Re: [Uta] I-D Action: draft-ietf-uta-rfc6125bis-11.txt

Alexey Melnikov <alexey.melnikov@isode.com> Thu, 02 March 2023 18:16 UTC

Return-Path: <alexey.melnikov@isode.com>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F0F0C15DF4D for <uta@ietfa.amsl.com>; Thu, 2 Mar 2023 10:16:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isode.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6KX9rpLnYFC4 for <uta@ietfa.amsl.com>; Thu, 2 Mar 2023 10:16:33 -0800 (PST)
Received: from waldorf.isode.com (waldorf.isode.com [62.232.206.188]) by ietfa.amsl.com (Postfix) with ESMTP id 83EF7C152F1D for <uta@ietf.org>; Thu, 2 Mar 2023 10:16:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1677780992; d=isode.com; s=june2016; i=@isode.com; bh=LGLM/vQdeRVOdtwCeFUytTAg56Fqb0Eg/KLK6ahWGXE=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=kKKXauwpC/du/szk7Icql798QuI27iPejAJhEI4Ht/OrcZY7ilQ92XJfLZnsbAZxRr30hX nMcPVHAEJAA2gtitDeRNuojm4BNy0w8vVUlKo4nmOmBPxjm74Uh6VmA8Z8yY3tqbqonjvg yOhxWyPtaYP62EkpuQCTOyA2JY3cIog=;
Received: from [192.168.1.222] (host31-49-219-27.range31-49.btcentralplus.com [31.49.219.27]) by waldorf.isode.com (submission channel) via TCP with ESMTPSA id <ZADn=wAXxMPb@waldorf.isode.com>; Thu, 2 Mar 2023 18:16:32 +0000
Message-ID: <0be1c9d9-4213-ddd1-1251-de68b78ec609@isode.com>
Date: Thu, 02 Mar 2023 18:16:31 +0000
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.7.2
To: Peter Saint-Andre <stpeter@stpeter.im>, uta@ietf.org
References: <167777945818.49999.5988947182574222821@ietfa.amsl.com> <fbf3d17a-6d32-1f77-20dc-80acb17c30bf@stpeter.im>
From: Alexey Melnikov <alexey.melnikov@isode.com>
In-Reply-To: <fbf3d17a-6d32-1f77-20dc-80acb17c30bf@stpeter.im>
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-transfer-encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/LKjgvwDLDIJiczW65DBDEgGou68>
Subject: Re: [Uta] I-D Action: draft-ietf-uta-rfc6125bis-11.txt
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Mar 2023 18:16:37 -0000

Hi Peter,

On 02/03/2023 18:06, Peter Saint-Andre wrote:
> Hi all,
>
> This version represents our attempt to address feedback received 
> during the recent consensus call. The primary changes are:
>
> 1. Clarify the difference between service delegation and DNS delegation.
>
> 2. Clarify the difference between certificate wildcards and DNS 
> wildcards.
>
> 3. Clarify that matching between presented identifiers in certificates 
> and reference identifiers in applications is based on A-labels.
>
> 4. Minimize text about internationalized domain names; instead, for 
> the most part we simply cite existing specifications regarding 
> terminology.
>
> The authors hope that this version is now ready to move forward.

The changes look good to me.

Best Regards,

Alexey

>
> Peter
>
> On 3/2/23 10:50 AM, internet-drafts@ietf.org wrote:
>>
>> A New Internet-Draft is available from the on-line Internet-Drafts 
>> directories.
>> This Internet-Draft is a work item of the Using TLS in Applications 
>> WG of the IETF.
>>
>>          Title           : Service Identity in TLS
>>          Authors         : Peter Saint-Andre
>>                            Rich Salz
>>    Filename        : draft-ietf-uta-rfc6125bis-11.txt
>>    Pages           : 30
>>    Date            : 2023-03-02
>>
>> Abstract:
>>     Many application technologies enable secure communication between 
>> two
>>     entities by means of Transport Layer Security (TLS) with Internet
>>     Public Key Infrastructure Using X.509 (PKIX) certificates. This
>>     document specifies procedures for representing and verifying the
>>     identity of application services in such interactions.
>>
>>     This document obsoletes RFC 6125.
>>
>>
>> The IETF datatracker status page for this Internet-Draft is:
>> https://datatracker.ietf.org/doc/draft-ietf-uta-rfc6125bis/
>>
>> There is also an HTML version available at:
>> https://www.ietf.org/archive/id/draft-ietf-uta-rfc6125bis-11.html
>>
>> A diff from the previous version is available at:
>> https://author-tools.ietf.org/iddiff?url2=draft-ietf-uta-rfc6125bis-11
>>
>>
>> Internet-Drafts are also available by rsync at 
>> rsync.ietf.org::internet-drafts
>>
>>
>> _______________________________________________
>> Uta mailing list
>> Uta@ietf.org
>> https://www.ietf.org/mailman/listinfo/uta
>
> _______________________________________________
> Uta mailing list
> Uta@ietf.org
> https://www.ietf.org/mailman/listinfo/uta