From owner-ietf-openpgp@mail.imc.org Thu Aug 14 19:33:32 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BE5343A6C61 for ; Thu, 14 Aug 2008 19:33:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.522 X-Spam-Level: X-Spam-Status: No, score=-1.522 tagged_above=-999 required=5 tests=[AWL=1.077, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lu7WLNmV4BRv for ; Thu, 14 Aug 2008 19:33:32 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id AE0773A6C55 for ; Thu, 14 Aug 2008 19:33:31 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7F2K7UP085782 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 14 Aug 2008 19:20:07 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7F2K7xO085781; Thu, 14 Aug 2008 19:20:07 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7F2K5RL085772 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Thu, 14 Aug 2008 19:20:06 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id BFCFEFF26E for ; Fri, 15 Aug 2008 12:20:32 +1000 (EST) Message-ID: <48A4E7E9.8020309@e164.org> Date: Fri, 15 Aug 2008 12:20:25 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: ietf-openpgp@imc.org Subject: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt as a working group document. This document is trying to describe how to utilise ASN.1 attributes with OpenPGP keys, the focus is to further promote the use of OpenPGP keys for server purposes, however some people expressed interest in other extensions that are more appropriate for individuals. -- Best regards, Duane From owner-ietf-openpgp@mail.imc.org Thu Aug 14 20:10:15 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4EB233A6942 for ; Thu, 14 Aug 2008 20:10:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NNX57Zi406pK for ; Thu, 14 Aug 2008 20:10:13 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 0FB823A6C52 for ; Thu, 14 Aug 2008 20:10:12 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7F2uaik087616 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 14 Aug 2008 19:56:36 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7F2uaiL087615; Thu, 14 Aug 2008 19:56:36 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from foobar.cs.jhu.edu (foobar.cs.jhu.edu [128.220.13.173]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7F2uZeD087608 for ; Thu, 14 Aug 2008 19:56:36 -0700 (MST) (envelope-from dshaw@jabberwocky.com) Received: from walrus.jabberwocky.com (c-75-69-177-157.hsd1.ma.comcast.net [75.69.177.157]) by foobar.cs.jhu.edu (8.11.6/8.11.6) with ESMTP id m7F2uw702851 for ; Thu, 14 Aug 2008 22:56:58 -0400 Received: from [172.24.84.28] (grover.jabberwocky.com [172.24.84.28]) by walrus.jabberwocky.com (8.14.1/8.14.1) with ESMTP id m7F2uskW027303 for ; Thu, 14 Aug 2008 22:56:54 -0400 Message-Id: From: David Shaw To: OpenPGP Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v926) Subject: Camellia draft Date: Thu, 14 Aug 2008 22:56:54 -0400 X-Mailer: Apple Mail (2.926) Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Is being tracked: https://datatracker.ietf.org/idtracker/draft-ietf-openpgp-camellia/ David From owner-ietf-openpgp@mail.imc.org Fri Aug 15 08:19:55 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0A1753A6A59 for ; Fri, 15 Aug 2008 08:19:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.459 X-Spam-Level: X-Spam-Status: No, score=-2.459 tagged_above=-999 required=5 tests=[AWL=0.140, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vIEgl1oC8xEN for ; Fri, 15 Aug 2008 08:19:54 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id BC5483A69E5 for ; Fri, 15 Aug 2008 08:19:53 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FF7NXF042294 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 15 Aug 2008 08:07:23 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7FF7Nnh042293; Fri, 15 Aug 2008 08:07:23 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FF7LUC042284 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Fri, 15 Aug 2008 08:07:22 -0700 (MST) (envelope-from simon@josefsson.org) Received: from c80-216-126-5.bredband.comhem.se ([80.216.126.5] helo=mocca.josefsson.org) by yxa-v.extundo.com with esmtpsa (TLS-1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.63) (envelope-from ) id 1KU0ty-0007VF-Jh; Fri, 15 Aug 2008 17:07:43 +0200 From: Simon Josefsson To: Duane at e164 dot org Cc: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:22:080815:duane@e164.org::Nsm4W6hnN/JGvx0e:1+KT X-Hashcash: 1:22:080815:ietf-openpgp@imc.org::iArdJeIA7G+xxi44:5Tw2 Date: Fri, 15 Aug 2008 17:07:42 +0200 In-Reply-To: <48A4E7E9.8020309@e164.org> (Duane at's message of "Fri, 15 Aug 2008 12:20:25 +1000") Message-ID: <87r68qqptt.fsf@mocca.josefsson.org> User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Duane at e164 dot org writes: > Please adopt > http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt > as a working group document. This document is trying to describe how to > utilise ASN.1 attributes with OpenPGP keys, the focus is to further > promote the use of OpenPGP keys for server purposes, however some people > expressed interest in other extensions that are more appropriate for > individuals. Your document reuse subjectAltNames from PKIX. While I think that is a nice idea that allows to re-use their flexibility, I think the wisdom of using ASN.1/DER and PKIX in OpenPGP should be challenged. Let me propose that your document specify an OpenPGP attribute 'dnsName' that contains a UTF-8 string with a DNS domain name, and explain how wildcard *.example.com names should be dealt with. No ASN.1/DER encodings and no PKIX terminology. This would solve your use case, RFC 5081, without having OpenPGP implementations need to implement PKIX. Thoughts? Thanks, Simon From owner-ietf-openpgp@mail.imc.org Fri Aug 15 08:30:22 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B0EDB3A6ABD for ; Fri, 15 Aug 2008 08:30:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.557 X-Spam-Level: X-Spam-Status: No, score=-1.557 tagged_above=-999 required=5 tests=[AWL=1.042, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nXZULqQ3jTnb for ; Fri, 15 Aug 2008 08:30:21 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id F374C3A687A for ; Fri, 15 Aug 2008 08:30:20 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FFHrvs043105 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 15 Aug 2008 08:17:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7FFHrrR043104; Fri, 15 Aug 2008 08:17:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FFHqtH043097 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 15 Aug 2008 08:17:53 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 819F4FF26F; Sat, 16 Aug 2008 01:18:17 +1000 (EST) Message-ID: <48A59E34.4030501@e164.org> Date: Sat, 16 Aug 2008 01:18:12 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Simon Josefsson CC: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> In-Reply-To: <87r68qqptt.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig6848D9902416F4FFAD5F6BF3" Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig6848D9902416F4FFAD5F6BF3 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Simon Josefsson wrote: > Let me propose that your document specify an OpenPGP attribute 'dnsName= ' > that contains a UTF-8 string with a DNS domain name, and explain how > wildcard *.example.com names should be dealt with. No ASN.1/DER > encodings and no PKIX terminology. Even PKIX doesn't stipulate how wildcards should be handled, and so we have multiple browsers doing multiple things. > This would solve your use case, RFC 5081, without having OpenPGP > implementations need to implement PKIX. I started off down this path, but then you need at least 7 or 8 different extensions alone to deal with common subject Alt Names, DNS, O, OU, C, ST, L etc where as using PKIX references they maintain the table, or who ever is in charge of a particular OID subset of the tree. --=20 Best regards, Duane --------------enig6848D9902416F4FFAD5F6BF3 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFIpZ40EpWoZMmo/c8RAvrqAKCSJ+dBH9jyoPJv3YqziP/m6KgjWACgooPF Xz8BzMrCvoJsuGmz/+cEQ5s= =5/1Z -----END PGP SIGNATURE----- --------------enig6848D9902416F4FFAD5F6BF3-- From owner-ietf-openpgp@mail.imc.org Fri Aug 15 16:02:12 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AC5993A67CE for ; Fri, 15 Aug 2008 16:02:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.48 X-Spam-Level: X-Spam-Status: No, score=-2.48 tagged_above=-999 required=5 tests=[AWL=0.119, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xv7Eh+8M7MXK for ; Fri, 15 Aug 2008 16:02:11 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 7310C3A6855 for ; Fri, 15 Aug 2008 16:02:11 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FMmsKR076838 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 15 Aug 2008 15:48:54 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7FMmsXF076837; Fri, 15 Aug 2008 15:48:54 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FMmqkr076831 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Fri, 15 Aug 2008 15:48:53 -0700 (MST) (envelope-from simon@josefsson.org) Received: from c80-216-126-5.bredband.comhem.se ([80.216.126.5] helo=mocca.josefsson.org) by yxa-v.extundo.com with esmtpsa (TLS-1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.63) (envelope-from ) id 1KU86d-00056J-Gx; Sat, 16 Aug 2008 00:49:16 +0200 From: Simon Josefsson To: Duane at e164 dot org Cc: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:22:080815:duane@e164.org::TwyB9dmmU/IA3yOG:6n/N X-Hashcash: 1:22:080815:ietf-openpgp@imc.org::rez/EZxJE9fJl3n4:IkV6 Date: Sat, 16 Aug 2008 00:49:14 +0200 In-Reply-To: <48A59E34.4030501@e164.org> (Duane at's message of "Sat, 16 Aug 2008 01:18:12 +1000") Message-ID: <87y72xq4gl.fsf@mocca.josefsson.org> User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Duane at e164 dot org writes: > Simon Josefsson wrote: > >> Let me propose that your document specify an OpenPGP attribute 'dnsName' >> that contains a UTF-8 string with