From nobody Sat Mar 12 09:21:57 2016 Return-Path: X-Original-To: ldapext@ietfa.amsl.com Delivered-To: ldapext@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D2A912D76A for ; Sat, 12 Mar 2016 09:21:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.602 X-Spam-Level: X-Spam-Status: No, score=-2.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ICj84Ww_Bk7l for ; Sat, 12 Mar 2016 09:21:54 -0800 (PST) Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61AA112D5C8 for ; Sat, 12 Mar 2016 09:21:53 -0800 (PST) Received: from [192.168.123.7] (unknown [75.83.2.34]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 7A5BB50A84 for ; Sat, 12 Mar 2016 12:21:52 -0500 (EST) References: <20160312172032.21235.1985.idtracker@ietfa.amsl.com> To: ldapext@ietf.org From: Sean Leonard X-Forwarded-Message-Id: <20160312172032.21235.1985.idtracker@ietfa.amsl.com> Message-ID: <56E45093.1090104@seantek.com> Date: Sat, 12 Mar 2016 09:23:31 -0800 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <20160312172032.21235.1985.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: [ldapext] New Version Notification for draft-seantek-ldap-pkcs9-04.txt X-BeenThere: ldapext@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: LDAP Extension Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Mar 2016 17:21:56 -0000 This is a friendly reminder that the LDAP PKCS #9 registration Internet-Draft is still a live issue. Sean -------- Forwarded Message -------- Subject: New Version Notification for draft-seantek-ldap-pkcs9-04.txt Date: Sat, 12 Mar 2016 09:20:32 -0800 From: internet-drafts@ietf.org A new version of I-D, draft-seantek-ldap-pkcs9-04.txt has been successfully submitted by Sean Leonard and posted to the IETF repository. Name: draft-seantek-ldap-pkcs9 Revision: 04 Title: Lightweight Directory Access Protocol (LDAP) Registrations for PKCS #9 Document date: 2016-03-12 Group: Individual Submission Pages: 7 URL: https://www.ietf.org/internet-drafts/draft-seantek-ldap-pkcs9-04.txt Status: https://datatracker.ietf.org/doc/draft-seantek-ldap-pkcs9/ Htmlized: https://tools.ietf.org/html/draft-seantek-ldap-pkcs9-04 Diff: https://www.ietf.org/rfcdiff?url2=draft-seantek-ldap-pkcs9-04 Abstract: PKCS #9 includes several useful definitions that are not yet reflected in the LDAP IANA registry. This document adds those definitions to the IANA registry. From nobody Tue Mar 15 12:11:47 2016 Return-Path: X-Original-To: ldapext@ietfa.amsl.com Delivered-To: ldapext@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D68AB12D6DF for ; Tue, 15 Mar 2016 12:11:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.35 X-Spam-Level: X-Spam-Status: No, score=-2.35 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tl-ASNRsaIDl for ; Tue, 15 Mar 2016 12:11:38 -0700 (PDT) Received: from mail-ig0-x234.google.com (mail-ig0-x234.google.com [IPv6:2607:f8b0:4001:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A192412D6DE for ; Tue, 15 Mar 2016 12:11:38 -0700 (PDT) Received: by mail-ig0-x234.google.com with SMTP id mh10so23647678igb.0 for ; Tue, 15 Mar 2016 12:11:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc; bh=7e52TPxcz5GMZJ78G1jc0E45Bun/RnmockgAqOt9wBw=; b=eAANb/s4y6aS+TFxLVnvvpylnOlXdVxyzFVrAd0bMZrqwfvpTV8Bl5mkxWwFhT0slD F9Hug/lJtQE2JNbgt6mQots0Wz2mU8G1TatE5VOK97BUcb0TDWBlleE5yC5L+1GHMc6T oolpcJRrlJzQ5EXzhhEXqGmty9IPv/QzbQMYitCUFredB1zij8uggaX6uCeoMKEVY0A6 AWM6FWfUlKKTNhy9gUYJCoEeI44v6KIf5Zg4yaew5VeRfxbq2hn0/cxu+lvODO3tpB7p +xQpJM7OoysYR3E5RKgpZXM6tb6vKYoS/eau/JvKuhsY+gt/30tMUDvNJDYixo8Mldpy NdGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:date :message-id:subject:from:to:cc; bh=7e52TPxcz5GMZJ78G1jc0E45Bun/RnmockgAqOt9wBw=; b=f1qtYEf2/qZO3zwJty/2PSA9SsNw/Fhbs8uTlUuOr+SP1yrTKa0DlZkCBWkDr7WCAV