[lamps] Re: I-D Action: draft-housley-lamps-rfc3161-update-02.txt

Tim Hollebeek <tim.hollebeek@digicert.com> Tue, 27 October 2026 14:01 UTC

Received: from BN8PR05CU002.outbound.protection.outlook.com (mail-eastus2azlp170110003.outbound.protection.outlook.com [IPv6:2a01:111:f403:c110::3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange secp256r1 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id 2AD2646 for <spasm@ietf.org>; Tue, 27 Oct 2026 14:01:45 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=digicert.com header.s=selector1 header.b=Oz9GOXz5; dkim=pass header.d=digicert.com header.s=selector1 header.b=Oz9GOXz5; arc=pass ("microsoft.com:s=arcselector10001:i=3"); spf=temperror (mx.ietf.org: error in processing during lookup of tim.hollebeek@digicert.com: DNS error) smtp.mailfrom=tim.hollebeek@digicert.com; dmarc=pass (policy=quarantine) header.from=digicert.com
ARC-Seal: i=3; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass; b=T8d+5y3noKfeTDfMjnER8b2t+veMb0wBqv8sn3UinOa3MRj4kZp7qzt/K5Uofe0V+wxcdDgV64a7jBUzO/bypu9yeR9GCV/ejoR+UdSUi4UeMgdbb0Oe/L0FLGcX3C6d1r1RJvljfY3xRyaZp9/pdwzMwYcNpWE7uj8JAQzsECKFccro6Ti0VritpI51dFjOUKJ6xTi4mGEICVtK66aIXPYvBPJNEQhKkv8/6LWnqLGBJxArTXGw/v5r3edH5V7nU2y/R2tLAdWTsxaOvIPZw5jMC8ajm3tcSqWK0Dr+UX5yxuPpPusycMra6jgIi8PfMPZUij/TKiX8EhzOf9fDjg==
ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=/A0lc51B7wgBzHoMxRIkhrwKqIi1lYCOd0Q5vU5Ad2k=; b=gwEIekQxLyZzoN/8O0CDGaYYVoKw83LMS3Oy5YVXWLssSpKEUsGG0NX4dEJKMb191bJ1Ll8SJfSlmLFakJIzXrfoXlUruSypDe5F0eFPw+2F3OkvT+P/P7XvWwmDYrjjL2Nv4X5aNroEVbc0f62I+02hPZMbtD9+Jpl6cqiUtWH93OEd65tTWGzrcqm12L/aSEMSbugnYzVG1BYeKliWrGQTDVkPkQUW28Wi4WX06j6kfXM8ubkyrtsZaFdcYMD3wWPwznyH1/OdrXg5PHGcl0xMksQhN54oMo5vH9BvnztCc/6NsWBLkv5utgDVibWEqjrSWtxTNKNTo7w2zoJADQ==
ARC-Authentication-Results: i=3; mx.microsoft.com 1; spf=pass (sender ip is 3.214.204.181) smtp.rcpttodomain=ietf.org smtp.mailfrom=digicert.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=digicert.com; dkim=pass (signature was verified) header.d=digicert.com; arc=pass (0 oda=1 ltdi=1 spf=[1,1,smtp.mailfrom=digicert.com] dkim=[1,2,header.d=digicert.com] dmarc=[1,1,header.from=digicert.com])
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digicert.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/A0lc51B7wgBzHoMxRIkhrwKqIi1lYCOd0Q5vU5Ad2k=; b=Oz9GOXz5CPAfSFA/VHmEw2ohpaMWUMWUvIdpRIVoRmMchnpXzFlHIL3Tbze3B1iufpuEzxOtM0HyIzDq+pz3VgWlzhhALhmnKWaxojg+yjf587WUTAsJ2tqlABfpoBFYtEIpHVF8/xePBan3hIU30N2iIa8sg6rV2sWjIewRdekZiz7gP2dTREfDPZH4g67+XdkxkrNV4KlBl56LeeuHOXKLh+EOtVCtITSASM7BqbCqrZNxFm2tgaE7jIjur6eYz9lbpt5tJlYeFQ+5B1LZvfTvlLTHuxn1ceFBpY3DCvaDU/+DtZGHqpTPnMhAqSVU9pLeeGLV0VcwrqlNgI5Slw==
Received: from PH8PR02CA0045.namprd02.prod.outlook.com (2603:10b6:510:2da::33) by IA1PR14MB5539.namprd14.prod.outlook.com (2603:10b6:208:388::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Tue, 27 Oct 2026 14:01:33 +0000