a DNS domain name, and explain how >> wildcard *.example.com names should be dealt with. No ASN.1/DER >> encodings and no PKIX terminology. > > Even PKIX doesn't stipulate how wildcards should be handled, and so we > have multiple browsers doing multiple things. RFC 2818 specify how it should be handled for TLS, but you are most likely correct that multiple browsers doesn't implement it properly. >> This would solve your use case, RFC 5081, without having OpenPGP >> implementations need to implement PKIX. > > I started off down this path, but then you need at least 7 or 8 > different extensions alone to deal with common subject Alt Names, DNS, > O, OU, C, ST, L etc where as using PKIX references they maintain the > table, or who ever is in charge of a particular OID subset of the tree. Is there a use case in OpenPGP for any other alt name than dnsName? /Simon From owner-ietf-openpgp@mail.imc.org Fri Aug 15 19:35:58 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9D7973A682C for ; Fri, 15 Aug 2008 19:35:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.589 X-Spam-Level: X-Spam-Status: No, score=-1.589 tagged_above=-999 required=5 tests=[AWL=1.010, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NADfG5lRfifx for ; Fri, 15 Aug 2008 19:35:57 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 86AF83A677C for ; Fri, 15 Aug 2008 19:35:57 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7G2MHUg091423 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 15 Aug 2008 19:22:17 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7G2MH2B091422; Fri, 15 Aug 2008 19:22:17 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7G2MFvD091413 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 15 Aug 2008 19:22:17 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 14C5CFF270; Sat, 16 Aug 2008 12:22:42 +1000 (EST) Message-ID: <48A639EA.4050003@e164.org> Date: Sat, 16 Aug 2008 12:22:34 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Simon Josefsson CC: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> In-Reply-To: <87y72xq4gl.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Simon Josefsson wrote: > RFC 2818 specify how it should be handled for TLS, but you are most > likely correct that multiple browsers doesn't implement it properly. It only specifies that wildcard(s) are valid for 1 level of hostname(s), it doesn't clarify the issue of multiple wildcards per hostname(s) being valid or not and this is where the browsers start doing their own thing. > Is there a use case in OpenPGP for any other alt name than dnsName? That's the whole point of this draft, people (including myself) want more than just a hostname(s), otherwise we could have just re-used the user-id field for the dns name(s). -- Best regards, Duane From owner-ietf-openpgp@mail.imc.org Sat Aug 16 03:37:01 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 90ECA3A6A18 for ; Sat, 16 Aug 2008 03:37:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.487 X-Spam-Level: X-Spam-Status: No, score=-2.487 tagged_above=-999 required=5 tests=[AWL=0.112, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cdYnmaSsHG5I for ; Sat, 16 Aug 2008 03:37:00 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 4AFDA3A6AC1 for ; Sat, 16 Aug 2008 03:36:59 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GAHY79024744 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 03:17:35 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GAHYik024743; Sat, 16 Aug 2008 03:17:34 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GAHVqQ024737 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sat, 16 Aug 2008 03:17:33 -0700 (MST) (envelope-from simon@josefsson.org) Received: from c80-216-126-5.bredband.comhem.se ([80.216.126.5] helo=mocca.josefsson.org) by yxa-v.extundo.com with esmtpsa (TLS-1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.63) (envelope-from ) id 1KUIqz-0002QT-GR; Sat, 16 Aug 2008 12:17:55 +0200 From: Simon Josefsson To: Duane at e164 dot org Cc: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:22:080816:ietf-openpgp@imc.org::NEIk/w4iq532JqEC:9Bou X-Hashcash: 1:22:080816:duane@e164.org::vUhJ+SUl5XGmk+uL:Ek0c Date: Sat, 16 Aug 2008 12:17:48 +0200 In-Reply-To: <48A639EA.4050003@e164.org> (Duane at's message of "Sat, 16 Aug 2008 12:22:34 +1000") Message-ID: <87r68pnu0j.fsf@mocca.josefsson.org> User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Duane at e164 dot org writes: >> Is there a use case in OpenPGP for any other alt name than dnsName? > > That's the whole point of this draft, people (including myself) want > more than just a hostname(s), otherwise we could have just re-used the > user-id field for the dns name(s). Ok. I suggest to explain (in the document) these use cases and to broaden the abstract -- right now the abstract strongly implies to me that you only intend the use-case to be OpenPGP in TLS: Abstract A RFC was accepted extending TLS usage to include OpenPGP keys (RFC 5081) as an alternative or in addition to X.509 certificates, however the author did not really standardise the way the information in OpenPGP keys was to be presented and this could be detrimental or fragment efforts to utilise OpenPGP keys in this manner. Other than that, I don't have any comments. I believe that an OpenPGP extension mechanism that carry DNS hostnames are needed, so I'd like your solution (or something like it) move forward. Thanks, /Simon From owner-ietf-openpgp@mail.imc.org Sat Aug 16 06:26:13 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7DB8F28C0D6 for ; Sat, 16 Aug 2008 06:26:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.62 X-Spam-Level: X-Spam-Status: No, score=-1.62 tagged_above=-999 required=5 tests=[AWL=0.979, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gEHSKBX3TNUh for ; Sat, 16 Aug 2008 06:26:12 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 23F8428C0DE for ; Sat, 16 Aug 2008 06:26:11 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDArVL037081 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 06:10:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GDArte037080; Sat, 16 Aug 2008 06:10:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDAq8w037073 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Sat, 16 Aug 2008 06:10:53 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 0E44EFF270; Sat, 16 Aug 2008 23:11:16 +1000 (EST) Message-ID: <48A6D1F0.7030708@e164.org> Date: Sat, 16 Aug 2008 23:11:12 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Simon Josefsson CC: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> In-Reply-To: <87r68pnu0j.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Simon Josefsson wrote: > Ok. I suggest to explain (in the document) these use cases and to > broaden the abstract -- right now the abstract strongly implies to me > that you only intend the use-case to be OpenPGP in TLS: Server uses of which TLS is going to be the biggest use case is the main objective at present, most server certificates in the X.509 world have a lot more than just dnsName, such as company name, maybe a contact, the country, state/territory/province, town/suburb and so on and so forth. However I have a secondary internet draft that depends on this one that I'm currently in the process of writing and so on that I'd like to use OpenPGP keys for DNS encryption. Most recently draft published to the IETF site: http://www.ietf.org/internet-drafts/draft-groth-dns-encryption-02.txt However this has now changed substantially, and the current draft is here: http://open-pgp.info/wiki/index.php?title=DNS_Encryption_Draft Along with a bunch of text I have no idea what to do with: http://open-pgp.info/wiki/index.php?title=Why_X.509_is_Bad -- Best regards, Duane From owner-ietf-openpgp@mail.imc.org Sat Aug 16 06:37:30 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C19013A68A8 for ; Sat, 16 Aug 2008 06:37:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.49 X-Spam-Level: X-Spam-Status: No, score=-2.49 tagged_above=-999 required=5 tests=[AWL=0.109, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sDmGxz15QS41 for ; Sat, 16 Aug 2008 06:37:30 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 984C73A6BCB for ; Sat, 16 Aug 2008 06:37:29 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDMXji038428 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 06:22:33 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GDMXT9038427; Sat, 16 Aug 2008 06:22:33 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDMTaE038413 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sat, 16 Aug 2008 06:22:32 -0700 (MST) (envelope-from simon@josefsson.org) Received: from c80-216-126-5.bredband.comhem.se ([80.216.126.5] helo=mocca.josefsson.org) by yxa-v.extundo.com with esmtpsa (TLS-1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.63) (envelope-from ) id 1KULk3-000404-6V; Sat, 16 Aug 2008 15:22:53 +0200 From: Simon Josefsson To: Duane at e164 dot org Cc: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:22:080816:ietf-openpgp@imc.org::7orTveZkQBCFrcOH:25H9 X-Hashcash: 1:22:080816:duane@e164.org::FDmhLN8B33XPYRHE:fNY3 Date: Sat, 16 Aug 2008 15:22:50 +0200 In-Reply-To: <48A6D1F0.7030708@e164.org> (Duane at's message of "Sat, 16 Aug 2008 23:11:12 +1000") Message-ID: <87vdy1m6vp.fsf@mocca.josefsson.org> User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Duane at e164 dot org writes: > Simon Josefsson wrote: > >> Ok. I suggest to explain (in the document) these use cases and to >> broaden the abstract -- right now the abstract strongly implies to me >> that you only intend the use-case to be OpenPGP in TLS: > > Server uses of which TLS is going to be the biggest use case is the main > objective at present, most server certificates in the X.509 world have a > lot more than just dnsName, such as company name, maybe a contact, the > country, state/territory/province, town/suburb and so on and so forth. > > However I have a secondary internet draft that depends