Re: [xmpp] I-D Action: draft-ietf-xmpp-posh-03.txt

⌘ Matt Miller <mamille2@cisco.com> Mon, 26 January 2015 15:35 UTC

Return-Path: <mamille2@cisco.com>
X-Original-To: xmpp@ietfa.amsl.com
Delivered-To: xmpp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C55CD1A88A1 for <xmpp@ietfa.amsl.com>; Mon, 26 Jan 2015 07:35:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -13.19
X-Spam-Level:
X-Spam-Status: No, score=-13.19 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, MISSING_HEADERS=1.021, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ecoQPIcJpCTa for <xmpp@ietfa.amsl.com>; Mon, 26 Jan 2015 07:35:32 -0800 (PST)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 272341A8BB2 for <xmpp@ietf.org>; Mon, 26 Jan 2015 07:35:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2851; q=dns/txt; s=iport; t=1422286531; x=1423496131; h=message-id:date:from:mime-version:cc:subject:references: in-reply-to:content-transfer-encoding; bh=ar3Jal7ekUg51dQ2v9S5kxIPhQX+OHWVuhFrMfwFrTI=; b=KTEtSP0JK4vOPiaIBTmBDiFRCUAARMUGTZbd7Iamn+9leXwIJporOlzC nFLotp3Ek/NONUaV5IouTgyM4YwqbCBednpNo52bo55oku57jUA4ATkok XSf0nERO7K45bj9O3GrEdJZy2wI6Rh8HikhdThE8qRzp//AMEhtZ/ND3Y k=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AlAJAIRdxlStJA2H/2dsb2JhbABQAQmDBlJUBQSCfMM2CoVxAihwQwEBAQEBfYQECQEBBAEBASBLCgEQCxgCAgUWCwICCQMCAQIBFTATAQMCAgEBBYVngjwIBb9ilDoBAQEBAQEEAQEBAQEBHIEhjXsBKDMHgmgOgTMFigeIMoVWgRU2gkmCIIwIIoIBHYFwIi2BRH4BAQU
X-IronPort-AV: E=Sophos;i="5.09,469,1418083200"; d="scan'208";a="390838025"
Received: from alln-core-2.cisco.com ([173.36.13.135]) by rcdn-iport-6.cisco.com with ESMTP; 26 Jan 2015 15:35:30 +0000
Received: from xhc-aln-x10.cisco.com (xhc-aln-x10.cisco.com [173.36.12.84]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t0QFZU1f007858 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <xmpp@ietf.org>; Mon, 26 Jan 2015 15:35:30 GMT
Received: from [10.129.24.58] (10.129.24.58) by xhc-aln-x10.cisco.com (173.36.12.84) with Microsoft SMTP Server (TLS) id 14.3.195.1; Mon, 26 Jan 2015 09:35:29 -0600
Message-ID: <54C65EBF.9090200@cisco.com>
Date: Mon, 26 Jan 2015 08:35:27 -0700
From: ⌘ Matt Miller <mamille2@cisco.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.4.0
MIME-Version: 1.0
CC: xmpp@ietf.org
References: <20150126152005.25654.15112.idtracker@ietfa.amsl.com>
In-Reply-To: <20150126152005.25654.15112.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Originating-IP: [10.129.24.58]
Archived-At: <http://mailarchive.ietf.org/arch/msg/xmpp/sz15uSmBPh0XmW3S3Jhoi2Hbl2E>
Subject: Re: [xmpp] I-D Action: draft-ietf-xmpp-posh-03.txt
X-BeenThere: xmpp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: XMPP Working Group <xmpp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/xmpp>, <mailto:xmpp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/xmpp/>
List-Post: <mailto:xmpp@ietf.org>
List-Help: <mailto:xmpp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/xmpp>, <mailto:xmpp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 26 Jan 2015 15:35:40 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

The authors believe this revision addresses all document feedback from
the Working Group Last Call.


- -- 
- - m&m

Matt Miller < mamille2@cisco.com >
Cisco Systems, Inc.

On 1/26/15 8:20 AM, internet-drafts@ietf.org wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts 
> directories. This draft is a work item of the Extensible Messaging 
> and Presence Protocol Working Group of the IETF.
> 
> Title           : PKIX over Secure HTTP (POSH) Authors         : 
> Matthew Miller Peter Saint-Andre Filename        : 
> draft-ietf-xmpp-posh-03.txt Pages           : 15 Date            : 
> 2015-01-26
> 
> Abstract: Experience has shown that it is extremely difficult to 
> deploy proper PKIX certificates for TLS in multi-tenanted 
> environments.  As a result, domains hosted in such environments 
> often deploy applications using certificates that identify the 
> hosting service, not the hosted domain.  Such deployments force
> end users and peer services to accept a certificate with an
> improper identifier, resulting in obvious security implications.
> This document defines two methods that make it easier to deploy 
> certificates for proper server identity checking in non-HTTP 
> application protocols.  While these methods developed for use in 
> the Extensible Messaging and Presence Protocol (XMPP) as a Domain 
> Name Association (DNA) prooftype, they might also be usable in 
> other non-HTTP application protocols.
> 
> 
> The IETF datatracker status page for this draft is: 
> https://datatracker.ietf.org/doc/draft-ietf-xmpp-posh/
> 
> There's also a htmlized version available at: 
> http://tools.ietf.org/html/draft-ietf-xmpp-posh-03
> 
> A diff from the previous version is available at: 
> http://www.ietf.org/rfcdiff?url2=draft-ietf-xmpp-posh-03
> 
> 
> Please note that it may take a couple of minutes from the time of 
> submission until the htmlized version and diff are available at 
> tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at: 
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________ xmpp mailing list 
> xmpp@ietf.org https://www.ietf.org/mailman/listinfo/xmpp
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - https://gpgtools.org

iQEcBAEBCgAGBQJUxl6/AAoJEDWi+S0W7cO1k3IH/12+EqSSzrD662Tu3cpoSERP
PGuCjm61e199a25obijwxFSdYGiW0xgarE0NT2RREGtNrlch66goK3y3bH5wy6vC
TZrb4rGHO6NIF/xrsp9iMkQc13iB9UpkAETiJ5bKsT0aeLWXWkMcVMxIdbnAznfq
LHZDDyptztifC0tGmsiUkaUxkbrnhdvffiJFMlP4vkAydwMOXgye7wr9lg6toeV1
xWvPw/KmAXlh/ctgBusyuFv/VTzZsajfuGIYyyCPCzm6on0aKODbi/4XpZ9qsSdJ
VUlVTs1RaHwTYkpAGEmDDHExWy0apt9AAtMo2Mdkg8kN8H6AwRmV3kkwhmAvkdA=
=GZXW
-----END PGP SIGNATURE-----