Received: from CY7PEPF000000EF.namprd04.prod.outlook.com (2603:10b6:510:2da:cafe::1d) by PH8PR02CA0045.outlook.office365.com (2603:10b6:510:2da::33) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Tue, 27 Oct 2026 14:01:33 +0000
X-MS-Exchange-Authentication-Results: mx.microsoft.com 1; spf=pass (sender IP is 3.214.204.181) smtp.mailfrom=digicert.com; dkim=pass (signature was verified) header.d=digicert.com;dmarc=pass action=none header.from=digicert.com;
Received-SPF: Pass (protection.outlook.com: domain of digicert.com designates 3.214.204.181 as permitted sender) receiver=protection.outlook.com; client-ip=3.214.204.181; helo=us-dlp.cloud-sec-av.com; pr=C
Received: from us-dlp.cloud-sec-av.com (3.214.204.181) by CY7PEPF000000EF.mail.protection.outlook.com (10.167.247.171) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Tue, 27 Oct 2026 14:01:32 +0000
Received: from emails-4380939-25-mt-prod-3.avanan.net (ip-10-10-156-116.ec2.internal [10.10.156.116]) by mta-outgoing-dlp-390-mt-prod-3.avanan.net (Postfix) with ESMTPS id 4DA8F80354; Tue, 27 Oct 2026 14:01:32 +0000 (UTC)
ARC-Seal: i=2; cv=pass; a=rsa-sha256; d=avanan.net; s=arcselector01; t=1793109692; b=ok0gQhUXu22k8RsexyY+6bWcY+zuCTxbzxhs6UJeiT0gvOdAXGn6F0y9dn1Di7WzHuJyw xqQgLWWqsL2ZIH+NPyFkex1ibGiS9n4ONu7jBBeJB3i8Uxfj/OHZSGMND6CzLg43XSBarWi 2aFDWhCUgUbSdLHIQY8nqZv5jrboo9s=
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=avanan.net; s=arcselector01; t=1793109692; h=from : to : subject : date : message-id : content-type : mime-version; bh=/A0lc51B7wgBzHoMxRIkhrwKqIi1lYCOd0Q5vU5Ad2k=; b=GNFkXa+NB15UZk3UDlRHlZz10LJ51Vcj1aQkQWdFrIQjzc8QRQYLnYNwvHuUHK3nAcYcm 0nYmIF3FMHMo28v3izin/aey7pRjtxfEs8SMmuY8YYHMURPUWfc4yvAh10Ei7qLA+HIyma5 5udPYNrnGJkpmnElY/xn9i/8C9r9RoM=
ARC-Authentication-Results: i=2; mx.avanan.net; arc=pass; dkim=pass header.d=digicert.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digicert.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/A0lc51B7wgBzHoMxRIkhrwKqIi1lYCOd0Q5vU5Ad2k=; b=Oz9GOXz5CPAfSFA/VHmEw2ohpaMWUMWUvIdpRIVoRmMchnpXzFlHIL3Tbze3B1iufpuEzxOtM0HyIzDq+pz3VgWlzhhALhmnKWaxojg+yjf587WUTAsJ2tqlABfpoBFYtEIpHVF8/xePBan3hIU30N2iIa8sg6rV2sWjIewRdekZiz7gP2dTREfDPZH4g67+XdkxkrNV4KlBl56LeeuHOXKLh+EOtVCtITSASM7BqbCqrZNxFm2tgaE7jIjur6eYz9lbpt5tJlYeFQ+5B1LZvfTvlLTHuxn1ceFBpY3DCvaDU/+DtZGHqpTPnMhAqSVU9pLeeGLV0VcwrqlNgI5Slw==
Received: from PH0PR14MB4456.namprd14.prod.outlook.com (2603:10b6:510:2c::11) by DSVPR14MB958183.namprd14.prod.outlook.com (2603:10b6:8:384::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Tue, 27 Oct 2026 14:01:16 +0000
Received: from PH0PR14MB4456.namprd14.prod.outlook.com ([fe80::bc14:f9bb:782e:c20c]) by PH0PR14MB4456.namprd14.prod.outlook.com ([fe80::bc14:f9bb:782e:c20c%5]) with mapi id 15.21.0546.021; Tue, 27 Oct 2026 14:01:16 +0000
