IETF Logo Mail Archive

Re: [TLS] [EXTERNAL] Re: WG Adoption for TLS Trust Expressions

Andrei Popov <Andrei.Popov@microsoft.com> Sat, 27 April 2024 02:38 UTC

Return-Path: <Andrei.Popov@microsoft.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5E46C14F708 for <tls@ietfa.amsl.com>; Fri, 26 Apr 2024 19:38:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.767
X-Spam-Level:
X-Spam-Status: No, score=-2.767 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.669, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U7xNqRmqFaQG for <tls@ietfa.amsl.com>; Fri, 26 Apr 2024 19:38:23 -0700 (PDT)
Received: from BN8PR05CU002.outbound.protection.outlook.com (mail-eastus2azon11023018.outbound.protection.outlook.com [52.101.56.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1CD8C14F6F5 for <tls@ietf.org>; Fri, 26 Apr 2024 19:38:22 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=W8xBuzhZBQQ0ACbPGFK0m7+vcu+ZRvQIiApfkRcMzqFyj/S3+QAddScOb1cFVnR9ly6qeUNe811mNmDRbz9M00flNQQJDkem4LFGAVpet23Xof1EoY0CHCsn0pbFaRYiRVwFry43I7YPyr87Urh4J4PLRGqQgykJPPO/SBvzEUc7EgaVsDheionQ7ckScj/22+IowhKeQxaSZ9Sg2PvalKiV5ePucEiRMrb7gXuLsWz5Mu1gr2HZJmV8g5oYVq2N4p6A/H0CeHrXCdPd2cPoMkPr8whA1HdkC9FusEy8JC+3QzQBOLMs3ZWnWeWAti+gn780sTYp5a6NBSCrB5vMXw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=0C44za2WqAC3e95NyBrW7ym1RBm/uJH9CTLIEyGUquQ=; b=DWXuXWGWG5CtlAZH2yaz8ZO0l+JQRcr2BNTxeBnOBQzHLHGNrI5ya7KF58dJ5AWLe11vTAq2no+XND/Taptc9UkEXPZ5Y3Qt4sW27aLLL1UQ0Pk4OiIJ8DbiRw9wo9vDa2HOD8yzNlf/VgBL/Gjr7oXjpSGkxqas7QxmPMAO36V98aRUxQTfc/Vs8FXgVZwQfnHYhbO1AyxFxvq1Sod+ikV+2oOZ4tJnaUBysGz6cFbVxroO1p9MmJ4uoXzG2cTD2BvqaEILjU/S95KNO/E7pjaaD2gQoCCZkt+OpTvnEvIlyfRI3osWDw/QIf+64sAmy+teeJTd/P1CZP2TAEvYyg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0C44za2WqAC3e95NyBrW7ym1RBm/uJH9CTLIEyGUquQ=; b=T3KwGM1N5Rsmw5Ok2AjcaL6BFJHo+8/mR++CT+y6bKqiB/KHtFfmcadGqHpV/jjVbrCdrQzy4a53o+3jkKIk+iAuNUaQdICVcmmzkhBK2FbLA5Ms2tbpFTyfOwT5Rlu3ymDTzq3KeltFVrMTyKNISNFXPkmEEHmQWxO+z9tdqh4=
Received: from MW2PR2101MB1083.namprd21.prod.outlook.com (2603:10b6:302:a::24) by SA0PR21MB1897.namprd21.prod.outlook.com (2603:10b6:806:e4::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.11; Sat, 27 Apr 2024 02:38:20 +0000
Received: from MW2PR2101MB1083.namprd21.prod.outlook.com ([fe80::5f81:b23:10cd:bb9b]) by MW2PR2101MB1083.namprd21.prod.outlook.com ([fe80::5f81:b23:10cd:bb9b%2]) with mapi id 15.20.7544.016; Sat, 27 Apr 2024 02:38:18 +0000
From: Andrei Popov <Andrei.Popov@microsoft.com>
To: Watson Ladd <watsonbladd@gmail.com>, Devon O'Brien <asymmetric=40google.com@dmarc.ietf.org>
CC: "tls@ietf.org" <tls@ietf.org>, Bob Beck <bbe@google.com>
Thread-Topic: [EXTERNAL] Re: [TLS] WG Adoption for TLS Trust Expressions
Thread-Index: AQHamEiDuP0ZfQqXr02e6BesIo8hK7F7ZzZQ
Date: Sat, 27 Apr 2024 02:38:18 +0000
Message-ID: <MW2PR2101MB1083F82C2B4C9681B270D1208C152@MW2PR2101MB1083.namprd21.prod.outlook.com>
References: <CAD2nvsQafns7PB72uV2CBgrt1N+f3YK6p_=EO-A_Bs-mb9=g1Q@mail.gmail.com> <CACsn0cnb9Aq80cUAQ6rctgCJF0Dmsxe+1zy=Axtu-tAV3sr_JA@mail.gmail.com>
In-Reply-To: <CACsn0cnb9Aq80cUAQ6rctgCJF0Dmsxe+1zy=Axtu-tAV3sr_JA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=5ef96dc2-55d9-4e78-81ca-6bd5cae79db6; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2024-04-27T02:37:47Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47;
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=microsoft.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: MW2PR2101MB1083:EE_|SA0PR21MB1897:EE_
x-ms-office365-filtering-correlation-id: 2f919c76-423e-4896-3a9d-08dc666318a3
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0; ARA:13230031|376005|1800799015|366007|38070700009;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MW2PR2101MB1083.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(376005)(1800799015)(366007)(38070700009); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MW2PR2101MB1083.namprd21.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2f919c76-423e-4896-3a9d-08dc666318a3
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Apr 2024 02:38:18.0721 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: SvMLRWperc8DReZ6U0donfwKSjHjfIscR5UvwgwPwA98HfDuPCPYAyKu6wREQFLAaMkQD6fcDZX/ssfHB41QyQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR21MB1897
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/5FPx1GW1LhERagOrDVNkOaxhS-Y>
Subject: Re: [TLS] [EXTERNAL] Re: WG Adoption for TLS Trust Expressions
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 27 Apr 2024 02:38:27 -0000