oJ848ADE0UNt/mGi//n8Z2y6hdrxfEz5jRLwVGA3KsSMYqyBE7ivH55AndcnGFJthaWX hFNyWp78NyeN58pqM7XViJXlqxt3eKCHtWZ5YzYTs4k+lwQJQP/TtfT6l5JsR+0IVOXg krgQKooCS4+vDJ0C/IGlqzcEvQwWFOjYbV8dAnrv3E8cKkvZhxh/jvrQL24M/z0/7xYP 2HKUYrAu8xK9/qjOhg/lC0P4CZxrKyzjwuMcP25mf+fxAFS2CcQJje70R6FiYLuURc79 GP7Q== X-Gm-Message-State: AD7BkJJx5P24LmfgW1mF72CxAX78lUHwmtpZuix3neptmuvS0gJCeKlFQjEGiDyWRDqRjBnr0RfDO32Ru6FF+g== MIME-Version: 1.0 X-Received: by 10.50.112.10 with SMTP id im10mr280323igb.93.1458069098012; Tue, 15 Mar 2016 12:11:38 -0700 (PDT) Sender: barryleiba.mailing.lists@gmail.com Received: by 10.107.15.139 with HTTP; Tue, 15 Mar 2016 12:11:37 -0700 (PDT) In-Reply-To: <56E45093.1090104@seantek.com> References: <20160312172032.21235.1985.idtracker@ietfa.amsl.com> <56E45093.1090104@seantek.com> Date: Tue, 15 Mar 2016 19:11:37 +0000 X-Google-Sender-Auth: PePvQ4_klcFjpvpCTGFG1296j64 Message-ID: From: Barry Leiba To: Sean Leonard Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: ldapext Subject: Re: [ldapext] New Version Notification for draft-seantek-ldap-pkcs9-04.txt X-BeenThere: ldapext@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: LDAP Extension Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Mar 2016 19:11:46 -0000 Yes, I had thought this might wait for a resurrection of an ldapext working group, but that seems to have stalled. I'm happy to AD-sponsor this to get the registration done, but I'd like some review and comment from the LDAP folks, and this is the place for that. Will some of you please take a look at Sean's draft and comment? Thanks, Barry, ART AD for another few weeks On Sat, Mar 12, 2016 at 5:23 PM, Sean Leonard wrote: > This is a friendly reminder that the LDAP PKCS #9 registration > Internet-Draft is still a live issue. > > Sean > > -------- Forwarded Message -------- > Subject: New Version Notification for draft-seantek-ldap-pkcs9-04.txt > Date: Sat, 12 Mar 2016 09:20:32 -0800 > From: internet-drafts@ietf.org > > > > A new version of I-D, draft-seantek-ldap-pkcs9-04.txt > has been successfully submitted by Sean Leonard and posted to the > IETF repository. > > Name: draft-seantek-ldap-pkcs9 > Revision: 04 > Title: Lightweight Directory Access Protocol (LDAP) Registrations > for PKCS #9 > Document date: 2016-03-12 > Group: Individual Submission > Pages: 7 > URL: > https://www.ietf.org/internet-drafts/draft-seantek-ldap-pkcs9-04.txt > Status: https://datatracker.ietf.org/doc/draft-seantek-ldap-pkcs9/ > Htmlized: https://tools.ietf.org/html/draft-seantek-ldap-pkcs9-04 > Diff: > https://www.ietf.org/rfcdiff?url2=draft-seantek-ldap-pkcs9-04 > > Abstract: > PKCS #9 includes several useful definitions that are not yet > reflected in the LDAP IANA registry. This document adds those > definitions to the IANA registry. > > _______________________________________________ > Ldapext mailing list > Ldapext@ietf.org > https://www.ietf.org/mailman/listinfo/ldapext From nobody Wed Mar 16 06:34:19 2016 Return-Path: X-Original-To: ldapext@ietfa.amsl.com Delivered-To: ldapext@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB5DE12D96F for ; Wed, 16 Mar 2016 06:34:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.923 X-Spam-Level: X-Spam-Status: No, score=-6.923 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j_uGqPog3PMc for ; Wed, 16 Mar 2016 06:34:16 -0700 (PDT) Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4321D12D96D for ; Wed, 16 Mar 2016 06:34:16 -0700 (PDT) Received: from int-mx09.intmail.prod.int.phx2.redhat.com (int-mx09.intmail.prod.int.phx2.redhat.com [10.5.11.22]) by mx1.redhat.com (Postfix) with ESMTPS id E817AC326D; Wed, 16 Mar 2016 13:34:08 +0000 (UTC) Received: from ovpn-113-133.phx2.redhat.com (ovpn-113-133.phx2.redhat.com [10.3.113.133]) by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id u2GDY7jN004851 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Wed, 16 Mar 2016 09:34:08 -0400 Message-ID: <1458135247.26218.36.camel@redhat.com> From: Simo Sorce To: Barry Leiba Date: Wed, 16 Mar 2016 09:34:07 -0400 In-Reply-To: References: <20160312172032.21235.1985.idtracker@ietfa.amsl.com> <56E45093.1090104@seantek.com> Organization: Red Hat, Inc. Content-Type: text/plain; charset="UTF-8" Mime-Version: 1.0 Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.68 on 10.5.11.22 Archived-At: Cc: ldapext Subject: Re: [ldapext] New Version Notification for draft-seantek-ldap-pkcs9-04.txt X-BeenThere: ldapext@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: LDAP Extension Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Mar 2016 13:34:18 -0000 On Tue, 2016-03-15 at 19:11 +0000, Barry Leiba wrote: > Yes, I had thought this might wait for a resurrection of an ldapext > working group, but that seems to have stalled. I'm happy to > AD-sponsor this to get the registration done, but I'd like some review > and comment from the LDAP folks, and this is the place for that. Will > some of you please take a look at Sean's draft and comment? I haven't done proper full review, but I thought aliases was frowned upon these days and I see quite a few one(few) char aliases in there, why do we need such aliases ? Simo. > Thanks, > Barry, ART AD for another few weeks > > On Sat, Mar 12, 2016 at 5:23 PM, Sean Leonard wrote: > > This is a friendly reminder that the LDAP PKCS #9 registration > > Internet-Draft is still a live issue. > > > > Sean > > > > -------- Forwarded Message -------- > > Subject: New Version Notification for draft-seantek-ldap-pkcs9-04.txt > > Date: Sat, 12 Mar 2016 09:20:32 -0800 > > From: internet-drafts@ietf.org > > > > > > > > A new version of I-D, draft-seantek-ldap-pkcs9-04.txt > > has been successfully submitted by Sean Leonard and posted to the > > IETF repository. > > > > Name: draft-seantek-ldap-pkcs9 > > Revision: 04 > > Title: Lightweight Directory Access Protocol (LDAP) Registrations > > for PKCS #9 > > Document date: 2016-03-12 > > Group: Individual Submission > > Pages: 7 > > URL: > > https://www.ietf.org/internet-drafts/draft-seantek-ldap-pkcs9-04.txt > > Status: https://datatracker.ietf.org/doc/draft-seantek-ldap-pkcs9/ > > Htmlized: https://tools.ietf.org/html/draft-seantek-ldap-pkcs9-04 > > Diff: > > https://www.ietf.org/rfcdiff?url2=draft-seantek-ldap-pkcs9-04 > > > > Abstract: > > PKCS #9 includes several useful definitions that are not yet > > reflected in the LDAP IANA registry. This document adds those > > definitions to the IANA registry. > > > > _______________________________________________ > > Ldapext mailing list > > Ldapext@ietf.org > > https://www.ietf.org/mailman/listinfo/ldapext > > _______________________________________________ > Ldapext mailing list > Ldapext@ietf.org > https://www.ietf.org/mailman/listinfo/ldapext -- Simo Sorce * Red Hat, Inc * New York From nobody Wed Mar 16 07:12:22 2016 Return-Path: X-Original-To: ldapext@ietfa.amsl.com Delivered-To: ldapext@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA84C12D56F for ; Wed, 16 Mar 2016 07:12:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Uz2JQxo9LTH for ; Wed, 16 Mar 2016 07:12:18 -0700 (PDT) Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97B1312D509 for ; Wed, 16 Mar 2016 07:12:18 -0700 (PDT) Received: from [192.168.123.7] (unknown [75.83.2.34]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id CA35550A88; Wed, 16 Mar 2016 10:12:16 -0400 (EDT) To: Simo Sorce , Barry Leiba References: <20160312172032.21235.1985.idtracker@ietfa.amsl.com> <56E45093.1090104@seantek.com> <1458135247.26218.36.camel@redhat.com> From: Sean Leonard Message-ID: <56E96A24.3000701@seantek.com> Date: Wed, 16 Mar 2016 07:13:56 -0700 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <1458135247.26218.36.camel@redhat.