Re: [Trans] defining "mis-issuance"
Rob Stradling <rob.stradling@comodo.com> Thu, 02 October 2014 14:51 UTC
Return-Path: <rob.stradling@comodo.com>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 089C21A039B for <trans@ietfa.amsl.com>; Thu, 2 Oct 2014 07:51:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.609
X-Spam-Level:
X-Spam-Status: No, score=0.609 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HELO_MISMATCH_NET=0.611, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IuRVynIy0Lq3 for <trans@ietfa.amsl.com>; Thu, 2 Oct 2014 07:51:41 -0700 (PDT)
Received: from ian.brad.office.comodo.net (eth5.brad-fw.brad.office.ccanet.co.uk [178.255.87.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE23F1A016B for <trans@ietf.org>; Thu, 2 Oct 2014 07:51:40 -0700 (PDT)
Received: (qmail 15430 invoked by uid 1000); 2 Oct 2014 14:51:37 -0000
Received: from and0004.comodo.net (HELO [192.168.0.58]) (192.168.0.58) (smtp-auth username rob, mechanism plain) by ian.brad.office.comodo.net (qpsmtpd/0.40) with (AES128-SHA encrypted) ESMTPSA; Thu, 02 Oct 2014 15:51:37 +0100
Message-ID: <542D6678.9060507@comodo.com>
Date: Thu, 02 Oct 2014 15:51:36 +0100
From: Rob Stradling <rob.stradling@comodo.com>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:31.0) Gecko/20100101 Thunderbird/31.1.1
MIME-Version: 1.0
To: Peter Bowen <pzbowen@gmail.com>
References: <542477E3.8070304@bbn.com><544B0DD62A64C1448B2DA253C011414607D1628D70@TUS1XCHEVSPIN33.SYMC.SYMANTEC.COM><542971A7.7030700@bbn.com><544B0DD62A64C1448B2DA253C011414607D174DEB1@TUS1XCHEVSPIN33.SYMC.SYMANTEC.COM><542C1846.7060303@bbn.com> <542C1EA6.8050106@comodo.com> <CAK6vND8N-31J1yzgAh8M-YmcgCkOkANWLCF1yiZNbEPHv8i2Hw@mail.gmail.com>
In-Reply-To: <CAK6vND8N-31J1yzgAh8M-YmcgCkOkANWLCF1yiZNbEPHv8i2Hw@mail.gmail.com>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/trans/CfTYmMj1n1izaU27dAyn6cQun1o
Cc: "trans@ietf.org" <trans@ietf.org>, Stephen Kent <kent@bbn.com>
Subject: Re: [Trans] defining "mis-issuance"
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Oct 2014 14:51:44 -0000
On 01/10/14 16:45, Peter Bowen wrote: > On Wed, Oct 1, 2014 at 8:32 AM, Rob Stradling <rob.stradling@comodo.com> wrote: >> The "ability to provide immediate feedback to CAs that are issuing >> syntactically malformed certs" sounds like a nice idea, but surely this >> could be implemented as a stand-alone application or web service? >> Why would you want it to be an intrinsic part of CT? > > This feels like an interesting feature for CT log hosts. An > additional API that allows subscribing to the "firehose" of all log > entries as they happen. Hi Peter. Are you suggesting making something like [1] an integral part of log servers, rather than an optional/separate service? [1] https://groups.google.com/forum/#!topic/certificate-transparency/h4quw0htujs > I wonder how many certificates per second Comodo is issuing these days with > the CloudFlare annoucement... Let's just say that our systems have been unusually busy this week. :-) -- Rob Stradling Senior Research & Development Scientist COMODO - Creating Trust Online
- [Trans] defining "mis-issuance" Stephen Kent
- Re: [Trans] defining "mis-issuance" Rick Andrews
- Re: [Trans] defining "mis-issuance" Santosh Chokhani
- Re: [Trans] defining "mis-issuance" Stephen Kent
- Re: [Trans] defining "mis-issuance" Stephen Kent
- Re: [Trans] defining "mis-issuance" Santosh Chokhani
- Re: [Trans] defining "mis-issuance" Rick Andrews
- Re: [Trans] defining "mis-issuance" Stephen Kent
- Re: [Trans] defining "mis-issuance" Rob Stradling
- Re: [Trans] defining "mis-issuance" Peter Bowen
- Re: [Trans] defining "mis-issuance" Rob Stradling
- Re: [Trans] defining "mis-issuance" Peter Bowen
- Re: [Trans] defining "mis-issuance" Stephen Kent
- Re: [Trans] defining "mis-issuance" Ben Laurie
- Re: [Trans] defining "mis-issuance" Stephen Kent
- Re: [Trans] defining "mis-issuance" Ben Laurie
- Re: [Trans] defining "mis-issuance" Stephen Kent