[Trans] [trans] #146 (gossip): SCT Feedback doesn't account for privacy-sensitive EE certs
"trans issue tracker" <trac+trans@tools.ietf.org> Wed, 09 December 2015 22:04 UTC
Return-Path: <trac+trans@tools.ietf.org>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 862EA1B2E88 for <trans@ietfa.amsl.com>; Wed, 9 Dec 2015 14:04:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=unavailable
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HfyQZtOnNe5Y for <trans@ietfa.amsl.com>; Wed, 9 Dec 2015 14:04:05 -0800 (PST)
Received: from zinfandel.tools.ietf.org (zinfandel.tools.ietf.org [IPv6:2001:1890:123a::1:2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CA1E1B2E8B for <trans@ietf.org>; Wed, 9 Dec 2015 14:04:04 -0800 (PST)
Received: from localhost ([::1]:45383 helo=zinfandel.tools.ietf.org) by zinfandel.tools.ietf.org with esmtp (Exim 4.82_1-5b7a7c0-XX) (envelope-from <trac+trans@tools.ietf.org>) id 1a6mqC-0003Ee-4a; Wed, 09 Dec 2015 14:04:04 -0800
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: trans issue tracker <trac+trans@tools.ietf.org>
X-Trac-Version: 0.12.5
Precedence: bulk
Auto-Submitted: auto-generated
X-Mailer: Trac 0.12.5, by Edgewall Software
To: draft-ietf-trans-threat-analysis@tools.ietf.org, david@mandelberg.org
X-Trac-Project: trans
Date: Wed, 09 Dec 2015 22:04:04 -0000
X-URL: https://tools.ietf.org/trans/
X-Trac-Ticket-URL: https://trac.tools.ietf.org/wg/trans/trac/ticket/146
Message-ID: <061.2a199b72d321de563178377b519f1d8b@tools.ietf.org>
X-Trac-Ticket-ID: 146
X-SA-Exim-Connect-IP: ::1
X-SA-Exim-Rcpt-To: draft-ietf-trans-threat-analysis@tools.ietf.org, david@mandelberg.org, trans@ietf.org
X-SA-Exim-Mail-From: trac+trans@tools.ietf.org
X-SA-Exim-Scanned: No (on zinfandel.tools.ietf.org); SAEximRunCond expanded to false
Resent-To: draft-ietf-trans-threat-analysis@ietf.org
Resent-Message-Id: <20151209220404.7CA1E1B2E8B@ietfa.amsl.com>
Resent-Date: Wed, 09 Dec 2015 14:04:04 -0800
Resent-From: trac+trans@tools.ietf.org
Archived-At: <http://mailarchive.ietf.org/arch/msg/trans/BZ9oY8g68ko0H1SwOmfSDRFsbQA>
Cc: trans@ietf.org
Subject: [Trans] [trans] #146 (gossip): SCT Feedback doesn't account for privacy-sensitive EE certs
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.15
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Dec 2015 22:04:06 -0000
#146: SCT Feedback doesn't account for privacy-sensitive EE certs I think [https://tools.ietf.org/html/draft-ietf-trans- gossip-01#section-7.1.3 Section 7.1.3 of Gossip]'s requirement that "the 'x509_chain' element MUST contain at least the leaf certificate" would leak private information in some cases. SCT Feedback should probably be extended to handle [https://tools.ietf.org/html/draft-ietf-trans- rfc6962-bis-11#section-4.2 name redaction] and [https://tools.ietf.org/html/draft-ietf-trans-rfc6962-bis-11#section-4.3 name-constrained intermediate CAs]. -- -------------------------+------------------------------------------------- Reporter: | Owner: draft-ietf-trans-threat- david@mandelberg.org | analysis@tools.ietf.org Type: defect | Status: new Priority: major | Milestone: Component: gossip | Version: Severity: - | Keywords: -------------------------+------------------------------------------------- Ticket URL: <https://trac.tools.ietf.org/wg/trans/trac/ticket/146> trans <https://tools.ietf.org/trans/>
- [Trans] [trans] #146 (gossip): SCT Feedback doesn… trans issue tracker
- Re: [Trans] [trans] #146 (gossip): SCT Feedback d… trans issue tracker
- Re: [Trans] [trans] #146 (gossip): SCT Feedback d… trans issue tracker