From tgindin@us.ibm.com Tue Oct 8 06:12:59 2013 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F73121E8098 for ; Tue, 8 Oct 2013 06:12:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cZ6OiDNMVzKs for ; Tue, 8 Oct 2013 06:12:54 -0700 (PDT) Received: from e8.ny.us.ibm.com (e8.ny.us.ibm.com [32.97.182.138]) by ietfa.amsl.com (Postfix) with ESMTP id CFC9621E8091 for ; Tue, 8 Oct 2013 06:12:53 -0700 (PDT) Received: from /spool/local by e8.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Tue, 8 Oct 2013 09:12:52 -0400 Received: from d01dlp03.pok.ibm.com (9.56.250.168) by e8.ny.us.ibm.com (192.168.1.108) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted; Tue, 8 Oct 2013 09:12:51 -0400 Received: from b01cxnp22034.gho.pok.ibm.com (b01cxnp22034.gho.pok.ibm.com [9.57.198.24]) by d01dlp03.pok.ibm.com (Postfix) with ESMTP id 7853FC90045 for ; Tue, 8 Oct 2013 09:12:48 -0400 (EDT) Received: from d01av05.pok.ibm.com (d01av05.pok.ibm.com [9.56.224.195]) by b01cxnp22034.gho.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r98DCnMr57671842 for ; Tue, 8 Oct 2013 13:12:49 GMT Received: from d01av05.pok.ibm.com (loopback [127.0.0.1]) by d01av05.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id r98DCmgs014801 for ; Tue, 8 Oct 2013 09:12:48 -0400 Received: from d01ml062.pok.ibm.com (d01ml062.pok.ibm.com [9.63.10.95]) by d01av05.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id r98DCmYu014798; Tue, 8 Oct 2013 09:12:48 -0400 In-Reply-To: <20130918190246.4B88EB1E00B@rfc-editor.org> References: <20130918190246.4B88EB1E00B@rfc-editor.org> To: RFC Errata System MIME-Version: 1.0 X-KeepSent: CC657676:F161549C-85257BFD:006DB4FC; type=4; name=$KeepSent X-Mailer: Lotus Notes Release 8.5.3 September 15, 2011 From: Tom Gindin Message-ID: Date: Tue, 8 Oct 2013 09:12:46 -0400 X-MIMETrack: Serialize by Router on D01ML062/01/M/IBM(Release 8.5.3FP2 ZX853FP2HF5|February, 2013) at 10/08/2013 09:12:48, Serialize complete at 10/08/2013 09:12:48 Content-Type: multipart/alternative; boundary="=_alternative 0048944B85257BFE_=" X-TM-AS-MML: No X-Content-Scanned: Fidelis XPS MAILER x-cbid: 13100813-0320-0000-0000-00000147216E Cc: stefan@aaa-sec.com, leonardocl@tcu.gov.br, pkix@ietf.org Subject: Re: [pkix] [Technical Errata Reported] RFC5755 (3731) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Oct 2013 13:12:59 -0000 This is a multipart message in MIME format. --=_alternative 0048944B85257BFE_= Content-Type: text/plain; charset="US-ASCII" The note is too conclusory, since DigestedData and AuthenticatedData also use encapsulatedContentInfo. However, the correction seems right. Tom Gindin From: RFC Errata System To: stephen.farrell@cs.tcd.ie, housley@vigilsec.com, turners@ieca.com, stephen.farrell@cs.tcd.ie, turners@ieca.com, kent@bbn.com, stefan@aaa-sec.com, Cc: pkix@ietf.org, leonardocl@tcu.gov.br, rfc-editor@rfc-editor.org Date: 09/30/2013 02:35 PM Subject: [pkix] [Technical Errata Reported] RFC5755 (3731) Sent by: pkix-bounces@ietf.org The following errata report has been submitted for RFC5755, "An Internet Attribute Certificate Profile for Authorization". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata_search.php?rfc=5755&eid=3731 -------------------------------------- Type: Technical Reported by: Leonardo Cotta de Almeida Section: 7.1 Original Text ------------- Within EnvelopedData, the encapsulatedContentInfo identifies the content type carried within the ciphertext. In this case, the contentType field of encapsulatedContentInfo MUST contain id-ct- attrCertEncAttrs, which has the following value: Corrected Text -------------- Within EnvelopedData, the encryptedContentInfo identifies the content type carried within the ciphertext. In this case, the contentType field of encryptedContentInfo MUST contain id-ct- attrCertEncAttrs, which has the following value: Notes ----- The EnvelopedData structure has no "EncapsulatedContentInfo". It has a "EncryptedContentInfo": EnvelopedData ::= SEQUENCE { version CMSVersion, originatorInfo [0] IMPLICIT OriginatorInfo OPTIONAL, recipientInfos RecipientInfos, encryptedContentInfo EncryptedContentInfo, unprotectedAttrs [1] IMPLICIT UnprotectedAttributes OPTIONAL } CMS objects that carry a "EncapsulatedContentInfo" are of type "SignedData": SignedData ::= SEQUENCE { version CMSVersion, digestAlgorithms DigestAlgorithmIdentifiers, encapContentInfo EncapsulatedContentInfo, certificates [0] IMPLICIT CertificateSet OPTIONAL, crls [1] IMPLICIT RevocationInfoChoices OPTIONAL, signerInfos SignerInfos } Source: RFC 5652 (unchanged at least since RFC 3852). Instructions: ------------- This errata is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party (IESG) can log in to change the status and edit the report, if necessary. -------------------------------------- RFC5755 (draft-ietf-pkix-3281update-05) -------------------------------------- Title : An Internet Attribute Certificate Profile for Authorization Publication Date : January 2010 Author(s) : S. Farrell, R. Housley, S. Turner Category : PROPOSED STANDARD Source : Public-Key Infrastructure (X.509) Area : Security Stream : IETF Verifying Party : IESG _______________________________________________ pkix mailing list pkix@ietf.org https://www.ietf.org/mailman/listinfo/pkix --=_alternative 0048944B85257BFE_= Content-Type: text/html; charset="US-ASCII"          The note is too conclusory, since DigestedData and AuthenticatedData also use encapsulatedContentInfo.  However, the correction seems right.

