From nobody Fri Oct 2 15:52:51 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7684E1B31F3 for ; Fri, 2 Oct 2015 15:52:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.978 X-Spam-Level: X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MVAkZAMMX8nz for ; Fri, 2 Oct 2015 15:52:47 -0700 (PDT) Received: from mail-yk0-f180.google.com (mail-yk0-f180.google.com [209.85.160.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21A5F1B31E2 for ; Fri, 2 Oct 2015 15:52:47 -0700 (PDT) Received: by ykdg206 with SMTP id g206so123167502ykd.1 for ; Fri, 02 Oct 2015 15:52:46 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=X+zzRdDG6vCQngf7qTh50jDRKg3vLAM4Dv6KtBSPW7Y=; b=PZHB0cNEgYs5tDKliCh+VQqsEVrNMjAn5Hs6Q1jejSTuy/l6ow79NXFNuTQsL/iSQR cUZDtUj/NZ/xoy3Ul3x9DOlAl8F8m+2Wp4bkOPiFJmIW7eNvYXOcv+8jXk5SjSQUADO0 JSxI/ipYBfnAOj5+poN0vfbGRQdBAAnksc21TpYGKyH8dJjg1Ei7rfBr/7UhajgHwjVX x1bRQkRA3JjaC3gIhNs5rlvMeYBqHST53GJNEiM0kVLlb5ZiT5n4TcszdEXefKWl5n8a 3QOLtSEndqGfQGWAVOeT7nCOL/mpgdGaRoWmdq0K6xqOjGAyDgiVthDH1CdrVOnFfGxU cQMA== X-Gm-Message-State: ALoCoQnc88tiJQRCKgbKCUA8mnaAKVyNZ67/T6oAQ/2g10OjpcUPqyW8g5hn26S1+DczyTWTScld MIME-Version: 1.0 X-Received: by 10.170.78.65 with SMTP id u62mr15346761yku.118.1443826366248; Fri, 02 Oct 2015 15:52:46 -0700 (PDT) Received: by 10.37.124.69 with HTTP; Fri, 2 Oct 2015 15:52:46 -0700 (PDT) Date: Fri, 2 Oct 2015 18:52:46 -0400 Message-ID: From: Warren Kumari To: "" Content-Type: text/plain; charset=UTF-8 Archived-At: Subject: [dane] 3 drafts now in RFC Editor state. X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Oct 2015 22:52:49 -0000 Hi all, Just a quick note... draft-ietf-dane-ops, draft-ietf-dane-smtp-with-dane and draft-ietf-dane-srv all just changed to RFC Editor state. I'd like to once again thank the WG, and the authors in particular for all of their hard work here, and for bearing with us.... W -- I don't think the execution is relevant when it was obviously a bad idea in the first place. This is like putting rabid weasels in your pants, and later expressing regret at having chosen those particular rabid weasels and that pair of pants. ---maf From nobody Tue Oct 6 11:57:29 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38B101B29F5 for ; Tue, 6 Oct 2015 11:57:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.301 X-Spam-Level: X-Spam-Status: No, score=-0.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MANGLED_TEXT=2.3, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D-sdJWqUNnQG for ; Tue, 6 Oct 2015 11:57:28 -0700 (PDT) Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DAB4D1B29F3 for ; Tue, 6 Oct 2015 11:57:27 -0700 (PDT) Received: from [192.168.123.7] (unknown [75.83.2.34]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 1D735509C7; Tue, 6 Oct 2015 14:57:25 -0400 (EDT) To: dane@ietf.org, John Levine References: <20150921035448.5523.qmail@ary.lan> From: Sean Leonard Message-ID: <56141976.5010704@seantek.com> Date: Tue, 6 Oct 2015 11:56:54 -0700 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <20150921035448.5523.qmail@ary.lan> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms040804070108020108050701" Archived-At: Subject: Re: [dane] Encoding local parts in better ways X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 18:57:29 -0000 This is a cryptographically signed message in MIME format. --------------ms040804070108020108050701 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable I read draft-levine-dns-mailbox-01 with interest and have the following=20 editorial comments (and one technical comment): Section 1: Many systems allow "extensions" such as john-ext or mary+ext The term used in the vernacular is "sub-addressing" (in everything that=20 I have seen), and the term in [RFC5233] is "subaddressing" (no hyphen)=20 or "detailed addressing" (with space). "Plus addressing" (occasionally=20 "plus-addressing") and "minus addressing" or "'minus' addressing" has=20 also been seen in the wild. I would change that sentence to say that: Many systems allow for subaddressing, such as "john-ext" or "mary+ext",=20 where "john" or "mary" is treated as the effective local-part, and "ext" = is passed as detail information to the recipient for further handling.=20 See [RFC5233]. Section 4.1: and synthesizes an key record, change to: and synthesizes a key record, Technical: Abstract "and the DNS design that only does exact matching." I thought that DNS uses ASCII labels, which are matched=20 case-insensitively, and that there are no other modern options.=20 [RFC4343] [RFC6891] False? See also Sections 3 and 4 in the I-D. Sean On 9/20/2015 8:54 PM, John Levine wrote: > I've sent in a new version of draft-levine-dns-mailbox-01 that > describes a bunch of ways to encode mail address local parts in ways > that don't need canonicalization or address guessing. > > Take a particular look at section 5, which publishes regular > expressions to match a domain's mail addresses. > > * Can represent any plausible local part syntax including case > folding, noise characters, multiple ways to write Unicode characters, > suffixes where some are ignored and some aren't, BATV, and VERP. > > * Reasonably fast lookup (max of one query per localpart character) > > * Works fine with static zones served by ordinary name servers . > > * Doesn't make bulk addresss harvesting easy. > > If you really want to do experiments in publishing mail info in the > DNS, I think this would be a rather interesting one. > > R's, > John --------------ms040804070108020108050701 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CfYwggSvMIIDl6ADAgECAhEA4CPLFRKDU4mtYW56VGdrITANBgkqhkiG9w0BAQsFADBvMQsw CQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4 dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290 MB4XDTE0MTIyMjAwMDAwMFoXDTIwMDUzMDEwNDgzOFowgZsxCzAJBgNVBAYTAkdCMRswGQYD VQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNP TU9ETyBDQSBMaW1pdGVkMUEwPwYDVQQDEzhDT01PRE8gU0hBLTI1NiBDbGllbnQgQXV0aGVu dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAImxDdp6UxlOcFIdvFamBia3uEngludRq/HwWhNJFaO0jBtgvHpRQqd5jKQi3xdh TpHVdiMKFNNKAn+2HQmAbqUEPdm6uxb+oYepLkNSQxZ8rzJQyKZPWukI2M+TJZx7iOgwZOak +FaA/SokFDMXmaxE5WmLo0YGS8Iz1OlAnwawsayTQLm1CJM6nCpToxDbPSBhPFUDjtlOdiUC ISn6o3xxdk/u4V+B6ftUgNvDezVSt4TeIj0sMC0xf1m9UjewM2ktQ+v61qXxl3dnUYzZ7ifr vKUHOHaMpKk4/9+M9QOsSb7K93OZOg8yq5yVOhM9DkY6V3RhUL7GQD/L5OKfoiECAwEAAaOC ARcwggETMB8GA1UdIwQYMBaAFK29mHo0tCb3+sQmVO8DveAky1QaMB0GA1UdDgQWBBSSYWuC 4aKgqk/sZ/HCo/e0gADB7DAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEQYDVR0gBAowCDAGBgRVHSAAMEQGA1Ud HwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9BZGRUcnVzdEV4dGVybmFs Q0FSb290LmNybDA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVz ZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQELBQADggEBABsqbqxVwTqriMXY7c1V86prYSvACRAj mQ/FZmpvsfW0tXdeDwJhAN99Bf4Ss6SAgAD8+x1banICCkG8BbrBWNUmwurVTYT7/oKYz1gb 4yJjnFL4uwU2q31Ypd6rO2Pl2tVz7+zg+3vio//wQiOcyraNTT7kSxgDsqgt1Ni7QkuQaYUQ 26Y3NOh74AEQpZzKOsefT4g0bopl0BqKu6ncyso20fT8wmQpNa/WsadxEdIDQ7GPPprsnjJT 9HaSyoY0B7ksyuYcStiZDcGG4pCS+1pCaiMhEOllx/XVu37qjIUgAmLq0ToHLFnFmTPyOInl tukWeh95FPZKEBom+nyK+5swggU/MIIEJ6ADAgECAhAaQkrPJ/nEG3M8lirbnsnnMA0GCSqG SIb3DQEBCwUAMIGbMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVy MRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDFBMD8GA1UE AxM4Q09NT0RPIFNIQS0yNTYgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1h aWwgQ0EwHhcNMTUwMjAyMDAwMDAwWhcNMTYwMjAyMjM1OTU5WjAlMSMwIQYJKoZIhvcNAQkB FhRkZXYraWV0ZkBzZWFudGVrLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM+J9tKgDs1LQtaDc+c4E58tCUQRNZiWbM1drOhLq2oSj75LuxPrrZy4XGjWoQFq9qGYHgiv boRKoo2guKi2R5xrf/pZ27ELY5jCa3BQs4Q2YwziXWM5rktnFL2amO2MMwhuo0n7OIMDYftv TEun2mOrnJ3G53zvawQdMbuRiHSNwc7DzWJwAjZQWFO8OF+BgNPzMDQGmzYQ4MVNk8NX5ecN VbfusUU1wZOlfdy8lWTfcASDqa9jLoaAiSx2ay4q7/5m0BOWqOKZCS0f7MmIUtSqODEoiZkd 7oCj5MRKOg2ZLia33JN+oS5rTKN8rs4u4ZF5g8zypHS5TY/l3pNRlrcCAwEAAaOCAfIwggHu MB8GA1UdIwQYMBaAFJJha4LhoqCqT+xn8cKj97SAAMHsMB0GA1UdDgQWBBQaZuXe8vDwU+ja pyFW3zSvIW6TxjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAgBgNVHSUEGTAXBggr BgEFBQcDBAYLKwYBBAGyMQEDBQIwEQYJYIZIAYb4QgEBBAQDAgUgMEYGA1UdIAQ/MD0wOwYM KwYBBAGyMQECAQEBMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5uZXQv Q1BTMF0GA1UdHwRWMFQwUqBQoE6GTGh0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0NPTU9ET1NI QTI1NkNsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5jcmwwgZAGCCsGAQUF BwEBBIGDMIGAMFgGCCsGAQUFBzAChkxodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9T SEEyNTZDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVtYWlsQ0EuY3J0MCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wHwYDVR0RBBgwFoEUZGV2K2lldGZAc2Vh bnRlay5jb20wDQYJKoZIhvcNAQELBQADggEBAHiH/zXr779dLLJNLp6yW/RQvJSYuNbEqauQ BWLZgvCF8FJjcS+y+bhN7RpTSVaEymbxnpJWFg0Qs6us6rXtttU6MF2JhTuxtu6yWW0EYy80 KGOt6zJRTxa46kAhAOqw4KPQ5RTvf/NT+2Qu8b2edlh+3t6f8iTQOAL/BNHnmr4QvpfnMLa8 NMAqd4FLOcSU9JKBlb5YtsEdfM3nBt4m95pfhpww79gB+zoXMoVaI+lfQHhkGth6mlaTkFUV DT2pqq98XgESpObFEngb8ZRftBVoZfgJ4ajXcZnhKaqYEr23EtY207KgKb4LAXA84wtPcFfJ rQaDArapR7xd2GNs+eYxggRBMIIEPQIBATCBsDCBmzELMAkGA1UEBhMCR0IxGzAZBgNVBAgT EkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RP IENBIExpbWl0ZWQxQTA/BgNVBAMTOENPTU9ETyBTSEEtMjU2IENsaWVudCBBdXRoZW50aWNh dGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhAaQkrPJ/nEG3M8lirbnsnnMA0GCWCGSAFlAwQC AQUAoIICYTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNTEw MDYxODU2NTRaMC8GCSqGSIb3DQEJBDEiBCDHx2aIqGRVb7d/AlBd6xOHZoTkwvjtham8DEzB