Re: [stir] I-D Action: draft-ietf-stir-certificates-ocsp-05.txt

Sean Turner <sean@sn3rd.com> Fri, 28 July 2023 17:14 UTC

Return-Path: <sean@sn3rd.com>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 35EF3C14EB19 for <stir@ietfa.amsl.com>; Fri, 28 Jul 2023 10:14:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q2lEIPANWP9b for <stir@ietfa.amsl.com>; Fri, 28 Jul 2023 10:14:17 -0700 (PDT)
Received: from mail-pl1-x62a.google.com (mail-pl1-x62a.google.com [IPv6:2607:f8b0:4864:20::62a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6849DC14CE27 for <stir@ietf.org>; Fri, 28 Jul 2023 10:14:17 -0700 (PDT)
Received: by mail-pl1-x62a.google.com with SMTP id d9443c01a7336-1bb775625e2so15299095ad.1 for <stir@ietf.org>; Fri, 28 Jul 2023 10:14:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; t=1690564456; x=1691169256; h=message-id:in-reply-to:to:references:date:subject:mime-version :content-transfer-encoding:from:from:to:cc:subject:date:message-id :reply-to; bh=eT6OsjZVXdjbLDZ/vALp38wGHYCeyI8OMBs4aqCYWJs=; b=QKr2mK44oR6MEw3yQabnBP5inTX3lSRy1zeNlyhwEr1wdCOqC9FlL/jtjDc7K5QbOf yTzaXLKjksrizQjZ6uA9cPrJ5HjPnGx4xGCGopYAZQW25zy0SilFWx5I1KWjGdT+w5Ag 2zbxZmuiyuN0ThEJMtm6Agign/DVRuf+N7HXU=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1690564456; x=1691169256; h=message-id:in-reply-to:to:references:date:subject:mime-version :content-transfer-encoding:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=eT6OsjZVXdjbLDZ/vALp38wGHYCeyI8OMBs4aqCYWJs=; b=Jf0lLcHRErOXD3luUJ7WmH0Ws4TSkvhY7I7bBCbcDpFk7EbHY8fuDcsh2YoxVQ+4aW 8T6kBeteonu7d5vFsntE1YX6dtEbr499SV1LJORIGBSr6o4EQoFkSfmP0+IfOzXUWF3R VUGRV54YDXRDqYdsiD08xXvZljGrlh3ZLcMfCQ7/GH/TeyhqH2n0I6Aq+oLS7m4nBAxr IGIWacHnIQNwSHbkVRfL1mZ1r2xA6ymKjI3kIWV7bbLTevaBaB5cjuPdny9ichSx76cd I6sfBZ3Ur0+X7I3mdwEcaDP1aI+Trbd8KVgXwZfY7zzFZAm3XpY6puoy6iI1TW2SGWuK QQbg==
X-Gm-Message-State: ABy/qLZpCxzVl+F/UvfxKDOuNdmJ8IJXkhZGhlTwwblR3fJSbhwkZY/a 09aZS5QErDCiFjF168V8n+DGKWB9sT3INTi/JxI=
X-Google-Smtp-Source: APBJJlGgfTA/dXhtZglZcCtxj70u4FUd6xGqFaJv5rHYaPLhYbIs2mjnFQvnnCLl320lsexi9IjCgQ==
X-Received: by 2002:a17:902:ea0f:b0:1b6:9954:2030 with SMTP id s15-20020a170902ea0f00b001b699542030mr3297277plg.8.1690564456054; Fri, 28 Jul 2023 10:14:16 -0700 (PDT)
Received: from smtpclient.apple ([2001:67c:370:128:b4e3:f970:775e:6e97]) by smtp.gmail.com with ESMTPSA id 6-20020a170902ee4600b001bba3a4888bsm3849561plo.102.2023.07.28.10.14.15 for <stir@ietf.org> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 28 Jul 2023 10:14:15 -0700 (PDT)
From: Sean Turner <sean@sn3rd.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.120.0.1.15\))
Date: Fri, 28 Jul 2023 10:14:15 -0700
References: <169056076166.8624.16512672146359791503@ietfa.amsl.com>
To: stir@ietf.org
In-Reply-To: <169056076166.8624.16512672146359791503@ietfa.amsl.com>
Message-Id: <CA2C1D97-7AE7-4C7F-ABE1-1C213EFD52E9@sn3rd.com>
X-Mailer: Apple Mail (2.3654.120.0.1.15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/WMe5uuOOrwPyIUcR9k5f2ZAhSW4>
Subject: Re: [stir] I-D Action: draft-ietf-stir-certificates-ocsp-05.txt
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Jul 2023 17:14:21 -0000

Hi! This version includes ASN.1 related changes. A summary of those changes follow:

1. Import TelephoneNumber from RFC 8226 as opposed to defining E164Number for exactly the same thing.

2. In s2.1: use TelephoneNumber as opposed to E164 in the explanatory text about the extension.

3. In s5: add IANA considerations for a new module OID.

4. In Appendix A: Clean up module:
- Put in TBD for module (so as to not squat on a #)
- Import TelephoneNumber
- drop some unused imports

I had Russ verify that the module compiles.

spt

> On Jul 28, 2023, at 09:12, internet-drafts@ietf.org wrote:
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts
> directories. This Internet-Draft is a work item of the Secure Telephone
> Identity Revisited (STIR) WG of the IETF.
> 
>   Title           : OCSP Usage for Secure Telephone Identity Certificates
>   Authors         : Jon Peterson
>                     Sean Turner
>   Filename        : draft-ietf-stir-certificates-ocsp-05.txt
>   Pages           : 13
>   Date            : 2023-07-28
> 
> Abstract:
>   When certificates are used as credentials to attest the assignment or
>   ownership of telephone numbers, some mechanism is required to convey
>   certificate freshness to relying parties.  Certififcate Revocation
>   Lists (CRLs) are commonly used for this purpose, but for certain
>   classes of certificates, including delegate certificates conveying
>   their scope of authority by-reference in Secure Telephone Identity
>   Revisited (STIR) systems, they may not be aligned with the needs of
>   relying parties.  This document specifies the use of the Online
>   Certificate Status Protocol (OCSP) as a means of retrieving real-time
>   status information about such certificates, defining new extensions
>   to compensate for the dynamism of telephone number assignments.
> 
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-stir-certificates-ocsp/
> 
> There is also an htmlized version available at:
> https://datatracker.ietf.org/doc/html/draft-ietf-stir-certificates-ocsp-05
> 
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-stir-certificates-ocsp-05
> 
> Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts
> 
> 
> _______________________________________________
> stir mailing list
> stir@ietf.org
> https://www.ietf.org/mailman/listinfo/stir