on this one that > I'm currently in the process of writing and so on that I'd like to use > OpenPGP keys for DNS encryption. > > Most recently draft published to the IETF site: > > http://www.ietf.org/internet-drafts/draft-groth-dns-encryption-02.txt > > However this has now changed substantially, and the current draft is here: > > http://open-pgp.info/wiki/index.php?title=DNS_Encryption_Draft Cool! Why don't you use RFC 4398 to store OpenPGP keys in the DNS, rather than adding a new RR type? /Simon From owner-ietf-openpgp@mail.imc.org Sat Aug 16 07:03:35 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CAE413A6A6D for ; Sat, 16 Aug 2008 07:03:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.649 X-Spam-Level: X-Spam-Status: No, score=-1.649 tagged_above=-999 required=5 tests=[AWL=0.950, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Uy5m9Ib3OfXj for ; Sat, 16 Aug 2008 07:03:35 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 303FE3A6809 for ; Sat, 16 Aug 2008 07:03:33 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDOTnd038647 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 06:24:29 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GDOTJ5038646; Sat, 16 Aug 2008 06:24:29 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDORZ1038640 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Sat, 16 Aug 2008 06:24:28 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 15180FF270; Sat, 16 Aug 2008 23:24:52 +1000 (EST) Message-ID: <48A6D521.2000209@e164.org> Date: Sat, 16 Aug 2008 23:24:49 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Simon Josefsson , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87vdy1m6vp.fsf@mocca.josefsson.org> In-Reply-To: <87vdy1m6vp.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Simon Josefsson wrote: > Cool! Why don't you use RFC 4398 to store OpenPGP keys in the DNS, > rather than adding a new RR type? The current draft is based on suggestions from the namedroppers list, however I've put it on hold till the OpenPGP stuff gets dealt with. -- Best regards, Duane From owner-ietf-openpgp@mail.imc.org Sat Aug 16 09:08:08 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E000E3A686C for ; Sat, 16 Aug 2008 09:08:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.676 X-Spam-Level: X-Spam-Status: No, score=-1.676 tagged_above=-999 required=5 tests=[AWL=0.923, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jHYpEcdUlnK5 for ; Sat, 16 Aug 2008 09:08:08 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id AE42B3A6B2B for ; Sat, 16 Aug 2008 09:08:07 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GFuBn3051357 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 08:56:11 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GFuBFv051356; Sat, 16 Aug 2008 08:56:11 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GFuAD3051350 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Sat, 16 Aug 2008 08:56:10 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 9695EFF270; Sun, 17 Aug 2008 01:56:35 +1000 (EST) Message-ID: <48A6F8A6.6050501@e164.org> Date: Sun, 17 Aug 2008 01:56:22 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Simon Josefsson CC: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> In-Reply-To: <87r68pnu0j.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Simon Josefsson wrote: You might want to look at this: http://open-pgp.info/wiki/index.php?title=Talk:Standardisation_of_OpenPGP_Keys_for_Server_Purposes Has some of the discussion surrounding decisions made on the draft. -- Best regards, Duane From owner-ietf-openpgp@mail.imc.org Sat Aug 16 13:53:30 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 391813A6A93 for ; Sat, 16 Aug 2008 13:53:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.505 X-Spam-Level: X-Spam-Status: No, score=-1.505 tagged_above=-999 required=5 tests=[AWL=0.745, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lmj5-HtnKPhz for ; Sat, 16 Aug 2008 13:53:29 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 3AC613A6782 for ; Sat, 16 Aug 2008 13:53:27 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GKcR0P074631 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 13:38:27 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GKcR9M074630; Sat, 16 Aug 2008 13:38:27 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.enyo.de (mail.enyo.de [212.9.189.167]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GKcOwS074620 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sat, 16 Aug 2008 13:38:27 -0700 (MST) (envelope-from fw@deneb.enyo.de) Received: from deneb.vpn.enyo.de ([212.9.189.177] helo=deneb.enyo.de) by mail.enyo.de with esmtp id 1KUSXJ-0000YY-A4; Sat, 16 Aug 2008 22:38:09 +0200 Received: from fw by deneb.enyo.de with local (Exim 4.69) (envelope-from ) id 1KUSXI-0003vA-RN; Sat, 16 Aug 2008 22:38:08 +0200 From: Florian Weimer To: Duane at e164 dot org Cc: Simon Josefsson , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> Date: Sat, 16 Aug 2008 22:38:08 +0200 In-Reply-To: <48A6D1F0.7030708@e164.org> (Duane at's message of "Sat, 16 Aug 2008 23:11:12 +1000") Message-ID: <87y72wr8zz.fsf@mid.deneb.enyo.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: * Duane at: > Server uses of which TLS is going to be the biggest use case is the main > objective at present, most server certificates in the X.509 world have a > lot more than just dnsName, such as company name, maybe a contact, the > country, state/territory/province, town/suburb and so on and so forth. This data is not mechanically processed (at least not in a way which is consistent across implementations), so you can put it into notation data subpackets. From owner-ietf-openpgp@mail.imc.org Sat Aug 16 17:35:19 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 265923A6B71 for ; Sat, 16 Aug 2008 17:35:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.702 X-Spam-Level: X-Spam-Status: No, score=-1.702 tagged_above=-999 required=5 tests=[AWL=0.898, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4gHWTxG6cU+Y for ; Sat, 16 Aug 2008 17:35:18 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 18F693A6ABE for ; Sat, 16 Aug 2008 17:35:17 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7H0Lqvf089792 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 17:21:52 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7H0LqAL089791; Sat, 16 Aug 2008 17:21:52 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7H0Lnka089782 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Sat, 16 Aug 2008 17:21:50 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id D15FA1F402D; Sun, 17 Aug 2008 10:22:14 +1000 (EST) Message-ID: <48A76F2D.1060604@e164.org> Date: Sun, 17 Aug 2008 10:22:05 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Florian Weimer CC: Simon Josefsson , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> In-Reply-To: <87y72wr8zz.fsf@mid.deneb.enyo.de> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Florian Weimer wrote: > This data is not mechanically processed (at least not in a way which is > consistent across implementations), so you can put it into notation data > subpackets. What is a notation data subpacket? Or more to the point, what section of what RFC can be used to reference it etc? -- Best regards, Duane From owner-ietf-openpgp@mail.imc.org Sun Aug 17 02:50:18 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 67D133A6952 for ; Sun, 17 Aug 2008 02:50:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.877 X-Spam-Level: X-Spam-Status: No, score=-1.877 tagged_above=-999 required=5 tests=[AWL=0.372, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DoeQX6BvBJnB for ; Sun, 17 Aug 2008 02:50:17 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 4608D3A6877 for ; Sun, 17 Aug 2008 02:50:17 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7H9WwiD020189 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 17 Aug 2008 02:32:59 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7H9WwsX020188; Sun, 17 Aug 2008 02:32:58 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.enyo.de (mail.enyo.de [212.9.189.167]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7H9WsEF020180 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sun, 17 Aug 2008 02:32:56 -0700 (MST) (envelope-from fw@deneb.enyo.de) Received: from deneb.vpn.enyo.de ([212.9.189.177] helo=deneb.enyo.de) by mail.enyo.de with esmtp id 1KUed3-0002hL-94; Sun, 17 Aug 2008 11:32:53 +0200 Received: from fw by deneb.enyo.de with local (Exim 4.69) (envelope-from ) id 1KUed2-0001Fv-SA; Sun, 17 Aug 2008 11:32:52 +0200 From: Florian Weimer To: Duane at e164 dot org Cc: Simon Josefsson , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <48A76F2D.1060604@e164.org> Date: Sun, 17 Aug 2008 11:32:52 +0200 In-Reply-To: <48A76F2D.1060604@e164.org> (Duane at's message of "Sun, 17 Aug 2008 10:22:05 +1000") Message-ID: <87iqu0m1ff.fsf@mid.deneb.enyo.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: * Duane at: Weimer wrote: > >> This data is not mechanically processed (at least not in a way which is >> consistent across implementations), so you can put it into notation data >> subpackets. > > What is a notation data subpacket? It's a term straight from RFC 4880. Sorry, I don't know how to be more precise. From owner-ietf-openpgp@mail.imc.org Mon Aug 18 02:37:28 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5B12E3A6BF7 for ; Mon, 18 Aug 2008 02:37:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Nq7ju62HV+O for ; Mon, 18 Aug 2008 02:37:27 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 31DB73A6800 for ; Mon, 18 Aug 2008 02:37:26 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7I9IONA029999 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 18 Aug 2008 02:18:24 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7I9IOqi029998; Mon, 18 Aug 2008 02:18:24 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7I9IKMb029989 for ; Mon, 18 Aug 2008 02:18:21 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.63 #1 (Debian)) id 1KV0ss-0001Dt-Ut for ; Mon, 18 Aug 2008 11:18:43 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1KV0pK-0008IU-KQ; Mon, 18 Aug 2008 11:15:02 +0200 From: Werner Koch To: Florian Weimer Cc: Duane at e164 dot org , Simon Josefsson , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <48A76F2D.1060604@e164.org> <87iqu0m1ff.fsf@mid.deneb.enyo.de> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Mon, 18 Aug 2008 11:15:01 +0200 In-Reply-To: <87iqu0m1ff.fsf@mid.deneb.enyo.de> (Florian Weimer's message of "Sun, 17 Aug 2008 11:32:52 +0200") Message-ID: <871w0mfzvu.