Tom Gindin



From:        RFC Errata System <rfc-editor@rfc-editor.org>
To:        stephen.farrell@cs.tcd.ie, housley@vigilsec.com, turners@ieca.com, stephen.farrell@cs.tcd.ie, turners@ieca.com, kent@bbn.com, stefan@aaa-sec.com,
Cc:        pkix@ietf.org, leonardocl@tcu.gov.br, rfc-editor@rfc-editor.org
Date:        09/30/2013 02:35 PM
Subject:        [pkix] [Technical Errata Reported] RFC5755 (3731)
Sent by:        pkix-bounces@ietf.org



The following errata report has been submitted for RFC5755,
"An Internet Attribute Certificate Profile for Authorization".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=5755&eid=3731

--------------------------------------
Type: Technical
Reported by: Leonardo Cotta de Almeida <leonardocl@tcu.gov.br>

Section: 7.1

Original Text
-------------
  Within EnvelopedData, the encapsulatedContentInfo identifies the
  content type carried within the ciphertext.  In this case, the
  contentType field of encapsulatedContentInfo MUST contain id-ct-
  attrCertEncAttrs, which has the following value:

Corrected Text
--------------
  Within EnvelopedData, the encryptedContentInfo identifies the
  content type carried within the ciphertext.  In this case, the
  contentType field of encryptedContentInfo MUST contain id-ct-
  attrCertEncAttrs, which has the following value:

Notes
-----
The EnvelopedData structure has no "EncapsulatedContentInfo". It has a "EncryptedContentInfo":

     EnvelopedData ::= SEQUENCE {
       version CMSVersion,
       originatorInfo [0] IMPLICIT OriginatorInfo OPTIONAL,
       recipientInfos RecipientInfos,
       encryptedContentInfo EncryptedContentInfo,
       unprotectedAttrs [1] IMPLICIT UnprotectedAttributes OPTIONAL }

CMS objects that carry a "EncapsulatedContentInfo" are of type "SignedData":

     SignedData ::= SEQUENCE {
       version CMSVersion,
       digestAlgorithms DigestAlgorithmIdentifiers,
       encapContentInfo EncapsulatedContentInfo,
       certificates [0] IMPLICIT CertificateSet OPTIONAL,
       crls [1] IMPLICIT RevocationInfoChoices OPTIONAL,
       signerInfos SignerInfos }

Source: RFC 5652 (unchanged at least since RFC 3852).

Instructions:
-------------
This errata is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary.

--------------------------------------
RFC5755 (draft-ietf-pkix-3281update-05)
--------------------------------------
Title               : An Internet Attribute Certificate Profile for Authorization
Publication Date    : January 2010
Author(s)           : S. Farrell, R. Housley, S. Turner
Category            : PROPOSED STANDARD
Source              : Public-Key Infrastructure (X.509)
Area                : Security
Stream              : IETF
Verifying Party     : IESG
_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix
--=_alternative 0048944B85257BFE_=-- From wwwrun@rfc-editor.org Wed Oct 16 07:38:34 2013 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C1F211E82D1 for ; Wed, 16 Oct 2013 07:38:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.481 X-Spam-Level: X-Spam-Status: No, score=-102.481 tagged_above=-999 required=5 tests=[AWL=0.119, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gv6re+f4cVJI for ; Wed, 16 Oct 2013 07:38:33 -0700 (PDT) Received: from rfc-editor.org (unknown [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id D8DD911E82D5 for ; Wed, 16 Oct 2013 07:37:50 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 57A37B1E074; Wed, 16 Oct 2013 07:29:35 -0700 (PDT) To: david.cooper@nist.gov, stefans@microsoft.com, stephen.farrell@cs.tcd.ie, sharon.boeyen@entrust.com, housley@vigilsec.com, wpolk@nist.gov, stephen.farrell@cs.tcd.ie, turners@ieca.com, kent@bbn.com, stefan@aaa-sec.com From: RFC Errata System Message-Id: <20131016142935.57A37B1E074@rfc-editor.org> Date: Wed, 16 Oct 2013 07:29:35 -0700 (PDT) X-Mailman-Approved-At: Wed, 16 Oct 2013 08:50:59 -0700 Cc: pkix@ietf.org, michal.bozon@gmail.com, rfc-editor@rfc-editor.org Subject: [pkix] [Editorial Errata Reported] RFC5280 (3754) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Oct 2013 14:38:34 -0000 The following errata report has been submitted for RFC5280, "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata_search.php?rfc=5280&eid=3754 -------------------------------------- Type: Editorial Reported by: Michal Bozon Section: A.1 Original Text ------------- -- Naming