Re: [TLS] I-D Action: draft-ietf-tls-oob-pubkey-08.txt

[Hauke Mehrtens <[e-mail]>]

On 07/16/2013 01:11 AM, [e-mail] wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
>  This draft is a work item of the Transport Layer Security Working Group of the IETF.
> 
> 	Title           : Out-of-Band Public Key Validation for Transport Layer Security (TLS)
> 	Author(s)       : Paul Wouters
>                           Hannes Tschofenig
>                           John Gilmore
>                           Samuel Weiler
>                           Tero Kivinen
> 	Filename        : draft-ietf-tls-oob-pubkey-08.txt
> 	Pages           : 15
> 	Date            : 2013-07-15
> 
> Abstract:
>    This document specifies a new certificate type and two TLS
>    extensions, one for the client and one for the server, for exchanging
>    raw public keys in Transport Layer Security (TLS) and Datagram
>    Transport Layer Security (DTLS) for use with out-of-band public key
>    validation.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-tls-oob-pubkey
> 

Thanks for the new draft.

I have some comments to this version:

In section 3. New TLS Extension the link to Section 2.3.5 of RFC 5480
is wrong, this should be just Section 2.

RFC 5480 defines a lot more OIDs which could be used as an algorithm OID
than listen in Figure 3. ECDSA defines a different OID for every
standardized curve. I think naming the OID in Figure 3 should be removed
and there should just be a pinter to the RFC. It should also be made
clear that there could be further RFC than RFC 3279, RFC3279 and RFC5480
defining OIDs used in the SubjectPublicKeyInfo, like RFCs defining a new
public key type.

Could you add some list definition where the numbers assigned by the
IANA should be added later. I like how it is done in
draft-mcgrew-tls-aes-ccm-ecc-06 for the CipherSuites [0].

Are there some intermediate version of this draft available, like a
public readable svn repository where the work on this draft is happening?

Hauke


[0]: https://tools.ietf.org/html/draft-mcgrew-tls-aes-ccm-ecc-06#section-2