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Sun, 17 Aug 2008 11:32, fw@deneb.enyo.de said: >> What is a notation data subpacket? > > It's a term straight from RFC 4880. Sorry, I don't know how to be more > precise. Notation data means in OpenPGP additional data associated with a signatures (key or data signature). This is basically the sdame as certificate extensions and signaed attribuest in X.509. Note that notation data is not the same as a user ID but data associated for example with a user ID. Grep the gpg man page for "notation" to see how to use them in that application. Salam-Shalom, Werner -- Linux-Kongress 2008 + Hamburg + October 7-10 + www.linux-kongress.org Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. From owner-ietf-openpgp@mail.imc.org Mon Aug 18 03:41:09 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1EECC3A6C7F for ; Mon, 18 Aug 2008 03:41:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.426 X-Spam-Level: X-Spam-Status: No, score=-1.426 tagged_above=-999 required=5 tests=[AWL=0.573, BAYES_00=-2.599, J_CHICKENPOX_37=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XaKXij6o-Prd for ; Mon, 18 Aug 2008 03:41:08 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 0575228C0E0 for ; Mon, 18 Aug 2008 03:41:07 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IAQTvS036562 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 18 Aug 2008 03:26:29 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7IAQT89036561; Mon, 18 Aug 2008 03:26:29 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IAQS3W036555 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Mon, 18 Aug 2008 03:26:29 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 6BE0BFF270 for ; Mon, 18 Aug 2008 20:26:53 +1000 (EST) Message-ID: <48A94E69.4040609@e164.org> Date: Mon, 18 Aug 2008 20:26:49 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <8763pymxp8.fsf@mocca.josefsson.org> In-Reply-To: <8763pymxp8.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Simon Josefsson wrote: > Florian Weimer writes: > >> * Duane at: >> >>> Server uses of which TLS is going to be the biggest use case is the main >>> objective at present, most server certificates in the X.509 world have a >>> lot more than just dnsName, such as company name, maybe a contact, the >>> country, state/territory/province, town/suburb and so on and so forth. >> This data is not mechanically processed (at least not in a way which is >> consistent across implementations), so you can put it into notation data >> subpackets. > > Right, however, the TLS server name needs to be mechanically processed, > so it needs a different mechanism -- such as a new OpenPGP extension > that contains a single UTF-8 string intended for identification of > TLS+OpenPGP servers. The other information needs to be verified in a similar manner as well, otherwise the information is much less useful. Also a single website can have multiple hostnames. -- Best regards, Duane From owner-ietf-openpgp@mail.imc.org Mon Aug 18 03:53:45 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 668A33A6C27 for ; Mon, 18 Aug 2008 03:53:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.193 X-Spam-Level: X-Spam-Status: No, score=-2.193 tagged_above=-999 required=5 tests=[AWL=-0.194, BAYES_00=-2.599, J_CHICKENPOX_37=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1HE5QxSX0IJf for ; Mon, 18 Aug 2008 03:53:44 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 332503A684E for ; Mon, 18 Aug 2008 03:53:43 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IAKEox036039 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 18 Aug 2008 03:20:14 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7IAKE9u036038; Mon, 18 Aug 2008 03:20:14 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IAKBN9036028 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Mon, 18 Aug 2008 03:20:13 -0700 (MST) (envelope-from simon@josefsson.org) Received: from c80-216-126-5.bredband.comhem.se ([80.216.126.5] helo=mocca.josefsson.org) by yxa-v.extundo.com with esmtpsa (TLS-1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.63) (envelope-from ) id 1KV1qW-0004Tp-F3; Mon, 18 Aug 2008 12:20:34 +0200 From: Simon Josefsson To: Florian Weimer Cc: Duane at e164 dot org , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:22:080818:duane@e164.org::PXfcIyHPNxgM1iR7:ynH X-Hashcash: 1:22:080818:ietf-openpgp@imc.org::o0kGP6otYor742vT:CkHn X-Hashcash: 1:22:080818:fw@deneb.enyo.de::T15AnC6iyH1a2XL6:XlVl Date: Mon, 18 Aug 2008 12:20:19 +0200 In-Reply-To: <87y72wr8zz.fsf@mid.deneb.enyo.de> (Florian Weimer's message of "Sat, 16 Aug 2008 22:38:08 +0200") Message-ID: <8763pymxp8.fsf@mocca.josefsson.org> User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Florian Weimer writes: > * Duane at: > >> Server uses of which TLS is going to be the biggest use case is the main >> objective at present, most server certificates in the X.509 world have a >> lot more than just dnsName, such as company name, maybe a contact, the >> country, state/territory/province, town/suburb and so on and so forth. > > This data is not mechanically processed (at least not in a way which is > consistent across implementations), so you can put it into notation data > subpackets. Right, however, the TLS server name needs to be mechanically processed, so it needs a different mechanism -- such as a new OpenPGP extension that contains a single UTF-8 string intended for identification of TLS+OpenPGP servers. /Simon From owner-ietf-openpgp@mail.imc.org Mon Aug 18 09:32:08 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F19623A6CDC for ; Mon, 18 Aug 2008 09:32:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KCBThFQ8Ru2C for ; Mon, 18 Aug 2008 09:32:08 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id D30A43A687E for ; Mon, 18 Aug 2008 09:32:07 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IGFr2R071659 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 18 Aug 2008 09:15:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7IGFrCE071658; Mon, 18 Aug 2008 09:15:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from merrymeet.com (merrymeet.com [66.93.68.160]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IGFqG2071652 for ; Mon, 18 Aug 2008 09:15:52 -0700 (MST) (envelope-from jon@callas.org) Received: from keys.merrymeet.com (keys.merrymeet.com [66.93.68.161]) (Authenticated sender: jon) by merrymeet.com (Postfix) with ESMTP id 6FB24123ECAE for ; Mon, 18 Aug 2008 09:16:16 -0700 (PDT) Received: from 169-231-70-230.wireless.ucsb.edu ([169.231.70.230]) by keys.merrymeet.com (PGP Universal service); Mon, 18 Aug 2008 09:16:13 -0700 X-PGP-Universal: processed; by keys.merrymeet.com on Mon, 18 Aug 2008 09:16:13 -0700 Message-Id: <13149FAC-F0C4-41F5-92EA-4E27358BE4BC@callas.org> From: Jon Callas To: Duane , OpenPGP In-Reply-To: <48A76F2D.1060604@e164.org> Mime-Version: 1.0 (Apple Message framework v928.1) Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt Date: Mon, 18 Aug 2008 09:16:12 -0700 References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <48A76F2D.1060604@e164.org> X-Mailer: Apple Mail (2.928.1) X-PGP-Encoding-Format: Partitioned X-PGP-Encoding-Version: 2.0.2 X-Content-PGP-Universal-Saved-Content-Transfer-Encoding: 7bit X-Content-PGP-Universal-Saved-Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7BIT Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Aug 16, 2008, at 5:22 PM, Duane at e164 dot org wrote: > > Florian Weimer wrote: > >> This data is not mechanically processed (at least not in a way >> which is >> consistent across implementations), so you can put it into notation >> data >> subpackets. > > What is a notation data subpacket? > > Or more to the point, what section of what RFC can be used to > reference > it etc? http://tools.ietf.org/html/rfc4880#section-5.2.3.16 Jon -----BEGIN PGP SIGNATURE----- Version: PGP Universal 2.6.3 Charset: US-ASCII wj8DBQFIqaBNsTedWZOD3gYRAoXUAJ90nDyy2cm91Z3inH78qbeAIE9FGwCgkSWB 0y8ohpM6075B1kCIvDLq6fQ= =KlkS -----END PGP SIGNATURE----- From owner-ietf-openpgp@mail.imc.org Fri Aug 22 19:50:08 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D7D4A3A6A04 for ; Fri, 22 Aug 2008 19:50:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.441 X-Spam-Level: X-Spam-Status: No, score=-1.441 tagged_above=-999 required=5 tests=[AWL=0.558, BAYES_00=-2.599, J_CHICKENPOX_37=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tfbc4lFAsHNu for ; Fri, 22 Aug 2008 19:50:08 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id BA6C03A67D8 for ; Fri, 22 Aug 2008 19:50:07 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7N2RPW3099170 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 22 Aug 2008 19:27:25 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7N2RPwi099169; Fri, 22 Aug 2008 19:27:25 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7N2RO5a099163 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 22 Aug 2008 19:27:25 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 78454FF26C for ; Sat, 23 Aug 2008 12:27:26 +1000 (EST) Message-ID: <48AF7588.1020409@e164.org> Date: Sat, 23 Aug 2008 12:27:20 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <8763pymxp8.fsf@mocca.josefsson.org> <48A94E69.4040609@e164.org> In-Reply-To: <48A94E69.4040609@e164.