IETF Logo Mail Archive

Re: [Trans] [trans] #79 (rfc6962-bis): Precertificate signature must be over something other than just the TBSCertificate

"trans issue tracker" <trac+trans@tools.ietf.org> Mon, 08 June 2015 15:33 UTC

Return-Path: <trac+trans@tools.ietf.org>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF39A1B2F40 for <trans@ietfa.amsl.com>; Mon, 8 Jun 2015 08:33:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.79
X-Spam-Level:
X-Spam-Status: No, score=0.79 tagged_above=-999 required=5 tests=[BAYES_50=0.8, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rRRC1OLD0_2Y for <trans@ietfa.amsl.com>; Mon, 8 Jun 2015 08:33:22 -0700 (PDT)
Received: from zinfandel.tools.ietf.org (zinfandel.tools.ietf.org [IPv6:2001:1890:123a::1:2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B56CF1B2EEF for <trans@ietf.org>; Mon, 8 Jun 2015 08:33:22 -0700 (PDT)
Received: from localhost ([::1]:43450 helo=zinfandel.tools.ietf.org) by zinfandel.tools.ietf.org with esmtp (Exim 4.82_1-5b7a7c0-XX) (envelope-from <trac+trans@tools.ietf.org>) id 1Z1z38-0006Mg-Qc; Mon, 08 Jun 2015 08:33:18 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: trans issue tracker <trac+trans@tools.ietf.org>
X-Trac-Version: 0.12.3
Precedence: bulk
Auto-Submitted: auto-generated
X-Mailer: Trac 0.12.3, by Edgewall Software
To: rob.stradling@comodo.com, benl@google.com
X-Trac-Project: trans
Date: Mon, 08 Jun 2015 15:33:18 -0000
X-URL: http://tools.ietf.org/trans/
X-Trac-Ticket-URL: http://trac.tools.ietf.org/wg/trans/trac/ticket/79#comment:4
Message-ID: <079.491c4317c846cd9367360691f0058d44@tools.ietf.org>
References: <064.abd6b6595a6018105f8527089cb573db@tools.ietf.org>
X-Trac-Ticket-ID: 79
In-Reply-To: <064.abd6b6595a6018105f8527089cb573db@tools.ietf.org>
X-SA-Exim-Connect-IP: ::1
X-SA-Exim-Rcpt-To: rob.stradling@comodo.com, benl@google.com, trans@ietf.org
X-SA-Exim-Mail-From: trac+trans@tools.ietf.org
X-SA-Exim-Scanned: No (on zinfandel.tools.ietf.org); SAEximRunCond expanded to false
Archived-At: <http://mailarchive.ietf.org/arch/msg/trans/oS2B4tfMxIe2SAv_UMS3Meq7kC4>
Cc: trans@ietf.org
Subject: Re: [Trans] [trans] #79 (rfc6962-bis): Precertificate signature must be over something other than just the TBSCertificate
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.15
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Jun 2015 15:33:24 -0000

#79: Precertificate signature must be over something other than just the
TBSCertificate


Comment (by benl@google.com):

 I don't think any action is required. The I-D already says:

 "A precertificate is a CMS signed-data object that contains a
 TBSCertificate in its SignedData.encapContentInfo.eContent field,
 identified by the OID <TBD> in the
 SignedData.encapContentInfo.eContentType field."

 In other words: option 2 is what the I-D already propose.

-- 
-------------------------------------+-------------------------------------
 Reporter:                           |       Owner:
  rob.stradling@comodo.com           |  rob.stradling@comodo.com
     Type:  defect                   |      Status:  assigned
 Priority:  blocker                  |   Milestone:
Component:  rfc6962-bis              |     Version:
 Severity:  -                        |  Resolution:
 Keywords:                           |
-------------------------------------+-------------------------------------

Ticket URL: <http://trac.tools.ietf.org/wg/trans/trac/ticket/79#comment:4>
trans <http://tools.ietf.org/trans/>

v2.23.0 | Report a Bug | By Email