Svb5OzBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZI hvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3 DQMCAgEoMIHBBgkrBgEEAYI3EAQxgbMwgbAwgZsxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJH cmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBD QSBMaW1pdGVkMUEwPwYDVQQDEzhDT01PRE8gU0hBLTI1NiBDbGllbnQgQXV0aGVudGljYXRp b24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQGkJKzyf5xBtzPJYq257J5zCBwwYLKoZIhvcNAQkQ AgsxgbOggbAwgZsxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIx EDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMUEwPwYDVQQD EzhDT01PRE8gU0hBLTI1NiBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFp bCBDQQIQGkJKzyf5xBtzPJYq257J5zANBgkqhkiG9w0BAQEFAASCAQCiok0tylQNSi60+Sv3 tnjlHUizOG+PKE0DViS08YwaWuAtgRLoTNYfphB3LcSrSEA+purx9Sf21dsl7/fPw/TapR9W UPMMaHu+47uQxhH01ChSt2vGKjIHgOwNzOJgrJZ/mNue3T7Qx97Cjn7Dbzq371r4FHAsHCTa uze8uJ0yfD1QWz/2CcRBnpcvrOQbscg6p6vOgYPSd+TPkc5mB8vwgmaP2sZgJZ/UW8yJFICl rBnjomY8sSShVyjEMbF+hV1GZ3iL2fYCOE1R8UjxparPjSuPJsp+q1XI/byPSRFJsGuyNiMz S2L/IqnV4CXl8hcwpTwKrklCei3ToPEfc8bIAAAAAAAA --------------ms040804070108020108050701-- From nobody Tue Oct 6 12:44:33 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CD961B3213 for ; Tue, 6 Oct 2015 12:44:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.163 X-Spam-Level: * X-Spam-Status: No, score=1.163 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_MISMATCH_COM=0.553, HOST_MISMATCH_NET=0.311, MANGLED_TEXT=2.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P2Nk49m1usBl for ; Tue, 6 Oct 2015 12:44:31 -0700 (PDT) Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:1126::2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD1161B31EB for ; Tue, 6 Oct 2015 12:44:30 -0700 (PDT) Received: (qmail 5042 invoked from network); 6 Oct 2015 19:44:30 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type:user-agent; s=13b0.5614249e.k1510; bh=Ev9fXzri/nFfq4XxTrwQQWqW3aIcMItZ2FvORovKshw=; b=U1wwKFPTGT2qQvrLNohuK777X5aT/LUIeTKHM29ROREPD9b8s5iEBEGcLp5bTZuVadzOavRft8M5PX3JQvpLs+/jAYTkKFVAxFA+0e5i3asgOkUMOn4LVdy1pC9vF0qSQ+rtBc5On+kfLwPo86Dvg+uG2egQu8IcI/nih2p4SDvW81mhnsYczGS++SjhjiOd0uxjDtCpTUULFNXf+OD8P2NNEljlmn7RPkHzGkPLZ+r8AhCw/WFgnHaoP8sdnhG1 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type:user-agent; s=13b0.5614249e.k1510; bh=Ev9fXzri/nFfq4XxTrwQQWqW3aIcMItZ2FvORovKshw=; b=jWVm4zxZLnawUE6GK25GcY92/y23ksG9NTbQMeS0CYGoBZmeat92XivNIiBxKN5Wy2W0x2vYgPbQ0YFXNXCZhR6HQcGTPjT7XLtUIktmE8DxBnAEJ9hcixnCE6cFTdNiXmnh/qz3mTcRqaf5xCjWlEjmHIEd4uKyOuuJHjuiHmULEiw0N6aifHJfM8219GiyZSVeLXen8iuD3LqOhYOs7V06Frm6crGQ47CeIM9m06GhjOjUumqX4jYRQ8LkD1AO Received: from localhost ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.0/X.509/SHA1) via TCP6; 06 Oct 2015 19:44:30 -0000 Date: 6 Oct 2015 15:44:29 -0400 Message-ID: From: "John R Levine" To: "Sean Leonard" In-Reply-To: <56141976.5010704@seantek.com> References: <20150921035448.5523.qmail@ary.lan> <56141976.5010704@seantek.com> User-Agent: Alpine 2.11 (OSX 23 2013-08-11) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII Archived-At: Cc: dane@ietf.org Subject: Re: [dane] Encoding local parts in better ways X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 19:44:32 -0000 > Many systems allow "extensions" such as john-ext or mary+ext > > The term used in the vernacular is "sub-addressing" (in everything that I > have seen), and the term in [RFC5233] is "subaddressing" (no hyphen) or > "detailed addressing" (with space). "Plus addressing" (occasionally > "plus-addressing") and "minus addressing" or "'minus' addressing" has also > been seen in the wild. I would change that sentence to say that: Depends what mail software you're used to. In qmail land they're definitely extensions, but I'll note they're also called subaddresses. > "and the DNS design that only does exact matching." > > I thought that DNS uses ASCII labels, which are matched case-insensitively, > and that there are no other modern options. [RFC4343] [RFC6891] False? See > also Sections 3 and 4 in the I-D. Yes, the DNS does case folding when it matches names, but that's it, nothing like prefix matching or ranges or regular expressions or any of the other stuff one takes for granted in normal databases. >> Take a particular look at section 5, which publishes regular >> expressions to match a domain's mail addresses. So what do you think of the regex hack? Regards, John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY Please consider the environment before reading this e-mail. From nobody Tue Oct 6 13:11:22 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD7671B329D for ; Tue, 6 Oct 2015 13:11:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.1 X-Spam-Level: * X-Spam-Status: No, score=1.1 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, MANGLED_TEXT=2.3, RCVD_IN_DNSWL_LOW=-0.7] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id slSxVkU1Ezun for ; Tue, 6 Oct 2015 13:11:19 -0700 (PDT) Received: from mournblade.imrryr.org (mournblade.imrryr.org [38.117.134.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5FCD1B329C for ; Tue, 6 Oct 2015 13:11:19 -0700 (PDT) Received: by mournblade.imrryr.org (Postfix, from userid 1034) id 7575E284B22; Tue, 6 Oct 2015 20:11:18 +0000 (UTC) Date: Tue, 6 Oct 2015 20:11:18 +0000 From: Viktor Dukhovni To: dane@ietf.org Message-ID: <20151006201118.GX15070@mournblade.imrryr.org> References: <20150921035448.5523.qmail@ary.lan> <56141976.5010704@seantek.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.24 (2015-08-30) Archived-At: Subject: Re: [dane] Encoding local parts in better ways X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: dane@ietf.org List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 20:11:21 -0000 On Tue, Oct 06, 2015 at 03:44:29PM -0400, John R Levine wrote: > >Many systems allow "extensions" such as john-ext or mary+ext > > > >The term used in the vernacular is "sub-addressing" (in everything that I > >have seen), and the term in [RFC5233] is "subaddressing" (no hyphen) or > >"detailed addressing" (with space). "Plus addressing" (occasionally > >"plus-addressing") and "minus addressing" or "'minus' addressing" has also > >been seen in the wild. I would change that sentence to say that: > > Depends what mail software you're used to. In qmail land they're definitely > extensions, but I'll note they're also called subaddresses. Yes, Qmail and Postfix both call these address extensions. With Exim, an extension appears to be called a "local part suffix". Note that in all three the term applies to the extra bits appendded to the base address. The Postfix pipe(8) delivery agent supports macros to construct delivery command arguments from the recipient address. Given a recipient address of joe+tag@example.com ${recipient} == joe+tag@example.com ${mailbox} == joe+tag ${domain} == example.com ${user} == joe ${extension} == tag ${nexthop} == from "mailer triple": (, , ) Surely TMI, but the point I am trying to make is that the terminology varies widely. These are "local" matters, and each MTA uses its own language to describe its interface. -- Viktor. From nobody Tue Oct 6 13:56:31 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF47F1B333A for ; Tue, 6 Oct 2015 13:56:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.011 X-Spam-Level: X-Spam-Status: No, score=-0.011 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w7Dktj2RqO-r for ; Tue, 6 Oct 2015 13:56:28 -0700 (PDT) Received: from wizmail.org (wizmail.org [IPv6:2a00:1940:107::2:0:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5677C1B3339 for ; Tue, 6 Oct 2015 13:56:28 -0700 (PDT) Received: from [2a00:b900:109e:0:3e97:eff:feb2:e128] (helo=lap.dom.ain) by wizmail.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.86_89-e1eedf0) id 1ZjZHe-0007tE-Jb for dane@ietf.org (return-path ); Tue, 06 Oct 2015 20:56:26 +0000 To: dane@ietf.org References: <20150921035448.5523.qmail@ary.lan> <56141976.5010704@seantek.com> From: Jeremy Harris Message-ID: <56143573.9030206@wizmail.org> Date: Tue, 6 Oct 2015 21:56:19 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-Pcms-Received-Sender: [2a00:b900:109e:0:3e97:eff:feb2:e128] (helo=lap.dom.ain) with esmtpsa Archived-At: Subject: Re: [dane] Encoding local parts in better ways X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 20:56:30 -0000 On 06/10/15 20:44, John R Levine wrote: > Depends what mail software you're used to. In qmail land they're > definitely extensions, but I'll note they're also called subaddresses. Exim supports both local-part suffixes and prefixes, but has no generic name for the concept. -- Jeremy From nobody Tue Oct 13 08:58:25 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAE751B47BA for ; Tue, 13 Oct 2015 08:58:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.301 X-Spam-Level: X-Spam-Status: No, score=-2.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GGQQe9xTTIC8 for ; Tue, 13 Oct 2015 08:58:17 -0700 (PDT) Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C3D01B4793 for ; Tue, 13 Oct 2015 08:58:17 -0700 (PDT) Received: from [192.168.123.7] (unknown [75.83.2.34]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 3F1D5509C3 for ; Tue, 13 Oct 2015 11:58:15 -0400 (EDT) References: <20151013152330.10221.15050.idtracker@ietfa.amsl.com> From: Sean Leonard To: dane@ietf.org X-Forwarded-Message-Id: <20151013152330.10221.15050.idtracker@ietfa.amsl.com> Message-ID: <561D29D2.2040809@seantek.com> Date: Tue, 13 Oct 2015 08:57:06 -0700 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <20151013152330.10221.15050.idtracker@ietfa.amsl.