[TLS] registering x-509 mime types

"henry.story@bblfish.net" <henry.story@bblfish.net> Wed, 02 April 2014 06:31 UTC

Return-Path: <henry.story@bblfish.net>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D63B1A0141 for <tls@ietfa.amsl.com>; Tue, 1 Apr 2014 23:31:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OMo42XRSw-C7 for <tls@ietfa.amsl.com>; Tue, 1 Apr 2014 23:31:07 -0700 (PDT)
Received: from mail-wg0-f41.google.com (mail-wg0-f41.google.com [74.125.82.41]) by ietfa.amsl.com (Postfix) with ESMTP id 9B1F71A014D for <tls@ietf.org>; Tue, 1 Apr 2014 23:31:04 -0700 (PDT)
Received: by mail-wg0-f41.google.com with SMTP id n12so8338661wgh.0 for <tls@ietf.org>; Tue, 01 Apr 2014 23:31:00 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:content-type:content-transfer-encoding :subject:message-id:date:to:mime-version; bh=VobyVB9cl/oIov4OhYbB7HX6PXVWkoWSJN8OYeHC8jM=; b=IZ/nIubEJwtNUvRPZrAavXh5B5/lvpDnP5AZEI/RGvd5qVHxV4aHhM977rcqc9OvqC 0hb1F4PBg5bqmdvCQhQtUWmJVDDocmPGXge7TVQSKZ1ncBAlqmubDJDmPoAtMMUVTI/m lfto8f5TZdt93/Pku6pMKRO5XseAkI3VxKYPfDg2wrchJrLNYbM1gDge07Y3Q5fLP/p0 jZELxWI7cfCrZaCfxcRpIC9Xfo1+poHcLfPe/qflXw4Zn3xRVgOZ58g+ZCht1tzbbaeu 0xr3KJ2NKPBeh+08gfYTDXQMtEH+bd8XfSRdeBFNUKiFbtIajwOJhFWM6w+9NnPGo4L6 YnfQ==
X-Gm-Message-State: ALoCoQkE8NwhVxLoit+apZpDIxlG1veHb90HPdBm25O/ILljm+tOJ336hs5nVLiQXj1SA9otd3DS
X-Received: by 10.180.84.73 with SMTP id w9mr25568542wiy.58.1396420260296; Tue, 01 Apr 2014 23:31:00 -0700 (PDT)
Received: from [192.168.1.10] (AAubervilliers-651-1-161-84.w81-249.abo.wanadoo.fr. [81.249.172.84]) by mx.google.com with ESMTPSA id gx9sm2654237wib.13.2014.04.01.23.30.53 for <tls@ietf.org> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 01 Apr 2014 23:30:54 -0700 (PDT)
From: "henry.story@bblfish.net" <henry.story@bblfish.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Message-Id: <676D7423-514E-40A1-9CE5-DCBE3E5811FC@bblfish.net>
Date: Wed, 02 Apr 2014 08:30:52 +0200
To: TLS Mailing List <tls@ietf.org>
Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\))
X-Mailer: Apple Mail (2.1874)
Archived-At: http://mailarchive.ietf.org/arch/msg/tls/GEy7EO1Np8gxHc3_osVE3qmFkNI
Subject: [TLS] registering x-509 mime types
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Apr 2014 06:31:11 -0000

Hi,

  The HTML5 keygen element [1] works by having the browser send a public key to the
server which can then return an X509 certificate back to the browser using one of the
following mime types [2]

    (a) application/x-x509-user-cert 
    (b) application/x-x509-ca-cert 
    (c) application/x-x509-email-cert

This seems to work for most browsers - Safari, Chrome, Nescape, Opera - and has
been functioning like this since at least the year 2000 I think. The keygen tag
was only added to html officially a few years ago.

  What is missing though is that these mime types are not registered at IANA.
Is there anyone here ( or perhaps I should look somewhere else ) who would like
to register that at IANA? It would at least make it easier for developers building
web sites to work out what the correct mime type to use is.

  Perhaps one could also then get the html5 people to add a note about this
to their specification.  

   http://lists.whatwg.org/htdig.cgi/whatwg-whatwg.org/2014-April/084613.html


 Henry


[1] http://www.w3.org/html/wg/drafts/html/CR/forms.html#the-keygen-element
[2] https://wiki.mozilla.org/CA:Certificate_Download_Specification
[3] http://www.iana.org/assignments/media-types/media-types.xhtml

Social Web Architect
http://bblfish.net/