attributes of type X520countryName (digraph from IS 3166) Corrected Text -------------- -- Naming attributes of type X520countryName (digraph from ISO 3166) Notes ----- typo in ASN.1 comment ("IS", should be "ISO") Instructions: ------------- This errata is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party (IESG) can log in to change the status and edit the report, if necessary. -------------------------------------- RFC5280 (draft-ietf-pkix-rfc3280bis-11) -------------------------------------- Title : Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile Publication Date : May 2008 Author(s) : D. Cooper, S. Santesson, S. Farrell, S. Boeyen, R. Housley, W. Polk Category : PROPOSED STANDARD Source : Public-Key Infrastructure (X.509) Area : Security Stream : IETF Verifying Party : IESG From turners@ieca.com Sat Oct 19 14:09:38 2013 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0632F21F9E98 for ; Sat, 19 Oct 2013 14:09:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.073 X-Spam-Level: X-Spam-Status: No, score=-102.073 tagged_above=-999 required=5 tests=[AWL=0.192, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mav7Ipo2ZLiQ for ; Sat, 19 Oct 2013 14:09:32 -0700 (PDT) Received: from gateway15.websitewelcome.com (gateway15.websitewelcome.com [69.56.150.8]) by ietfa.amsl.com (Postfix) with ESMTP id F065B11E8299 for ; Sat, 19 Oct 2013 14:09:27 -0700 (PDT) Received: by gateway15.websitewelcome.com (Postfix, from userid 5007) id 19872BB4D0996; Sat, 19 Oct 2013 16:09:22 -0500 (CDT) Received: from gator3286.hostgator.com (gator3286.hostgator.com [198.57.247.250]) by gateway15.websitewelcome.com (Postfix) with ESMTP id 039CBBB4D0965 for ; Sat, 19 Oct 2013 16:09:22 -0500 (CDT) Received: from [96.231.225.44] (port=61479 helo=thunderfish.local) by gator3286.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1VXdlx-000334-H6; Sat, 19 Oct 2013 16:09:21 -0500 Message-ID: <5262F500.1080106@ieca.com> Date: Sat, 19 Oct 2013 17:09:20 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:24.0) Gecko/20100101 Thunderbird/24.0.1 MIME-Version: 1.0 To: DataPacRat , pkix@ietf.org References: In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms030700080808090306090403" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator3286.hostgator.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [96.231.225.44]:61479 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 4 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IzMjg2Lmhvc3RnYXRvci5jb20= Subject: Re: [pkix] Initial inquiry: Signed vCards X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Oct 2013 21:09:38 -0000 This is a cryptographically signed message in MIME format. --------------ms030700080808090306090403 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable I'd argue that smime@ietf.org might be somewhere to try. spt On 6/28/13 9:06 PM, DataPacRat wrote: > Over at vcarddav@ietf, I've started a discussion on extending the > current format to allow for cryptographically signed vCards, to allow > for various forms of distributed, ad-hoc identity authentication. > > Would pkix be the appropriate place to discuss the cryptographic and > security aspects of such signed vCards? If not, might I ask for a > recommendation of a better place for such a discussion? > > > > Thank you for your time, > -- > DataPacRat > "Then again, I could be wrong." > _______________________________________________ > pkix mailing list > pkix@ietf.org > https://www.ietf.org/mailman/listinfo/pkix > --------------ms030700080808090306090403 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIEgDCC BHwwggJkoAMCAQICCQCdWMxKNutUeTANBgkqhkiG9w0BAQsFADAiMQswCQYDVQQGEwJVUzET MBEGA1UEChMKSUVDQSwgSW5jLjAeFw0xMzA0MDMxNDUxMThaFw0xNDA0MDMxNDUxMThaMDgx CzAJBgNVBAYTAlVTMRMwEQYDVQQKEwpJRUNBLCBJbmMuMRQwEgYDVQQDEwtTZWFuIFR1cm5l cjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOpCGCRptT1m+bIpLTmbahZLZ0Qe 4X99f8SgTQ7QISvUfpmntfOD1oA1AttXlOULEERYubzvDnUTXvstFomQx0XTA67IaV+mw9OD RtG1hPN/erdKX6sU6rH4tsEbba3Drr/I0HT3YVvD3SjWtGXjF12XLvTP6+LfMIIDTCAPiEd9 KPG23D7skVu/4BvvmdLFI96OARhgwQ86M+lTIn83KRJlbbfAeIevbRx/rUB7D+uvMdWxOzR0 KZJhd6dEeTXVwBXZG4rnQ4uFM+mRSiD4rxDCyOuIuOzR07tnOyCRio6sRipOZvwQUWttdsgM Es6IxLdWsaTXcs1HjCsxrdedovMCAwEAAaOBnjCBmzAOBgNVHQ8BAf8EBAMCBeAwHwYDVR0j BBgwFoAUAHRsSeXJUmFxTVY4q2HJ8uHl+w0wGwYDVR0RBBQwEoEQVHVybmVyU0BpZWNhLmNv bTAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vd3d3LmllY2EuY29tL2NybHMvaWVjYS5jcmww FwYDVR0gBBAwDjAMBgorBgEEAYHXAAAAMA0GCSqGSIb3DQEBCwUAA4ICAQAimDYm77ppTi4v K6qJSUhyvCDMGb8mngiEXEYKxsfdHPWoDO7+06j7dAZ8sDD9/FtEkiUMyoNGSUmKHR+tGper VnNiM/Zk6WwCJv8dYZwhGXNQeEGzeys/UkFv7CFX7uDSn8GQeB8sOAZ1N1hxV/TvT8qXvcRx P5+aWTAGAq3TKtCQxZjuU74L3st2hZiOhJlhjhqz0K5FIwWzXUK9uwhZe1thGUpDbRustVgm KN2Xa0pzwqI1VUO0jnWt24A4u59xo6DJQXzQVMhCx0xhpemuT9BrsBDTX8eJdI1iWv9wp3iv SrfHjKXp8y8OGD+usiG40HCjj0W9C+dH0VfbgrB6QOI4vA9+kTg4mANth1cxyxwPYOSJv0zi 1qR0eDIGI//2v2/s6TmGuNqbnRa26Ldv5gGqS7xj32Fiaby6UOXs4+aAIWGZEOH+BXjozcvE eGBwjU/VRQYu6itR28PaNhNVji4D5ITaGxWWiycqK1EUaFraWHtk7W100ROX69xTeFVZP86D 2ymi/aohl5Vb1vlYHdqlbgqjDRl9dPbTxVCXEHf+jkexcuwlLTvr7F+5DIN6c/EbCpRqQx3e dy193L48OGyRDh1/Wmzpew0VWWAWOSXGl/P9VzXf3Z6GPt7flN/V9iEJAa3Mo+w+eIdzJkHB WR+yJcqQcCRMMSyishMwLDGCAqcwggKjAgEBMC8wIjELMAkGA1UEBhMCVVMxEzARBgNVBAoT CklFQ0EsIEluYy4CCQCdWMxKNutUeTAJBgUrDgMCGgUAoIIBTTAYBgkqhkiG9w0BCQMxCwYJ KoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xMzEwMTkyMTA5MjBaMCMGCSqGSIb3DQEJBDEW BBTvcpo93cYBxMeELPZTtQbfFZAuyjA+BgkrBgEEAYI3EAQxMTAvMCIxCzAJBgNVBAYTAlVT MRMwEQYDVQQKEwpJRUNBLCBJbmMuAgkAnVjMSjbrVHkwQAYLKoZIhvcNAQkQAgsxMaAvMCIx CzAJBgNVBAYTAlVTMRMwEQYDVQQKEwpJRUNBLCBJbmMuAgkAnVjMSjbrVHkwbAYJKoZIhvcN AQkPMV8wXTALBglghkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3 DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDANBgkqhkiG 9w0BAQEFAASCAQDmCNh0r0WF5lII1zqaAEjZfBemh7jeLmfsdOIl1/uMKwasn05wYDMZ7KSy gRrHt9CTfeAB3FmdAuk246+L/kDfCD3utWkf4q7UvyZjoXWdUa981hD/LsauBULZSq44jiwx TLFGjsh9ZnbG9uX1GahMXpL7iQ5zS1dhBv8NGV6GFRJEHLEUBV2bikGGj8MVX0pFuff/YcyK 3bU/yw3h2efzaM4Sw2nGmtDt23UMZtgrZeJ/mYggDJspQ8xnMuY/pwGTdQpWYqFG/dacDDNk d8ameof8A2XVBqQh/pdoIxjfYmvIjmT6oZU3KOL+8a3Od3XLuw9NjaFnYJHw5rPsQZPSAAAA AAAA --------------ms030700080808090306090403-- From wwwrun@rfc-editor.org Wed Oct 23 15:00:05 2013 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2DE5011E827F; Wed, 23 Oct 2013 15:00:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.11 X-Spam-Level: X-Spam-Status: No, score=-102.11 tagged_above=-999 required=5 tests=[AWL=-0.110, BAYES_00=-2.599, J_CHICKENPOX_93=0.6, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NHqyck+XGoPg; Wed, 23 Oct 2013 15:00:04 -0700 (PDT) Received: from rfc-editor.org (unknown [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id 7E84D11E8272; Wed, 23 Oct 2013 15:00:02 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id F32EF622E6; Wed, 23 Oct 2013 14:51:24 -0700 (PDT) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org From: rfc-editor@rfc-editor.org Message-Id: <20131023215124.F32EF622E6@rfc-editor.org> Date: Wed, 23 Oct 2013 14:51:24 -0700 (PDT) Cc: drafts-update-ref@iana.org, pkix@ietf.org, rfc-editor@rfc-editor.org Subject: [pkix] RFC 7030 on Enrollment over Secure Transport X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Oct 2013 22:00:05 -0000 A new Request for Comments is now available in online RFC libraries. RFC 7030 Title: Enrollment over Secure Transport Author: M. Pritikin, Ed., P. Yee, Ed., D. Harkins, Ed. Status: Standards Track Stream: IETF Date: October 2013 Mailbox: pritikin@cisco.com, peter@akayla.com, dharkins@arubanetworks.com Pages: 53 Characters: 123989 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-pkix-est-09.txt URL: http://www.rfc-editor.org/rfc/rfc7030.txt This document profiles certificate enrollment for clients using Certificate Management over CMS (CMC) messages over a secure transport. This profile, called Enrollment over Secure Transport (EST), describes a simple, yet functional, certificate management protocol targeting Public Key Infrastructure (PKI) clients that need to acquire client certificates and associated Certification Authority (CA) certificates. It also supports client-generated public/private key pairs as well as key pairs generated by the CA. This document is a product of the Public-Key Infrastructure (X.509) Working Group of the IETF. This is now a Proposed Standard. STANDARDS TRACK: This document specifies an Internet standards track protocol for the Internet community,and requests discussion and suggestions for improvements. Please refer to the current edition of the Internet Official Protocol Standards (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/search/rfc_search.php For downloading RFCs, see