Re: [Trans] Bad Technical Decision: Closing out the SCT encoding discussion
Rob Stradling <rob.stradling@comodo.com> Fri, 13 March 2015 21:19 UTC
Return-Path: <rob.stradling@comodo.com>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68B5B1A7003 for <trans@ietfa.amsl.com>; Fri, 13 Mar 2015 14:19:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id usINy4DFWlsX for <trans@ietfa.amsl.com>; Fri, 13 Mar 2015 14:19:43 -0700 (PDT)
Received: from mmextmx2.mcr.colo.comodoca.net (mmextmx2.mcr.colo.comodoca.net [IPv6:2a02:1788:402:c00::c0a8:9cd6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 59D821A86F3 for <trans@ietf.org>; Fri, 13 Mar 2015 14:19:43 -0700 (PDT)
Received: (qmail 15804 invoked by uid 1004); 13 Mar 2015 21:19:41 -0000
Received: from ian.brad.office.comodo.net (HELO ian.brad.office.comodo.net) (192.168.0.202) by mmextmx2.mcr.colo.comodoca.net (qpsmtpd/0.84) with ESMTP; Fri, 13 Mar 2015 21:19:41 +0000
Received: (qmail 6190 invoked by uid 1000); 13 Mar 2015 21:19:41 -0000
Received: from and0004.comodo.net (HELO [192.168.0.58]) (192.168.0.58) (smtp-auth username rob, mechanism plain) by ian.brad.office.comodo.net (qpsmtpd/0.40) with (AES128-SHA encrypted) ESMTPSA; Fri, 13 Mar 2015 21:19:41 +0000
Message-ID: <5503546D.9090100@comodo.com>
Date: Fri, 13 Mar 2015 21:19:41 +0000
From: Rob Stradling <rob.stradling@comodo.com>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:31.0) Gecko/20100101 Thunderbird/31.5.0
MIME-Version: 1.0
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>
References: <550257A0.8050401@gmail.com> <B87AFA6C-2B9F-474C-AE0F-BF07829CD139@vigilsec.com> <550347A0.6070005@cs.tcd.ie> <55034F89.4060501@comodo.com> <5503511B.6000709@cs.tcd.ie> <55035385.8060001@comodo.com>
In-Reply-To: <55035385.8060001@comodo.com>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/trans/bn09cXbHms5Gg6wjxpDawWmffwk>
Cc: Russ Housley <housley@vigilsec.com>, Paul Wouters <paul@nohats.ca>, trans@ietf.org, Melinda Shore <melinda.shore@gmail.com>
Subject: Re: [Trans] Bad Technical Decision: Closing out the SCT encoding discussion
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Mar 2015 21:19:48 -0000
On 13/03/15 21:15, Rob Stradling wrote: > On 13/03/15 21:05, Stephen Farrell wrote: >> On 13/03/15 20:58, Rob Stradling wrote: >>> On 13/03/15 20:25, Stephen Farrell wrote: >>> <snip> >>>> And if we interpret 5280 strictly and conclude that is still a >>>> good plan then the question would be what to do about the SCT >>>> encoding, which could be to do something hacky like prepending >>>> another OCTET STRING tag and a length I suppose, >>> >>> Stephen, RFC6962 does precisely that, and the current 6962-bis text aims >>> to do the same. >> >> Really? > > Really. That's what all the current implementations of RFC6962 are doing. It probably doesn't help that RFC6962 has two definitions of "SignedCertificateTimestampList", one using ASN.1 and one using TLS encoding rules. SignedCertificateTimestampList ::= OCTET STRING struct { SerializedSCT sct_list <1..2^16-1>; } SignedCertificateTimestampList; This issue is addressed in 6962-bis -07. >> I though the extnValue was just the SignedCertificateTimestampList >> and did not contain yet another OCTET STRING tag? That how I read >> 6962 anyway. > > Some other folks read it that way too, apparently. > > Hence http://trac.tools.ietf.org/wg/trans/trac/ticket/14 > >> S. >> >>> >>> Adding yet another OCTET STRING would turn it into an OCTET STRING >>> inside an OCTET STRING inside an OCTET STRING! >>> >>> I'd be surprised if Russ or Steve Kent would consider that to be any >>> better than the current plan (an OCTET STRING inside an OCTET STRING). > -- Rob Stradling Senior Research & Development Scientist COMODO - Creating Trust Online Office Tel: +44.(0)1274.730505 Office Fax: +44.(0)1274.730909 www.comodo.com COMODO CA Limited, Registered in England No. 04058690 Registered Office: 3rd Floor, 26 Office Village, Exchange Quay, Trafford Road, Salford, Manchester M5 3EQ This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender by replying to the e-mail containing this attachment. Replies to this email may be monitored by COMODO for operational or business reasons. Whilst every endeavour is taken to ensure that e-mails are free from viruses, no liability can be accepted and the recipient is requested to use their own virus checking software.
- Re: [Trans] Bad Technical Decision: Closing out t… Paul Wouters
- Re: [Trans] Bad Technical Decision: Closing out t… Nico Williams
- [Trans] Closing out the SCT encoding discussion Melinda Shore
- [Trans] Bad Technical Decision: Closing out the S… Russ Housley
- Re: [Trans] Bad Technical Decision: Closing out t… Stephen Farrell
- Re: [Trans] Bad Technical Decision: Closing out t… Rob Stradling
- Re: [Trans] Bad Technical Decision: Closing out t… Russ Housley
- Re: [Trans] Bad Technical Decision: Closing out t… Stephen Farrell
- Re: [Trans] Bad Technical Decision: Closing out t… Russ Housley
- Re: [Trans] Bad Technical Decision: Closing out t… Rob Stradling
- Re: [Trans] Bad Technical Decision: Closing out t… Rob Stradling
- Re: [Trans] Bad Technical Decision: Closing out t… Stephen Farrell
- Re: [Trans] Bad Technical Decision: Closing out t… Erwann Abalea
- Re: [Trans] Bad Technical Decision: Closing out t… Nico Williams