Re: [Trans] draft-ietf-trans-rfc6962-bis

Andrew Ayer <agwa@andrewayer.name> Tue, 27 April 2021 15:58 UTC

Return-Path: <agwa@andrewayer.name>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE9943A1264 for <trans@ietfa.amsl.com>; Tue, 27 Apr 2021 08:58:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=andrewayer.name
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RFmZ1RpF88me for <trans@ietfa.amsl.com>; Tue, 27 Apr 2021 08:58:07 -0700 (PDT)
Received: from thomson.beanwood.com (thomson.beanwood.com [IPv6:2600:1f16:719:be00:5c48:f083:d884:d130]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F079C3A1267 for <trans@ietf.org>; Tue, 27 Apr 2021 08:58:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=andrewayer.name; s=beanwood20160511; t=1619539079; bh=4s1d3FMASnogXIDNykEYLzZp4M6wZ41enmtGmX+SJFg=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=pDW2HqxnbnxbUeT6HSkHjMolnEPngKKEKwHqAWJFhwEcTwSJF9IoaXh2BU5UUxk2c AEnceCBQIRSq7F1lQMbLvmCzbBcK5lV+vB2EJ9Gz7Ii4IsfLUiT/23oMP0cObXyp5e 4ImEyzHYv+IpLDOKL6k8iZ5w4AuBSrDTYUMQ4pjC1ftCnBCXIp60/dsG93S1iLF7Yi ywW4sC8RbvHO4PhBbzPcpZ7rIhxyKL+MfRB7avkwgwT+PQ2LJJnctwmQKLsiVwcgOi Z7NMh1g940GO1JpKHqgLjZT2598IsMpdZVeybOKMsSpN3ZLlM0yMjL2fyM3Pm5odQX m/qaPcGPr+j2g==
Date: Tue, 27 Apr 2021 11:57:59 -0400
From: Andrew Ayer <agwa@andrewayer.name>
To: "Salz, Rich" <rsalz=40akamai.com@dmarc.ietf.org>
Cc: Russ Housley <housley@vigilsec.com>, "trans@ietf.org" <trans@ietf.org>
Message-Id: <20210427115759.76144c9d53451bf54fbd33b9@andrewayer.name>
In-Reply-To: <BF905FB5-856F-4154-8707-182B6FFAE613@akamai.com>
References: <C514E596-A3BD-46BA-9652-DD2AA1FFFBD4@vigilsec.com> <74A570B7-99F7-41A5-B4BA-3516F9D6047E@akamai.com> <B2423A7C-7B00-4169-B53E-205789E6072F@vigilsec.com> <BF905FB5-856F-4154-8707-182B6FFAE613@akamai.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/trans/0dzhPNpaUJTatk2u2VyIpjsLC8I>
Subject: Re: [Trans] draft-ietf-trans-rfc6962-bis
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Apr 2021 15:58:12 -0000

On Tue, 27 Apr 2021 15:18:04 +0000
"Salz, Rich" <rsalz=40akamai.com@dmarc.ietf.org> wrote:

> >   Below is the approach that I took for RFC 6962.  I had to make up
> > names because there are no hints in the document in some cases.
> > Suggestions for the bis document are welcome.
> 
> https://github.com/google/certificate-transparency-rfcs/pull/330

Alas, this ASN.1 module is inapplicable to CTv2, as CTv2 uses all new
extensions and OIDs.

I believe the only two OIDs are:

1.3.101.75 - for the Transparency Information X.509v3 extension (Section 7.1)

1.3.101.78 - for the Precertificate CMS content type (Section 3.2)

Regards,
Andrew