[TLS] Fwd: New Version Notification for draft-ietf-tls-subcerts-09.txt

Nick Sullivan <nick@cloudflare.com> Fri, 26 June 2020 23:51 UTC

MIME-Version: 1.0
References: <159321525091.3808.9987324221405950713@ietfa.amsl.com>
In-Reply-To: <159321525091.3808.9987324221405950713@ietfa.amsl.com>
From: Nick Sullivan <nick@cloudflare.com>
Date: Fri, 26 Jun 2020 16:51:31 -0700
Message-ID: <CAFDDyk_rG8LwE694rfgiLTekCJJUjmMvC_k5vQ3CSEqVbtaE-w@mail.gmail.com>
To: "<tls@ietf.org>" <tls@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000064400405a90564da"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/lo0gEGRbckALZNj5guVKmH1-yhI>
Subject: [TLS] Fwd: New Version Notification for draft-ietf-tls-subcerts-09.txt
Precedence: list

TLSWG,

We have submitted draft-09 of the Delegated Credentials draft. This draft
incorporates the reviews of -07 from the WGLC process as well as changes
from draft-08 from the list that weren't covered during the WGLC.

Here's a quick summary of the changes:
   draft-09
   *  Fix section bullets in 4.1.3.
   *  Add operational considerations section for clock skew
   *  Add text around using an oracle to forge DCs in the future and
      past
   *  Add text about certificate extension vs EKU
   draft-08
   *  Include details about the impact of signature forgery attacks
   *  Copy edits for readability
   *  Fix section about DC reuse
   *  Incorporate feedback from Jonathan Hammell and Kevin Jacobs on the
      list

Best,
Nick

---------- Forwarded message ---------
From: <internet-drafts@ietf.org>
Date: Fri, Jun 26, 2020 at 4:47 PM
Subject: New Version Notification for draft-ietf-tls-subcerts-09.txt
To: Richard Barnes <rlb@ipv.sx>, Subodh Iyengar <subodh@fb.com>, Eric
Rescorla <ekr@rtfm.com>, Nick Sullivan <nick@cloudflare.com>



A new version of I-D, draft-ietf-tls-subcerts-09.txt
has been successfully submitted by Nick Sullivan and posted to the
IETF repository.

Name:           draft-ietf-tls-subcerts
Revision:       09
Title:          Delegated Credentials for TLS
Document date:  2020-06-26
Group:          tls
Pages:          18
URL:
https://www.ietf.org/internet-drafts/draft-ietf-tls-subcerts-09.txt
Status:         https://datatracker.ietf.org/doc/draft-ietf-tls-subcerts/
Htmlized:       https://tools.ietf.org/html/draft-ietf-tls-subcerts-09
Htmlized:
https://datatracker.ietf.org/doc/html/draft-ietf-tls-subcerts
Diff:           https://www.ietf.org/rfcdiff?url2=draft-ietf-tls-subcerts-09

Abstract:
   The organizational separation between the operator of a TLS endpoint
   and the certification authority can create limitations.  For example,
   the lifetime of certificates, how they may be used, and the
   algorithms they support are ultimately determined by the
   certification authority.  This document describes a mechanism by
   which operators may delegate their own credentials for use in TLS,
   without breaking compatibility with peers that do not support this
   specification.




Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

[TLS] Fwd: New Version Notification for draft-iet… Nick Sullivan
Re: [TLS] Fwd: New Version Notification for draft… Salz, Rich
Re: [TLS] Fwd: New Version Notification for draft… Salz, Rich