http://www.rfc-editor.org/rfc.html Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From iesg-secretary@ietf.org Thu Oct 31 10:29:13 2013 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9D9211E822D; Thu, 31 Oct 2013 10:29:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.456 X-Spam-Level: X-Spam-Status: No, score=-102.456 tagged_above=-999 required=5 tests=[AWL=0.144, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ntgsrJ0SYbhe; Thu, 31 Oct 2013 10:29:13 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EF29321F9E28; Thu, 31 Oct 2013 10:29:12 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: IESG Secretary To: IETF Announcement List X-Test-IDTracker: no X-IETF-IDTracker: 4.81 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20131031172912.24516.78802.idtracker@ietfa.amsl.com> Date: Thu, 31 Oct 2013 10:29:12 -0700 Cc: stefan@aaa-sec.com, pkix@ietf.org Subject: [pkix] WG Action: Conclusion of Public-Key Infrastructure (X.509) (pkix) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.12 Reply-To: ietf@ietf.org List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Oct 2013 17:29:14 -0000 The Public-Key Infrastructure (X.509) (pkix) Working Group in the = Security Area has concluded. The IESG contact persons are Stephen = Farrell and Sean Turner. The PKIX working group has completed its charter items, and is officially closing. The mailing list will be retained for future discussions. The PKIX working group was focused on PKI (Public Key Infrastructure) standards. Over its 18 year existence, the working group published over 70 with the most prominent being RFC 2459/3280/5280: the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile. Other notable work includes RFC 6960: OCSP (Online Certificate Status Protocol), RFC 4210: CMP (Certificate Management Protocol), RFC 5272: CMC (Certificate Management over Certificate Management Syntax), and RFC 7030: EST (Enrollment over Secure Transport). The RFCs produced by the WG are the underpinning of many protocols that secure the Internet at almost every layer of the protocol stack. Both Stephen and I would like to thank all of the IETF participants who have contributed to documents produced by the PKIX working group and to the successful completion of these important deliverables. We especially thank Warwick Ford, Tim Polk, and Stefan Santesson who chaired the working group at various time since its formation as well as Steve Kent who chaired the working group since its inception. S&S From dev+ietf@seantek.com Thu Oct 31 21:31:21 2013 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0D7C11E81FD; Thu, 31 Oct 2013 21:31:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lOICdnewWAc3; Thu, 31 Oct 2013 21:31:14 -0700 (PDT) Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) by ietfa.amsl.com (Postfix) with ESMTP id BDEA721E80A6; Thu, 31 Oct 2013 21:31:09 -0700 (PDT) Received: from [192.168.123.7] (unknown [76.173.239.154]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 5ACCC509B5; Fri, 1 Nov 2013 00:31:07 -0400 (EDT) Message-ID: <52732E6D.3000409@seantek.com> Date: Thu, 31 Oct 2013 21:30:37 -0700 From: Sean Leonard User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130307 Thunderbird/17.0.4 MIME-Version: 1.0 To: smime@ietf.org, "pkix@ietf.org" , saag@ietf.org Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms050608020504040403020808" Subject: [pkix] New Version for PKIX Textual (02) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2013 04:31:22 -0000 This is a cryptographically signed message in MIME format. --------------ms050608020504040403020808 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Greetings S/MIME, PKIX, and SAAG lists: A revised draft of PKIX text encodings has been published. The changes=20 are largely editorial rather than technical. However, the ABNF has been=20 beefed up to include stricter and more accurate encoding rules. Please provide any additional comments before we move it to the next=20 phases of publication. Kind regards, Sean Leonard -------- Original Message -------- Subject: New Version Notification for=20 draft-josefsson-pkix-textual-02.txt Date: Mon, 21 Oct 2013 15:24:56 -0700 From: internet-drafts@ietf.org To: Simon Josefsson , Sean Leonard A new version of I-D, draft-josefsson-pkix-textual-02.txt has been successfully submitted by Simon Josefsson and posted