IETF Logo Mail Archive

Re: [therightkey] DNSNMC deprecates Certificate Authorities and fixes HTTPS security

Paul Lambert <paul@marvell.com> Tue, 17 December 2013 00:53 UTC

Return-Path: <paul@marvell.com>
X-Original-To: therightkey@ietfa.amsl.com
Delivered-To: therightkey@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10DC21ADFB7 for <therightkey@ietfa.amsl.com>; Mon, 16 Dec 2013 16:53:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.566
X-Spam-Level:
X-Spam-Status: No, score=-1.566 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, IP_NOT_FRIENDLY=0.334, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uUebxUFcxbYU for <therightkey@ietfa.amsl.com>; Mon, 16 Dec 2013 16:53:08 -0800 (PST)
Received: from mx0a-0016f401.pphosted.com (mx0a-0016f401.pphosted.com [67.231.148.174]) by ietfa.amsl.com (Postfix) with ESMTP id 043ED1ADFA4 for <therightkey@ietf.org>; Mon, 16 Dec 2013 16:53:07 -0800 (PST)
Received: from pps.filterd (m0045849.ppops.net [127.0.0.1]) by mx0a-0016f401.pphosted.com (8.14.5/8.14.5) with SMTP id rBH0r6G1018788; Mon, 16 Dec 2013 16:53:06 -0800
Received: from sc-owa02.marvell.com ([199.233.58.137]) by mx0a-0016f401.pphosted.com with ESMTP id 1gr76f2d0a-14 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT); Mon, 16 Dec 2013 16:53:06 -0800
Received: from SC-vEXCH2.marvell.com ([10.93.76.134]) by sc-owa02.marvell.com ([10.93.76.22]) with mapi; Mon, 16 Dec 2013 16:53:02 -0800
From: Paul Lambert <paul@marvell.com>
To: Tao Effect <contact@taoeffect.com>, Ben Laurie <benl@google.com>
Date: Mon, 16 Dec 2013 16:53:00 -0800
Thread-Topic: [therightkey] DNSNMC deprecates Certificate Authorities and fixes HTTPS security
Thread-Index: Ac76wlX9/TCxT2f/RG2VubHwgAzxZw==
Message-ID: <CED4DF97.2A6D1%paul@marvell.com>
References: <22429D73-4EFC-4091-8F5B-BAD38968EA54@taoeffect.com> <CABrd9SQebG0+DpnD0GXD8nOXa2FSSKp8LLbBO+q1PxAEJ6dQcw@mail.gmail.com> <596BD192-F19E-48A5-8FD7-37D5A2085751@taoeffect.com> <CABrd9SShenVv4wm06kut+sXQRzHQoZezajLbGc_HZnu_4jwxrg@mail.gmail.com> <AD2594AC-CA6B-4314-A521-5C15E1C13F86@taoeffect.com>
In-Reply-To: <AD2594AC-CA6B-4314-A521-5C15E1C13F86@taoeffect.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.3.9.131030
acceptlanguage: en-US
Content-Type: multipart/alternative; boundary="_000_CED4DF972A6D1paulmarvellcom_"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.11.87, 1.0.14, 0.0.0000 definitions=2013-12-16_02:2013-12-16, 2013-12-16, 1970-01-01 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 spamscore=0 suspectscore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=7.0.1-1305240000 definitions=main-1312160188
Cc: "therightkey@ietf.org" <therightkey@ietf.org>
Subject: Re: [therightkey] DNSNMC deprecates Certificate Authorities and fixes HTTPS security
X-BeenThere: therightkey@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <therightkey.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/therightkey>, <mailto:therightkey-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/therightkey/>
List-Post: <mailto:therightkey@ietf.org>
List-Help: <mailto:therightkey-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/therightkey>, <mailto:therightkey-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Dec 2013 00:53:09 -0000




Though this thread is more of an announcement, it can also be considered a first draft of a proposal for DNSNMC.

Paper was linked to in the first post, here it is again:

http://okturtles.com/other/dnsnmc_okturtles_overview.pdf

More of a marketing announcement than a technical proposal … perhaps I missed the URL, but is there any technical specification?
Seem like the charter of this group could provide a more generic worked out solution.

Paul

v2.23.0 | Report a Bug | By Email