Subject: Re: [dane] Referring to the DANE protocol and DANE-denoted certificate associations

From: =JeffH <[email-masked]>
Date: Wed, 25 Apr 2012 09:52:42 -0700

Paul Hoffman replied:
 >>> We use the term "usable certificate association" in section 4. For your
 >>> spec, how about:
 >>>
 >>> trusted certificate association
 >>>   A certificate association specified in a
 >>>   TLSA record that is determined to be usable in the TLSA spec.
 >>>
 >>
 >> In that case, I'd be inclined to just use "usable cert association" rather
 >> than redefine it with the qualifier "trusted" (ie, if that's not what the
 >> -dane-protocol spec defines).
 >>
 >> Also, it would be helpful if the term "usable certificate association" is
 >> explicitly defined in a clearly referenceable manner in -dane-protocol.
 >>
 >> This could be done by making that final para of section 4 a titled
 >> subsection, e.g..
 >>
 >> 4.1 Usable Certificate Association
 >>
 >> but since I notice that section 4 is entitled "Use of TLSA Records in TLS"
 >> it should perhaps be..
 >>
 >> 4.1 Usable TLS Certificate Association
 >
 > I like the former.

Actually, in re-reading section 4 of -dane-protocol I wouldn't turn that last 
para into a subsection -- because as you note..

 > The definition of what is "usable" goes on for many paragraphs..

Rather, I'd  be inclined to add something akin to this to "1.4. Terminology"..

   Usable TLS Certificate Association
     A TLS certificate association that has passed all the tests specified
      in Section 4 "Use of TLSA Records in TLS".

there's some other terminological issues I'll send in another msg as a Last 
Call comment.

HTH,

=JeffH