[Tls-reg-review] [IANA #1161720] IANA assignments for draft-ietf-tls-subcerts

"Amanda Baber via RT" <iana-prot-param@iana.org> Thu, 06 February 2020 08:55 UTC

Return-Path: <iana-shared@icann.org>
X-Original-To: tls-reg-review@ietfa.amsl.com
Delivered-To: tls-reg-review@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 588B01201A3; Thu, 6 Feb 2020 00:55:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.949
X-Spam-Level:
X-Spam-Status: No, score=-3.949 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hp5sg7nX6Psh; Thu, 6 Feb 2020 00:55:07 -0800 (PST)
Received: from smtp01.icann.org (smtp01.icann.org [192.0.33.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23FF4120104; Thu, 6 Feb 2020 00:55:07 -0800 (PST)
Received: from request4.lax.icann.org (request1.lax.icann.org [10.32.11.221]) by smtp01.icann.org (Postfix) with ESMTP id EBCD2E0B29; Thu, 6 Feb 2020 08:55:06 +0000 (UTC)
Received: by request4.lax.icann.org (Postfix, from userid 48) id E89392035F; Thu, 6 Feb 2020 08:55:06 +0000 (UTC)
RT-Owner: amanda.baber
From: Amanda Baber via RT <iana-prot-param@iana.org>
Reply-To: iana-prot-param@iana.org
In-Reply-To: <8AB42A8D-B2E1-40FE-91E2-D16673FAC1C0@sn3rd.com>
References: <RT-Ticket-1161720@icann.org> <8AB42A8D-B2E1-40FE-91E2-D16673FAC1C0@sn3rd.com>
Message-ID: <rt-4.4.3-7673-1580979306-846.1161720-37-0@icann.org>
X-RT-Loop-Prevention: IANA
X-RT-Ticket: IANA #1161720
X-Managed-BY: RT 4.4.3 (http://www.bestpractical.com/rt/)
X-RT-Originator: amanda.baber@icann.org
To: sean@sn3rd.com
CC: tls-reg-review@ietf.org, tls-ads@ietf.org, housley@vigilsec.com
Content-Type: text/plain; charset="utf-8"
X-RT-Original-Encoding: utf-8
Precedence: bulk
Date: Thu, 06 Feb 2020 08:55:06 +0000
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls-reg-review/077tRnRoLMalsLgV1MiVScHuTtg>
Subject: [Tls-reg-review] [IANA #1161720] IANA assignments for draft-ietf-tls-subcerts
X-BeenThere: tls-reg-review@ietf.org
X-Mailman-Version: 2.1.29
List-Id: TLS REVIEW <tls-reg-review.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls-reg-review>, <mailto:tls-reg-review-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls-reg-review/>
List-Post: <mailto:tls-reg-review@ietf.org>
List-Help: <mailto:tls-reg-review-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls-reg-review>, <mailto:tls-reg-review-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Feb 2020 08:55:09 -0000

Hi Sean, all,

1) We've already assigned TLS ExtensionType value 34 to delegated_credentials, but with "Recommended" set to "Y":

https://www.iana.org/assignments/tls-extensiontype-values

Rich, Nick, Yoav: can you confirm that this should be changed to "N"?

2) If Russ approves, how should we fill in the "Description" field for the SMI Security for PKIX Module Identifier registration? Examples here:

https://www.iana.org/assignments/smi-numbers/smi-numbers.xhtml#smi-numbers-1.3.6.1.5.5.7.0

thanks,
Amanda

On Thu Feb 06 07:37:21 2020, sean@sn3rd.com wrote:
> DEs,
> 
> On behalf of the TLS WG, I am requesting the following assignments for:
> https://datatracker.ietf.org/doc/draft-ietf-tls-subcerts/
> 
> For convenience I have included them below:
> 
> 1. For TLS DEs: Update of the TLS ExtensionType Registry
> 
> This document registers the "delegated_credentials" extension in the
> "TLS ExtensionType Values" registry. The "delegated_credentials"
> extension has been assigned a code point of TBD. The IANA registry
> lists this extension as “Not Recommended" (i.e., "N")* and indicates
> that it may appear in the ClientHello (CH), CertificateRequest (CR),
> or Certificate (CT) messages in TLS 1.3 [RFC8446].
> 
> * The Recommended column will change from “N" to “Y” when the draft
> is in AUTH48. We cannot request that the TLS DEs set the Recommended
> to “Y” until this draft, which is a WG draft intended for standards
> track, has progressed beyond the IESG.
> 
> 2. For PKIX DE: Update of the SMI Security for PKIX Registry Request
> 
> This document also defines an ASN.1 module for the DelegationUsage
> certificate extension in Appendix A. IANA is requested to register
> an Object Identifier (OID) for the ASN.1 in "SMI Security for PKIX
> Module Identifier" arc. An OID for the DelegationUsage certificate
> extension is not needed as it is already assigned to the extension
> from Cloudflare's IANA Private Enterprise Number (PEN) arc. 
> 
> Many Thanks!
> 
> spt