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms010103040400040105020904" Archived-At: Subject: [dane] =?utf-8?b?U2tpaW5nIERvd24gdGhlIEFMUFMg8J+Ov/Cfj4Lwn5e74puw?= =?utf-8?b?8J+PlPCfjIQ6IEFsdGVybmF0aXZlIExvY2FsLVBhcnQgU3ludGhlc2lzIGZv?= =?utf-8?q?r_DANE_=28draft-seantek-dane-alps-00=2Etxt=29?= X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 15:58:24 -0000 This is a cryptographically signed message in MIME format. --------------ms010103040400040105020904 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Colleagues: As requested, please find the Internet-Draft draft-seantek-dane-alps=20 posted, and take a look. I hope that this draft moves the conversation=20 forward, and I look forward to the usual rounds of comments, questions,=20 evaluations, excoriations, etc. Sean -------- Forwarded Message -------- Subject: New Version Notification for draft-seantek-dane-alps-00.txt Date: Tue, 13 Oct 2015 08:23:30 -0700 From: internet-drafts@ietf.org To: Sean Leonard A new version of I-D, draft-seantek-dane-alps-00.txt has been successfully submitted by Sean Leonard and posted to the IETF repository. Name: draft-seantek-dane-alps Revision: 00 Title: Alternative Local-Part Synthesis for DANE Document date: 2015-10-13 Group: Individual Submission Pages: 17 URL: https://www.ietf.org/internet-drafts/draft-seantek-dane-a= lps-00.txt Status: https://datatracker.ietf.org/doc/draft-seantek-dane-alps/= Htmlized: https://tools.ietf.org/html/draft-seantek-dane-alps-00 Abstract: This document describes how to synthesize alternative local-part productions when looking up email addresses with DANE for S/MIME and OpenPGP. = =20 The IETF Secretariat --------------ms010103040400040105020904 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CfYwggSvMIIDl6ADAgECAhEA4CPLFRKDU4mtYW56VGdrITANBgkqhkiG9w0BAQsFADBvMQsw CQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4 dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290 MB4XDTE0MTIyMjAwMDAwMFoXDTIwMDUzMDEwNDgzOFowgZsxCzAJBgNVBAYTAkdCMRswGQYD VQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNP TU9ETyBDQSBMaW1pdGVkMUEwPwYDVQQDEzhDT01PRE8gU0hBLTI1NiBDbGllbnQgQXV0aGVu dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAImxDdp6UxlOcFIdvFamBia3uEngludRq/HwWhNJFaO0jBtgvHpRQqd5jKQi3xdh TpHVdiMKFNNKAn+2HQmAbqUEPdm6uxb+oYepLkNSQxZ8rzJQyKZPWukI2M+TJZx7iOgwZOak +FaA/SokFDMXmaxE5WmLo0YGS8Iz1OlAnwawsayTQLm1CJM6nCpToxDbPSBhPFUDjtlOdiUC ISn6o3xxdk/u4V+B6ftUgNvDezVSt4TeIj0sMC0xf1m9UjewM2ktQ+v61qXxl3dnUYzZ7ifr vKUHOHaMpKk4/9+M9QOsSb7K93OZOg8yq5yVOhM9DkY6V3RhUL7GQD/L5OKfoiECAwEAAaOC ARcwggETMB8GA1UdIwQYMBaAFK29mHo0tCb3+sQmVO8DveAky1QaMB0GA1UdDgQWBBSSYWuC 4aKgqk/sZ/HCo/e0gADB7DAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEQYDVR0gBAowCDAGBgRVHSAAMEQGA1Ud HwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9BZGRUcnVzdEV4dGVybmFs Q0FSb290LmNybDA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVz ZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQELBQADggEBABsqbqxVwTqriMXY7c1V86prYSvACRAj mQ/FZmpvsfW0tXdeDwJhAN99Bf4Ss6SAgAD8+x1banICCkG8BbrBWNUmwurVTYT7/oKYz1gb 4yJjnFL4uwU2q31Ypd6rO2Pl2tVz7+zg+3vio//wQiOcyraNTT7kSxgDsqgt1Ni7QkuQaYUQ 26Y3NOh74AEQpZzKOsefT4g0bopl0BqKu6ncyso20fT8wmQpNa/WsadxEdIDQ7GPPprsnjJT 9HaSyoY0B7ksyuYcStiZDcGG4pCS+1pCaiMhEOllx/XVu37qjIUgAmLq0ToHLFnFmTPyOInl tukWeh95FPZKEBom+nyK+5swggU/MIIEJ6ADAgECAhAaQkrPJ/nEG3M8lirbnsnnMA0GCSqG SIb3DQEBCwUAMIGbMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVy MRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDFBMD8GA1UE AxM4Q09NT0RPIFNIQS0yNTYgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1h aWwgQ0EwHhcNMTUwMjAyMDAwMDAwWhcNMTYwMjAyMjM1OTU5WjAlMSMwIQYJKoZIhvcNAQkB FhRkZXYraWV0ZkBzZWFudGVrLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM+J9tKgDs1LQtaDc+c4E58tCUQRNZiWbM1drOhLq2oSj75LuxPrrZy4XGjWoQFq9qGYHgiv boRKoo2guKi2R5xrf/pZ27ELY5jCa3BQs4Q2YwziXWM5rktnFL2amO2MMwhuo0n7OIMDYftv TEun2mOrnJ3G53zvawQdMbuRiHSNwc7DzWJwAjZQWFO8OF+BgNPzMDQGmzYQ4MVNk8NX5ecN VbfusUU1wZOlfdy8lWTfcASDqa9jLoaAiSx2ay4q7/5m0BOWqOKZCS0f7MmIUtSqODEoiZkd 7oCj5MRKOg2ZLia33JN+oS5rTKN8rs4u4ZF5g8zypHS5TY/l3pNRlrcCAwEAAaOCAfIwggHu MB8GA1UdIwQYMBaAFJJha4LhoqCqT+xn8cKj97SAAMHsMB0GA1UdDgQWBBQaZuXe8vDwU+ja pyFW3zSvIW6TxjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAgBgNVHSUEGTAXBggr BgEFBQcDBAYLKwYBBAGyMQEDBQIwEQYJYIZIAYb4QgEBBAQDAgUgMEYGA1UdIAQ/MD0wOwYM KwYBBAGyMQECAQEBMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5uZXQv Q1BTMF0GA1UdHwRWMFQwUqBQoE6GTGh0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0NPTU9ET1NI QTI1NkNsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5jcmwwgZAGCCsGAQUF BwEBBIGDMIGAMFgGCCsGAQUFBzAChkxodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9T SEEyNTZDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVtYWlsQ0EuY3J0MCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wHwYDVR0RBBgwFoEUZGV2K2lldGZAc2Vh bnRlay5jb20wDQYJKoZIhvcNAQELBQADggEBAHiH/zXr779dLLJNLp6yW/RQvJSYuNbEqauQ BWLZgvCF8FJjcS+y+bhN7RpTSVaEymbxnpJWFg0Qs6us6rXtttU6MF2JhTuxtu6yWW0EYy80 KGOt6zJRTxa46kAhAOqw4KPQ5RTvf/NT+2Qu8b2edlh+3t6f8iTQOAL/BNHnmr4QvpfnMLa8 NMAqd4FLOcSU9JKBlb5YtsEdfM3nBt4m95pfhpww79gB+zoXMoVaI+lfQHhkGth6mlaTkFUV DT2pqq98XgESpObFEngb8ZRftBVoZfgJ4ajXcZnhKaqYEr23EtY207KgKb4LAXA84wtPcFfJ rQaDArapR7xd2GNs+eYxggRBMIIEPQIBATCBsDCBmzELMAkGA1UEBhMCR0IxGzAZBgNVBAgT EkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RP IENBIExpbWl0ZWQxQTA/BgNVBAMTOENPTU9ETyBTSEEtMjU2IENsaWVudCBBdXRoZW50aWNh dGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhAaQkrPJ/nEG3M8lirbnsnnMA0GCWCGSAFlAwQC AQUAoIICYTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNTEw MTMxNTU3MDZaMC8GCSqGSIb3DQEJBDEiBCAjm+RZ+jeByI2zBaRjYLc/hWI/RLPSriJXyePJ ipOt4zBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZI hvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3 DQMCAgEoMIHBBgkrBgEEAYI3EAQxgbMwgbAwgZsxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJH cmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBD QSBMaW1pdGVkMUEwPwYDVQQDEzhDT01PRE8gU0hBLTI1NiBDbGllbnQgQXV0aGVudGljYXRp b24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQGkJKzyf5xBtzPJYq257J5zCBwwYLKoZIhvcNAQkQ AgsxgbOggbAwgZsxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIx EDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMUEwPwYDVQQD EzhDT01PRE8gU0hBLTI1NiBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFp bCBDQQIQGkJKzyf5xBtzPJYq257J5zANBgkqhkiG9w0BAQEFAASCAQC8gSgRPZ33oK4fYzqo 7DvD+caw9s6HhBNn+4LPOLPxb14Wo7k+Xtw+xXjBW06hftqxXQKIQgFLC8KVPqwgE5CRofu8 2aBHibYghSESt3qIqxf8mmuTe3eUCPc3rwtLy37U3sURMp63P0WGaLsueMmxBgHXSblTjDe3 nPSNblLLwuAMvKCWRMC9REsV1ZX8s/vyaTcCe/8fns/x/BA63hUrU5kNBediZ5hdE/2rjsXP iQiSMKTe70h7ddgZG9Z5cH0PG2nPlHCp2uQGhGDWy6Pekjy3A9kr27QP3ELnvfYBhAvf/WvN GNAfHusXEw0ycSxc8sGz4PloMWBN/MWbxKY9AAAAAAAA --------------ms010103040400040105020904-- From nobody Tue Oct 13 09:12:42 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48C171B4815 for ; Tue, 13 Oct 2015 09:12:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.678 X-Spam-Level: X-Spam-Status: No, score=-1.678 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gUMV-XCT-5nS for ; Tue, 13 Oct 2015 09:12:40 -0700 (PDT) Received: from mail-yk0-f175.google.com (mail-yk0-f175.google.com [209.85.160.175]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B87C1B4814 for ; Tue, 13 Oct 2015 09:12:40 -0700 (PDT) Received: by ykoo7 with SMTP id o7so21487983yko.0 for ; Tue, 13 Oct 2015 09:12:39 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=zbhp+6bVwY3dFKLufTXU1pckYtSdpfpC0aawlIOjmuI=; b=hyczkaKnjngGfXf9pXI6uIYgyRkQkLAoex4XRoXfePK6iOyuI9n015oWs6SRzS5gCO 8eIs4rShzaaRIT8v41XXmI9UsAwHiUJ5VXyfFe9rgO+58r8lq8kwC7aLXh3sRX+SV+rI 14YZ0VNr+JL62IK6SxHfKqEQukakuwoAJ1n+BnkvmpdBN+m35B8NHvkiSzWTIod7LCHD z//vrV3l75VQptXA1jgifYRSUioR5/NM7B+QrjtIEtRK/7x/8lGX3udQIXrROjQvG68+ 3abXL/VHHCD7hb1cVWsydBNcaA4+2QB4yUXXZfWapAX2DtS0tYvoFUsftGltc+xwsr2u AtaA== X-Gm-Message-State: ALoCoQmSrFNyWZgtNub/G6J+LKCrOxLEvDVQUdQnrYfRBCIYdJ4VQ8+5RSiVdVccfjnchJTLnPoq MIME-Version: 1.0 X-Received: by 10.13.216.65 with SMTP id a62mr24829775ywe.109.1444752759212; Tue, 13 Oct 2015 09:12:39 -0700 (PDT) Received: by 10.37.124.69 with HTTP; Tue, 13 Oct 2015 09:12:39 -0700 (PDT) In-Reply-To: <561D29D2.2040809@seantek.com> References: <20151013152330.10221.15050.idtracker@ietfa.amsl.com> <561D29D2.2040809@seantek.com> Date: Tue, 13 Oct 2015 12:12:39 -0400 Message-ID: From: Warren Kumari To: Sean Leonard Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "" Subject: Re: [dane] =?utf-8?b?U2tpaW5nIERvd24gdGhlIEFMUFMg8J+Ov/Cfj4Lwn5e74puw?= =?utf-8?b?8J+PlPCfjIQ6IEFsdGVybmF0aXZlIExvY2FsLVBhcnQgU3ludGhlc2lzIGZv?= =?utf-8?q?r_DANE_=28draft-seantek-dane-alps-00=2Etxt=29?