IETF Logo Mail Archive

Re: [TLS] Abridged Certificate Compression

Dennis Jackson <ietf@dennis-jackson.uk> Tue, 11 July 2023 19:12 UTC

Return-Path: <ietf@dennis-jackson.uk>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACB47C16B5C9 for <tls@ietfa.amsl.com>; Tue, 11 Jul 2023 12:12:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.095
X-Spam-Level:
X-Spam-Status: No, score=-7.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=dennis-jackson.uk
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BcMuEw6C428B for <tls@ietfa.amsl.com>; Tue, 11 Jul 2023 12:12:09 -0700 (PDT)
Received: from mout-p-101.mailbox.org (mout-p-101.mailbox.org [80.241.56.151]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A543C131809 for <tls@ietf.org>; Tue, 11 Jul 2023 12:12:08 -0700 (PDT)
Received: from smtp102.mailbox.org (smtp102.mailbox.org [IPv6:2001:67c:2050:b231:465::102]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-p-101.mailbox.org (Postfix) with ESMTPS id 4R0r8g1yt7z9sc0; Tue, 11 Jul 2023 21:12:03 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dennis-jackson.uk; s=MBO0001; t=1689102723; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=dx2Opb29uz+qyr+qjP3xj/3Qa0TY6CyxqH23yKgLW3k=; b=azqi0SW12GZLAEzkjMRRZhyB9bfmSfeiMbcNEISV99vzur9t8RRxm+ZaXuqEh6EyaiTDEL nbcda7hOKzQif6wzP712PRs0weXrTeTocCIEqoo/i7JdPPc+98Eiya6ODacg/GLilREa8N Mvz6gLb0N5WqBDgrNskqUGX9aer87o+h8nVpkDm8oFbtZRU0NQJQLnz6RjTI3eKa8jCarv wY/P258mzIV+5hzxDG+zf/MYOEenkD2AMbKxUJzylTRaT5uSMsNQqZK1JWsIp02QPwxDG1 XEY6Z1Yu3bvFYW0vvqnX58WVDa9WzKSRd1azWvuS1UN9FDcxVVd/mkX5k0vdOw==
Content-Type: multipart/alternative; boundary="------------12ggk85VxfSdjtPLW6ijQQNy"
Message-ID: <9d9af8fa-f61d-2f18-daaa-ca6c510f28c3@dennis-jackson.uk>
Date: Tue, 11 Jul 2023 20:12:01 +0100
MIME-Version: 1.0
Content-Language: en-US
To: Eric Rescorla <ekr@rtfm.com>
Cc: TLS List <tls@ietf.org>
References: <168868149085.54562.8407395333388460548@ietfa.amsl.com> <6c2f1152-f3c1-0dfa-2f8b-784cf7f7286e@dennis-jackson.uk> <CABcZeBOqORiSvwkvGpQzP9Y_ZLp3SkSC1Eqbt=e86bMSzoiRzw@mail.gmail.com> <0b629b2e-b89a-b828-2dfd-10c254eb8861@dennis-jackson.uk> <CABcZeBNPXLG70V=ASzRgw60RNELArWACH3RLd8pseXWq5T1NEA@mail.gmail.com> <7010561d-9869-65cb-a3e6-9d795b53d421@dennis-jackson.uk> <CABcZeBOKH4XoynBz5XhzVpmw79Sb43QDLXLr7XkQy8LvCKgwOg@mail.gmail.com>
From: Dennis Jackson <ietf@dennis-jackson.uk>
In-Reply-To: <CABcZeBOKH4XoynBz5XhzVpmw79Sb43QDLXLr7XkQy8LvCKgwOg@mail.gmail.com>
X-Rspamd-Queue-Id: 4R0r8g1yt7z9sc0
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/dcd5fVU027lkMTwAKVfKIn2hiKk>
Subject: Re: [TLS] Abridged Certificate Compression
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Jul 2023 19:12:14 -0000

On 11/07/2023 01:00, Eric Rescorla wrote:

> My sense is that we would be better off getting the data from CCADB, 
> as CAs will have a clear incentive to populate it, as their customers 
> will get better performance.
>
> However, I think this is a question the WG is well suited to resolve 
> and that we could adopt the document as-is and sort this out later.

Thanks, I filed #7 
<https://github.com/dennisjackson/draft-jackson-tls-cert-abridge/issues/7> 
to keep track of this.

v2.46.0 | Report a Bug | By Email | System Status