IETF Logo Mail Archive

Re: [TLS] WG Adoption for TLS Trust Expressions

Watson Ladd <watsonbladd@gmail.com> Sat, 27 April 2024 02:13 UTC

Return-Path: <watsonbladd@gmail.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BF1CC1519B2 for <tls@ietfa.amsl.com>; Fri, 26 Apr 2024 19:13:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.095
X-Spam-Level:
X-Spam-Status: No, score=-7.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Uhbvfog1gBC for <tls@ietfa.amsl.com>; Fri, 26 Apr 2024 19:13:09 -0700 (PDT)
Received: from mail-wr1-x430.google.com (mail-wr1-x430.google.com [IPv6:2a00:1450:4864:20::430]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9D3DC14F75F for <tls@ietf.org>; Fri, 26 Apr 2024 19:13:09 -0700 (PDT)
Received: by mail-wr1-x430.google.com with SMTP id ffacd0b85a97d-34a32ba1962so2229838f8f.2 for <tls@ietf.org>; Fri, 26 Apr 2024 19:13:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1714183988; x=1714788788; darn=ietf.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=qunYxU1KSfE8OQXTWUqkGuhIUo+/TR6ugIqxLbAutFs=; b=TpZsvGEvBvaaXVw7iK1XN1hGKCq+xyAao40Qcko7RL/eKrXPR+0fgjfVKxP8xwsia2 zDJumhL5F0TwVYS4yyr4GJ+GSlLrQ7K3tW0vJy0Q2Z3jQnxHayEwLJdOHVG9LvAoGkuk qkQZbU1qFmZuRg77LQEQFowVJtnfloSfbydx4RG4i6ZGMxLOTmADt0ExX2EnuYp1Tzq+ O+yFtmMlILph+5majc1YY48m7r9L5ERZEwPDVT4Vka8mO7gMpyM9P+o0AjgHTNZkDQOn Vv0NutQX3neFiyrzBrJK0ZIJ2OKfjSsnBmTOuNBDqzWFDgbaqqVVt2RL6ucd1gWQwrvK LRaA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1714183988; x=1714788788; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=qunYxU1KSfE8OQXTWUqkGuhIUo+/TR6ugIqxLbAutFs=; b=kCMu5lpvbRjqpZXBd/JEYc8xTgNY97nPbsTHQmsB5Um9X4YzFejZDHLLboSe02o69z K2Kv1sy7nbZiYAHWhsuYIG4Lye3Lees2ezRccdCbitQ02jIjppLZhyIN6EcXQV1nDnXy cnZ9Ut0fHO2D9ApL0Fohu9SxxEbAXXy8CK7gpcUV4sxYypr1Qyhm/q+DCsw+qYA5LTj3 CKsYD49rv1X1B1TYz6RvXX0OuSdc4U2DIU/bLXNbnSGBuwt9hdGc3Gk13PABGryqWGw2 Lg9hsFjpsmep3gYrbEJmvbuvpynKDSPcfmj64mS3O3UveadEfucaaIr5z1qYyUFJr76X M2sQ==
X-Gm-Message-State: AOJu0YwmV3s13wEvbkj4SrctoeV7mVTJtIUeSGYtHyYqnH5zbFi5MtnR N1uHotaIBZCrzhalER2mPxPn0bBg8yKoTdglQGTSTxoYKED/kVZ2r+Y/w1CJzWDQ/HT0OJeGPWD Vy3oKo1J1OzeIEUAO/a0SJbLNb66Asw==
X-Google-Smtp-Source: AGHT+IE9E6pfot2juDh1KvTRHJx7EER8v4cRx6IEfSmSpqS2J2240vl3KY72ZkfpGE2g2bouX5y8NS3tHGk9xTCWZgY=
X-Received: by 2002:a5d:64ad:0:b0:34a:e69b:494e with SMTP id m13-20020a5d64ad000000b0034ae69b494emr3195680wrp.23.1714183987680; Fri, 26 Apr 2024 19:13:07 -0700 (PDT)
MIME-Version: 1.0
References: <CAD2nvsQafns7PB72uV2CBgrt1N+f3YK6p_=EO-A_Bs-mb9=g1Q@mail.gmail.com>
In-Reply-To: <CAD2nvsQafns7PB72uV2CBgrt1N+f3YK6p_=EO-A_Bs-mb9=g1Q@mail.gmail.com>
From: Watson Ladd <watsonbladd@gmail.com>
Date: Fri, 26 Apr 2024 19:12:56 -0700
Message-ID: <CACsn0cnb9Aq80cUAQ6rctgCJF0Dmsxe+1zy=Axtu-tAV3sr_JA@mail.gmail.com>
To: Devon O'Brien <asymmetric=40google.com@dmarc.ietf.org>
Cc: tls@ietf.org, Bob Beck <bbe@google.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/7a_4VsilMGwv4t4oGJJYAVxzCQ0>
Subject: Re: [TLS] WG Adoption for TLS Trust Expressions
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 27 Apr 2024 02:13:14 -0000

On Tue, Apr 23, 2024 at 1:39 PM Devon O'Brien
<asymmetric=40google.com@dmarc.ietf.org> wrote:
>
> After sharing our first draft of TLS Trust Expressions and several discussions across a couple  IETFs, we’d like to proceed with a call for working group adoption of this draft. We are currently prototyping trust expressions in BoringSSL & Chromium and will share more details when implementation is complete.
>
>
> As we mentioned in our message to the mailing list from January, our primary goal is to produce a mechanism for supporting multiple subscriber certificates and efficiently negotiating which to serve on a given TLS connection, even if that ends up requiring significant changes to the draft in its current state.
>
>
> To that end, we’re interested in learning whether wg members support adoption of this deployment model and the currently-described certificate negotiation mechanism or if they oppose adoption (and why!).

We absolutely need to solve the problem and the draft is a good starting point.

>
>
> Thanks!
>
> David, Devon, and Bob
>
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls



-- 
Astra mortemque praestare gradatim

v2.46.0 | Report a Bug | By Email | System Status