= X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 16:12:41 -0000 I encourage everyone to read this, especially if you are new to the DANE local parts discussion -- I'm not sure about the solution, nor if DANE is the appropriate place for this, but it is interesting and frames the discussion well... W On Tue, Oct 13, 2015 at 11:57 AM, Sean Leonard wrote: > Colleagues: > > As requested, please find the Internet-Draft draft-seantek-dane-alps posted, > and take a look. I hope that this draft moves the conversation forward, and > I look forward to the usual rounds of comments, questions, evaluations, > excoriations, etc. > > Sean > > -------- Forwarded Message -------- > Subject: New Version Notification for draft-seantek-dane-alps-00.txt > Date: Tue, 13 Oct 2015 08:23:30 -0700 > From: internet-drafts@ietf.org > To: Sean Leonard > > > > A new version of I-D, draft-seantek-dane-alps-00.txt > has been successfully submitted by Sean Leonard and posted to the > IETF repository. > > Name: draft-seantek-dane-alps > Revision: 00 > Title: Alternative Local-Part Synthesis for DANE > Document date: 2015-10-13 > Group: Individual Submission > Pages: 17 > URL: > https://www.ietf.org/internet-drafts/draft-seantek-dane-alps-00.txt > Status: https://datatracker.ietf.org/doc/draft-seantek-dane-alps/ > Htmlized: https://tools.ietf.org/html/draft-seantek-dane-alps-00 > > > Abstract: > This document describes how to synthesize alternative local-part > productions when looking up email addresses with DANE for S/MIME and > OpenPGP. > > > The IETF Secretariat > > > > > > _______________________________________________ > dane mailing list > dane@ietf.org > https://www.ietf.org/mailman/listinfo/dane > -- I don't think the execution is relevant when it was obviously a bad idea in the first place. This is like putting rabid weasels in your pants, and later expressing regret at having chosen those particular rabid weasels and that pair of pants. ---maf From nobody Tue Oct 13 15:49:43 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6217E1A1BF5 for ; Tue, 13 Oct 2015 15:49:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.162 X-Spam-Level: * X-Spam-Status: No, score=1.162 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, HELO_MISMATCH_COM=0.553, HOST_MISMATCH_NET=0.311, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jlq96fAPQ6ig for ; Tue, 13 Oct 2015 15:49:41 -0700 (PDT) Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:1126::2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4503D1A1BAF for ; Tue, 13 Oct 2015 15:49:41 -0700 (PDT) Received: (qmail 80983 invoked from network); 13 Oct 2015 22:49:40 -0000 Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 13 Oct 2015 22:49:40 -0000 Date: 13 Oct 2015 22:49:17 -0000 Message-ID: <20151013224917.54052.qmail@ary.lan> From: "John Levine" To: dane@ietf.org In-Reply-To: Organization: X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit Archived-At: Subject: Re: [dane] =?utf-8?b?U2tpaW5nIERvd24gdGhlIEFMUFMg8J+Ov/Cfj4Lwn5e74puw?= =?utf-8?b?8J+PlPCfjIQ6IEFsdGVybmF0aXZlIExvY2FsLVBhcnQgU3ludGhlc2lzIGZv?= =?utf-8?q?r_DANE_=28draft-seantek-dane-alps-00=2Etxt=29?= X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 22:49:42 -0000 In article you write: >I encourage everyone to read this, especially if you are new to the >DANE local parts discussion -- I'm not sure about the solution, nor if >DANE is the appropriate place for this, but it is interesting and >frames the discussion well... It really belongs in appsarea since it changes the semantics of RFC 5321. Channelling the rest of the mail community, it's a terrible idea, but I encourage you to ask them and not take my word for it. R's, John From nobody Wed Oct 14 06:59:34 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8729D1A6FBC for ; Wed, 14 Oct 2015 06:59:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8euCls17jLlJ for ; Wed, 14 Oct 2015 06:59:31 -0700 (PDT) Received: from mail-oi0-f100.google.com (mail-oi0-f100.google.com [209.85.218.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F0331A1B45 for ; Wed, 14 Oct 2015 06:59:31 -0700 (PDT) Received: by oiaj5 with SMTP id j5so4258829oia.3 for ; Wed, 14 Oct 2015 06:59:31 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:thread-topic:thread-index:date :message-id:references:in-reply-to:accept-language:content-language :user-agent:content-type:content-id:content-transfer-encoding :mime-version; bh=JuZhMNdUJwA3S1hY0FW1x9nk58KGY6WIV3UoMVXmivw=; b=ANIUsJMJ4Uieznm4WsucJ3P3Sye5Qw+DY27/JSNz3OMvxzYT5dOmtAJC+qU9L+j3Mw D3AX8Nu6uVrH+fk/c/EGTlSLxFSTOGJRU264A1VXlpB91l4S4isu+pqBTWnZyJwCPO/v zHr01xwMu4X25WF/gclaF6nPhBQGk/hSHehCTSXxZtvQ+ZOK0dpD4EIC/x7B0Dxtxdgt FhacgxLO2VIDyOgQxONelAIaFr8f+SS85JonmgSHnoIGwS2EKxMLjjS6KV853MSQhRem PYHQ9UexKxjjzYAFOAeA7FGZUu+iZbX6knSB/p5Mz2ARQe1kiKxvhUhswnPF4vEKrUSc DKFA== X-Gm-Message-State: ALoCoQlUNh3xPydCNDUgZ9BjHBy9XhKhehh+ZsQ2nJGAiPlc1jFoxZ7J9BV3+/cE81W2MO0BvcXtBfMh+XPmuJM8WTPWGAoZSw== X-Received: by 10.55.217.20 with SMTP id u20mr4090993qki.98.1444831170829; Wed, 14 Oct 2015 06:59:30 -0700 (PDT) Received: from brn1lxmailout01.verisign.com (brn1lxmailout01.verisign.com. [72.13.63.41]) by smtp-relay.gmail.com with ESMTPS id b84sm947960qkj.9.2015.10.14.06.59.30 (version=TLSv1 cipher=RC4-SHA bits=128/128); Wed, 14 Oct 2015 06:59:30 -0700 (PDT) X-Relaying-Domain: verisign.com Received: from brn1wnexcas02.vcorp.ad.vrsn.com (brn1wnexcas02 [10.173.152.206]) by brn1lxmailout01.verisign.com (8.13.8/8.13.8) with ESMTP id t9EDxUBu028131 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 14 Oct 2015 09:59:30 -0400 Received: from BRN1WNEXMBX02.vcorp.ad.vrsn.com ([::1]) by brn1wnexcas02.vcorp.ad.vrsn.com ([::1]) with mapi id 14.03.0174.001; Wed, 14 Oct 2015 09:59:29 -0400 From: "Wiley, Glen" To: John Levine , "dane@ietf.org" Thread-Topic: [dane] Encoding local parts in better ways Thread-Index: AQHQ9CFWebwUu8so/EyU0df4wQGraZ5rKNOA Date: Wed, 14 Oct 2015 13:59:29 +0000 Message-ID: References: <20150921035448.5523.qmail@ary.lan> In-Reply-To: <20150921035448.5523.qmail@ary.lan> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.9.150325 x-originating-ip: [10.173.152.4] Content-Type: text/plain; charset="Windows-1252" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [dane] Encoding local parts in better ways X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 13:59:33 -0000 John, I read the draft. In the list of approaches you include literal, encoded, regex and pointer but I didn=B9t see a place to refer to hashes (such as SHA224). While ther= e are different views on the use of hashes for local parts, would it makes sense to allow for the future use of a hash? Section 5 is interesting=8AI think I follow the approach but it would be helpful to have a more detailed example that describes the set of records that would be published to implement a DFA and the step by step resolution for a specific local part. --=20 Glen Wiley Principal Engineer Verisign, Inc. (571) 230-7917 A5E5 E373 3C75 5B3E 2E24 6A0F DC65 2354 9946 C63A On 9/20/15, 11:54 PM, "John Levine" wrote: >I've sent in a new version of draft-levine-dns-mailbox-01 that >describes a bunch of ways to encode mail address local parts in ways >that don't need canonicalization or address guessing. > >Take a particular look at section 5, which publishes regular >expressions to match a domain's mail addresses. > >* Can represent any plausible local part syntax including case >folding, noise characters, multiple ways to write Unicode characters, >suffixes where some are ignored and some aren't, BATV, and VERP. > >* Reasonably fast lookup (max of one query per localpart character) > >* Works fine with static zones served by ordinary name servers . > >* Doesn't make bulk addresss harvesting easy. > >If you really want to do experiments in publishing mail info in the >DNS, I think this would be a rather interesting one. > >R's, >John > > >_______________________________________________ >dane mailing list >dane@ietf.org >https://www.ietf.org/mailman/listinfo/dane From nobody Wed Oct 14 08:11:23 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E2681ABD3E for ; Wed, 14 Oct 2015 08:11:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ptyk2jnq6c_P for ; Wed, 14 Oct 2015 08:11:20 -0700 (PDT) Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99F811A88D2 for ; Wed, 14 Oct 2015 08:11:07 -0700 (PDT) Received: from [192.168.123.105] (unknown [75.83.2.34]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 79DD0509BE; Wed, 14 Oct 2015 11:11:04 -0400 (EDT) Content-Type: multipart/signed; boundary="Apple-Mail=_6043BBBC-9830-4255-87C9-A2CFE4402F66"; protocol="application/pkcs7-signature"; micalg=sha1 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Sean Leonard In-Reply-To: Date: Wed, 14 Oct 2015 08:10:03 -0700 Message-Id: <41654219-9895-465D-B17A-C35CD16224D4@seantek.com> References: <20150921035448.5523.qmail@ary.lan> To: "Wiley, Glen" X-Mailer: Apple Mail (2.1878.6) Archived-At: Cc: "dane@ietf.org" Subject: Re: [dane] Encoding local parts in better ways X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 15:11:21 -0000 --Apple-Mail=_6043BBBC-9830-4255-87C9-A2CFE4402F66 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 On Oct 14, 2015, at 6:59 AM, Wiley, Glen wrote: > John, >=20 > I read the draft. >=20 > In the list of approaches you include literal, encoded, regex and = pointer > but I didn=B9t see a place to refer to hashes (such as SHA224). While = there > are different views on the use of hashes for local parts, would it = makes > sense to allow for the future use of a hash? Probably makes sense conceptually as a sub-part of =93encoded=94 = (Section 4). Some encodings are reversible (e.g., base32); others are = one-way (e.g., CRC); yet others are one-way and also collision-resistant = (e.g., SHA-224). The commonality that they share is that they preserve = the byte-for-byte/case-sensitive matching of SMTP. Sean --Apple-Mail=_6043BBBC-9830-4255-87C9-A2CFE4402F66 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJ9jCCBK8w ggOXoAMCAQICEQDgI8sVEoNTia1hbnpUZ2shMA0GCSqGSIb3DQEBCwUAMG8xCzAJBgNVBAYTAlNF MRQwEgYDVQQKEwtBZGRUcnVzdCBBQjEmMCQGA1UECxMdQWRkVHJ1c3QgRXh0ZXJuYWwgVFRQIE5l