From: Tim Hollebeek <tim.hollebeek@digicert.com>
To: Russ Housley <housley@vigilsec.com>, IETF LAMPS <spasm@ietf.org>
Thread-Topic: [lamps] Re: I-D Action: draft-housley-lamps-rfc3161-update-02.txt
Thread-Index: AQHdZbx4DnflZ7b/VEmHgPku1Yink7cRa6Mi
Date: Tue, 27 Oct 2026 14:01:16 +0000
Message-ID: <PH0PR14MB4456C090B48FF8F01BFD605783602@PH0PR14MB4456.namprd14.prod.outlook.com>
References: <179306862918.402964.18142710189090395889@dt-datatracker-7dc874ff8f-5wfjq> <1202D1FA-48B5-4714-972A-A747B7F50EFE@vigilsec.com>
In-Reply-To: <1202D1FA-48B5-4714-972A-A747B7F50EFE@vigilsec.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
Authentication-Results-Original: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=digicert.com;
x-ms-traffictypediagnostic: PH0PR14MB4456:EE_|DSVPR14MB958183:EE_|CY7PEPF000000EF:EE_|IA1PR14MB5539:EE_
X-MS-Office365-Filtering-Correlation-Id: f90449b1-d455-4d69-21d1-08df3432ceb2
x-cloud-sec-av-info: digicert,office365_emails,sent,inline
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;ARA:13230040|23010399003|366016|1800799024|4022899009|376014|261009223027099003|261009220027099003|261009223327099003|261009221727099003|261021121427099003|261021123027099003|261022105027099003|261021130227099003|261021135927099003|261022075727099003|261021133027099003|261022115727099003|261009221227099003|261022113327099003|10067099003|56012099006|261026135527099003|3023799007|4133799003|261026140227099003|8096899003|6133799003|261026130827099003|22082099003|18002099003|13003099007|261026121527099003|4143699003|38070700021;
X-Microsoft-Antispam-Message-Info-Original: Clt5E8ecXLJwVVT/R07tvJibRnML6LGs0ndG6ACiloAN184EdOpDC+XBssJBmu8NWwilDzmKk76ClPko/Ij5gOWcDXS62k5OiVdQnj7l25FPRJV1/lwC3qbknNGKyxma88lk8y9isNOd7M2L7RISpakkccKnCeXclM6lB19fdemlqlTImPiQq953r2KgM8VQcFxwaDgKem/QcJ2HlNEw6AP58Hmute96VaEAnOljHqJqleFKH3fNsu9BzGLIB0nLKVisEiMznPg4NT8nux9+MOkfBHsIqIWjimU0kHl5dhZOtrDD193rkHDj2dUpvZgIXhszW2F0zPNCXfAbIbJVoCIzzex3hkJetQu044km10hMU/dWQVycwtvntKLZ6U0lVPQXtc4AvK2Wmtvz4g9Syv/3QgqmZ50LYUWq1A/UxuY1fO7NcRDEz59icbwPA8UBEtndac3IjpiVzdEMZXO2lI9aMtyT9uZ2COPgQNF7BMHp663pxsTLiI7ja1fWx/cpG6a/objjnEcdVi2LaRxDO4m7h8uJ/t7HSz4a6ZfE/sjbv1ZpjQ5Sb07JI50KKLKrbRYT4Ki8nGBwa5z5lkCXEmuDT7Z8V8rIaYNigv3tAxFw50mDXucjataqhbeMhRXvwQwwIv2/9MRfeMnqqpT16b151UHzULHEPxZKedUof3FPdOYwyW6+OSPM83ze3BXy0FOByoj2yEASqkvTjKOFNR7PNQdSbt5bqEUwV2douZI=