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: ldapext Subject: Re: [ldapext] New Version Notification for draft-seantek-ldap-pkcs9-04.txt X-BeenThere: ldapext@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: LDAP Extension Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Mar 2016 14:12:20 -0000 On 3/16/2016 6:34 AM, Simo Sorce wrote: > On Tue, 2016-03-15 at 19:11 +0000, Barry Leiba wrote: >> Yes, I had thought this might wait for a resurrection of an ldapext >> working group, but that seems to have stalled. I'm happy to >> AD-sponsor this to get the registration done, but I'd like some review >> and comment from the LDAP folks, and this is the place for that. Will >> some of you please take a look at Sean's draft and comment? > I haven't done proper full review, but I thought aliases was frowned > upon these days and I see quite a few one(few) char aliases in there, > why do we need such aliases ? This draft documents the existing practice of security implementations, including MS CryptoAPI and OpenSSL. This should be evaluated through the lens of "backwards or long-term systems compatibility", not the lens of "these days" (in the LDAP community). PKIX enabled systems (read: OpenSSL) use LDAP strings (RFC 4514) to serialize and de-serialize the Distinguished Names in certificates. Parity is required and the only registry is the LDAP Parameters / Object Identifier Descriptors registry. These strings have migrated to cross-systems protocols. See, e.g., draft-martin-authentication-results-tls. Using "e" for emailAddress = 1.2.840.113549.1.9.1, for example, is simply an historical fact. This reminds me, I should probably include a note about "gn" (givenName) in a future draft. Best regards, Sean > > Simo. > >> Thanks, >> Barry, ART AD for another few weeks >> >> On Sat, Mar 12, 2016 at 5:23 PM, Sean Leonard wrote: >>> This is a friendly reminder that the LDAP PKCS #9 registration >>> Internet-Draft is still a live issue. >>> >>> Sean >>> >>> -------- Forwarded Message -------- >>> Subject: New Version Notification for draft-seantek-ldap-pkcs9-04.txt >>> Date: Sat, 12 Mar 2016 09:20:32 -0800 >>> From: internet-drafts@ietf.org >>> >>> >>> >>> A new version of I-D, draft-seantek-ldap-pkcs9-04.txt >>> has been successfully submitted by Sean Leonard and posted to the >>> IETF repository. >>> >>> Name: draft-seantek-ldap-pkcs9 >>> Revision: 04 >>> Title: Lightweight Directory Access Protocol (LDAP) Registrations >>> for PKCS #9 >>> Document date: 2016-03-12 >>> Group: Individual Submission >>> Pages: 7 >>> URL: >>> https://www.ietf.org/internet-drafts/draft-seantek-ldap-pkcs9-04.txt >>> Status: https://datatracker.ietf.org/doc/draft-seantek-ldap-pkcs9/ >>> Htmlized: https://tools.ietf.org/html/draft-seantek-ldap-pkcs9-04 >>> Diff: >>> https://www.ietf.org/rfcdiff?url2=draft-seantek-ldap-pkcs9-04 >>> >>> Abstract: >>> PKCS #9 includes several useful definitions that are not yet >>> reflected in the LDAP IANA registry. This document adds those >>> definitions to the IANA registry. >>> >>> _______________________________________________ >>> Ldapext mailing list >>> Ldapext@ietf.org >>> https://www.ietf.org/mailman/listinfo/ldapext >> _______________________________________________ >> Ldapext mailing list >> Ldapext@ietf.org >> https://www.ietf.org/mailman/listinfo/ldapext >