7aZnrSLFoZEp4vCwnV1M>
Subject: [lamps] Protocol Action: 'Certification Authority Authorization (CAA) Processing for Email Addresses' to Proposed Standard (draft-ietf-lamps-caa-issuemail-07.txt)

The IESG has approved the following document:
- 'Certification Authority Authorization (CAA) Processing for Email
   Addresses'
  (draft-ietf-lamps-caa-issuemail-07.txt) as Proposed Standard

This document is the product of the Limited Additional Mechanisms for PKIX
and SMIME Working Group.

The IESG contact persons are Paul Wouters and Roman Danyliw.

A URL of this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-lamps-caa-issuemail/




Technical Summary

   The Certification Authority Authorization (CAA) DNS resource record
   (RR) provides a mechanism for domains to express the allowed set of
   Certification Authorities (CAs) that are authorized to issue
   certificates for the domain.  RFC 8659 contains the core CAA
   specification, where Property Tags that restrict the issuance of
   certificates which certify domain names are defined.  This
   specification defines a Property Tag that grants authorization to CAs
   to issue certificates which contain the id-kp-emailProtection key
   purpose in the extendedKeyUsage extension and one or more rfc822Name
   or otherName of type id-on-SmtpUTF8Mailbox that include the domain
   name in the subjectAltName extension.

Working Group Summary

   There was little controversy, and suggested improvements were readily
   accepted by the author.

   Individuals that participate in the CA/Browser Forum have followed the
   development of this specification carefully.

Document Quality

   Several Certification Authorities have expressed interest in implementing
   this specification.  The CA/Browser Forum will likely require support for
   this specification in their S/MIME Certificate Baseline Requirements.

Personnel

   The Document Shepherd for this document is Russ Housley. The Responsible
   Area Director is Roman Danyliw.

[lamps] Protocol Action: 'Certification Authority… The IESG