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Duane at e164 dot org wrote: > Simon Josefsson wrote: >> Florian Weimer writes: >> >>> * Duane at: >>> >>>> Server uses of which TLS is going to be the biggest use case is the main >>>> objective at present, most server certificates in the X.509 world have a >>>> lot more than just dnsName, such as company name, maybe a contact, the >>>> country, state/territory/province, town/suburb and so on and so forth. >>> This data is not mechanically processed (at least not in a way which is >>> consistent across implementations), so you can put it into notation data >>> subpackets. >> Right, however, the TLS server name needs to be mechanically processed, >> so it needs a different mechanism -- such as a new OpenPGP extension >> that contains a single UTF-8 string intended for identification of >> TLS+OpenPGP servers. > > The other information needs to be verified in a similar manner as well, > otherwise the information is much less useful. > > Also a single website can have multiple hostnames. If all the information submitted needs verifying before being signed by others is notation data sub packets the most suitable way to do this? -- Best regards, Duane From owner-ietf-openpgp@mail.imc.org Sun Aug 31 02:27:50 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4B1533A69B7 for ; Sun, 31 Aug 2008 02:27:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.21 X-Spam-Level: X-Spam-Status: No, score=0.21 tagged_above=-999 required=5 tests=[BAYES_20=-0.74, HELO_EQ_DE=0.35, J_CHICKENPOX_37=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hr86uFuXPq-c for ; Sun, 31 Aug 2008 02:27:49 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 1B89E3A68EF for ; Sun, 31 Aug 2008 02:27:48 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7V9Cp6e071525 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 31 Aug 2008 02:13:01 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7V9Cpsd071524; Sun, 31 Aug 2008 02:12:51 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.enyo.de (mail.enyo.de [212.9.189.167]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7V9CbQZ071487 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sun, 31 Aug 2008 02:12:49 -0700 (MST) (envelope-from fw@deneb.enyo.de) Received: from deneb.vpn.enyo.de ([212.9.189.177] helo=deneb.enyo.de) by mail.enyo.de with esmtp id 1KZiyz-00067G-Pm; Sun, 31 Aug 2008 11:12:29 +0200 Received: from fw by deneb.enyo.de with local (Exim 4.69) (envelope-from ) id 1KZiyz-0003bZ-Bv; Sun, 31 Aug 2008 11:12:29 +0200 From: Florian Weimer To: Simon Josefsson Cc: Duane at e164 dot org , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <8763pymxp8.fsf@mocca.josefsson.org> Date: Sun, 31 Aug 2008 11:12:29 +0200 In-Reply-To: <8763pymxp8.fsf@mocca.josefsson.org> (Simon Josefsson's message of "Mon, 18 Aug 2008 12:20:19 +0200") Message-ID: <87hc91czuq.fsf@mid.deneb.enyo.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: * Simon Josefsson: > Florian Weimer writes: > >> * Duane at: >> >>> Server uses of which TLS is going to be the biggest use case is the main >>> objective at present, most server certificates in the X.509 world have a >>> lot more than just dnsName, such as company name, maybe a contact, the >>> country, state/territory/province, town/suburb and so on and so forth. >> >> This data is not mechanically processed (at least not in a way which is >> consistent across implementations), so you can put it into notation data >> subpackets. > > Right, however, the TLS server name needs to be mechanically processed, > so it needs a different mechanism -- such as a new OpenPGP extension > that contains a single UTF-8 string intended for identification of > TLS+OpenPGP servers. Hmm. There is no automatic trust model for TLS/OpenPGP, so I guess you need to configure keys explicitly. In this case, you'd not just record the fingerprint, but also the domain name. Problem solved. (If you want indirection, you can configure signing keys plus a notation name of the signature notation data subpacket to consider.) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7V9Cp6e071525 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 31 Aug 2008 02:13:01 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7V9Cpsd071524; Sun, 31 Aug 2008 02:12:51 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.enyo.de (mail.enyo.de [212.9.189.167]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7V9CbQZ071487 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sun, 31 Aug 2008 02:12:49 -0700 (MST) (envelope-from fw@deneb.enyo.de) Received: from deneb.vpn.enyo.de ([212.9.189.177] helo=deneb.enyo.de) by mail.enyo.de with esmtp id 1KZiyz-00067G-Pm; Sun, 31 Aug 2008 11:12:29 +0200 Received: from fw by deneb.enyo.de with local (Exim 4.69) (envelope-from ) id 1KZiyz-0003bZ-Bv; Sun, 31 Aug 2008 11:12:29 +0200 From: Florian Weimer To: Simon Josefsson Cc: Duane at e164 dot org , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <8763pymxp8.fsf@mocca.josefsson.org> Date: Sun, 31 Aug 2008 11:12:29 +0200 In-Reply-To: <8763pymxp8.fsf@mocca.josefsson.org> (Simon Josefsson's message of "Mon, 18 Aug 2008 12:20:19 +0200") Message-ID: <87hc91czuq.fsf@mid.deneb.enyo.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: * Simon Josefsson: > Florian Weimer writes: > >> * Duane at: >> >>> Server uses of which TLS is going to be the biggest use case is the main >>> objective at present, most server certificates in the X.509 world have a >>> lot more than just dnsName, such as company name, maybe a contact, the >>> country, state/territory/province, town/suburb and so on and so forth. >> >> This data is not mechanically processed (at least not in a way which is >> consistent across implementations), so you can put it into notation data >> subpackets. > > Right, however, the TLS server name needs to be mechanically processed, > so it needs a different mechanism -- such as a new OpenPGP extension > that contains a single UTF-8 string intended for identification of > TLS+OpenPGP servers. Hmm. There is no automatic trust model for TLS/OpenPGP, so I guess you need to configure keys explicitly. In this case, you'd not just record the fingerprint, but also the domain name. Problem solved. (If you want indirection, you can configure signing keys plus a notation name of the signature notation data subpacket to consider.) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7N2RPW3099170 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 22 Aug 2008 19:27:25 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7N2RPwi099169; Fri, 22 Aug 2008 19:27:25 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7N2RO5a099163 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 22 Aug 2008 19:27:25 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 78454FF26C for ; Sat, 23 Aug 2008 12:27:26 +1000 (EST) Message-ID: <48AF7588.1020409@e164.org> Date: Sat, 23 Aug 2008 12:27:20 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <8763pymxp8.fsf@mocca.josefsson.org> <48A94E69.4040609@e164.org> In-Reply-To: <48A94E69.4040609@e164.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Duane at e164 dot org wrote: > Simon Josefsson wrote: >> Florian Weimer writes: >> >>> * Duane at: >>> >>>> Server uses of which TLS is going to be the biggest use case is the main >>>> objective at present, most server certificates in the X.509 world have a >>>> lot more than just dnsName, such as company name, maybe a contact, the >>>> country, state/territory/province, town/suburb and so on and so forth. >>> This data is not mechanically processed (at least not in a way which is >>> consistent across implementations), so you can put it into notation data >>> subpackets. >> Right, however, the TLS server name needs to be mechanically processed, >> so it needs a different mechanism -- such as a new OpenPGP extension >> that contains a single UTF-8 string intended for identification of >> TLS+OpenPGP servers. > > The other information needs to be verified in a similar manner as well, > otherwise the information is much less useful. > > Also a single website can have multiple hostnames. If all the information submitted needs verifying before being signed by others is notation data sub packets the most suitable way to do this? -- Best regards, Duane Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IGFr2R071659 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 18 Aug 2008 09:15:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7IGFrCE071658; Mon, 18 Aug 2008 09:15:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from merrymeet.com (merrymeet.com [66.93.68.160]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IGFqG2071652 for ; Mon, 18 Aug 2008 09:15:52 -0700 (MST) (envelope-from jon@callas.org) Received: from keys.merrymeet.com (keys.merrymeet.com [66.93.68.161]) (Authenticated sender: jon) by merrymeet.com (Postfix) with ESMTP id 6FB24123ECAE for ; Mon, 18 Aug 2008 09:16:16 -0700 (PDT) Received: from 169-231-70-230.wireless.ucsb.edu ([169.231.70.230]) by keys.merrymeet.com (PGP Universal service); Mon, 18 Aug 2008 09:16:13 -0700 X-PGP-Universal: processed; by keys.merrymeet.com on Mon, 18 Aug 2008 09:16:13 -0700 Message-Id: <13149FAC-F0C4-41F5-92EA-4E27358BE4BC@callas.org> From: Jon Callas To: Duane , OpenPGP In-Reply-To: <48A76F2D.1060604@e164.org> Mime-Version: 1.0 (Apple Message framework v928.1) Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt Date: Mon, 18 Aug 2008 09:16:12 -0700 References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <48A76F2D.1060604@e164.org> X-Mailer: Apple Mail (2.928.1) X-PGP-Encoding-Format: Partitioned X-PGP-Encoding-Version: 2.0.2 X-Content-PGP-Universal-Saved-Content-Transfer-Encoding: 7bit X-Content-PGP-Universal-Saved-Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7BIT Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Aug 16, 2008, at 5:22 PM, Duane at e164 dot org wrote: > > Florian Weimer wrote: > >> This data is not mechanically processed (at least not in a way >> which is >> consistent across implementations), so you can put it into notation >> data >> subpackets. > > What is a notation data subpacket? > > Or more to the point, what section of what RFC can be used to > reference > it etc? http://tools.ietf.org/html/rfc4880#section-5.2.3.16 Jon -----BEGIN PGP SIGNATURE----- Version: PGP Universal 2.6.3 Charset: US-ASCII wj8DBQFIqaBNsTedWZOD3gYRAoXUAJ90nDyy2cm91Z3inH78qbeAIE9FGwCgkSWB 0y8ohpM6075B1kCIvDLq6fQ= =KlkS -----END PGP SIGNATURE----- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IAQTvS036562 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 18 Aug 2008 03:26:29 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7IAQT89036561; Mon, 18 Aug 2008 03:26:29 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IAQS3W036555 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Mon, 18 Aug 2008 03:26:29 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 6BE0BFF270 for ; Mon, 18 Aug 2008 20:26:53 +1000 (EST) Message-ID: <48A94E69.4040609@e164.org> Date: Mon, 18 Aug 2008 20:26:49 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <8763pymxp8.fsf@mocca.josefsson.org> In-Reply-To: <8763pymxp8.