Re: [Uta] RFC 9525 on Service Identity in TLS

Sean Turner <sean@sn3rd.com> Fri, 10 November 2023 08:47 UTC

Return-Path: <sean@sn3rd.com>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBAD9C1519B4 for <uta@ietfa.amsl.com>; Fri, 10 Nov 2023 00:47:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.105
X-Spam-Level:
X-Spam-Status: No, score=-2.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bsm7JWt4wk_J for <uta@ietfa.amsl.com>; Fri, 10 Nov 2023 00:47:26 -0800 (PST)
Received: from mail-pl1-x632.google.com (mail-pl1-x632.google.com [IPv6:2607:f8b0:4864:20::632]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D7D4EC17061C for <uta@ietf.org>; Fri, 10 Nov 2023 00:47:26 -0800 (PST)
Received: by mail-pl1-x632.google.com with SMTP id d9443c01a7336-1cc53d0030fso14944755ad.0 for <uta@ietf.org>; Fri, 10 Nov 2023 00:47:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; t=1699606046; x=1700210846; darn=ietf.org; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=eUL00oHkQd2O/3gz8On7puGbVqo+/aySrXPqsTuZ4lk=; b=fKBEhn0kWUc07n5crIfW2HH5OXVLz3iDEhE2onxepLVks6qUw1kwGHoum/1Z4AZM3d 9KU8ttYQGDcDqjA+R1IJOAgiW7cFrUk+RkELDzZ5spi5DBPMnFAgLtBeStxM46ERZ7C+ xbJVBzEOPHFDyJuuRHsstspGOgoDXxBcQpE1M=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1699606046; x=1700210846; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=eUL00oHkQd2O/3gz8On7puGbVqo+/aySrXPqsTuZ4lk=; b=LypLLXRO3+NBUxuP6Qfnfe7ZNQ/fLRAqb5Gp9WzQeF0b6NKnlIPxFoNICLkyQVbB0c aU1S6OtP+opykSgDyJWa2adjSioXaamIoq5Op7JsaXzQaQwvaUNr524ZmkRyHs8cH84H RqeT+6AoIZ+wTiHR5J0YhvPkOKhfzLh1jNWQxbte4oxYwF/z7MMr78RdJxSQ2S354vvO mVYolX9YSFVEZjRwoT71mA62c2R0kLcU54odZF2jarHEMDHEkRDlzLwc59bYl7TbkkQB JOdgtZ1HgyaMn+ZkZ6gGrx7zRf6BxXfU38T780k1bestG2p8+hzyl7+yysJEwKgHpsRB CgYQ==
X-Gm-Message-State: AOJu0YyCxdZoXlxM+316aLpmLi+2C8rnYnzWMn7qji7ZnHQRBLkHiIuG a+E1xuYSz+mtcwbHO4KoujJEXA==
X-Google-Smtp-Source: AGHT+IHEAvKFKL595z5kuFACaFVGusk3uUiAsDQKvfgxa7bjLEuyLA/VbKfqHg30U4UmrRosL2zH2A==
X-Received: by 2002:a17:903:2452:b0:1cc:5671:8d9 with SMTP id l18-20020a170903245200b001cc567108d9mr2604797pls.27.1699606046239; Fri, 10 Nov 2023 00:47:26 -0800 (PST)
Received: from smtpclient.apple (dhcp-81d6.meeting.ietf.org. [31.133.129.214]) by smtp.gmail.com with ESMTPSA id c12-20020a170902aa4c00b001b567bbe82dsm4819453plr.150.2023.11.10.00.47.24 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 10 Nov 2023 00:47:25 -0800 (PST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.120.0.1.15\))
From: Sean Turner <sean@sn3rd.com>
In-Reply-To: <001001da12e1$02a15500$07e3ff00$@smyslov.net>
Date: Fri, 10 Nov 2023 09:47:23 +0100
Cc: Valery Smyslov <valery@smyslov.net>, uta@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <22D29894-8F45-478C-BD07-17E4036AE273@sn3rd.com>
References: <20231108124518.E9BD2119CD@rfcpa.amsl.com> <624109b1-409b-4678-8498-8b7c8eee82d0@stpeter.im> <001001da12e1$02a15500$07e3ff00$@smyslov.net>
To: Peter Saint-Andre <stpeter@stpeter.im>
X-Mailer: Apple Mail (2.3654.120.0.1.15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/GAse3UTTcTgUBWBZ2BheENefJsc>
Subject: Re: [Uta] RFC 9525 on Service Identity in TLS
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Nov 2023 08:47:31 -0000