to the IETF repository. Filename: draft-josefsson-pkix-textual Revision: 02 Title: Text Encodings of PKIX and CMS Structures Creation date: 2013-10-22 Group: Individual Submission Number of pages: 14 URL:http://www.ietf.org/internet-drafts/draft-josefsson-pkix-textual-02.t= xt Status:http://datatracker.ietf.org/doc/draft-josefsson-pkix-textual Htmlized:http://tools.ietf.org/html/draft-josefsson-pkix-textual-02 Diff:http://www.ietf.org/rfcdiff?url2=3Ddraft-josefsson-pkix-textual-02 Abstract: This document describes and discuss the text encodings of Public-Key= Infrastructure using X.509 (PKIX) Certificates, PKIX Certificate Revocation Lists (CRLs), PKCS #10 Certification Request Syntax, PKCS= #7 structures, Cryptographic Message Syntax (CMS), PKCS #8 Private- Key Information Syntax, and Attribute Certificates. The text encodings are well-known, are implemented by several applications an= d libraries, and are widely deployed. This document is intended to articulate the de-facto rules that existing implementations operate by, and to give recommendations that will promote interoperability going forward. --------------ms050608020504040403020808 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKSzCC BRowggQCoAMCAQICEG0Z6qcZT2ozIuYiMnqqcd4wDQYJKoZIhvcNAQEFBQAwga4xCzAJBgNV BAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoT FVRoZSBVU0VSVFJVU1QgTmV0d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3Qu Y29tMTYwNAYDVQQDEy1VVE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQg RW1haWwwHhcNMTEwNDI4MDAwMDAwWhcNMjAwNTMwMTA0ODM4WjCBkzELMAkGA1UEBhMCR0Ix GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE ChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9ETyBDbGllbnQgQXV0aGVudGlj YXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKEhFtLV5jUXi+LpOFAyKNTWF9mZfEyTvefMn1V0HhMVbdClOD5J3EHxcZppLkyxPFA GpDMJ1Zifxe1cWmu5SAb5MtjXmDKokH2auGj/7jfH0htZUOMKi4rYzh337EXrMLaggLW1DJq 1GdvIBOPXDX65VSAr9hxCh03CgJQU2yVHakQFLSZlVkSMf8JotJM3FLb3uJAAVtIaN3FSrTg 7SQfOq9xXwfjrL8UO7AlcWg99A/WF1hGFYE8aIuLgw9teiFX5jSw2zJ+40rhpVJyZCaRTqWS D//gsWD9Gm9oUZljjRqLpcxCm5t9ImPTqaD8zp6Q30QZ9FxbNboW86eb/8ECAwEAAaOCAUsw ggFHMB8GA1UdIwQYMBaAFImCZ33EnSZwAEu0UEh83j2uBG59MB0GA1UdDgQWBBR6E04AdFvG eGNkJ8Ev4qBbvHnFezAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBADARBgNV HSAECjAIMAYGBFUdIAAwWAYDVR0fBFEwTzBNoEugSYZHaHR0cDovL2NybC51c2VydHJ1c3Qu Y29tL1VUTi1VU0VSRmlyc3QtQ2xpZW50QXV0aGVudGljYXRpb25hbmRFbWFpbC5jcmwwdAYI KwYBBQUHAQEEaDBmMD0GCCsGAQUFBzAChjFodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVVRO QWRkVHJ1c3RDbGllbnRfQ0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1 c3QuY29tMA0GCSqGSIb3DQEBBQUAA4IBAQCF1r54V1VtM39EUv5C1QaoAQOAivsNsv1Kv/av QUn1G1rF0q0bc24+6SZ85kyYwTAo38v7QjyhJT4KddbQPTmGZtGhm7VNm2+vKGwdr+XqdFqo 2rHA8XV6L566k3nK/uKRHlZ0sviN0+BDchvtj/1gOSBH+4uvOmVIPJg9pSW/ve9g4EnlFsjr P0OD8ODuDcHTzTNfm9C9YGqzO/761Mk6PB/tm/+bSTO+Qik5g+4zaS6CnUVNqGnagBsePdIa XXxHmaWbCG0SmYbWXVcHG6cwvktJRLiQfsrReTjrtDP6oDpdJlieYVUYtCHVmdXgQ0BCML7q peeU0rD+83X5f27nMIIFKTCCBBGgAwIBAgIQZ6sVlrTEYjwLaBPoxUwEaTANBgkqhkiG9w0B AQUFADCBkzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENP TU9ETyBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xMjEx MjkwMDAwMDBaFw0xMzExMjkyMzU5NTlaMCUxIzAhBgkqhkiG9w0BCQEWFGRlditpZXRmQHNl YW50ZWsuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4n20qAOzUtC1oNz 5zgTny0JRBE1mJZszV2s6EurahKPvku7E+utnLhcaNahAWr2oZgeCK9uhEqijaC4qLZHnGt/ +lnbsQtjmMJrcFCzhDZjDOJdYzmuS2cUvZqY7YwzCG6jSfs4gwNh+29MS6faY6ucncbnfO9r BB0xu5GIdI3BzsPNYnACNlBYU7w4X4GA0/MwNAabNhDgxU2Tw1fl5w1Vt+6xRTXBk6V93LyV ZN9wBIOpr2MuhoCJLHZrLirv/mbQE5ao4pkJLR/syYhS1Ko4MSiJmR3ugKPkxEo6DZkuJrfc k36hLmtMo3yuzi7hkXmDzPKkdLlNj+Xek1GWtwIDAQABo4IB5DCCAeAwHwYDVR0jBBgwFoAU ehNOAHRbxnhjZCfBL+KgW7x5xXswHQYDVR0OBBYEFBpm5d7y8PBT6NqnIVbfNK8hbpPGMA4G A1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsGAQUFBwMEBgsrBgEE AbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwRgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAQEw KzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMwVwYDVR0fBFAw TjBMoEqgSIZGaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPQ2xpZW50QXV0aGVudGlj YXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBiAYIKwYBBQUHAQEEfDB6MFIGCCsGAQUFBzAC hkZodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9DbGllbnRBdXRoZW50aWNhdGlvbmFu ZFNlY3VyZUVtYWlsQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5j