[TLS] Re: I-D Action: draft-ietf-tls-trust-anchor-ids-06.txt
David Benjamin <davidben@chromium.org> Wed, 30 September 2026 15:31 UTC
Received: from mail-qk2-x0d.google.com (mail-qk2-x0d.google.com [IPv6:2607:f8b0:4864:34::d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id EA84342 for <tls@ietf.org>; Wed, 30 Sep 2026 15:31:04 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=chromium.org header.s=google header.b=i5Rp0uZZ; dmarc=pass (policy=none) header.from=chromium.org; arc=pass ("google.com:s=arc-20260327:i=1"); spf=pass (mx.ietf.org: domain of davidben@google.com designates 2607:f8b0:4864:34::d as permitted sender) smtp.mailfrom=davidben@google.com
Received: by mail-qk2-x0d.google.com with SMTP id d75a77b69052e-53321c5743fso19308631cf.1 for <tls@ietf.org>; Wed, 30 Sep 2026 08:31:04 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1790782264; cv=none; d=google.com; s=arc-20260327; b=Qe+gDdNsCeeRxPilvDVM5S6y2/Fe4WCn7cqf2RYalkrkPqlNWqWlTlaYNZx5J1OpcO SgWrdmHGuskkvwRreGXdIbqAfzhn3K+xvUnyFKXjSk2YNrL8t9x2HsNM/asFZ1+TAxcn 2zfUrP/031zhZSJVUIJjRTTlE4Gd1bJeoriuJAZdONEdDMjzAT/89u6canLp0lC13j71 AAGM0myY083ajJjnw1+Qs4XQ57juYQJyyarpxs/ycmC9I5n0NtAWBksHy025SwVpZRIc buSke+BYFPiv4to73u7W7z5Ts+4HoM/Cep4MC1UelxDP5ANRAJZ2W/5tT44o1VDiXa6o p7IA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :dkim-signature; bh=2btrBP3hPLN84QhvnNTRVcSKS/GcyqRB4w0UXOQi4gs=; fh=iMQEz7fIE2XtFWqLUMEt8tz+aEDEJVSqHa2ftqd9oME=; b=bvTLGNsA0dmMZQxRvqSeVPhMwwxV7dbWAAvzdso4tif8/TnHgP1PTQcgVEumQuLePo ou1bLh2gnNViYb/9JnN00BLCHdfwHeOkYKGsyC4sY4ksJTXy0+FdXkWhEjZeXZjEqa01 8Rv0Xu6+m9cDqfVPstHyQlqrdXr0haQ9NJabTeKCw0WIg1vEfWOS6YOHIVAeeya9yShd XDpg0JCzvmausZin8MZeTDto9Sxhvm/gMDe6k62vOhdvhsrJRo2QdL5kOqQQ2xdW6uuJ 3ihekbwHQJOSZVsbyD7Qs7hUucWQBAkprfeBLGEVNOTmU0nLE2Ll7uQyB+IuX5XNgs9M rZVA==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; t=1790782264; x=1791387064; darn=ietf.org; h=content-type:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=2btrBP3hPLN84QhvnNTRVcSKS/GcyqRB4w0UXOQi4gs=; b=i5Rp0uZZrNa8IbgKK0RukATtSepsWQsw6amOHsuxAbSIVjeWUhTH9kGit8+XNuZ6Sy oB5KWOBX+m6piigVw0/IuhT6M3fL63W/cV9R5iG7Gy27W/UFIsgDsgkAMqBmxasXRj0i vOI8UDZ3NbDBNAVIlbF6XzT/IyzdB7Z1Hl6ck=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1790782264; x=1791387064; h=content-type:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=2btrBP3hPLN84QhvnNTRVcSKS/GcyqRB4w0UXOQi4gs=; b=jJ1BwGSknykeenajMHMv+f8nlTLhW8ZfgK2jZXUM+V7dIghCLdIOOr/qSEBj3ZB42f UhY0dNwAXZZAKwWdxQkz8ZQUJIV2wEhPyNjUFF8+1COV3KI1TR2hguk6bQqvCb18x7F1 B+XtK+iefJtPxJRt/NharSO9JtNCRU2sXUVnWFyxB4js7TrDmJ9mP7fZXrbep+gc7/kk o30KcgBteFovrXh4aq0vuQfHXCgWciS+/L/BUSqxc9/ZbAi+PfkJWdSUC6/8XnDdCdz+ 4kfoWdEt7U+80q334aYzg8XR6wVAwOlo4vCDlHT9+nryoFZ6H5JXEtvkBYO0CZwtFtZx MOFQ==
X-Gm-Message-State: AFuF++mYg/H3NxxY41btzHDkaFxDw7dPh6JwcT5fGLeX9EC+nktrSPK1 vCzxrphPvvx+GOYw1LO3pKih36yxIexH6xSGiSC3bjcVgU4udsNPm210eO8qUiSOFqpB1r2twqa WX4DG7IOi+naBc3usfpkhIS9dd0JYmb2WoQIotbOytPKzYjtkAnbD7iqKTg==
X-Gm-Gg: AYBFou3FUTbaK5gFaJPRQp3k6KhIVKNemmeZE5L9uY9KRVnWfmiF/oVncjbIgn17fcj g9MDzrI5aEX5qKVVyP6RImRHwKpD05gnTu+PM9R1vkeInQ8AefGSr6oXqLqHjxfFeSD4W37bFcT smaGT/KM72AsNutCQW3nqJ5Us4Ie7fChAahEgivWZSWwxAyVKNieCZhDIPxRTykMGU7QS0BkSBM X1oswI1wcPKg4bxVEIYd4obFSCJIY7vrgz9evJ8FoBqm6alBIBi6SSp6sX3u/ON6EXK7jo62I4S pTAz2gP6tufojAsovPqcuIv/2fnDJduSAwQUpgj9bxzR6CDXsbL/fLlu3vZyesaUfiMiTAmkPnh HB5AJtBz7GHEyhYJZ/AV5Nvr90bwsoupqvfiHB5FG
