Re: [Trans] Precertificate format

Ben Laurie <benl@google.com> Mon, 20 October 2014 13:43 UTC

Return-Path: <benl@google.com>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 259A01A8733 for <trans@ietfa.amsl.com>; Mon, 20 Oct 2014 06:43:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.388
X-Spam-Level:
X-Spam-Status: No, score=-1.388 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qoWZDoZi3M9h for <trans@ietfa.amsl.com>; Mon, 20 Oct 2014 06:43:41 -0700 (PDT)
Received: from mail-qa0-x236.google.com (mail-qa0-x236.google.com [IPv6:2607:f8b0:400d:c00::236]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 507611A8753 for <trans@ietf.org>; Mon, 20 Oct 2014 06:42:21 -0700 (PDT)
Received: by mail-qa0-f54.google.com with SMTP id i13so3370480qae.27 for <trans@ietf.org>; Mon, 20 Oct 2014 06:42:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:references:from:date:message-id:subject:to :content-type; bh=yJkiKFxVyXb+FKegFXq9WSuKcoswrzd28m31gubL63M=; b=RaffFAk1L4IBF17aw87CFLIx6D/blj3CMnaUksn4jF2ABM6zm1YncHRliG9N3Zf2Sp Mwij/bSBAVn94QptnBqesHtQlVC59ARSOMCPc63LYQ5i1l2F84doGdFxSqxoEDrATze1 jiw80ecxN9tRdrHzrkrRBgSf+caAu+GfmhIE5yRa0vNMwjtlVQofKz+KIyTos4cxMQtG 57KvxAh+RMCnGR8ZiTb3M9J/Ud3lZpCGP/rywUfHr2putxRGlzyfCHr4y/3biys4RxNH II9rIEQXiquTuJsrVQ4wmIxdbvptFI9GR/JDpuFuBmlKUsc4Zar0OSvfpPPxooJYjzzT 5ahA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:references:from:date:message-id :subject:to:content-type; bh=yJkiKFxVyXb+FKegFXq9WSuKcoswrzd28m31gubL63M=; b=NZV+53R1YL8YdrxiquZHjq5fNit2odPnrT5Vpzm6aguaIFAnJH31aI2MZaQ4HP2cth KI1D8tikG5m//T+G2TX2FIySwrWYJR7Co74aOQzTq/DxQfOBbwje2YA2c8VKJ6faHozZ wia0frN8GH7ZnuM6fE+8lwVxSwzja2LswmxFl/+TCv5jmISd0JdZTtk3xIphgenFG3wZ pJRhfl6JKEIPmutiw6neB/HtZ70fkGWMNrFGkVeA6a08gYbIvZBYoeVQWm86+OExxS/w QU6UNqn59qVAyX3YmHV+9kkTYhbW1WMYgZzA7sUADbkC5wlGp2KmOMUtZtscswJGcRdy 3fTg==
X-Gm-Message-State: ALoCoQn51DFzCJJScpvK7BxQi9i26NfMI55xVb2PJIU27GJ1ZXwD7q+X/TuL6SqgP/pkBRymTZVO
X-Received: by 10.224.171.194 with SMTP id i2mr35990424qaz.59.1413812540289; Mon, 20 Oct 2014 06:42:20 -0700 (PDT)
MIME-Version: 1.0
References: <CABrd9ST-a64kDK82a-ATDW2JkuHZWbGfO0-Rmtgv5mbYrnwZPQ@mail.gmail.com> <CAA5A5DD4103604CBCF5A9DFEA0E75D19F0C03C6@qvgoex01.qvglobal.local>
From: Ben Laurie <benl@google.com>
Date: Mon, 20 Oct 2014 13:42:19 +0000
Message-ID: <CABrd9SQOr7zvyewFhtyup2H7JkEPxsz7rbyQY-jM2oKAV64AVw@mail.gmail.com>
To: Stephen Davidson <S.Davidson@quovadisglobal.com>, "trans@ietf.org" <trans@ietf.org>
Content-Type: multipart/alternative; boundary=001a11c2b2763e6da60505dae286
Archived-At: http://mailarchive.ietf.org/arch/msg/trans/ILvbNYD1Wg9yIUG6ZXiKIIq_rG4
Subject: Re: [Trans] Precertificate format
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Oct 2014 13:43:42 -0000

On Mon Oct 20 2014 at 2:37:43 PM Stephen Davidson <
S.Davidson@quovadisglobal.com> wrote:

> Hello:
>
>
>
> What do you propose re the launch of CT in Chrome?  It would be preferable
> to have the actual CT implementation match the CT standard rather than for
> CAs to have to rejig the logging later.
>
The CT launch in Chrome will implement RFC 6962.


>
>
> Kind regards,
>
> Stephen
>
>
>
>
>
>
>
>
>
> *From:* Trans [mailto:trans-bounces@ietf.org] *On Behalf Of *Ben Laurie
> *Sent:* Thursday, October 16, 2014 12:07 PM
> *To:* trans@ietf.org
> *Subject:* [Trans] Precertificate format
>
>
>
> We (the 6962-bis editors) would like to propose that we replace the
> existing precertificate formats with a TBSCertificate wrapped in PKCS#7.
> This lays to rest, we think, any possible confusion with X509v3 certs,
> whilst allowing a simple mapping between the final cert and the pre-cert.
>
>
>
> Obviously there are details to be nailed down, but before we do so, we'd
> like to hear any discussion on the general idea.
>