Re: [Trans] [ct-policy] Re: Certificate Transparency Mirrors (experimental)

Eran Messeri <eranm@google.com> Wed, 16 November 2016 01:55 UTC

MIME-Version: 1.0
In-Reply-To: <75df4d95-c923-00bd-4eee-0027d7dbfd8b@comodo.com>
References: <CAP9QY5ZYa6_-=5-DOz3O8PJYi-48sqyBvx2XbyV+3euWKjcavQ@mail.gmail.com> <8229e7fa-9763-41b7-b08b-ce1286dcb389@chromium.org> <CAKMqHLg41YkNT=N-kq6Lbtp2A4s6SD040H2cFRvDenZVbgc5_A@mail.gmail.com> <CAKMP+kdESqbM-DQ-9egZQzM7kgbzV=affU6uwYRHizmTJC_=hg@mail.gmail.com> <CAGDCdM4c5V9Csx1x-u5m9gYVOf5o0k1_e5pz3ithCWwSc3+EtQ@mail.gmail.com> <75df4d95-c923-00bd-4eee-0027d7dbfd8b@comodo.com>
From: Eran Messeri <eranm@google.com>
Date: Wed, 16 Nov 2016 10:54:57 +0900
Message-ID: <CALzYgEcQckSE+zdcJbvmG_HJ9FdkeDn5qPWqj1cFKJ-0xorOSA@mail.gmail.com>
To: Rob Stradling <rob.stradling@comodo.com>
Content-Type: multipart/alternative; boundary="089e0112be48306c9e0541615c0d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/trans/4lwIcOXWEjOJ-YvwlFn6VxEhTWg>
Cc: Pierre Phaneuf <pphaneuf@google.com>, "trans@ietf.org" <trans@ietf.org>, certificate-transparency <certificate-transparency@googlegroups.com>, Florian MAURY <florian.maury@gmail.com>, Certificate Transparency Policy <ct-policy@chromium.org>, Paul Hadfield <hadfieldp@google.com>
Subject: Re: [Trans] [ct-policy] Re: Certificate Transparency Mirrors (experimental)
Precedence: list

Regarding the ability to get a consistency proof between any two arbitrary
tree sizes, I agree it's useful for this scenario. Note it is not essential
for correct operation of the protocol - for correct operation of the
protocol only consistency proofs between STHs issued by the log are needed
(so, for simplicity of log implementation, the standard does not require
logs to provide consistency proofs between arbitrary tree sizes).

Regarding Rob Stradling's suggested get-sths, the consensus at the trans WG
meeting yesterday seemed to be that this belongs in the monitoring API
document rather than 6962-bis.

On Mon, Nov 7, 2016 at 8:15 PM, Rob Stradling <rob.stradling@comodo.com>
wrote:

> On 07/11/16 10:54, Paul Hadfield wrote:
> <snip>
> > Hi Florian,
> >
> > there's been some recent discussion on [trans] about adding a new
> endpoint
> > for v2 that permits a client to retrieve historic STHs.  It sounds like
> > what you are interested in is quite similar.
> >
> > Rob Stradling has taken the proposal for this and created a pull request
> on
> > the RFC repo:
> > https://github.com/google/certificate-transparency-rfcs/pull/200
> >
> > Perhaps you could comment there?
>
> A few days ago Melinda wrote:
>   "6962-bis has completed working group last call.  Minor editorial
>    changes are fine, but let's try to avoid major changes that would
>    require yet another WGLC."
>
> I don't yet know if the Chairs consider a new endpoint to be a "major
> change".
>
> --
> Rob Stradling
> Senior Research & Development Scientist
> COMODO - Creating Trust Online
>
> --
> You received this message because you are subscribed to the Google Groups
> "Certificate Transparency Policy" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ct-policy+unsubscribe@chromium.org.
> To post to this group, send email to ct-policy@chromium.org.
> To view this discussion on the web visit https://groups.google.com/a/
> chromium.org/d/msgid/ct-policy/75df4d95-c923-00bd-
> 4eee-0027d7dbfd8b%40comodo.com.
>

[Trans] Certificate Transparency Mirrors (experim… Adam Eijdenberg
Re: [Trans] [ct-policy] Re: Certificate Transpare… Pierre Phaneuf
Re: [Trans] Certificate Transparency Mirrors (exp… Florian M.
Re: [Trans] [ct-policy] Re: Certificate Transpare… Florian MAURY
Re: [Trans] [ct-policy] Re: Certificate Transpare… Paul Hadfield
Re: [Trans] [ct-policy] Re: Certificate Transpare… Rob Stradling
Re: [Trans] [ct-policy] Re: Certificate Transpare… Eran Messeri