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Simon Josefsson wrote: > Florian Weimer writes: > >> * Duane at: >> >>> Server uses of which TLS is going to be the biggest use case is the main >>> objective at present, most server certificates in the X.509 world have a >>> lot more than just dnsName, such as company name, maybe a contact, the >>> country, state/territory/province, town/suburb and so on and so forth. >> This data is not mechanically processed (at least not in a way which is >> consistent across implementations), so you can put it into notation data >> subpackets. > > Right, however, the TLS server name needs to be mechanically processed, > so it needs a different mechanism -- such as a new OpenPGP extension > that contains a single UTF-8 string intended for identification of > TLS+OpenPGP servers. The other information needs to be verified in a similar manner as well, otherwise the information is much less useful. Also a single website can have multiple hostnames. -- Best regards, Duane Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IAKEox036039 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 18 Aug 2008 03:20:14 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7IAKE9u036038; Mon, 18 Aug 2008 03:20:14 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7IAKBN9036028 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Mon, 18 Aug 2008 03:20:13 -0700 (MST) (envelope-from simon@josefsson.org) Received: from c80-216-126-5.bredband.comhem.se ([80.216.126.5] helo=mocca.josefsson.org) by yxa-v.extundo.com with esmtpsa (TLS-1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.63) (envelope-from ) id 1KV1qW-0004Tp-F3; Mon, 18 Aug 2008 12:20:34 +0200 From: Simon Josefsson To: Florian Weimer Cc: Duane at e164 dot org , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:22:080818:duane@e164.org::PXfcIyHPNxgM1iR7:ynH X-Hashcash: 1:22:080818:ietf-openpgp@imc.org::o0kGP6otYor742vT:CkHn X-Hashcash: 1:22:080818:fw@deneb.enyo.de::T15AnC6iyH1a2XL6:XlVl Date: Mon, 18 Aug 2008 12:20:19 +0200 In-Reply-To: <87y72wr8zz.fsf@mid.deneb.enyo.de> (Florian Weimer's message of "Sat, 16 Aug 2008 22:38:08 +0200") Message-ID: <8763pymxp8.fsf@mocca.josefsson.org> User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Status: No, score=-1.3 required=5.0 tests=ALL_TRUSTED,AWL autolearn=ham version=3.2.3 (2007-08-08) host=yxa-v.extundo.com Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Florian Weimer writes: > * Duane at: > >> Server uses of which TLS is going to be the biggest use case is the main >> objective at present, most server certificates in the X.509 world have a >> lot more than just dnsName, such as company name, maybe a contact, the >> country, state/territory/province, town/suburb and so on and so forth. > > This data is not mechanically processed (at least not in a way which is > consistent across implementations), so you can put it into notation data > subpackets. Right, however, the TLS server name needs to be mechanically processed, so it needs a different mechanism -- such as a new OpenPGP extension that contains a single UTF-8 string intended for identification of TLS+OpenPGP servers. /Simon Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7I9IONA029999 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 18 Aug 2008 02:18:24 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7I9IOqi029998; Mon, 18 Aug 2008 02:18:24 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7I9IKMb029989 for ; Mon, 18 Aug 2008 02:18:21 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.63 #1 (Debian)) id 1KV0ss-0001Dt-Ut for ; Mon, 18 Aug 2008 11:18:43 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1KV0pK-0008IU-KQ; Mon, 18 Aug 2008 11:15:02 +0200 From: Werner Koch To: Florian Weimer Cc: Duane at e164 dot org , Simon Josefsson , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <48A76F2D.1060604@e164.org> <87iqu0m1ff.fsf@mid.deneb.enyo.de> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Mon, 18 Aug 2008 11:15:01 +0200 In-Reply-To: <87iqu0m1ff.fsf@mid.deneb.enyo.de> (Florian Weimer's message of "Sun, 17 Aug 2008 11:32:52 +0200") Message-ID: <871w0mfzvu.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Sun, 17 Aug 2008 11:32, fw@deneb.enyo.de said: >> What is a notation data subpacket? > > It's a term straight from RFC 4880. Sorry, I don't know how to be more > precise. Notation data means in OpenPGP additional data associated with a signatures (key or data signature). This is basically the sdame as certificate extensions and signaed attribuest in X.509. Note that notation data is not the same as a user ID but data associated for example with a user ID. Grep the gpg man page for "notation" to see how to use them in that application. Salam-Shalom, Werner -- Linux-Kongress 2008 + Hamburg + October 7-10 + www.linux-kongress.org Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7H9WwiD020189 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 17 Aug 2008 02:32:59 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7H9WwsX020188; Sun, 17 Aug 2008 02:32:58 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.enyo.de (mail.enyo.de [212.9.189.167]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7H9WsEF020180 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sun, 17 Aug 2008 02:32:56 -0700 (MST) (envelope-from fw@deneb.enyo.de) Received: from deneb.vpn.enyo.de ([212.9.189.177] helo=deneb.enyo.de) by mail.enyo.de with esmtp id 1KUed3-0002hL-94; Sun, 17 Aug 2008 11:32:53 +0200 Received: from fw by deneb.enyo.de with local (Exim 4.69) (envelope-from ) id 1KUed2-0001Fv-SA; Sun, 17 Aug 2008 11:32:52 +0200 From: Florian Weimer To: Duane at e164 dot org Cc: Simon Josefsson , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> <48A76F2D.1060604@e164.org> Date: Sun, 17 Aug 2008 11:32:52 +0200 In-Reply-To: <48A76F2D.1060604@e164.org> (Duane at's message of "Sun, 17 Aug 2008 10:22:05 +1000") Message-ID: <87iqu0m1ff.fsf@mid.deneb.enyo.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: * Duane at: Weimer wrote: > >> This data is not mechanically processed (at least not in a way which is >> consistent across implementations), so you can put it into notation data >> subpackets. > > What is a notation data subpacket? It's a term straight from RFC 4880. Sorry, I don't know how to be more precise. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7H0Lqvf089792 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 17:21:52 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7H0LqAL089791; Sat, 16 Aug 2008 17:21:52 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7H0Lnka089782 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Sat, 16 Aug 2008 17:21:50 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id D15FA1F402D; Sun, 17 Aug 2008 10:22:14 +1000 (EST) Message-ID: <48A76F2D.1060604@e164.org> Date: Sun, 17 Aug 2008 10:22:05 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Florian Weimer CC: Simon Josefsson , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87y72wr8zz.fsf@mid.deneb.enyo.de> In-Reply-To: <87y72wr8zz.fsf@mid.deneb.enyo.de> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Florian Weimer wrote: > This data is not mechanically processed (at least not in a way which is > consistent across implementations), so you can put it into notation data > subpackets. What is a notation data subpacket? Or more to the point, what section of what RFC can be used to reference it etc? -- Best regards, Duane Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GKcR0P074631 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 13:38:27 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GKcR9M074630; Sat, 16 Aug 2008 13:38:27 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.enyo.de (mail.enyo.de [212.9.189.167]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GKcOwS074620 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sat, 16 Aug 2008 13:38:27 -0700 (MST) (envelope-from fw@deneb.enyo.de) Received: from deneb.vpn.enyo.de ([212.9.189.177] helo=deneb.enyo.de) by mail.enyo.de with esmtp id 1KUSXJ-0000YY-A4; Sat, 16 Aug 2008 22:38:09 +0200 Received: from fw by deneb.enyo.de with local (Exim 4.69) (envelope-from ) id 1KUSXI-0003vA-RN; Sat, 16 Aug 2008 22:38:08 +0200 From: Florian Weimer To: Duane at e164 dot org Cc: Simon Josefsson , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> Date: Sat, 16 Aug 2008 22:38:08 +0200 In-Reply-To: <48A6D1F0.7030708@e164.org> (Duane at's message of "Sat, 16 Aug 2008 23:11:12 +1000") Message-ID: <87y72wr8zz.fsf@mid.deneb.enyo.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: * Duane at: > Server uses of which TLS is going to be the biggest use case is the main > objective at present, most server certificates in the X.509 world have a > lot more than just dnsName, such as company name, maybe a contact, the > country, state/territory/province, town/suburb and so on and so forth. This data is not mechanically processed (at least not in a way which is consistent across implementations), so you can put it into notation data subpackets. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GFuBn3051357 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 08:56:11 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GFuBFv051356; Sat, 16 Aug 2008 08:56:11 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GFuAD3051350 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Sat, 16 Aug 2008 08:56:10 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 9695EFF270; Sun, 17 Aug 2008 01:56:35 +1000 (EST) Message-ID: <48A6F8A6.6050501@e164.org> Date: Sun, 17 Aug 2008 01:56:22 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Simon Josefsson CC: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> In-Reply-To: <87r68pnu0j.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Simon Josefsson wrote: You might want to look at this: http://open-pgp.info/wiki/index.php?title=Talk:Standardisation_of_OpenPGP_Keys_for_Server_Purposes Has some of the discussion surrounding decisions made on the draft. -- Best regards, Duane Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDOTnd038647 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 06:24:29 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GDOTJ5038646; Sat, 16 Aug 2008 06:24:29 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDORZ1038640 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Sat, 16 Aug 2008 06:24:28 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 15180FF270; Sat, 16 Aug 2008 23:24:52 +1000 (EST) Message-ID: <48A6D521.2000209@e164.org> Date: Sat, 16 Aug 2008 23:24:49 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Simon Josefsson , ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> <87vdy1m6vp.fsf@mocca.josefsson.org> In-Reply-To: <87vdy1m6vp.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Simon Josefsson wrote: > Cool! Why don't you use RFC 4398 to store OpenPGP keys in the DNS, > rather than adding a new RR type? The current draft is based on suggestions from the namedroppers list, however I've put it on hold till the OpenPGP stuff gets dealt with. -- Best regards, Duane Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDMXji038428 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 06:22:33 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GDMXT9038427; Sat, 16 Aug 2008 06:22:33 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDMTaE038413 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sat, 16 Aug 2008 06:22:32 -0700 (MST) (envelope-from simon@josefsson.org) Received: from c80-216-126-5.bredband.comhem.se ([80.216.126.5] helo=mocca.josefsson.org) by yxa-v.extundo.com with esmtpsa (TLS-1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.63) (envelope-from ) id 1KULk3-000404-6V; Sat, 16 Aug 2008 15:22:53 +0200 From: Simon Josefsson To: Duane at e164 dot org Cc: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> <48A6D1F0.7030708@e164.org> OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:22:080816:ietf-openpgp@imc.org::7orTveZkQBCFrcOH:25H9 X-Hashcash: 1:22:080816:duane@e164.org::FDmhLN8B33XPYRHE:fNY3 Date: Sat, 16 Aug 2008 15:22:50 +0200 In-Reply-To: <48A6D1F0.7030708@e164.org> (Duane at's message of "Sat, 16 Aug 2008 23:11:12 +1000") Message-ID: <87vdy1m6vp.fsf@mocca.josefsson.org> User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Status: No, score=-1.4 required=5.0 tests=ALL_TRUSTED,AWL autolearn=ham version=3.2.3 (2007-08-08) host=yxa-v.extundo.com Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Duane at e164 dot org writes: > Simon Josefsson wrote: > >> Ok. I suggest to explain (in the document) these use cases and to >> broaden the abstract -- right now the abstract strongly implies to me >> that you only intend the use-case to be OpenPGP in TLS: > > Server uses of which TLS is going to be the biggest use case is the main > objective at present, most server certificates in the X.509 world have a > lot more than just dnsName, such as company name, maybe a contact, the > country, state/territory/province, town/suburb and so on and so forth. > > However I have a secondary internet draft that depends on this one that > I'm currently in the process of writing and so on that I'd like to use > OpenPGP keys for DNS encryption. > > Most recently draft published to the IETF site: > > http://www.ietf.org/internet-drafts/draft-groth-dns-encryption-02.txt > > However this has now changed substantially, and the current draft is here: > > http://open-pgp.info/wiki/index.php?title=DNS_Encryption_Draft Cool! Why don't you use RFC 4398 to store OpenPGP keys in the DNS, rather than adding a new RR type? /Simon Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDArVL037081 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 06:10:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GDArte037080; Sat, 16 Aug 2008 06:10:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GDAq8w037073 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Sat, 16 Aug 2008 06:10:53 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 0E44EFF270; Sat, 16 Aug 2008 23:11:16 +1000 (EST) Message-ID: <48A6D1F0.7030708@e164.org> Date: Sat, 16 Aug 2008 23:11:12 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Simon Josefsson CC: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> <87r68pnu0j.fsf@mocca.josefsson.org> In-Reply-To: <87r68pnu0j.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Simon Josefsson wrote: > Ok. I suggest to explain (in the document) these use cases and to > broaden the abstract -- right now the abstract strongly implies to me > that you only intend the use-case to be OpenPGP in TLS: Server uses of which TLS is going to be the biggest use case is the main objective at present, most server certificates in the X.509 world have a lot more than just dnsName, such as company name, maybe a contact, the country, state/territory/province, town/suburb and so on and so forth. However I have a secondary internet draft that depends on this one that I'm currently in the process of writing and so on that I'd like to use OpenPGP keys for DNS encryption. Most recently draft published to the IETF site: http://www.ietf.org/internet-drafts/draft-groth-dns-encryption-02.txt However this has now changed substantially, and the current draft is here: http://open-pgp.info/wiki/index.php?title=DNS_Encryption_Draft Along with a bunch of text I have no idea what to do with: http://open-pgp.info/wiki/index.php?title=Why_X.509_is_Bad -- Best regards, Duane Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GAHY79024744 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 16 Aug 2008 03:17:35 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7GAHYik024743; Sat, 16 Aug 2008 03:17:34 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7GAHVqQ024737 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Sat, 16 Aug 2008 03:17:33 -0700 (MST) (envelope-from simon@josefsson.org) Received: from c80-216-126-5.bredband.comhem.se ([80.216.126.5] helo=mocca.josefsson.org) by yxa-v.extundo.com with esmtpsa (TLS-1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.63) (envelope-from ) id 1KUIqz-0002QT-GR; Sat, 16 Aug 2008 12:17:55 +0200 From: Simon Josefsson To: Duane at e164 dot org Cc: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> <48A639EA.4050003@e164.org> OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:22:080816:ietf-openpgp@imc.org::NEIk/w4iq532JqEC:9Bou X-Hashcash: 1:22:080816:duane@e164.org::vUhJ+SUl5XGmk+uL:Ek0c Date: Sat, 16 Aug 2008 12:17:48 +0200 In-Reply-To: <48A639EA.4050003@e164.org> (Duane at's message of "Sat, 16 Aug 2008 12:22:34 +1000") Message-ID: <87r68pnu0j.fsf@mocca.josefsson.org> User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Status: No, score=-1.3 required=5.0 tests=ALL_TRUSTED,AWL autolearn=ham version=3.2.3 (2007-08-08) host=yxa-v.extundo.com Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Duane at e164 dot org writes: >> Is there a use case in OpenPGP for any other alt name than dnsName? > > That's the whole point of this draft, people (including myself) want > more than just a hostname(s), otherwise we could have just re-used the > user-id field for the dns name(s). Ok. I suggest to explain (in the document) these use cases and to broaden the abstract -- right now the abstract strongly implies to me that you only intend the use-case to be OpenPGP in TLS: Abstract A RFC was accepted extending TLS usage to include OpenPGP keys (RFC 5081) as an alternative or in addition to X.509 certificates, however the author did not really standardise the way the information in OpenPGP keys was to be presented and this could be detrimental or fragment efforts to utilise OpenPGP keys in this manner. Other than that, I don't have any comments. I believe that an OpenPGP extension mechanism that carry DNS hostnames are needed, so I'd like your solution (or something like it) move forward. Thanks, /Simon Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7G2MHUg091423 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 15 Aug 2008 19:22:17 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7G2MH2B091422; Fri, 15 Aug 2008 19:22:17 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7G2MFvD091413 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 15 Aug 2008 19:22:17 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 14C5CFF270; Sat, 16 Aug 2008 12:22:42 +1000 (EST) Message-ID: <48A639EA.4050003@e164.org> Date: Sat, 16 Aug 2008 12:22:34 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Simon Josefsson CC: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> <87y72xq4gl.fsf@mocca.josefsson.org> In-Reply-To: <87y72xq4gl.