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH0PR14MB4456.namprd14.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(366016)(1800799024)(4022899009)(376014)(261009223027099003)(261009220027099003)(261009223327099003)(261009221727099003)(261021121427099003)(261021123027099003)(261022105027099003)(261021130227099003)(261021135927099003)(261022075727099003)(261021133027099003)(261022115727099003)(261009221227099003)(261022113327099003)(10067099003)(56012099006)(261026135527099003)(3023799007)(4133799003)(261026140227099003)(8096899003)(6133799003)(261026130827099003)(22082099003)(18002099003)(13003099007)(261026121527099003)(4143699003)(38070700021);DIR:OUT;SFP:1102;
Content-Type: multipart/alternative; boundary="_000_PH0PR14MB4456C090B48FF8F01BFD605783602PH0PR14MB4456namp_"
MIME-Version: 1.0
X-Exchange-RoutingPolicyChecked: g5Xs85u4vtiJ0ze8l4L9jS4lGk6B6srhVQmudOdF4y9QHZ8h5l++3CAZXYm48sFGasJ8FAr+41AfMEoRG58bnaSW57BBc5DEVa3r6TLp8mS6A9weTgLZTtoT4vn39uR403Me0fLPZxczQtj5UNIIMWJ0wapYu6lRXDAcOjrx15Iy7QNXVHyBJ/H31iZNuWsVM4kV5k1rnqaffB81+FXRLcmAGpVByLIyiMx+bIOPuQa+TOrhak3vXMWsD4JR5PHCmQReVSRRi8HMAKn9OFR1qv1xXgkyo1tkHTISCGTNDCKz/QcO/0pyhJO12QzkfMM+2jOqL806RwsVv93xryUuAA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DSVPR14MB958183
X-CLOUD-SEC-AV-INT-Relay: sent<mta-outgoing-dlp-mt-prod-3.avanan.net>
X-CLOUD-SEC-AV-UUID: c2d19c676d714d4f9b0c95936532c9db:digicert,office365_emails,sent,inline:ac660a15960e085db165c93f84073a06
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=lpJgLZvUbyOR7zR/pJ3CGWF6vBVqzoGjQ2A2X42wXeHnAwseCcbu7Ihbhq6PUVFM+/cGuvAgOjbYQTvQ53YeZhn6wXa9IrnJIWdCG3w3826ZXI8E6x0II76OSbIO2zVw0r0dZxDNyJX5h5vQVL6n18CO0Z4gqvPw2LBwLC7eziiLPk6AYazYH0aNapsEeRoK4ESjeBMiNPKWLHKJ/1P1+mVq5fHk07va2I2ZgiqUX6fIpX8FfJsWVe/fB0H2pssaQcPlQWlE1RZuxS9pMLl6szYpKzXHNe+rZBqC7mts99X5UMLjMI4JNczYUWCfxtC4DrNGTrRdvEHre5zC7n8P2A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=/A0lc51B7wgBzHoMxRIkhrwKqIi1lYCOd0Q5vU5Ad2k=; b=CaeGcb7zTHvclKk4bnpSw0qHsraIMfv4PMNVnHvU2hzyO7XSk8eRif2lWw8WrLyDXAyNw1JXWl8SXT4R/v5BBpWmxPKPNqmJGaBUKh4hjh4y1DcplV50W8nUbWwSIi1vBz1AsC8bmLQZWc6tf+GQjWs5cZvmpzfpIly2g8ETA8rXNOxFCx6+sZv1uxnPLcAfT8h0jhluzjkrZT388u8X5szqFe8dQN1mSsUQuqgzxx0Y9TxOxXGGA01VjZ9dAC+wM8AN22wzikirY2fqP1+/2IVSFdcVM6jhdZOPsQneN4aX3QCdxYpxE8i7aX/ZBktIcMybU0D0eDtvqsfH1xkcfg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=digicert.com; dmarc=pass action=none header.from=digicert.com; dkim=pass header.d=digicert.com; arc=none
Authentication-Results-Original: mx.avanan.net; arc=pass; dkim=pass header.d=digicert.com
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: CY7PEPF000000EF.namprd04.prod.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: 4fca8a95-b872-4bb1-a7a6-08df3432c4ca