dHdvcmsxIjAgBgNVBAMTGUFkZFRydXN0IEV4dGVybmFsIENBIFJvb3QwHhcNMTQxMjIyMDAwMDAw WhcNMjAwNTMwMTA0ODM4WjCBmzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hl c3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxQTA/BgNV BAMTOENPTU9ETyBTSEEtMjU2IENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWls IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibEN2npTGU5wUh28VqYGJre4SeCW 51Gr8fBaE0kVo7SMG2C8elFCp3mMpCLfF2FOkdV2IwoU00oCf7YdCYBupQQ92bq7Fv6hh6kuQ1JD FnyvMlDIpk9a6QjYz5MlnHuI6DBk5qT4VoD9KiQUMxeZrETlaYujRgZLwjPU6UCfBrCxrJNAubUI kzqcKlOjENs9IGE8VQOO2U52JQIhKfqjfHF2T+7hX4Hp+1SA28N7NVK3hN4iPSwwLTF/Wb1SN7Az aS1D6/rWpfGXd2dRjNnuJ+u8pQc4doykqTj/34z1A6xJvsr3c5k6DzKrnJU6Ez0ORjpXdGFQvsZA P8vk4p+iIQIDAQABo4IBFzCCARMwHwYDVR0jBBgwFoAUrb2YejS0Jvf6xCZU7wO94CTLVBowHQYD VR0OBBYEFJJha4LhoqCqT+xn8cKj97SAAMHsMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAG AQH/AgEAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDARBgNVHSAECjAIMAYGBFUdIAAw RAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC51c2VydHJ1c3QuY29tL0FkZFRydXN0RXh0ZXJu YWxDQVJvb3QuY3JsMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNl cnRydXN0LmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAGypurFXBOquIxdjtzVXzqmthK8AJECOZD8Vm am+x9bS1d14PAmEA330F/hKzpICAAPz7HVtqcgIKQbwFusFY1SbC6tVNhPv+gpjPWBvjImOcUvi7 BTarfVil3qs7Y+Xa1XPv7OD7e+Kj//BCI5zKto1NPuRLGAOyqC3U2LtCS5BphRDbpjc06HvgARCl nMo6x59PiDRuimXQGoq7qdzKyjbR9PzCZCk1r9axp3ER0gNDsY8+muyeMlP0dpLKhjQHuSzK5hxK 2JkNwYbikJL7WkJqIyEQ6WXH9dW7fuqMhSACYurROgcsWcWZM/I4ieW26RZ6H3kU9koQGib6fIr7 mzCCBT8wggQnoAMCAQICEBpCSs8n+cQbczyWKtueyecwDQYJKoZIhvcNAQELBQAwgZsxCzAJBgNV BAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAY BgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMUEwPwYDVQQDEzhDT01PRE8gU0hBLTI1NiBDbGllbnQg QXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xNTAyMDIwMDAwMDBaFw0xNjAy MDIyMzU5NTlaMCUxIzAhBgkqhkiG9w0BCQEWFGRlditpZXRmQHNlYW50ZWsuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4n20qAOzUtC1oNz5zgTny0JRBE1mJZszV2s6EurahKP vku7E+utnLhcaNahAWr2oZgeCK9uhEqijaC4qLZHnGt/+lnbsQtjmMJrcFCzhDZjDOJdYzmuS2cU vZqY7YwzCG6jSfs4gwNh+29MS6faY6ucncbnfO9rBB0xu5GIdI3BzsPNYnACNlBYU7w4X4GA0/Mw NAabNhDgxU2Tw1fl5w1Vt+6xRTXBk6V93LyVZN9wBIOpr2MuhoCJLHZrLirv/mbQE5ao4pkJLR/s yYhS1Ko4MSiJmR3ugKPkxEo6DZkuJrfck36hLmtMo3yuzi7hkXmDzPKkdLlNj+Xek1GWtwIDAQAB o4IB8jCCAe4wHwYDVR0jBBgwFoAUkmFrguGioKpP7GfxwqP3tIAAwewwHQYDVR0OBBYEFBpm5d7y 8PBT6NqnIVbfNK8hbpPGMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcG CCsGAQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwRgYDVR0gBD8wPTA7Bgwr BgEEAbIxAQIBAQEwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMw XQYDVR0fBFYwVDBSoFCgToZMaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPU0hBMjU2Q2xp ZW50QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBkAYIKwYBBQUHAQEEgYMwgYAw WAYIKwYBBQUHMAKGTGh0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1NIQTI1NkNsaWVudEF1 dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmNvbW9kb2NhLmNvbTAfBgNVHREEGDAWgRRkZXYraWV0ZkBzZWFudGVrLmNvbTANBgkqhkiG9w0B AQsFAAOCAQEAeIf/Nevvv10ssk0unrJb9FC8lJi41sSpq5AFYtmC8IXwUmNxL7L5uE3tGlNJVoTK ZvGeklYWDRCzq6zqte221TowXYmFO7G27rJZbQRjLzQoY63rMlFPFrjqQCEA6rDgo9DlFO9/81P7 ZC7xvZ52WH7e3p/yJNA4Av8E0eeavhC+l+cwtrw0wCp3gUs5xJT0koGVvli2wR18zecG3ib3ml+G nDDv2AH7OhcyhVoj6V9AeGQa2HqaVpOQVRUNPamqr3xeARKk5sUSeBvxlF+0FWhl+AnhqNdxmeEp qpgSvbcS1jbTsqApvgsBcDzjC09wV8mtBoMCtqlHvF3YY2z55jGCA8MwggO/AgEBMIGwMIGbMQsw CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3Jk MRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDFBMD8GA1UEAxM4Q09NT0RPIFNIQS0yNTYgQ2xp ZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEBpCSs8n+cQbczyWKtueyecw CQYFKw4DAhoFAKCCAecwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcN MTUxMDE0MTUxMTA1WjAjBgkqhkiG9w0BCQQxFgQUzPx1VHZv8u99MHrByGKWfkdEo98wgcEGCSsG AQQBgjcQBDGBszCBsDCBmzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3Rl cjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxQTA/BgNVBAMT OENPTU9ETyBTSEEtMjU2IENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENB AhAaQkrPJ/nEG3M8lirbnsnnMIHDBgsqhkiG9w0BCRACCzGBs6CBsDCBmzELMAkGA1UEBhMCR0Ix GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR Q09NT0RPIENBIExpbWl0ZWQxQTA/BgNVBAMTOENPTU9ETyBTSEEtMjU2IENsaWVudCBBdXRoZW50 aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhAaQkrPJ/nEG3M8lirbnsnnMA0GCSqGSIb3DQEB AQUABIIBAHaxk6xBIbkAU9A1MOHn6PDpyHnVs8cKICUCeS2/leSXAIgJFk2PCpe2wZshrGbu6Ruy 9tA9cXcqDiZs4upIxwbse32lw1yaY65CcjzbwD/IIezZEQRJ2xAEGh2NfnrUXZD5/MAqxOHZpNLr vGtca+/F54uijhalH3Y7x2O2OxLgP2koccT3Gu0ezGniFrzPCYVX6YUmWKsqwZCC2gU7wVLeCnAR 71V6pserkhOuEqr8avFoi6qrLKzbuz4bFBoj7DfI3KZJ+zJ0egVed++28GlBzv7SGqhxcmq43Q47 9OfXv7XKGLGpT10jaWGruVZx5pFElN9/niC/KLhKurr0qfIAAAAAAAA= --Apple-Mail=_6043BBBC-9830-4255-87C9-A2CFE4402F66-- From nobody Wed Oct 14 08:14:32 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E67611AC3DE for ; Wed, 14 Oct 2015 08:14:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lJ6zCrQtHdJH for ; Wed, 14 Oct 2015 08:14:29 -0700 (PDT) Received: from mail-oi0-f97.google.com (mail-oi0-f97.google.com [209.85.218.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B01311AC3C6 for ; Wed, 14 Oct 2015 08:14:26 -0700 (PDT) Received: by oiaj5 with SMTP id j5so4441578oia.3 for ; Wed, 14 Oct 2015 08:14:26 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:thread-topic:thread-index :date:message-id:references:in-reply-to:accept-language :content-language:user-agent:content-type:mime-version; bh=v9cMa+8SV6iw057egzyI2RzlIvHsQ2UdJ/bC90pVoAI=; b=POWPC3rkc/LColpynYI+uv6E41pJn9xcnt/RPHRG90WmSHYqyN6H9P1VCNUyu+9W3E OXIP63vE9MNe++u4juGlMJLmMSNZ6RY21E4eTtCreAQcxAbMWB7qdUVWhEs/BtSiVhLq EvyAPCJ0lCBDjyeC5CLBAsqH88+tUeGIEmkekc/o/3eCtA6u0pQnXNPn/eQUqd4jzEsJ sisABiv4SjTaSVlw38GMziHxqhtPc6JF6kTnqhC0T6r8/vux8MR1LAzbcYjCi8c7iRzI O9C7CkU2FU3ImDaUxu7/oqqYdPVG1R5BtTXRlcKw5IcSHTOTxIHZho7hu8j/CzlAVPxC d+xw== X-Gm-Message-State: ALoCoQlLS0dYlotTany2uD18CeOgd2YKYWSmCFby1YcRBhwutxRWgCfP2j4+wZOEi/QSS/RzYSZXLpwm8XehkYNnMZZ30MdVcQ== X-Received: by 10.140.19.45 with SMTP id 42mr4666562qgg.42.1444835665991; Wed, 14 Oct 2015 08:14:25 -0700 (PDT) Received: from brn1lxmailout02.verisign.com (brn1lxmailout02.verisign.com. [72.13.63.42]) by smtp-relay.gmail.com with ESMTPS id e77sm782184qkj.7.2015.10.14.08.14.25 (version=TLSv1 cipher=RC4-SHA bits=128/128); Wed, 14 Oct 2015 08:14:25 -0700 (PDT) X-Relaying-Domain: verisign.com Received: from BRN1WNEXCHM01.vcorp.ad.vrsn.com (brn1wnexchm01 [10.173.152.255]) by brn1lxmailout02.verisign.com (8.13.8/8.13.8) with ESMTP id t9EFEPH1007579 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 14 Oct 2015 11:14:25 -0400 Received: from BRN1WNEXMBX02.vcorp.ad.vrsn.com ([::1]) by BRN1WNEXCHM01.vcorp.ad.vrsn.com ([::1]) with mapi id 14.03.0174.001; Wed, 14 Oct 2015 11:14:25 -0400 From: "Wiley, Glen" To: Sean Leonard Thread-Topic: [dane] Encoding local parts in better ways Thread-Index: AQHQ9CFWebwUu8so/EyU0df4wQGraZ5rKNOAgABWxoD//74mAA== Date: Wed, 14 Oct 2015 15:14:24 +0000 Message-ID: References: <20150921035448.5523.qmail@ary.lan> <41654219-9895-465D-B17A-C35CD16224D4@seantek.com> In-Reply-To: <41654219-9895-465D-B17A-C35CD16224D4@seantek.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.9.150325 x-originating-ip: [10.173.152.4] Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="B_3527666062_5982190" MIME-Version: 1.0 Archived-At: Cc: "dane@ietf.org" Subject: Re: [dane] Encoding local parts in better ways X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 15:14:31 -0000 --B_3527666062_5982190 Content-type: text/plain; charset="EUC-KR" Content-transfer-encoding: quoted-printable Section 4 reads as though it is specifying base32 encoding, as it is written I don=A1=AFt see room for interpreting that as allowing for a hash. --=20 Glen Wiley Principal Engineer Verisign, Inc. (571) 230-7917 A5E5 E373 3C75 5B3E 2E24 6A0F DC65 2354 9946 C63A On 10/14/15, 11:10 AM, "Sean Leonard" wrote: > >On Oct 14, 2015, at 6:59 AM, Wiley, Glen wrote: > >> John, >>=20 >> I read the draft. >>=20 >> In the list of approaches you include literal, encoded, regex and >>pointer >> but I didn=A9=F6t see a place to refer to hashes (such as SHA224). While >>there >> are different views on the use of hashes for local parts, would it makes >> sense to allow for the future use of a hash? > >Probably makes sense conceptually as a sub-part of =A1=B0encoded=A1=B1 (Section 4)= . >Some encodings are reversible (e.g., base32); others are one-way (e.g., >CRC); yet others are one-way and also collision-resistant (e.g., >SHA-224). The commonality that they share is that they preserve the >byte-for-byte/case-sensitive matching of SMTP. > >Sean > --B_3527666062_5982190 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIIUlgYJKoZIhvcNAQcCoIIUhzCCFIMCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC Efkwggd0MIIGXKADAgECAhAFamj1lpQsrpqLA2fZYjjSMA0GCSqGSIb3DQEBBQUAMIHJMQsw CQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5 bWFudGVjIFRydXN0IE5ldHdvcmsxNTAzBgNVBAsTLENsYXNzIDIgTWFuYWdlZCBQS0kgSW5k aXZpZHVhbCBTdWJzY3JpYmVyIENBMUMwQQYDVQQDEzpTeW1hbnRlYyBDbGFzcyAyIFNoYXJl ZCBJbnRlcm1lZGlhdGUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTE1MDIwMjAwMDAwMFoX DTE2MDIwMjIzNTk1OVowazEiMCAGCSqGSIb3DQEJARYTZ3dpbGV5QHZlcmlzaWduLmNvbTEU MBIGA1UEAwwLV2lsZXksIEdsZW4xFjAUBgNVBAsMDUVOVEVSUFJJU0UgSVQxFzAVBgNVBAoM DlZlcmlTaWduLCBJbmMuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGU9d7jR