[lamps] adopting draft-dkg-lamps-samples ?

Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 13 April 2021 21:28 UTC

Return-Path: <dkg@fifthhorseman.net>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C9CC3A0FCE for <spasm@ietfa.amsl.com>; Tue, 13 Apr 2021 14:28:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=fifthhorseman.net header.b=YlQ4pxOy; dkim=pass (2048-bit key) header.d=fifthhorseman.net header.b=KgnzYmgu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gOKfxa4tO86h for <spasm@ietfa.amsl.com>; Tue, 13 Apr 2021 14:28:54 -0700 (PDT)
Received: from che.mayfirst.org (che.mayfirst.org [IPv6:2001:470:1:116::7]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20F883A0FCA for <spasm@ietf.org>; Tue, 13 Apr 2021 14:28:53 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019; t=1618349332; h=from : to : subject : date : message-id : mime-version : content-type : from; bh=jCxglqSp/LweDkSbAewTaX1a2s5LWlAyuvnLYFCVjIk=; b=YlQ4pxOyDHM2I5+bhJ2+xaRYK239DB5Rw1sGiduJLGyPh0MpiQ6vMN2zhHn8Z406avpve QHojtnalZ9plgsKAw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1618349332; h=from : to : subject : date : message-id : mime-version : content-type : from; bh=jCxglqSp/LweDkSbAewTaX1a2s5LWlAyuvnLYFCVjIk=; b=KgnzYmgu5mbWJReQTgzJ7shFUCIQN2tEeZdKGf2otfCnQsd06mPXpxE1uHLNTINxY96dk wMXmMhP6BHv19owjfr8H2xRGvftoVDU3cxUoYEY8KAOKL7psw9l+roQ2pazKPrizqLW8PUs 4SLMl3Xyk5wxlu/rDdNpSIcs2PJy+0R1gTLSzfNkUB6+opl5OgKD98Yo5YrX38TQwsg4c2X MBOIQKWcCGE1cgkO+B/v11xzpmjwdxG1k2c9nn8yHfxjH55qS00fVBqBqweB6gY1IekvrJ3 EEp3eS1mv5wryMwb1WxQSzXcaW4FEZO7AgLLDnpJ7uaJYk3cGFG9hjgMZM+Q==
Received: from fifthhorseman.net (lair.fifthhorseman.net [108.58.6.98]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by che.mayfirst.org (Postfix) with ESMTPSA id 00FDDF9A5 for <spasm@ietf.org>; Tue, 13 Apr 2021 17:28:51 -0400 (EDT)
Received: by fifthhorseman.net (Postfix, from userid 1000) id A6ECC201FA; Tue, 13 Apr 2021 17:28:49 -0400 (EDT)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: LAMPS WG <spasm@ietf.org>
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata= mDMEX+i03xYJKwYBBAHaRw8BAQdACA4xvL/xI5dHedcnkfViyq84doe8zFRid9jW7CC9XBiI0QQf FgoAgwWCX+i03wWJBZ+mAAMLCQcJEOCS6zpcoQ26RxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNl cXVvaWEtcGdwLm9yZ/tr8E9NA10HvcAVlSxnox6z62KXCInWjZaiBIlgX6O5AxUKCAKbAQIeARYh BMKfigwB81402BaqXOCS6zpcoQ26AADZHQD/Zx9nc3N2kj13AUsKMr/7zekBtgfSIGB3hRCU74Su G44A/34Yp6IAkndewLxb1WdRSokycnaCVyrk0nb4imeAYyoPtBc8ZGtnQGZpZnRoaG9yc2VtYW4u bmV0PojRBBMWCgCDBYJf6LTfBYkFn6YAAwsJBwkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3Rh dGlvbnMuc2VxdW9pYS1wZ3Aub3JnL0Gwxvypz2tu1IPG+yu1zPjkiZwpscsitwrVvzN3bbADFQoI ApsBAh4BFiEEwp+KDAHzXjTYFqpc4JLrOlyhDboAAPkXAP0Z29z7jW+YzLzPTQML4EQLMbkHOfU4 +s+ki81Czt0WqgD/SJ8RyrqDCtEP8+E4ZSR01ysKqh+MUAsTaJlzZjehiQ24MwRf6LTfFgkrBgEE AdpHDwEBB0DkKHOW2kmqfAK461+acQ49gc2Z6VoXMChRqobGP0ubb4kBiAQYFgoBOgWCX+i03wWJ BZ+mAAkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3Jnfvo+ nHoxDwaLaJD8XZuXiaqBNZtIGXIypF1udBBRoc0CmwICHgG+oAQZFgoAbwWCX+i03wkQPp1xc3He VlxHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnaheiqE7Pfi3Atb3GGTw+ jFcBGOaobgzEJrhEuFpXREEWIQQttUkcnfDcj0MoY88+nXFzcd5WXAAAvrsBAIJ5sBg8Udocv25N stN/zWOiYpnjjvOjVMLH4fV3pWE1AP9T6hzHz7hRnAA8d01vqoxOlQ3O6cb/kFYAjqx3oMXSBhYh BMKfigwB81402BaqXOCS6zpcoQ26AADX7gD/b83VObe14xrNP8xcltRrBZF5OE1rQSPkMNy+eWpk eCwA/1hxiS8ZxL5/elNjXiWuHXEvUGnRoVj745Vl48sZPVYMuDgEX+i03xIKKwYBBAGXVQEFAQEH QIGex1WZbH6xhUBve5mblScGYU+Y8QJOomXH+rr5tMsMAwEICYjJBBgWCgB7BYJf6LTfBYkFn6YA CRDgkus6XKENukcUAAAAAAAeACBzYWx0QG5vdGF0aW9ucy5zZXF1b2lhLXBncC5vcmcEAx9vTD3b J0SXkhvcRcCr6uIDJwic3KFKxkH1m4QW0QKbDAIeARYhBMKfigwB81402BaqXOCS6zpcoQ26AAAX mwD8CWmukxwskU82RZLMk5fm1wCgMB5z8dA50KLw3rgsCykBAKg1w/Y7XpBS3SlXEegIg1K1e6dR fRxL7Z37WZXoH8AH
Date: Tue, 13 Apr 2021 17:28:48 -0400
Message-ID: <875z0p7u27.fsf@fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/tsBz3ssKrsix_ncIYvo59S7dgyA>
Subject: [lamps] adopting draft-dkg-lamps-samples ?
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Apr 2021 21:28:59 -0000

Hi LAMPS folks--

I know we're working our way through the calls for adoption of the
newly-re-chartered work, but it occurs to me that at least one
already-adopted draft (draft-ietf-lamps-header-protection) makes use of
the LAMPS sample certificates:

   https://datatracker.ietf.org/doc/draft-dkg-lamps-samples/

They are also referenced in the (as-yet-unfinished) test vector section
of draft-dkg-lamps-e2e-mail-guidance, currently under consideration for
adoption.

I think this draft fits into the charter's item 4: "test vectors and
examples that can be used by implementers and interoperability testing"

I intend to continue work on this draft, including EdDSA and ECDH
certificates (and ECDSA certificates, if anyone speaks up in favor of
their inclusion), but I'd be happy to move to an editorial role, and
move change control to the WG as a whole if folks are interested.

Beyond adding the certs with new cipher suites, i don't think there's
much more work to do on this draft; it also has no serious dependencies
waiting on it, and having a stable reference for these sample
certificates would be concretely useful.  I don't think it's a lot of
work.

I know it's the chairs' job to call for adoption; please consider this a
nudge to the chairs to do so.

If other folks in the WG have any objections to the draft, or
suggestions for improvement, I'd be happy to hear those too.

      --dkg