Yep - thanks Peter. Need this in another SDO.

spt

> On Nov 9, 2023, at 08:47, Valery Smyslov <valery@smyslov.net> wrote:
> 
> Hi Peter,
> 
> thank you so much for your work on this RFC and on 9325 too!
> And also thanks to your co-authors and to those who participated
> in reviews and discussions!
> 
> Regards,
> Valery.
> 
>> -----Original Message-----
>> From: Uta [mailto:uta-bounces@ietf.org] On Behalf Of Peter Saint-Andre
>> Sent: Wednesday, November 08, 2023 6:59 PM
>> To: uta@ietf.org
>> Subject: Re: [Uta] RFC 9525 on Service Identity in TLS
>> 
>> Thanks to everyone who provided feedback on this document.
>> 
>> This will be my final RFC. [1] It was a pleasure working with you all.
>> 
>> Peter
>> 
>> [1] https://stpeter.im/journal/1829.html
>> 
>> On 11/8/23 5:45 AM, rfc-editor@rfc-editor.org wrote:
>>> A new Request for Comments is now available in online RFC libraries.
>>> 
>>> 
>>>         RFC 9525
>>> 
>>>         Title:      Service Identity in TLS
>>>         Author:     P. Saint-Andre,
>>>                     R. Salz
>>>         Status:     Standards Track
>>>         Stream:     IETF
>>>         Date:       November 2023
>>>         Mailbox:    stpeter@stpeter.im,
>>>                     rsalz@akamai.com
>>>         Pages:      25
>>>         Obsoletes:  RFC 6125
>>> 
>>>         I-D Tag:    draft-ietf-uta-rfc6125bis-15.txt
>>> 
>>>         URL:        https://www.rfc-editor.org/info/rfc9525
>>> 
>>>         DOI:        10.17487/RFC9525
>>> 
>>> Many application technologies enable secure communication between two
>>> entities by means of Transport Layer Security (TLS) with Internet
>>> Public Key Infrastructure using X.509 (PKIX) certificates. This
>>> document specifies procedures for representing and verifying the
>>> identity of application services in such interactions.
>>> 
>>> This document obsoletes RFC 6125.
>>> 
>>> This document is a product of the Using TLS in Applications Working Group of the IETF.
>>> 
>>> This is now a Proposed Standard.
>>> 
>>> STANDARDS TRACK: This document specifies an Internet Standards Track
>>> protocol for the Internet community, and requests discussion and suggestions
>>> for improvements.  Please refer to the current edition of the Official
>>> Internet Protocol Standards (https://www.rfc-editor.org/standards) for the
>>> standardization state and status of this protocol.  Distribution of this
>>> memo is unlimited.
>>> 
>>> This announcement is sent to the IETF-Announce and rfc-dist lists.
>>> To subscribe or unsubscribe, see
>>>   https://www.ietf.org/mailman/listinfo/ietf-announce
>>>   https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist
>>> 
>>> For searching the RFC series, see https://www.rfc-editor.org/search
>>> For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk
>>> 
>>> Requests for special distribution should be addressed to either the
>>> author of the RFC in question, or to rfc-editor@rfc-editor.org.  Unless
>>> specifically noted otherwise on the RFC itself, all RFCs are for
>>> unlimited distribution.
>>> 
>>> 
>>> The RFC Editor Team
>>> Association Management Solutions, LLC
>>> 
>>> 
>>> _______________________________________________
>>> Uta mailing list
>>> Uta@ietf.org
>>> https://www.ietf.org/mailman/listinfo/uta
>> 
>> _______________________________________________
>> Uta mailing list
>> Uta@ietf.org
>> https://www.ietf.org/mailman/listinfo/uta
> 
> _______________________________________________
> Uta mailing list
> Uta@ietf.org
> https://www.ietf.org/mailman/listinfo/uta