From nobody Thu Aug 20 09:01:33 2020 Return-Path: X-Original-To: tls@ietfa.amsl.com Delivered-To: tls@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECE013A085A for ; Thu, 20 Aug 2020 09:01:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FmJUsz-Hxw4K for ; Thu, 20 Aug 2020 09:01:30 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 535FC3A082E for ; Thu, 20 Aug 2020 09:01:19 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id A17BE300B50 for ; Thu, 20 Aug 2020 12:01:16 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 8F1FiWyi5DIB for ; Thu, 20 Aug 2020 12:01:14 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-141-156-161-153.washdc.fios.verizon.net [141.156.161.153]) by mail.smeinc.net (Postfix) with ESMTPSA id 49BD4300670; Thu, 20 Aug 2020 12:01:14 -0400 (EDT) From: Russ Housley Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_E48E77CC-EB56-431C-970B-CC5168929B04" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.15\)) Date: Thu, 20 Aug 2020 12:01:15 -0400 In-Reply-To: Cc: IETF TLS To: Nick Sullivan References: X-Mailer: Apple Mail (2.3445.104.15) Archived-At: Subject: Re: [TLS] comments on draft-subcerts X-BeenThere: tls@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Aug 2020 16:01:32 -0000 --Apple-Mail=_E48E77CC-EB56-431C-970B-CC5168929B04 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii There are many RFCs that use the PEM encoding to provide example = certificates: -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- Others use the output of dumpasn1 from Peter Gutmann. Either one would be fine with me. Russ > On Aug 19, 2020, at 10:32 PM, Nick Sullivan = wrote: >=20 > Thank you Russ and Rich for your comments, >=20 > I've attempted to address the comments here: = https://github.com/tlswg/tls-subcerts/pull/80 = , save for the one about = the example extension. >=20 > Russ, which format do you think would be most useful for the = extension? I'm having a hard time finding another extension to model = this after. >=20 > On Fri, Aug 14, 2020 at 10:00 AM Russ Housley > wrote: > I have two comments: >=20 > 1) The OID assignment for the ASN.1 module was assigned already by = IANA. Please fill it in. >=20 > 2) I think it would be very helpful to have an example of the = extension in an Appendix. There was discussion on the list about it, = and an error was found in the proposed example, which proves the need = for an example. >=20 > Russ >=20 > _______________________________________________ > TLS mailing list > TLS@ietf.org > https://www.ietf.org/mailman/listinfo/tls = --Apple-Mail=_E48E77CC-EB56-431C-970B-CC5168929B04 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii There= are many RFCs that use the PEM encoding to provide example = certificates:
     -----BEGIN = CERTIFICATE-----
     -----END = CERTIFICATE-----

Others use = the output of dumpasn1 from Peter Gutmann.

Either one would be fine with me.

Russ

On Aug 19, 2020, at 10:32 PM, = Nick Sullivan <nick@cloudflare.com> wrote:

Thank you Russ and Rich for = your comments,

I've attempted to address the comments here: https://github.com/tlswg/tls-subcerts/pull/80, save for = the one about the example extension.

Russ, which format do you think would = be most useful for the extension? I'm having a hard time finding another = extension to model this after.

On Fri, Aug = 14, 2020 at 10:00 AM Russ Housley <housley@vigilsec.com> wrote:
I = have two comments:

1) The OID assignment for the ASN.1 module was assigned already by = IANA.  Please fill it in.

2) I think it would be very helpful to have an example of the extension = in an Appendix.  There was discussion on the list about it, and an = error was found in the proposed example, which proves the need for an = example.

Russ

_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

= --Apple-Mail=_E48E77CC-EB56-431C-970B-CC5168929B04--