X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|376014|35042699022|1800799024|4022899009|36860700016|14060799003|82310400026|261026135527099003|261026140227099003|261022105027099003|261026130827099003|4143699003|56012099006|261021123027099003|261009223327099003|261009223027099003|261009220027099003|261021135927099003|261009221727099003|261022075727099003|261009221227099003|261022113327099003|261022115727099003|261021130227099003|261021121427099003|261021133027099003|10067099003|18002099003|261026121527099003|6133799003|22082099003|13003099007|8096899003|4133799003|3023799007;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:3.214.204.181;CTRY:US;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:us-dlp.cloud-sec-av.com;PTR:us-dlp.cloud-sec-av.com;CAT:NONE;SFS:(13230040)(23010399003)(376014)(35042699022)(1800799024)(4022899009)(36860700016)(14060799003)(82310400026)(261026135527099003)(261026140227099003)(261022105027099003)(261026130827099003)(4143699003)(56012099006)(261021123027099003)(261009223327099003)(261009223027099003)(261009220027099003)(261021135927099003)(261009221727099003)(261022075727099003)(261009221227099003)(261022113327099003)(261022115727099003)(261021130227099003)(261021121427099003)(261021133027099003)(10067099003)(18002099003)(261026121527099003)(6133799003)(22082099003)(13003099007)(8096899003)(4133799003)(3023799007);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: OgCuympfQ3vtVeBy86NY2oeoaKl3Ed8Gzm6dKVQprWbBxP6M6A2c5oiwsfXgoWzH9ioDzwUCd7+edjPrDsPB4H351ZT1JoKfkeBvxBlNCsXxlqDxz9TaJ0x+CjWxwfK966i3JutL58Rw9Dz209vVq5Y7iEvGjGCPiNs2ZUs2bBdH7rz5e6GKrgWBFgqJP3j4BuGsCIERNs4+/P+moYQs3yVy1Mnq647qHnjrXVFqjRKUlbtNEZzznBXNnjycl5ilLWc7Il8Kx9uVOkCoII34OvrJS0nPXQ701qtp2VXS7frfPpQugMwOtCn1z7LBgTrgrI5x7YK+zOzLzf7RdgGFsJTiA/r8Ia+wEVhTBPoYzKIciYYzUuHjJ6AO/H+ohJrqBi3WJBCbMq+gXqeYsCE2QBekmlplk27KxzYtjIuuxTzoBxQ+38g99PQNIj/kxp+p
X-OriginatorOrg: digicert.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Oct 2026 14:01:32.8962 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: f90449b1-d455-4d69-21d1-08df3432ceb2
X-MS-Exchange-CrossTenant-Id: cf813fa1-bde5-4e75-9479-f6aaa8b1f284
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=cf813fa1-bde5-4e75-9479-f6aaa8b1f284;Ip=[3.214.204.181];Helo=[us-dlp.cloud-sec-av.com]
X-MS-Exchange-CrossTenant-AuthSource: CY7PEPF000000EF.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR14MB5539
X-Spamd-Bar: -----------------------------
Message-ID-Hash: 7QA62FC5IPWZO3B2XEV22H7HRWYOW63O
X-Message-ID-Hash: 7QA62FC5IPWZO3B2XEV22H7HRWYOW63O
X-MailFrom: tim.hollebeek@digicert.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-spasm.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [lamps] Re: I-D Action: draft-housley-lamps-rfc3161-update-02.txt
List-Id: This is the mail list for the LAMPS Working Group <spasm.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/trQGO_gp6SSthQcK3rcgNc1np84>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Owner: <mailto:spasm-owner@ietf.org>
List-Post: <mailto:spasm@ietf.org>
List-Subscribe: <mailto:spasm-join@ietf.org>
List-Unsubscribe: <mailto:spasm-leave@ietf.org>

Yes, thank you, I agree. Best to keep it moving forward on all fronts.

