Re: [Trans] Another Question about the PRIVATE option (Ticket #1)
Ben Laurie <benl@google.com> Wed, 19 March 2014 14:30 UTC
Return-Path: <benl@google.com>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 993641A0406 for <trans@ietfa.amsl.com>; Wed, 19 Mar 2014 07:30:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.926
X-Spam-Level:
X-Spam-Status: No, score=-1.926 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, RP_MATCHES_RCVD=-0.547, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KHzv5Nmq9ByG for <trans@ietfa.amsl.com>; Wed, 19 Mar 2014 07:30:22 -0700 (PDT)
Received: from mail-vc0-x234.google.com (mail-vc0-x234.google.com [IPv6:2607:f8b0:400c:c03::234]) by ietfa.amsl.com (Postfix) with ESMTP id 4CE281A0128 for <trans@ietf.org>; Wed, 19 Mar 2014 07:30:22 -0700 (PDT)
Received: by mail-vc0-f180.google.com with SMTP id lf12so9001902vcb.25 for <trans@ietf.org>; Wed, 19 Mar 2014 07:30:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=bhF+O1qMBF1FTqgodebE9BzfD65EMo2SUmmVoATVYO4=; b=Wa83HIvFnzNGoIwG1YNAavueWGce8+2iTFcyA2qoGa76meDoO9EZFd6e97MEjwpcLB Aq0TGU/FiIFwVvabPVILOJv9mp0qT88AdNWnBnpjIyJEdyxJHd+/KsUg2pVuxoe+YFkT ZYuJegxlbBxRDgFiZL+fD/i45xkPT0L8ZCh9n5W43KCk1M7vMiX5ZW6QqQTGsMxg/hJB NPK4fsg40btKtdnNVcDArpDTLjkFgEanqt5L8DCIhHOmUZwNMFiJvMW2Fv4G2MzRGtKi 7sfFnWi7A4Lik5PnjB8NJ+FDVYb+dbJA1nf4695D4kA855f6w9CUhxh/kPx0LqWWQFpN /DiA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=bhF+O1qMBF1FTqgodebE9BzfD65EMo2SUmmVoATVYO4=; b=MM/32MhxCjcNR3uQe0ddQQJ4hogyiP1KuzqknQkEQAnBVdetHCGD9tEJuAmy/F42HH LiFqZJlIQHLHpWUuC/c4XuEto0AAhQrgEe4ux8OzdWgImFWhFDWXRs57VDzQknShywNe Y9qUOcccQMX9bP5Iu8XDsIx2ooRxCOfgpnKkJ4cbxK2OZccd/zaC0egfNuvW08wl3KwL MFd6bXTvb/cx3FY+wMfopyxBPceivRf19ySV5qcCQ9nAmJQ4aq2WkwdqeXpTCQeIGtFv QqaeM6NglVVOiVI+WU+heZJGlbUoYB5cwh59EfE+uOzPHFZs5yVfPxunBm5h40rCiZAF nD0A==
X-Gm-Message-State: ALoCoQnhqRtzC/XnzB4I7jOwTJ4wvQH7vccMBFkGeiUGciRI8MyiuNiK0LRYR1g6nUtji+Z1ByZADhGvAomnrriAXyU0u47P2LDct9ayUah0CuB15NirsdqTv/7v/rLuwncBjNFO3T9bIL/v7nZ3qvdkAhCOvXQ3XILZR6IRRMZC7xlDg4wX2CZXt7bCLnk3BW1rKfyjqEdT
MIME-Version: 1.0
X-Received: by 10.221.34.211 with SMTP id st19mr30568539vcb.5.1395239413422; Wed, 19 Mar 2014 07:30:13 -0700 (PDT)
Received: by 10.52.230.105 with HTTP; Wed, 19 Mar 2014 07:30:13 -0700 (PDT)
In-Reply-To: <CABrd9SSAbVR8SrzaR37qgH5QHFuLP8ZghKwH3R-q9Lp5zbvomQ@mail.gmail.com>
References: <544B0DD62A64C1448B2DA253C011414607C70EAF9E@TUS1XCHEVSPIN33.SYMC.SYMANTEC.COM> <531EE6A6.7000007@comodo.com> <544B0DD62A64C1448B2DA253C011414607C77BCCBE@TUS1XCHEVSPIN33.SYMC.SYMANTEC.COM> <53204F9E.7000507@comodo.com> <CALzYgEf-=7+XpBYgV-+0ijq-whRsn9gam7AELERZfof-TJ5uEg@mail.gmail.com> <53217E29.7040004@comodo.com> <544B0DD62A64C1448B2DA253C011414607C7DAA2CF@TUS1XCHEVSPIN33.SYMC.SYMANTEC.COM> <CABrd9SQONqLvemGtfy6WpyVQEN5Wuq8otFpjA2nKTirF6Z_5Qw@mail.gmail.com> <CAMm+Lwhy+ArnJhY-SjkbPtbZgPfDyZ4LkQ82mNJrvSO7jZr3Bw@mail.gmail.com> <53286F24.5080407@fifthhorseman.net> <CABrd9STuCQdzbWduJ9TOJ3xbCg4vSKw3sPGR50uo4L-3KqVxgg@mail.gmail.com> <532894A6.5070301@fifthhorseman.net> <CABrd9SSAbVR8SrzaR37qgH5QHFuLP8ZghKwH3R-q9Lp5zbvomQ@mail.gmail.com>
Date: Wed, 19 Mar 2014 14:30:13 +0000
Message-ID: <CABrd9SSioWLGXK=bwjvu8YD+k4DKB=OojYxgAvMHS5SZ2Y1FCQ@mail.gmail.com>
From: Ben Laurie <benl@google.com>
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Content-Type: text/plain; charset="UTF-8"
Archived-At: http://mailarchive.ietf.org/arch/msg/trans/i4m549hGwonwxR0E1ki3z3koHj8
Cc: "trans@ietf.org" <trans@ietf.org>, Phillip Hallam-Baker <hallam@gmail.com>, Rick Andrews <Rick_Andrews@symantec.com>
Subject: Re: [Trans] Another Question about the PRIVATE option (Ticket #1)
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Mar 2014 14:30:24 -0000
Another way to think about this whole question is this: logging a precert for <PRIVATE>.x.y is equivalent to creating a name-constrained intermediate for x.y. If the CA should not have created such an intermediate, then it also should not have logged the corresponding precert.
- [Trans] Question about PRIVATE option (Ticket #1) Rick Andrews
- Re: [Trans] Question about PRIVATE option (Ticket… Rob Stradling
- Re: [Trans] Question about PRIVATE option (Ticket… Rick Andrews
- Re: [Trans] Question about PRIVATE option (Ticket… Rob Stradling
- Re: [Trans] Question about PRIVATE option (Ticket… Eran Messeri
- Re: [Trans] Question about PRIVATE option (Ticket… Rob Stradling
- [Trans] Another Question about the PRIVATE option… Rick Andrews
- Re: [Trans] Another Question about the PRIVATE op… Ben Laurie
- Re: [Trans] Another Question about the PRIVATE op… Rob Stradling
- Re: [Trans] Another Question about the PRIVATE op… Phillip Hallam-Baker
- Re: [Trans] Another Question about the PRIVATE op… Daniel Kahn Gillmor
- Re: [Trans] Another Question about the PRIVATE op… Ben Laurie
- Re: [Trans] Another Question about the PRIVATE op… Daniel Kahn Gillmor
- Re: [Trans] Another Question about the PRIVATE op… Ben Laurie
- Re: [Trans] Another Question about the PRIVATE op… Ben Laurie