b20wHwYDVR0RBBgwFoEUZGV2K2lldGZAc2VhbnRlay5jb20wDQYJKoZIhvcNAQEFBQADggEB AAY3GfgX0pLsz6qEOOG191EgYXSCpKW70wSFgSe+7AenZT88d/m8w0YtfOFVD7+94dNULDnH 4P6sD70hday7/ke4uYfgURxygemKN26KV3T7wBw8WbZSTmYJphzSoqUK5ISsQNwLaKf4yTmp Ae9IR1AjZXP3oAZvsRvpZDtiaULQ+HfFTypLDsnrA7sTtoVtirJdImGBTHsVtZ+GEQlhuuJ6 G1cInzNxIbxgnLdn4pFF82FP60SsZxaW2VRqDK7CbHJX4LUH+oJ6kp9qxF5I/RIAhRHd3lMe Xmq6vZPbnMUNhJyUC6TbYipe11+VDFPGiHZE/+y6RMSuRnepJzE4PLAxggQZMIIEFQIBATCB qDCBkzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE BxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9E TyBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQZ6sVlrTEYjwL aBPoxUwEaTAJBgUrDgMCGgUAoIICRTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqG SIb3DQEJBTEPFw0xMzExMDEwNDMwMzdaMCMGCSqGSIb3DQEJBDEWBBSFs8vL7htHdDC03lwX yxnektIghTBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYI KoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqG SIb3DQMCAgEoMIG5BgkrBgEEAYI3EAQxgaswgagwgZMxCzAJBgNVBAYTAkdCMRswGQYDVQQI ExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9E TyBDQSBMaW1pdGVkMTkwNwYDVQQDEzBDT01PRE8gQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFu ZCBTZWN1cmUgRW1haWwgQ0ECEGerFZa0xGI8C2gT6MVMBGkwgbsGCyqGSIb3DQEJEAILMYGr oIGoMIGTMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD VQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE5MDcGA1UEAxMwQ09N T0RPIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhBnqxWWtMRi PAtoE+jFTARpMA0GCSqGSIb3DQEBAQUABIIBAE/frMlqdxe/10uzmtQ5Wr0B9qw94bcWGjKK K3Wrixjsh/rbZHdiNipRUJfpnr8t+2J62B3J16zEApVLf1yJm+MTni1o7XMhL2xVFFs+1zcs 9haaxtwTWi/HPxmTXAr3ytu7v79bVl80esSPFznUPmKQjy3zN38JT/zt70EiTNlvs23imgEZ csKPLCqYffshrtqnjVq8I1VPLUdGUcy0DXJEzpCZxF2RKsOqEr0O219hOJFixv+PIad+DNtU 3Ch3QbMn6ZaYEwuUJVMMD5EU/7lyDel/AEmmxUIHi2JFiIN3z6mSt4m28OgM3sUt0udDrbTN ip2Vd9ydWG8d1hDF+isAAAAAAAA= --------------ms050608020504040403020808-- From dev+ietf@seantek.com Thu Oct 31 21:53:56 2013 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DAFDD21E8141 for ; Thu, 31 Oct 2013 21:53:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lQfyeJP8sMAy for ; Thu, 31 Oct 2013 21:53:51 -0700 (PDT) Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) by ietfa.amsl.com (Postfix) with ESMTP id C64CC11E82D8 for ; Thu, 31 Oct 2013 21:53:50 -0700 (PDT) Received: from [192.168.123.7] (unknown [76.173.239.154]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 6F47750A84 for ; Fri, 1 Nov 2013 00:53:49 -0400 (EDT) Message-ID: <527333BF.3020802@seantek.com> Date: Thu, 31 Oct 2013 21:53:19 -0700 From: Sean Leonard User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130307 Thunderbird/17.0.4 MIME-Version: 1.0 To: "pkix@ietf.org" Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms070308060006050904030805" Subject: [pkix] personal data attributes were corrected in pkix-oid.asn, fix your software X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2013 04:53:57 -0000 This is a cryptographically signed message in MIME format. --------------ms070308060006050904030805 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Hi PKIX: I worked with Russ and Paul to correct a problem in pkix-oid.asn,=20 located here: http://www.imc.org/ietf-pkix/pkix-oid.asn The section "personal data attributes" now properly reads: -- personal data attributes id-pda-dateOfBirth OBJECT IDENTIFIER ::=3D { id-pda 1 } id-pda-placeOfBirth OBJECT IDENTIFIER ::=3D { id-pda 2 } id-pda-gender OBJECT IDENTIFIER ::=3D { id-pda 3 } id-pda-countryOfCitizenship OBJECT IDENTIFIER ::=3D { id-pda 4 } id-pda-countryOfResidence OBJECT IDENTIFIER ::=3D { id-pda 5 } Previously (such as prior to this week), the list incorrectly read: id-pda-dateOfBirth OBJECT IDENTIFIER ::=3D { id-pda 1 } id-pda-placeOfBirth OBJECT IDENTIFIER ::=3D { id-pda 2 } id-pda-pseudonym OBJECT IDENTIFIER ::=3D { id-pda 3 } id-pda-gender OBJECT IDENTIFIER ::=3D { id-pda 4 } id-pda-countryOfCitizenship OBJECT IDENTIFIER ::=3D { id-pda 5 } id-pda-countryOfResidence OBJECT IDENTIFIER ::=3D { id-pda 6 } A pseudonym attribute in the arc was suggested in early drafts of PKCS=20 #9, but was abandoned; the proper attribute is id-at-pseudonym=20 (2.5.4.65) in the X.500 arc. While most software properly used the ASN.1 modules in the relevant=20 standards, some software may have relied on this incorrect list,=20 resulting in an off-by-one problem. Notably, the certificate