Re: [Tls-reg-review] [IANA #1161720] IANA assignments for draft-ietf-tls-subcerts

[Sean Turner <[e-mail]>]

> On Feb 6, 2020, at 09:55, Amanda Baber via RT <[e-mail]> wrote:
> 
> Hi Sean, all,
> 
> 1) We've already assigned TLS ExtensionType value 34 to delegated_credentials, but with "Recommended" set to "Y":
> 
> https://www.iana.org/assignments/tls-extensiontype-values
> 
> Rich, Nick, Yoav: can you confirm that this should be changed to "N"?
> 
> 2) If Russ approves, how should we fill in the "Description" field for the SMI Security for PKIX Module Identifier registration? Examples here:
> 
> https://www.iana.org/assignments/smi-numbers/smi-numbers.xhtml#smi-numbers-1.3.6.1.5.5.7.0

From the draft:
id-mod-delegated-credential-extn

> thanks,
> Amanda
> 
> On Thu Feb 06 07:37:21 2020, [e-mail] wrote:
>> DEs,
>> 
>> On behalf of the TLS WG, I am requesting the following assignments for:
>> https://datatracker.ietf.org/doc/draft-ietf-tls-subcerts/
>> 
>> For convenience I have included them below:
>> 
>> 1. For TLS DEs: Update of the TLS ExtensionType Registry
>> 
>> This document registers the "delegated_credentials" extension in the
>> "TLS ExtensionType Values" registry. The "delegated_credentials"
>> extension has been assigned a code point of TBD. The IANA registry
>> lists this extension as “Not Recommended" (i.e., "N")* and indicates
>> that it may appear in the ClientHello (CH), CertificateRequest (CR),
>> or Certificate (CT) messages in TLS 1.3 [RFC8446].
>> 
>> * The Recommended column will change from “N" to “Y” when the draft
>> is in AUTH48. We cannot request that the TLS DEs set the Recommended
>> to “Y” until this draft, which is a WG draft intended for standards
>> track, has progressed beyond the IESG.
>> 
>> 2. For PKIX DE: Update of the SMI Security for PKIX Registry Request
>> 
>> This document also defines an ASN.1 module for the DelegationUsage
>> certificate extension in Appendix A. IANA is requested to register
>> an Object Identifier (OID) for the ASN.1 in "SMI Security for PKIX
>> Module Identifier" arc. An OID for the DelegationUsage certificate
>> extension is not needed as it is already assigned to the extension
>> from Cloudflare's IANA Private Enterprise Number (PEN) arc. 
>> 
>> Many Thanks!
>> 
>> spt
>