-Tim
________________________________
From: Russ Housley <housley@vigilsec.com>
Sent: Monday, October 26, 2026 10:39 PM
To: IETF LAMPS <spasm@ietf.org>
Subject: [lamps] Re: I-D Action: draft-housley-lamps-rfc3161-update-02.txt

This addresses the discussion over the last two days.  I know an adoption call is underway, but it seemed better to address these changes before the I-D cut-off on Monday.

Russ


> On Oct 26, 2026, at 10:37 PM, internet-drafts@ietf.org wrote:
>
> Internet-Draft draft-housley-lamps-rfc3161-update-02.txt is now available. It
> is a work item of the Limited Additional Mechanisms for PKIX and SMIME (LAMPS)
> WG of the IETF.
>
>   Title:   Update to the Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP)
>   Authors: Russ Housley
>            Stefan Santesson
>   Name:    draft-housley-lamps-rfc3161-update-02.txt
>   Pages:   6
>   Dates:   2026-10-26
>
> Abstract:
>
>   This document updates RFC 3161.  It adds a requirement to ensure that
>   the id-ct-TSTInfo content type is used to align with the best
>   practices for signed attributes with CMS signed-data.  In addition,
>   cross-protocol attacks are prevented by requiring that the Time Stamp
>   Authority (TSA) dedicate the signature key pair to the time-stamping
>   service.  Finally, the use of id-kp-timeStamping in the TSA
>   certificate is clarified.
>
> The IETF datatracker status page for this Internet-Draft is:
> https://url.avanan.click/v2/r01/___https://datatracker.ietf.org/doc/draft-housley-lamps-rfc3161-update/___.YXAzOmRpZ2ljZXJ0OmE6bzphNTBiYmVjMTc4ZTJlOTFhZmEzMWJkYTMyMGFiOGViMTo3OjFlMDg6YWQzMDg2NmIwZTVlZDBlMGRhOWRiY2I0NzMyMzFmMjA1MjJlZmU0Zjc4YmZhZjViMjRlNDFkNWVmZTAzODA1MDpwOlQ6Rg
>
> There is also an HTML version available at:
> https://url.avanan.click/v2/r01/___https://www.ietf.org/archive/id/draft-housley-lamps-rfc3161-update-02.html___.YXAzOmRpZ2ljZXJ0OmE6bzphNTBiYmVjMTc4ZTJlOTFhZmEzMWJkYTMyMGFiOGViMTo3OmM2YzY6OTAxMmIzZGVkOWU5MTZmNzQyOWY3OGYzYWJjOWIzNzI2ZmExN2VjNmM3ODZlZTU5NzE4NzRhZDcwMTRmMzBmODpwOlQ6Rg
>
> A diff from the previous version is available at:
> https://url.avanan.click/v2/r01/___https://author-tools.ietf.org/iddiff?url2=draft-housley-lamps-rfc3161-update-02___.YXAzOmRpZ2ljZXJ0OmE6bzphNTBiYmVjMTc4ZTJlOTFhZmEzMWJkYTMyMGFiOGViMTo3OjM5ZmE6ZjY1ODM2ZTlkMWU4Zjc3ODM2NmQwMWMyYzllMmNlMzcwYTM4NTY2MWUwYzYyYzgwY2ZjZDAzZjMzNGM0MDcwNDpwOlQ6Rg
>
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts

_______________________________________________
Spasm mailing list -- spasm@ietf.org
To unsubscribe send an email to spasm-leave@ietf.org