IETF Logo Mail Archive

Re: [Trans] Precertificate format

Stephen Kent <kent@bbn.com> Tue, 21 October 2014 15:28 UTC

Return-Path: <kent@bbn.com>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0A7E1A87D9 for <trans@ietfa.amsl.com>; Tue, 21 Oct 2014 08:28:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.21
X-Spam-Level:
X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GI0R3drCXpcL for <trans@ietfa.amsl.com>; Tue, 21 Oct 2014 08:28:07 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6CA5F1A87CB for <trans@ietf.org>; Tue, 21 Oct 2014 08:28:07 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:36187 helo=comsec.home) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1XgbMD-0003as-FF for trans@ietf.org; Tue, 21 Oct 2014 11:28:21 -0400
Message-ID: <54467B82.30502@bbn.com>
Date: Tue, 21 Oct 2014 11:28:02 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: "trans@ietf.org" <trans@ietf.org>
References: <CABrd9ST-a64kDK82a-ATDW2JkuHZWbGfO0-Rmtgv5mbYrnwZPQ@mail.gmail.com>
In-Reply-To: <CABrd9ST-a64kDK82a-ATDW2JkuHZWbGfO0-Rmtgv5mbYrnwZPQ@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------070006070008090304010002"
Archived-At: http://mailarchive.ietf.org/arch/msg/trans/iF8G0G7M0dCoiBa9svZ9yEx_w7k
Subject: Re: [Trans] Precertificate format
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Oct 2014 15:28:19 -0000

I think that's an excellent idea.

Steve

> We (the 6962-bis editors) would like to propose that we replace the 
> existing precertificate formats with a TBSCertificate wrapped in 
> PKCS#7. This lays to rest, we think, any possible confusion with 
> X509v3 certs, whilst allowing a simple mapping between the final cert 
> and the pre-cert.
>
> Obviously there are details to be nailed down, but before we do so, 
> we'd like to hear any discussion on the general idea.
>
>
> _______________________________________________
> Trans mailing list
> Trans@ietf.org
> https://www.ietf.org/mailman/listinfo/trans

v2.23.0 | Report a Bug | By Email