Ypys2vsvFZUpT9JXy5RUg4xkFX8U3Xhf+TC906Gq3VNGDe3qrptVdnEBFxnRnIN5DUW5CLDz lpjFljJBgL3Z4IPBtKAA3Hvq45kuc1M9c5oV6lNb3fZuplNgNykMxNecnjTbRwi1qOn79Ijf 68gZ37LtxT5xQi8SrTws59t/Lpr+AvQsR808Y3sNCTFFO0x8eS4W6IejcwAVkiRJWhfBvS2W bVpQhxo0WcTZj076AzzPxnimry7Jj8PVNdEb0rpQQazhdAL62U5bH46NoTbQbJD34VLrEvPc r/dpGMXB5I8mEIsmvvem6JFJSMXKw9cmipdKcihjoQ2S3QIDAQABo4IDszCCA68wDAYDVR0T AQH/BAIwADAOBgNVHQ8BAf8EBAMCBaAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwQwHQYDVR0O BBYEFFaFSmgtcRDwfRFiqt3Vq8LJCLn5MEgGA1UdEQRBMD+BE2d3aWxleUB2ZXJpc2lnbi5j b22gKAYKKwYBBAGCNxQCA6AaDBhnd2lsZXlAdmNvcnAuYWQudnJzbi5jb20wHwYDVR0jBBgw FoAU2EgpqF8qF5Li+p57729gg/i4uNwwggFxBggrBgEFBQcBAQSCAWMwggFfMCcGCCsGAQUF BzABhhtodHRwOi8vcGtpLW9jc3Auc3ltYXV0aC5jb20wggEyBggrBgEFBQcwAoaCASRsZGFw Oi8vZGlyZWN0b3J5LnZlcmlzaWduLmNvbS9DTiUyMCUzRCUyMFN5bWFudGVjJTIwQ2xhc3Ml MjAyJTIwU2hhcmVkJTIwSW50ZXJtZWRpYXRlJTIwQ2VydGlmaWNhdGUlMjBBdXRob3JpdHkl MkNPVSUyMCUzRCUyMENsYXNzJTIwMiUyME1hbmFnZWQlMjBQS0klMjBJbmRpdmlkdWFsJTIw U3Vic2NyaWJlciUyMENBJTJDT1UlMjAlM0QlMjBTeW1hbnRlYyUyMFRydXN0JTIwTmV0d29y ayUyQ08lMjAlM0QlMjBTeW1hbnRlYyUyMENvcnBvcmF0aW9uJTJDQyUyMCUzRCUyMFVTP2NB Q2VydGlmaWNhdGU7YmluYXJ5MF0GA1UdHwRWMFQwUqBQoE6GTGh0dHA6Ly9wa2ktY3JsLnN5 bWF1dGguY29tL2NhXzA3YmI3ZDY0NzdjZjRmNmJlOTZhZjFiMzZjYWJkMzE2L0xhdGVzdENS TC5jcmwwbAYDVR0gBGUwYzBhBgtghkgBhvhFAQcXAjBSMCYGCCsGAQUFBwIBFhpodHRwOi8v d3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGgu Y29tL3JwYTBCBgkqhkiG9w0BCQ8ENTAzMAoGCCqGSIb3DQMHMAsGCWCGSAFlAwQBAjALBglg hkgBZQMEARYwCwYJYIZIAWUDBAEqMCwGCmCGSAGG+EUBEAMEHjAcBhJghkgBhvhFARABAgIB AYvxxgkWBjI0NzY2NDA5BgpghkgBhvhFARAFBCswKQIBABYkYUhSMGNITTZMeTl3YTJrdGNt RXVjM2x0WVhWMGFDNWpiMjA9MA0GCSqGSIb3DQEBBQUAA4IBAQAsYKnxfHdNxxF+KIuunR7e tCXmLKJcrZt3o6T5T2nkgiJ0GoPJdkG5AVQoEGDy3HDinIhafARZDVX3H8tggsxKh1cgJ6QO +NKKduxi38+hkKkX/BcoAmJzNEeV0dbtZRDw13l7p8eznUVeLfcVLqWHjefH5Mqko/7/4wPo 2jKEoEk9DfYRI5JowPULlQdTEBZizIYPficBAYEwSZMhKvJYnidR/O2tDmxJPxMCxo5xs4xK ciWpHnrxUHwqoOtAiIzxU48oIEQ+CUnmNazcRH95jB6Uv3bKVqSTYJ6ileydZEXyNarngaKt bR5KlZXiir1dIlaGmYFXy9xmhmENJEcJMIIGYDCCBUigAwIBAgIQdoXLB6jgzA/SxU2POTWz EjANBgkqhkiG9w0BAQUFADCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJ bmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMTk5 OSBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxW ZXJpU2lnbiBDbGFzcyAyIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5 IC0gRzMwHhcNMTEwNjA3MDAwMDAwWhcNMjEwNjA2MjM1OTU5WjCByTELMAkGA1UEBhMCVVMx HTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVz dCBOZXR3b3JrMTUwMwYDVQQLEyxDbGFzcyAyIE1hbmFnZWQgUEtJIEluZGl2aWR1YWwgU3Vi c2NyaWJlciBDQTFDMEEGA1UEAxM6U3ltYW50ZWMgQ2xhc3MgMiBTaGFyZWQgSW50ZXJtZWRp YXRlIENlcnRpZmljYXRlIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALf4PwwrgyMghaZNSQFROtrdUDO+4wSkOj6jYWZMNMLodHB1SaW3Sezds5Kc3XkN4rn6 uDk8voXjjO9teaOmtwi/nEy+PpiOrNt8mivsBSgwXykbM01E1XDoViKZpj6dQlvrI6djnS0s sC4/GPMpzRo2iYSSx1dwW3CF5jihfFDjNziIZVtryzkqBLGCqhkE/6B/P6PbkUV2ZqNr84Uj Xk7ZhV11p6AV98EAdODlypRCZZrCN3qLqFCsv5d0Z3fRMqevjcuTqSVCtDAadAriJRAQy3Rn VQ/LFPxBUAqkfE0LC/kFqTX5Racx8YC7osk+znY54Sr/dlDn6FEi3y3PuDMCAwEAAaOCAj8w ggI7MBIGA1UdEwEB/wQIMAYBAf8CAQAwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL2NybC52 ZXJpc2lnbi5jb20vcGNhMi1nMy5jcmwwDgYDVR0PAQH/BAQDAgEGMCkGA1UdEQQiMCCkHjAc MRowGAYDVQQDExFWZXJpU2lnbk1QS0ktMi01NjAdBgNVHQ4EFgQU2EgpqF8qF5Li+p57729g g/i4uNwwgfAGA1UdIwSB6DCB5aGB0KSBzTCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZl cmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQL EzEoYykgMTk5OSBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUw QwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAyIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24g QXV0aG9yaXR5IC0gRzOCEGFwy0mMX5hFKeewptlQW3owNAYIKwYBBQUHAQEEKDAmMCQGCCsG AQUFBzABhhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wbAYDVR0gBGUwYzBhBgtghkgBhvhF AQcXAjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEF BQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTANBgkqhkiG9w0BAQUFAAOCAQEA piqbB0DJ7P+ziOhF2jTRFw8oLbelhWcxzcHm1SmGOKzi8FkbDOGhRc4keO9pwbBMYaJI2WhP uv51VDe6WGnqwXalNkLqnmZ4kCDZlWokeVTN3loaijuuGJVy0CXY0ka+NDCngJ7xVs4gHmxn yU1PeYeJ4i6A1p7tJmFlogPQxeLzKLkrSWmCZ+zV6TSkLtxiIqSFTUjjagKU8s395GfISbyq 1cfnPN6HsRBrXQdcGeRroPRPmcvctVsMzDL5auR0wCpYN3mz+83DNG/hdt0QBwBjiwdOJxeS R5sOvt4NE4UR/KIvZX3MOqweVGtWZ8TupYciIxcrcFbD8a53XCfBOTCCBBkwggMBAhBhcMtJ jF+YRSnnsKbZUFt6MA0GCSqGSIb3DQEBBQUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMO VmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNV BAsTMShjKSAxOTk5IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkx RTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDIgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlv biBBdXRob3JpdHkgLSBHMzAeFw05OTEwMDEwMDAwMDBaFw0zNjA3MTYyMzU5NTlaMIHKMQsw CQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWdu IFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWduLCBJbmMuIC0gRm9y IGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDIgUHVibGlj IFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMzCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAK8KDcLVLNtnuS3llCfdpb7gsE2Ps2FWPNZ8w/TNPobLooji4dik acW14r/BpkdQXkY5i9WWurVvFL8QzicTngVHmzF6E9gf2dMCN4utLEfwjoEGpw0wDOv3PA8g HdxyRu6lAshbw8lWaUzFGMGRewvVEwCbvO/DSD5GYCCFKtWQts2LoMwy3bf9QFWyUBxWrsyN d03HIE2nMXbvaJKKkB4IgVayrWmjUtDLHMQjPR+Z/kzoFmOOxgiO9jH20vrldt21HJKjSc3N Ac1ozalpuqPrHQ2cpCCmwaDF0UZMF23SrGY/lozghNQ2/yJZxfkRYKhfBH3yGvYlQmEPxEq4 PokCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEANCYVPMCNTUNJHb3pIZLXZpy33sW40ORdX3Yi wCb5hDo6+Yy1++xg8ejOBLDI3acDjzDzmN+k5qQx39McC0bcciA/ru4FPKQzPws5rHB4c0uZ K98wwlSwqDtVof4WKM1CvXRugNsnRKfORF3UG5CYDR5ClLEALATQdKMCBSJjY82DtfvBbWJr aXX9XXBBufW/fN++wTJzIiGLWIF7FZF6uuNkSLB/+zYl2pXQ8SQUF90YgGtGIzlU9Y5iCQQd lJCmm+Yl4kJFqriQrb4Ij6kLQhiUz3I54bFD4CjPt+dabBNrSbP/4xh8iYszXawz16f52jpV yVgQ+arvWrbPS0vfKjGCAmUwggJhAgEBMIHeMIHJMQswCQYDVQQGEwJVUzEdMBsGA1UEChMU U3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsx NTAzBgNVBAsTLENsYXNzIDIgTWFuYWdlZCBQS0kgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENB MUMwQQYDVQQDEzpTeW1hbnRlYyBDbGFzcyAyIFNoYXJlZCBJbnRlcm1lZGlhdGUgQ2VydGlm aWNhdGUgQXV0aG9yaXR5AhAFamj1lpQsrpqLA2fZYjjSMAkGBSsOAwIaBQCgXTAjBgkqhkiG 9w0BCQQxFgQUzUcHPOLvGaHzm/O7B3NQ4PwU+AkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEH ATAcBgkqhkiG9w0BCQUxDxcNMTUxMDE0MTUxNDIyWjANBgkqhkiG9w0BAQEFAASCAQBLjXOa dj/MqZLCn7O+qFr2VCbgPxO7tBNXDqJjpyOaj6PWRGbBDZxley7S0xgjwgN9QrGoUcrovl2w bDc2YFoL2eeVfwZM19JyYJo3t+D2BrtMllz13u1D7BlnAvTfZi7ZLbGoB0cu4j5IFjSDlVxk cpUwOPZ/yAOHdQY0gR1iHyu2EQ22c6V5Ftju+IUAzIN5ugE9QxFK6dF/HAlsE1PgKGm/DH/3 Ao3OVZ8ZlGT+iDTBAg/tdzZMKaT65qyVyza4UGLgCCQIxDOzgfWdHbLpX8YxwBCkFqsDFEg8 4m5uvrjwpSmo3TOzOYZr0kuHmyHk61u4wlioCxDTVKiDJgnr --B_3527666062_5982190-- From nobody Wed Oct 14 08:33:41 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 531611AC443 for ; Wed, 14 Oct 2015 08:33:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G19SRXNP7O64 for ; Wed, 14 Oct 2015 08:33:38 -0700 (PDT) Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A3A61AC43A for ; Wed, 14 Oct 2015 08:33:38 -0700 (PDT) Received: from [192.168.123.105] (unknown [75.83.2.34]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id E4B52509C6; Wed, 14 Oct 2015 11:33:36 -0400 (EDT) Content-Type: multipart/signed; boundary="Apple-Mail=_3D22A3BD-E401-41D2-AF9E-0D9E5AEAF97C"; protocol="application/pkcs7-signature"; micalg=sha1 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Sean Leonard In-Reply-To: Date: Wed, 14 Oct 2015 08:32:44 -0700 Message-Id: <6F819457-0EC4-4206-82AE-A2B713BA28D8@seantek.com> References: <20150921035448.5523.qmail@ary.lan> <41654219-9895-465D-B17A-C35CD16224D4@seantek.com> To: "Wiley, Glen" X-Mailer: Apple Mail (2.1878.6) Archived-At: Cc: "dane@ietf.org" Subject: Re: [dane] Encoding local parts in better ways X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 15:33:40 -0000 --Apple-Mail=_3D22A3BD-E401-41D2-AF9E-0D9E5AEAF97C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=euc-kr Correct, it says base32 encoding. I am not saying to interpret it = otherwise. I am saying that the animating principle of Section 4 =A1=B0Encoded = bytes=A1=B1 is to transform the local-part into a form that preserves = case sensitivity. So yes, perhaps Section 4 should be expanded to include the different = types of transformations: reversible, irreversible, and irreversible = with collision resistance. (In this context, collision resistance is a = pretty important property, so just =A1=B0irreversible=A1=B1 may not be a = useful sub-category.) Sean On Oct 14, 2015, at 8:14 AM, Wiley, Glen wrote: > Section 4 reads as though it is specifying base32 encoding, as it is > written I don=A1=AFt see room for interpreting that as allowing for a = hash. > --=20 > Glen Wiley >=20 > Principal Engineer > Verisign, Inc. > (571) 230-7917 >=20 > A5E5 E373 3C75 5B3E 2E24 > 6A0F DC65 2354 9946 C63A >=20 >=20 >=20 >=20 > On 10/14/15, 11:10 AM, "Sean Leonard" wrote: >=20 >>=20 >> On Oct 14, 2015, at 6:59 AM, Wiley, Glen wrote: >>=20 >>> John, >>>=20 >>> I read the draft. >>>=20 >>> In the list of approaches you include literal, encoded, regex and >>> pointer >>> but I didn=A9=F6t see a place to refer to hashes (such as SHA224). = While >>> there >>> are different views on the use of hashes for local parts, would it = makes >>> sense to allow for the future use of a hash? >>=20 >> Probably makes sense conceptually as a sub-part of =A1=B0encoded=A1=B1 = (Section 4). >> Some encodings are reversible (e.g., base32); others are one-way = (e.g., >> CRC); yet others are