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Simon Josefsson wrote: > RFC 2818 specify how it should be handled for TLS, but you are most > likely correct that multiple browsers doesn't implement it properly. It only specifies that wildcard(s) are valid for 1 level of hostname(s), it doesn't clarify the issue of multiple wildcards per hostname(s) being valid or not and this is where the browsers start doing their own thing. > Is there a use case in OpenPGP for any other alt name than dnsName? That's the whole point of this draft, people (including myself) want more than just a hostname(s), otherwise we could have just re-used the user-id field for the dns name(s). -- Best regards, Duane Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FMmsKR076838 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 15 Aug 2008 15:48:54 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7FMmsXF076837; Fri, 15 Aug 2008 15:48:54 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FMmqkr076831 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Fri, 15 Aug 2008 15:48:53 -0700 (MST) (envelope-from simon@josefsson.org) Received: from c80-216-126-5.bredband.comhem.se ([80.216.126.5] helo=mocca.josefsson.org) by yxa-v.extundo.com with esmtpsa (TLS-1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.63) (envelope-from ) id 1KU86d-00056J-Gx; Sat, 16 Aug 2008 00:49:16 +0200 From: Simon Josefsson To: Duane at e164 dot org Cc: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> <48A59E34.4030501@e164.org> OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:22:080815:duane@e164.org::TwyB9dmmU/IA3yOG:6n/N X-Hashcash: 1:22:080815:ietf-openpgp@imc.org::rez/EZxJE9fJl3n4:IkV6 Date: Sat, 16 Aug 2008 00:49:14 +0200 In-Reply-To: <48A59E34.4030501@e164.org> (Duane at's message of "Sat, 16 Aug 2008 01:18:12 +1000") Message-ID: <87y72xq4gl.fsf@mocca.josefsson.org> User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Status: No, score=-1.3 required=5.0 tests=ALL_TRUSTED,AWL autolearn=ham version=3.2.3 (2007-08-08) host=yxa-v.extundo.com Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Duane at e164 dot org writes: > Simon Josefsson wrote: > >> Let me propose that your document specify an OpenPGP attribute 'dnsName' >> that contains a UTF-8 string with a DNS domain name, and explain how >> wildcard *.example.com names should be dealt with. No ASN.1/DER >> encodings and no PKIX terminology. > > Even PKIX doesn't stipulate how wildcards should be handled, and so we > have multiple browsers doing multiple things. RFC 2818 specify how it should be handled for TLS, but you are most likely correct that multiple browsers doesn't implement it properly. >> This would solve your use case, RFC 5081, without having OpenPGP >> implementations need to implement PKIX. > > I started off down this path, but then you need at least 7 or 8 > different extensions alone to deal with common subject Alt Names, DNS, > O, OU, C, ST, L etc where as using PKIX references they maintain the > table, or who ever is in charge of a particular OID subset of the tree. Is there a use case in OpenPGP for any other alt name than dnsName? /Simon Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FFHrvs043105 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 15 Aug 2008 08:17:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7FFHrrR043104; Fri, 15 Aug 2008 08:17:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FFHqtH043097 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 15 Aug 2008 08:17:53 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 819F4FF26F; Sat, 16 Aug 2008 01:18:17 +1000 (EST) Message-ID: <48A59E34.4030501@e164.org> Date: Sat, 16 Aug 2008 01:18:12 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: Simon Josefsson CC: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> <87r68qqptt.fsf@mocca.josefsson.org> In-Reply-To: <87r68qqptt.fsf@mocca.josefsson.org> X-Enigmail-Version: 0.95.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig6848D9902416F4FFAD5F6BF3" Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig6848D9902416F4FFAD5F6BF3 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Simon Josefsson wrote: > Let me propose that your document specify an OpenPGP attribute 'dnsName= ' > that contains a UTF-8 string with a DNS domain name, and explain how > wildcard *.example.com names should be dealt with. No ASN.1/DER > encodings and no PKIX terminology. Even PKIX doesn't stipulate how wildcards should be handled, and so we have multiple browsers doing multiple things. > This would solve your use case, RFC 5081, without having OpenPGP > implementations need to implement PKIX. I started off down this path, but then you need at least 7 or 8 different extensions alone to deal with common subject Alt Names, DNS, O, OU, C, ST, L etc where as using PKIX references they maintain the table, or who ever is in charge of a particular OID subset of the tree. --=20 Best regards, Duane --------------enig6848D9902416F4FFAD5F6BF3 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFIpZ40EpWoZMmo/c8RAvrqAKCSJ+dBH9jyoPJv3YqziP/m6KgjWACgooPF Xz8BzMrCvoJsuGmz/+cEQ5s= =5/1Z -----END PGP SIGNATURE----- --------------enig6848D9902416F4FFAD5F6BF3-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FF7NXF042294 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 15 Aug 2008 08:07:23 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7FF7Nnh042293; Fri, 15 Aug 2008 08:07:23 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7FF7LUC042284 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Fri, 15 Aug 2008 08:07:22 -0700 (MST) (envelope-from simon@josefsson.org) Received: from c80-216-126-5.bredband.comhem.se ([80.216.126.5] helo=mocca.josefsson.org) by yxa-v.extundo.com with esmtpsa (TLS-1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.63) (envelope-from ) id 1KU0ty-0007VF-Jh; Fri, 15 Aug 2008 17:07:43 +0200 From: Simon Josefsson To: Duane at e164 dot org Cc: ietf-openpgp@imc.org Subject: Re: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt References: <48A4E7E9.8020309@e164.org> OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:22:080815:duane@e164.org::Nsm4W6hnN/JGvx0e:1+KT X-Hashcash: 1:22:080815:ietf-openpgp@imc.org::iArdJeIA7G+xxi44:5Tw2 Date: Fri, 15 Aug 2008 17:07:42 +0200 In-Reply-To: <48A4E7E9.8020309@e164.org> (Duane at's message of "Fri, 15 Aug 2008 12:20:25 +1000") Message-ID: <87r68qqptt.fsf@mocca.josefsson.org> User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Status: No, score=-1.3 required=5.0 tests=ALL_TRUSTED,AWL autolearn=ham version=3.2.3 (2007-08-08) host=yxa-v.extundo.com Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Duane at e164 dot org writes: > Please adopt > http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt > as a working group document. This document is trying to describe how to > utilise ASN.1 attributes with OpenPGP keys, the focus is to further > promote the use of OpenPGP keys for server purposes, however some people > expressed interest in other extensions that are more appropriate for > individuals. Your document reuse subjectAltNames from PKIX. While I think that is a nice idea that allows to re-use their flexibility, I think the wisdom of using ASN.1/DER and PKIX in OpenPGP should be challenged. Let me propose that your document specify an OpenPGP attribute 'dnsName' that contains a UTF-8 string with a DNS domain name, and explain how wildcard *.example.com names should be dealt with. No ASN.1/DER encodings and no PKIX terminology. This would solve your use case, RFC 5081, without having OpenPGP implementations need to implement PKIX. Thoughts? Thanks, Simon Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7F2uaik087616 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 14 Aug 2008 19:56:36 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7F2uaiL087615; Thu, 14 Aug 2008 19:56:36 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from foobar.cs.jhu.edu (foobar.cs.jhu.edu [128.220.13.173]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7F2uZeD087608 for ; Thu, 14 Aug 2008 19:56:36 -0700 (MST) (envelope-from dshaw@jabberwocky.com) Received: from walrus.jabberwocky.com (c-75-69-177-157.hsd1.ma.comcast.net [75.69.177.157]) by foobar.cs.jhu.edu (8.11.6/8.11.6) with ESMTP id m7F2uw702851 for ; Thu, 14 Aug 2008 22:56:58 -0400 Received: from [172.24.84.28] (grover.jabberwocky.com [172.24.84.28]) by walrus.jabberwocky.com (8.14.1/8.14.1) with ESMTP id m7F2uskW027303 for ; Thu, 14 Aug 2008 22:56:54 -0400 Message-Id: From: David Shaw To: OpenPGP Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v926) Subject: Camellia draft Date: Thu, 14 Aug 2008 22:56:54 -0400 X-Mailer: Apple Mail (2.926) Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Is being tracked: https://datatracker.ietf.org/idtracker/draft-ietf-openpgp-camellia/ David Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7F2K7UP085782 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 14 Aug 2008 19:20:07 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m7F2K7xO085781; Thu, 14 Aug 2008 19:20:07 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mail.aus-biz.com (mail.aus-biz.com [208.82.100.153]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m7F2K5RL085772 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Thu, 14 Aug 2008 19:20:06 -0700 (MST) (envelope-from duane@e164.org) Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id BFCFEFF26E for ; Fri, 15 Aug 2008 12:20:32 +1000 (EST) Message-ID: <48A4E7E9.8020309@e164.org> Date: Fri, 15 Aug 2008 12:20:25 +1000 From: Duane at e164 dot org User-Agent: Thunderbird 2.0.0.16 (X11/20080724) MIME-Version: 1.0 To: ietf-openpgp@imc.org Subject: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Please adopt http://www.ietf.org/internet-drafts/draft-groth-openpgp-attribute-extension-00.txt as a working group document. This document is trying to describe how to utilise ASN.1 attributes with OpenPGP keys, the focus is to further promote the use of OpenPGP keys for server purposes, however some people expressed interest in other extensions that are more appropriate for individuals. -- Best regards, Duane