X-Received: by 2002:a05:622a:148f:b0:530:b2e4:d59f with SMTP id d75a77b69052e-53374f12541mr33944271cf.58.1790782262974; Wed, 30 Sep 2026 08:31:02 -0700 (PDT)
MIME-Version: 1.0
References: <179078104939.737.14023646201856555975@dt-datatracker-644cd56954-r5c4n>
In-Reply-To: <179078104939.737.14023646201856555975@dt-datatracker-644cd56954-r5c4n>
From: David Benjamin <davidben@chromium.org>
Date: Wed, 30 Sep 2026 11:30:43 -0400
X-Gm-Features: AclHuK-v-MEwaL6sc7UT16clnQggoTis9HeC1iwueJN-HDZvdhxO7ws4Ka_-NBw
Message-ID: <CAF8qwaDXaHteQ_Sd=1U2jDuzYphde8YYamqSxzSV-0d71Z5yPw@mail.gmail.com>
To: tls@ietf.org
Content-Type: multipart/alternative; boundary="000000000000a9ec87065cb4fcad"
X-Spamd-Bar: -----
Message-ID-Hash: M2VJIP2ONWLO2YIYIF3PUR6JIOJRX6JG
X-Message-ID-Hash: M2VJIP2ONWLO2YIYIF3PUR6JIOJRX6JG
X-MailFrom: davidben@google.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; header-match-tls.ietf.org-5; header-match-tls.ietf.org-6; header-match-tls.ietf.org-7; header-match-tls.ietf.org-8; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [TLS] Re: I-D Action: draft-ietf-tls-trust-anchor-ids-06.txt
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/BNr4hTLgaP2atYL-KjuyACiRbfE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
Hi all, This is just a small draft bump to flush the buffer of things in GitHub, we get MTC to an implementation target. The change here is to try to reflect some feedback from Ilari and others around edge cases when converting OIDs to text form. The maximum size of an ID is tightened up a bit, and there's some guidance on how to navigate with the various limits folks have on OID components. David On Wed, Sep 30, 2026 at 11:11 AM <internet-drafts@ietf.org> wrote: > Internet-Draft draft-ietf-tls-trust-anchor-ids-06.txt is now available. It > is > a work item of the Transport Layer Security (TLS) WG of the IETF. > > Title: TLS Trust Anchor Identifiers > Authors: Bob Beck > David Benjamin > Devon O'Brien > Kyle Nekritz > Name: draft-ietf-tls-trust-anchor-ids-06.txt > Pages: 41 > Dates: 2026-09-30 > > Abstract: > > This document defines the TLS Trust Anchors extension, a mechanism > for a TLS client or server to select a certificate to present based > on the peer's trusted certification authorities. It describes > certification authorities more succinctly than the TLS Certificate > Authorities extension. > > The IETF datatracker status page for this Internet-Draft is: > https://datatracker.ietf.org/doc/draft-ietf-tls-trust-anchor-ids/ > > There is also an HTML version available at: > https://www.ietf.org/archive/id/draft-ietf-tls-trust-anchor-ids-06.html > > A diff from the previous version is available at: > > https://author-tools.ietf.org/iddiff?url2=draft-ietf-tls-trust-anchor-ids-06 > > Internet-Drafts are also available by rsync at: > rsync.ietf.org::internet-drafts > > > _______________________________________________ > TLS mailing list -- tls@ietf.org > To unsubscribe send an email to tls-leave@ietf.org >
- [TLS] I-D Action: draft-ietf-tls-trust-anchor-ids… internet-drafts
- [TLS] Re: I-D Action: draft-ietf-tls-trust-anchor… David Benjamin