I support adoption.

Cheers,

Andrei

-----Original Message-----
From: TLS <tls-bounces@ietf.org> On Behalf Of Watson Ladd
Sent: Friday, April 26, 2024 7:13 PM
To: Devon O'Brien <asymmetric=40google.com@dmarc.ietf.org>
Cc: tls@ietf.org; Bob Beck <bbe@google.com>
Subject: [EXTERNAL] Re: [TLS] WG Adoption for TLS Trust Expressions

On Tue, Apr 23, 2024 at 1:39 PM Devon O'Brien <asymmetric=40google.com@dmarc.ietf.org> wrote:
>
> After sharing our first draft of TLS Trust Expressions and several discussions across a couple  IETFs, we’d like to proceed with a call for working group adoption of this draft. We are currently prototyping trust expressions in BoringSSL & Chromium and will share more details when implementation is complete.
>
>
> As we mentioned in our message to the mailing list from January, our primary goal is to produce a mechanism for supporting multiple subscriber certificates and efficiently negotiating which to serve on a given TLS connection, even if that ends up requiring significant changes to the draft in its current state.
>
>
> To that end, we’re interested in learning whether wg members support adoption of this deployment model and the currently-described certificate negotiation mechanism or if they oppose adoption (and why!).

We absolutely need to solve the problem and the draft is a good starting point.

>
>
> Thanks!
>
> David, Devon, and Bob
>
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www/.
> ietf.org%2Fmailman%2Flistinfo%2Ftls&data=05%7C02%7CAndrei.Popov%40micr
> osoft.com%7C6ca75aa932344f322d9f08dc665fa375%7C72f988bf86f141af91ab2d7
> cd011db47%7C1%7C0%7C638497808164901299%7CUnknown%7CTWFpbGZsb3d8eyJWIjo
> iMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%
> 7C&sdata=2n8iljUXBtb4Jf%2FZTqN2Nl5j81WoatTYA64c5%2FRoH0A%3D&reserved=0



--
Astra mortemque praestare gradatim

_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

v2.31.3 | Report a Bug | By Email | System Status