one-way and also collision-resistant (e.g., >> SHA-224). The commonality that they share is that they preserve the >> byte-for-byte/case-sensitive matching of SMTP. >>=20 >> Sean >>=20 > _______________________________________________ > dane mailing list > dane@ietf.org > https://www.ietf.org/mailman/listinfo/dane --Apple-Mail=_3D22A3BD-E401-41D2-AF9E-0D9E5AEAF97C Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJ9jCCBK8w ggOXoAMCAQICEQDgI8sVEoNTia1hbnpUZ2shMA0GCSqGSIb3DQEBCwUAMG8xCzAJBgNVBAYTAlNF MRQwEgYDVQQKEwtBZGRUcnVzdCBBQjEmMCQGA1UECxMdQWRkVHJ1c3QgRXh0ZXJuYWwgVFRQIE5l dHdvcmsxIjAgBgNVBAMTGUFkZFRydXN0IEV4dGVybmFsIENBIFJvb3QwHhcNMTQxMjIyMDAwMDAw WhcNMjAwNTMwMTA0ODM4WjCBmzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hl c3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxQTA/BgNV BAMTOENPTU9ETyBTSEEtMjU2IENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWls IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibEN2npTGU5wUh28VqYGJre4SeCW 51Gr8fBaE0kVo7SMG2C8elFCp3mMpCLfF2FOkdV2IwoU00oCf7YdCYBupQQ92bq7Fv6hh6kuQ1JD FnyvMlDIpk9a6QjYz5MlnHuI6DBk5qT4VoD9KiQUMxeZrETlaYujRgZLwjPU6UCfBrCxrJNAubUI kzqcKlOjENs9IGE8VQOO2U52JQIhKfqjfHF2T+7hX4Hp+1SA28N7NVK3hN4iPSwwLTF/Wb1SN7Az aS1D6/rWpfGXd2dRjNnuJ+u8pQc4doykqTj/34z1A6xJvsr3c5k6DzKrnJU6Ez0ORjpXdGFQvsZA P8vk4p+iIQIDAQABo4IBFzCCARMwHwYDVR0jBBgwFoAUrb2YejS0Jvf6xCZU7wO94CTLVBowHQYD VR0OBBYEFJJha4LhoqCqT+xn8cKj97SAAMHsMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAG AQH/AgEAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDARBgNVHSAECjAIMAYGBFUdIAAw RAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC51c2VydHJ1c3QuY29tL0FkZFRydXN0RXh0ZXJu YWxDQVJvb3QuY3JsMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNl cnRydXN0LmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAGypurFXBOquIxdjtzVXzqmthK8AJECOZD8Vm am+x9bS1d14PAmEA330F/hKzpICAAPz7HVtqcgIKQbwFusFY1SbC6tVNhPv+gpjPWBvjImOcUvi7 BTarfVil3qs7Y+Xa1XPv7OD7e+Kj//BCI5zKto1NPuRLGAOyqC3U2LtCS5BphRDbpjc06HvgARCl nMo6x59PiDRuimXQGoq7qdzKyjbR9PzCZCk1r9axp3ER0gNDsY8+muyeMlP0dpLKhjQHuSzK5hxK 2JkNwYbikJL7WkJqIyEQ6WXH9dW7fuqMhSACYurROgcsWcWZM/I4ieW26RZ6H3kU9koQGib6fIr7 mzCCBT8wggQnoAMCAQICEBpCSs8n+cQbczyWKtueyecwDQYJKoZIhvcNAQELBQAwgZsxCzAJBgNV BAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAY BgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMUEwPwYDVQQDEzhDT01PRE8gU0hBLTI1NiBDbGllbnQg QXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xNTAyMDIwMDAwMDBaFw0xNjAy MDIyMzU5NTlaMCUxIzAhBgkqhkiG9w0BCQEWFGRlditpZXRmQHNlYW50ZWsuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4n20qAOzUtC1oNz5zgTny0JRBE1mJZszV2s6EurahKP vku7E+utnLhcaNahAWr2oZgeCK9uhEqijaC4qLZHnGt/+lnbsQtjmMJrcFCzhDZjDOJdYzmuS2cU vZqY7YwzCG6jSfs4gwNh+29MS6faY6ucncbnfO9rBB0xu5GIdI3BzsPNYnACNlBYU7w4X4GA0/Mw NAabNhDgxU2Tw1fl5w1Vt+6xRTXBk6V93LyVZN9wBIOpr2MuhoCJLHZrLirv/mbQE5ao4pkJLR/s yYhS1Ko4MSiJmR3ugKPkxEo6DZkuJrfck36hLmtMo3yuzi7hkXmDzPKkdLlNj+Xek1GWtwIDAQAB o4IB8jCCAe4wHwYDVR0jBBgwFoAUkmFrguGioKpP7GfxwqP3tIAAwewwHQYDVR0OBBYEFBpm5d7y 8PBT6NqnIVbfNK8hbpPGMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcG CCsGAQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwRgYDVR0gBD8wPTA7Bgwr BgEEAbIxAQIBAQEwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMw XQYDVR0fBFYwVDBSoFCgToZMaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPU0hBMjU2Q2xp ZW50QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBkAYIKwYBBQUHAQEEgYMwgYAw WAYIKwYBBQUHMAKGTGh0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1NIQTI1NkNsaWVudEF1 dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmNvbW9kb2NhLmNvbTAfBgNVHREEGDAWgRRkZXYraWV0ZkBzZWFudGVrLmNvbTANBgkqhkiG9w0B AQsFAAOCAQEAeIf/Nevvv10ssk0unrJb9FC8lJi41sSpq5AFYtmC8IXwUmNxL7L5uE3tGlNJVoTK ZvGeklYWDRCzq6zqte221TowXYmFO7G27rJZbQRjLzQoY63rMlFPFrjqQCEA6rDgo9DlFO9/81P7 ZC7xvZ52WH7e3p/yJNA4Av8E0eeavhC+l+cwtrw0wCp3gUs5xJT0koGVvli2wR18zecG3ib3ml+G nDDv2AH7OhcyhVoj6V9AeGQa2HqaVpOQVRUNPamqr3xeARKk5sUSeBvxlF+0FWhl+AnhqNdxmeEp qpgSvbcS1jbTsqApvgsBcDzjC09wV8mtBoMCtqlHvF3YY2z55jGCA8MwggO/AgEBMIGwMIGbMQsw CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3Jk MRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDFBMD8GA1UEAxM4Q09NT0RPIFNIQS0yNTYgQ2xp ZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEBpCSs8n+cQbczyWKtueyecw CQYFKw4DAhoFAKCCAecwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcN MTUxMDE0MTUzMzM4WjAjBgkqhkiG9w0BCQQxFgQUDAfnk0NH/lNd7wblqyCp65AAhiEwgcEGCSsG AQQBgjcQBDGBszCBsDCBmzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3Rl cjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxQTA/BgNVBAMT OENPTU9ETyBTSEEtMjU2IENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENB AhAaQkrPJ/nEG3M8lirbnsnnMIHDBgsqhkiG9w0BCRACCzGBs6CBsDCBmzELMAkGA1UEBhMCR0Ix GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR Q09NT0RPIENBIExpbWl0ZWQxQTA/BgNVBAMTOENPTU9ETyBTSEEtMjU2IENsaWVudCBBdXRoZW50 aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhAaQkrPJ/nEG3M8lirbnsnnMA0GCSqGSIb3DQEB AQUABIIBAD1iuld0Mx9GpIKkpcXfY1KvY2TsgVtCMyqOsKsWoFn5bxtaNN9hR5vowziyRZ/gLV5H +eow0JeTHkPIsICAoYXm8MSAea/4hVwdQYXFJQBpUqPaSpojvmm7heUx/LKKn23HJkzlX8SzaKlo kwmYPDmZrkcQ1SMnsGOUuqtFWOAj1uiFe1FyHJJHcS+e3uX1NCNgVoyhS/M/XLB3PTdpD0AYED1D CAaE1X9NdKrToc+m8948gcRvGqTwD7CI9DcJf/q23Ptcf1FHtgdsnJGdoEH3M+tJa+8b2p2TVokG 7D/qp77reJ6YQW3SCVniNnhEGgg4U/nOk/jeRq/lhh2IAeYAAAAAAAA= --Apple-Mail=_3D22A3BD-E401-41D2-AF9E-0D9E5AEAF97C-- From nobody Wed Oct 14 16:51:04 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E69AF1A8AEF; Wed, 14 Oct 2015 16:50:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.912 X-Spam-Level: X-Spam-Status: No, score=-106.912 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c4NFFZAx0rOA; Wed, 14 Oct 2015 16:50:52 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) by ietfa.amsl.com (Postfix) with ESMTP id 96CCD1AC3B5; Wed, 14 Oct 2015 16:50:50 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 44F40187E04; Wed, 14 Oct 2015 16:50:37 -0700 (PDT) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org X-PHP-Originating-Script: 1005:ams_util_lib.php From: rfc-editor@rfc-editor.org Message-Id: <20151014235037.44F40187E04@rfc-editor.org> Date: Wed, 14 Oct 2015 16:50:37 -0700 (PDT) Archived-At: Cc: drafts-update-ref@iana.org, dane@ietf.org, rfc-editor@rfc-editor.org Subject: [dane] RFC 7671 on The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 23:50:56 -0000 A new Request for Comments is now available in online RFC libraries. RFC 7671 Title: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance Author: V. Dukhovni, W. Hardaker Status: Standards Track Stream: IETF Date: October 2015 Mailbox: ietf-dane@dukhovni.org, ietf@hardakers.net Pages: 33 Characters: 80496 Updates: RFC6698 I-D Tag: draft-ietf-dane-ops-16.txt URL: https://www.rfc-editor.org/info/rfc7671 DOI: http://dx.doi.org/10.17487/RFC7671 This document clarifies and updates the DNS-Based Authentication of Named Entities (DANE) TLSA specification (RFC 6698), based on subsequent implementation experience. It also contains guidance for implementers, operators, and protocol developers who want to use DANE records. This document is a product of the DNS-based Authentication of Named Entities Working Group of the IETF. This is now a Proposed Standard. STANDARDS TRACK: This document specifies an Internet Standards Track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the Official Internet Protocol Standards (https://www.rfc-editor.org/standards) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see https://www.ietf.org/mailman/listinfo/ietf-announce https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see https://www.rfc-editor.org/search For downloading RFCs, see https://www.rfc-editor.org/rfc.html Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From nobody Wed Oct 14 16:51:28 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DEADD1A9043; Wed, 14 Oct 2015 16:51:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.912 X-Spam-Level: X-Spam-Status: No, score=-101.912 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ECRnZGSSi7St; Wed, 14 Oct 2015 16:51:25 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1900:3001:11::31]) by ietfa.amsl.com (Postfix) with ESMTP id 3F1051A90FD; Wed, 14 Oct 2015 16:51:13 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id DEAA81832B6; Wed, 14 Oct 2015 16:50:59 -0700 (PDT) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org X-PHP-Originating-Script: 1005:ams_util_lib.php From: rfc-editor@rfc-editor.org Message-Id: <20151014235059.DEAA81832B6@rfc-editor.org> Date: Wed, 14 Oct 2015 16:50:59 -0700 (PDT) Archived-At: Cc: dane@ietf.org, rfc-editor@rfc-editor.org Subject: [dane] RFC 7672 on SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 23:51:27 -0000 A new Request for Comments is now available in online RFC libraries. RFC 7672 Title: SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Author: V. Dukhovni, W. Hardaker Status: Standards Track Stream: IETF Date: October 2015 Mailbox: ietf-dane@dukhovni.org, ietf@hardakers.net Pages: 34 Characters: 87943 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-dane-smtp-with-dane-19.txt URL: https://www.rfc-editor.org/info/rfc7672 DOI: http://dx.doi.org/10.17487/RFC7672 This memo describes a downgrade-resistant protocol for SMTP transport security between Message Transfer Agents (MTAs), based on the DNS-Based Authentication of Named Entities (DANE) TLSA DNS record. Adoption of this protocol enables an incremental transition of the Internet email backbone to one using