Re: [lamps] Spencer Dawkins' No Objection on draft-ietf-lamps-rfc5280-i18n-update-03: (with COMMENT)

Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com> Fri, 06 October 2017 17:57 UTC

Return-Path: <spencerdawkins.ietf@gmail.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 266F0134BB7; Fri, 6 Oct 2017 10:57:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yTfPiCO_cv5C; Fri, 6 Oct 2017 10:57:24 -0700 (PDT)
Received: from mail-qt0-x230.google.com (mail-qt0-x230.google.com [IPv6:2607:f8b0:400d:c0d::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10E1D134A01; Fri, 6 Oct 2017 10:57:18 -0700 (PDT)
Received: by mail-qt0-x230.google.com with SMTP id o52so32880867qtc.9; Fri, 06 Oct 2017 10:57:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=lxlZcmvr1emZYIAqlcBaYs0UmDnREUOJ2nBe2DUVj50=; b=GxifLY24N5tPaTxV3BOBh7r6ZuYmB/TxpgPe6QNuIsksoqjU3EyKWHnoFpImdaQwmz Vrid1RQ6BwGcOmx0yq5DnGn91b0xFy8PEUTdlQ7SOxRVOzEZ+hnZLINGaJbfG7f/auAs moSF+1VG6jaUeWpqGXhz4Kf8UflO4bsijzCXfxDXjnucR4Qcd85lI2JFJmSs0L6mR/Dh K53HYDhlkEIh0uIwIDSGOjrElI2jcVZFxVHVYVA2pRdEsG0vhpgI6l3QsTQzrl5M0JWa eI9/+x3pd414BsB59pQweDtsJnXVjZQlmr1IwtJrU90nugTkgxvKmlVDF+Y1xG2t968+ 2rYA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=lxlZcmvr1emZYIAqlcBaYs0UmDnREUOJ2nBe2DUVj50=; b=Nos9gfyGsC8IPPA9eBUzNzYPbAmxqU5ifshV8EAtd4INnxB080BwJ9WouHmmIJ2q9K p/LiHEbnLgUaWT7moBOQLdbE65UzARV0NqJof7Ci18Q6hnIdgItSeKKQ1xaQMEzsBQr9 yDzInYr4NjS7eHkUsyFCqIxSstnUFEbPdfDdyUfO5bWldK/ZKoQmvDdekcCrfLyGPr+X vHPs3gER0nglmeqvRslo80TUDDuVPVOdtsi/khUGeMEZnEMGAMV70r/PKxm94c4LNDVH OMsMELhkAHOvlcuWUqOTaRCPx8Cy0d6jutV7wbeqUN595DMjVn6EKZEUfNwY3tZrFKam BFrw==
X-Gm-Message-State: AMCzsaV+8+ZLnspBO+Bq2imrz3h143VeZZfQF+H0pRzVFTU9r/VnXKym zk0srqwBi3JZh0u2rkGb5tHebbGlk/Y8Q3telI3ipg==
X-Google-Smtp-Source: AOwi7QBooDP9Znqwd1MD/Tj6Uiw4K3RzUhlx+Ato1YfYhjlNaWfJxJEYqfF6ztZici1uana4bd+buRm6j3BYwznCv1E=
X-Received: by 10.37.162.68 with SMTP id b62mr2226256ybi.195.1507312637013; Fri, 06 Oct 2017 10:57:17 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.37.79.86 with HTTP; Fri, 6 Oct 2017 10:57:16 -0700 (PDT)
In-Reply-To: <ECFA352F-3C46-434D-9193-53CB9CCDE8CA@vigilsec.com>
References: <150725438252.5833.1845084525614926868.idtracker@ietfa.amsl.com> <ECFA352F-3C46-434D-9193-53CB9CCDE8CA@vigilsec.com>
From: Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com>
Date: Fri, 06 Oct 2017 10:57:16 -0700
Message-ID: <CAKKJt-fLvMhUMrA1Fzkg+AkegYViQF9XS-3CNh04h249JNx4WQ@mail.gmail.com>
To: Russ Housley <housley@vigilsec.com>
Cc: IESG <iesg@ietf.org>, draft-ietf-lamps-rfc5280-i18n-update@ietf.org, Phillip Hallam-Baker <phill@hallambaker.com>, lamps-chairs@ietf.org, spasm@ietf.org
Content-Type: multipart/alternative; boundary="94eb2c1a01804b7339055ae49208"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/xWBnZtMUwZ6BUIVZzkrmcwHSssY>
Subject: Re: [lamps] Spencer Dawkins' No Objection on draft-ietf-lamps-rfc5280-i18n-update-03: (with COMMENT)
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Oct 2017 17:57:26 -0000

Hi, Russ,

On Fri, Oct 6, 2017 at 7:02 AM, Russ Housley <housley@vigilsec.com> wrote:

> Spencer:
>
> Two things are going on in this document:
>
> (1)  This update aligns with IDNA2008.
>
> (2)  Add support for EAI.
>
> So, it might be better to say:
>
>    These updates to RFC 5280 provide alignment with the 2008 specification
>    for Internationalized Domain Names (IDNs) and add support for
>    Internationalized Email Addresses in X.509 Certificates.
>

That's exactly what I was hoping for. Thanks.

Spencer


>
> Russ
>
>
> > On Oct 5, 2017, at 9:46 PM, Spencer Dawkins <
> spencerdawkins.ietf@gmail.com> wrote:
> >
> > Spencer Dawkins has entered the following ballot position for
> > draft-ietf-lamps-rfc5280-i18n-update-03: No Objection
> >
> > When responding, please keep the subject line intact and reply to all
> > email addresses included in the To and CC lines. (Feel free to cut this
> > introductory paragraph, however.)
> >
> >
> > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.
> html
> > for more information about IESG DISCUSS and COMMENT positions.
> >
> >
> > The document, along with other ballot positions, can be found here:
> > https://datatracker.ietf.org/doc/draft-ietf-lamps-rfc5280-i18n-update/
> >
> >
> >
> > ----------------------------------------------------------------------
> > COMMENT:
> > ----------------------------------------------------------------------
> >
> > You folks would know best what's actually clear to your intended
> audience, but
> > the use of  "provide clarity on the handling of" in the Abstract,
> >
> >   These updates to RFC 5280 provide clarity on the handling of
> >   Internationalized Domain Names (IDNs) and Internationalized Email
> >   Addresses in X.509 Certificates.
> >
> > and in the first paragraph of the Introduction,
> >
> >   This document updates RFC 5280 [RFC5280].  The Introduction in
> >   Section 1, the Name Constraints certificate extension discussion in
> >   Section 4.2.1.10, and the Processing Rules for Internationalized
> >   Names in Section 7 are updated to provide clarity on the handling of
> >   Internationalized Domain Names (IDNs) and Internationalized Email
> >   Addresses in X.509 Certificates.
> >
> > wasn't particularly helpful to me.  Are there a few words that would
> describe
> > (at a high level) what the problem with RFC 5280 was, that required this
> > document (I'm suggesting saying "so if you implemented RFC 5280, you can
> expect
> > problems A and B, so you probably want to implement this specification as
> > well", but in different words)?
> >
> >
>
>