encrypted and authenticated Transport Layer Security (TLS). This document is a product of the DNS-based Authentication of Named Entities Working Group of the IETF. This is now a Proposed Standard. STANDARDS TRACK: This document specifies an Internet Standards Track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the Official Internet Protocol Standards (https://www.rfc-editor.org/standards) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see https://www.ietf.org/mailman/listinfo/ietf-announce https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see https://www.rfc-editor.org/search For downloading RFCs, see https://www.rfc-editor.org/rfc.html Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From nobody Wed Oct 14 16:51:49 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E833B1A8AF4; Wed, 14 Oct 2015 16:51:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.912 X-Spam-Level: X-Spam-Status: No, score=-106.912 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LZLSgUW4dY4m; Wed, 14 Oct 2015 16:51:40 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) by ietfa.amsl.com (Postfix) with ESMTP id 53FC21B2CB1; Wed, 14 Oct 2015 16:51:34 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 01484187E28; Wed, 14 Oct 2015 16:51:21 -0700 (PDT) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org X-PHP-Originating-Script: 1005:ams_util_lib.php From: rfc-editor@rfc-editor.org Message-Id: <20151014235121.01484187E28@rfc-editor.org> Date: Wed, 14 Oct 2015 16:51:21 -0700 (PDT) Archived-At: Cc: dane@ietf.org, rfc-editor@rfc-editor.org Subject: [dane] RFC 7673 on Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 23:51:47 -0000 A new Request for Comments is now available in online RFC libraries. RFC 7673 Title: Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records Author: T. Finch, M. Miller, P. Saint-Andre Status: Standards Track Stream: IETF Date: October 2015 Mailbox: dot@dotat.at, mamille2@cisco.com, peter@andyet.com Pages: 16 Characters: 34193 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-dane-srv-14.txt URL: https://www.rfc-editor.org/info/rfc7673 DOI: http://dx.doi.org/10.17487/RFC7673 The DNS-Based Authentication of Named Entities (DANE) specification (RFC 6698) describes how to use TLSA resource records secured by DNSSEC (RFC 4033) to associate a server's connection endpoint with its Transport Layer Security (TLS) certificate (thus enabling administrators of domain names to specify the keys used in that domain's TLS servers). However, application protocols that use SRV records (RFC 2782) to indirectly name the target server connection endpoints for a service domain name cannot apply the rules from RFC 6698. Therefore, this document provides guidelines that enable such protocols to locate and use TLSA records. This document is a product of the DNS-based Authentication of Named Entities Working Group of the IETF. This is now a Proposed Standard. STANDARDS TRACK: This document specifies an Internet Standards Track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the Official Internet Protocol Standards (https://www.rfc-editor.org/standards) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see https://www.ietf.org/mailman/listinfo/ietf-announce https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see https://www.rfc-editor.org/search For downloading RFCs, see https://www.rfc-editor.org/rfc.html Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From nobody Mon Oct 19 16:08:23 2015 Return-Path: X-Original-To: dane@ietf.org Delivered-To: dane@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 613F91B2E98; Mon, 19 Oct 2015 16:08:20 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.6.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151019230820.24757.36578.idtracker@ietfa.amsl.com> Date: Mon, 19 Oct 2015 16:08:20 -0700 Archived-At: Cc: dane@ietf.org Subject: [dane] I-D Action: draft-ietf-dane-openpgpkey-06.txt X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 23:08:20 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DNS-based Authentication of Named Entities Working Group of the IETF. Title : Using DANE to Associate OpenPGP public keys with email addresses Author : Paul Wouters Filename : draft-ietf-dane-openpgpkey-06.txt Pages : 18 Date : 2015-10-19 Abstract: OpenPGP is a message format for email (and file) encryption that lacks a standardized lookup mechanism to securely obtain OpenPGP public keys. This document specifies a method for publishing and locating OpenPGP public keys in DNS for a specific email address using a new OPENPGPKEY DNS Resource Record. Security is provided via Secure DNS, however the OPENPGPKEY record is not a replacement for verification of authenticity via the "Web of Trust" or manual verification. The OPENPGPKEY record can be used to encrypt an email that would otherwise have to be send unencrypted. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dane-openpgpkey/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-dane-openpgpkey-06 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dane-openpgpkey-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sat Oct 31 16:34:44 2015 Return-Path: X-Original-To: dane@ietfa.amsl.com Delivered-To: dane@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F7B71B43E0 for ; Sat, 31 Oct 2015 16:34:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u37z4dHUZHNZ for ; Sat, 31 Oct 2015 16:34:41 -0700 (PDT) Received: from mail-qg0-x233.google.com (mail-qg0-x233.google.com [IPv6:2607:f8b0:400d:c04::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48C931B43DD for ; Sat, 31 Oct 2015 16:34:41 -0700 (PDT) Received: by qgbb65 with SMTP id b65so89779890qgb.2 for ; Sat, 31 Oct 2015 16:34:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=sp5tx1r9JVO7XcGEWc38D38c1CKeiUz22OS9KntJVs8=; b=zLCPN58WdFWZBSWNhee2n/xJB3g379rrEWVorIbNDou24zaSjw8nFQVGR3b9qonvWO 3qwXGYl59dQTxSx4KQEZdEGfuVn0QckLxYx6tbVvpdTvVqgRkTILRFFPz6tSGjqWoIQ7 5rlP6IeJ+LVL2yMiibhDJm6nMlkpwyj/dr6uZblUCkIFzp7emCQzKVYXhRHEUeMX3Dep uUuGgwZuBTzNEZaOcLolnCgjf2q/ldP6epBS5gxZTpmfh6d4z1g84F3nmZdSzZb9Dd8c XMs9CSb0QrgHFIqsjMAqTKp3HSsTiyuxVVLBhEzuaIIwT9cKoKWRiO0JtxRmWBDwDXgk e6mA== MIME-Version: 1.0 X-Received: by 10.140.148.74 with SMTP id 71mr21239074qhu.26.1446334480471; Sat, 31 Oct 2015 16:34:40 -0700 (PDT) Received: by 10.140.91.36 with HTTP; Sat, 31 Oct 2015 16:34:40 -0700 (PDT) Date: Sun, 1 Nov 2015 08:34:40 +0900 Message-ID: From: Shumon Huque To: "" Content-Type: multipart/alternative; boundary=001a11355ea0ef61ca05236efcab Archived-At: Subject: [dane] New version of tls-dnssec-chain draft (-02) X-BeenThere: dane@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DNS-based Authentication of Named Entities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 31 Oct 2015 23:34:43 -0000 --001a11355ea0ef61ca05236efcab Content-Type: text/plain; charset=UTF-8 DANE folks, We've recently updated the "TLS extension for DANE and DNSSEC authentication chain" draft: https://tools.ietf.org/html/draft-shore-tls-dnssec-chain-extension-02 This work is proposed to happen in TLS, but we hope to get plenty of feedback from DNS/DANE folks. Here's a quick summary of the major changes in -02: * Updated reference newly published DANE RFCs * An update to the chain data format. It now uses native DNS wire format resource records with no TLS presentation language wrapping. This makes it easier for implementations to work with existing DNS libraries to produce and consume the data. But we still describe the data format in sufficient detail that implementers not using DNS libraries can work with it. * Description of how CNAME and DNAMEs are accommodated * Reference to use of the X.509v3 TLS Feature Extension to mandate use of the extension by a server certificate. * Reference to the EDNS chain query option draft as a future easy way to obtain/produce the chain data. * Removed discussion of possible client caching of chain data components (could be difficult to get right and/or a premature optimization). -- Shumon Huque --001a11355ea0ef61ca05236efcab Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
DANE folks,

We've recent= ly updated the "TLS extension for DANE and DNSSEC
authentica= tion chain" draft:

=C2=A0 =C2=A0https:= //tools.ietf.org/html/draft-shore-tls-dnssec-chain-extension-02

This work is proposed to happen in TLS, but we hope t= o get plenty
of feedback from DNS/DANE folks. Here's a quick = summary of the major
changes in -02:

* U= pdated reference newly published DANE RFCs

* An up= date to the chain data format. It now uses native DNS wire
=C2=A0= format resource records with no TLS presentation language wrapping.
<= div>=C2=A0 This makes it easier for implementations to work with existing
=C2=A0 DNS libraries to produce and consume the data. But we still= describe
=C2=A0 the data format in sufficient detail that implem= enters not using DNS
=C2=A0 libraries can work with it.

* Description of how CNAME and DNAMEs are accommodated

* Reference to use of the X.509v3 TLS Feature Extensio= n to mandate=C2=A0
=C2=A0 use of the extension by a server certif= icate.

* Reference to the EDNS chain query option = draft as a future easy
=C2=A0 way to obtain/produce the chain dat= a.

* Removed discussion of possible client caching= of chain data=C2=A0
=C2=A0 components (could be difficult to get= right and/or a premature=C2=A0
=C2=A0 optimization).
<= br>
--
Shumon Huque

--001a11355ea0ef61ca05236efcab--