viewer that = ships with Mac OS X used the old list. If an Apple developer is reading=20 this, please fix that. Thank you, Sean --------------ms070308060006050904030805 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKSzCC BRowggQCoAMCAQICEG0Z6qcZT2ozIuYiMnqqcd4wDQYJKoZIhvcNAQEFBQAwga4xCzAJBgNV BAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoT FVRoZSBVU0VSVFJVU1QgTmV0d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3Qu Y29tMTYwNAYDVQQDEy1VVE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQg RW1haWwwHhcNMTEwNDI4MDAwMDAwWhcNMjAwNTMwMTA0ODM4WjCBkzELMAkGA1UEBhMCR0Ix GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE ChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9ETyBDbGllbnQgQXV0aGVudGlj YXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKEhFtLV5jUXi+LpOFAyKNTWF9mZfEyTvefMn1V0HhMVbdClOD5J3EHxcZppLkyxPFA GpDMJ1Zifxe1cWmu5SAb5MtjXmDKokH2auGj/7jfH0htZUOMKi4rYzh337EXrMLaggLW1DJq 1GdvIBOPXDX65VSAr9hxCh03CgJQU2yVHakQFLSZlVkSMf8JotJM3FLb3uJAAVtIaN3FSrTg 7SQfOq9xXwfjrL8UO7AlcWg99A/WF1hGFYE8aIuLgw9teiFX5jSw2zJ+40rhpVJyZCaRTqWS D//gsWD9Gm9oUZljjRqLpcxCm5t9ImPTqaD8zp6Q30QZ9FxbNboW86eb/8ECAwEAAaOCAUsw ggFHMB8GA1UdIwQYMBaAFImCZ33EnSZwAEu0UEh83j2uBG59MB0GA1UdDgQWBBR6E04AdFvG eGNkJ8Ev4qBbvHnFezAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBADARBgNV HSAECjAIMAYGBFUdIAAwWAYDVR0fBFEwTzBNoEugSYZHaHR0cDovL2NybC51c2VydHJ1c3Qu Y29tL1VUTi1VU0VSRmlyc3QtQ2xpZW50QXV0aGVudGljYXRpb25hbmRFbWFpbC5jcmwwdAYI KwYBBQUHAQEEaDBmMD0GCCsGAQUFBzAChjFodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVVRO QWRkVHJ1c3RDbGllbnRfQ0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1 c3QuY29tMA0GCSqGSIb3DQEBBQUAA4IBAQCF1r54V1VtM39EUv5C1QaoAQOAivsNsv1Kv/av QUn1G1rF0q0bc24+6SZ85kyYwTAo38v7QjyhJT4KddbQPTmGZtGhm7VNm2+vKGwdr+XqdFqo 2rHA8XV6L566k3nK/uKRHlZ0sviN0+BDchvtj/1gOSBH+4uvOmVIPJg9pSW/ve9g4EnlFsjr P0OD8ODuDcHTzTNfm9C9YGqzO/761Mk6PB/tm/+bSTO+Qik5g+4zaS6CnUVNqGnagBsePdIa XXxHmaWbCG0SmYbWXVcHG6cwvktJRLiQfsrReTjrtDP6oDpdJlieYVUYtCHVmdXgQ0BCML7q peeU0rD+83X5f27nMIIFKTCCBBGgAwIBAgIQZ6sVlrTEYjwLaBPoxUwEaTANBgkqhkiG9w0B AQUFADCBkzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENP TU9ETyBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xMjEx MjkwMDAwMDBaFw0xMzExMjkyMzU5NTlaMCUxIzAhBgkqhkiG9w0BCQEWFGRlditpZXRmQHNl YW50ZWsuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4n20qAOzUtC1oNz 5zgTny0JRBE1mJZszV2s6EurahKPvku7E+utnLhcaNahAWr2oZgeCK9uhEqijaC4qLZHnGt/ +lnbsQtjmMJrcFCzhDZjDOJdYzmuS2cUvZqY7YwzCG6jSfs4gwNh+29MS6faY6ucncbnfO9r BB0xu5GIdI3BzsPNYnACNlBYU7w4X4GA0/MwNAabNhDgxU2Tw1fl5w1Vt+6xRTXBk6V93LyV ZN9wBIOpr2MuhoCJLHZrLirv/mbQE5ao4pkJLR/syYhS1Ko4MSiJmR3ugKPkxEo6DZkuJrfc k36hLmtMo3yuzi7hkXmDzPKkdLlNj+Xek1GWtwIDAQABo4IB5DCCAeAwHwYDVR0jBBgwFoAU ehNOAHRbxnhjZCfBL+KgW7x5xXswHQYDVR0OBBYEFBpm5d7y8PBT6NqnIVbfNK8hbpPGMA4G A1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsGAQUFBwMEBgsrBgEE AbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwRgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAQEw KzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMwVwYDVR0fBFAw TjBMoEqgSIZGaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPQ2xpZW50QXV0aGVudGlj YXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBiAYIKwYBBQUHAQEEfDB6MFIGCCsGAQUFBzAC hkZodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9DbGllbnRBdXRoZW50aWNhdGlvbmFu ZFNlY3VyZUVtYWlsQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5j b20wHwYDVR0RBBgwFoEUZGV2K2lldGZAc2VhbnRlay5jb20wDQYJKoZIhvcNAQEFBQADggEB AAY3GfgX0pLsz6qEOOG191EgYXSCpKW70wSFgSe+7AenZT88d/m8w0YtfOFVD7+94dNULDnH 4P6sD70hday7/ke4uYfgURxygemKN26KV3T7wBw8WbZSTmYJphzSoqUK5ISsQNwLaKf4yTmp Ae9IR1AjZXP3oAZvsRvpZDtiaULQ+HfFTypLDsnrA7sTtoVtirJdImGBTHsVtZ+GEQlhuuJ6 G1cInzNxIbxgnLdn4pFF82FP60SsZxaW2VRqDK7CbHJX4LUH+oJ6kp9qxF5I/RIAhRHd3lMe Xmq6vZPbnMUNhJyUC6TbYipe11+VDFPGiHZE/+y6RMSuRnepJzE4PLAxggQZMIIEFQIBATCB qDCBkzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE BxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9E TyBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQZ6sVlrTEYjwL aBPoxUwEaTAJBgUrDgMCGgUAoIICRTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqG SIb3DQEJBTEPFw0xMzExMDEwNDUzMTlaMCMGCSqGSIb3DQEJBDEWBBQIB0qpYnCwMX3x0Ndn 9FfqEFo3zTBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYI KoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqG SIb3DQMCAgEoMIG5BgkrBgEEAYI3EAQxgaswgagwgZMxCzAJBgNVBAYTAkdCMRswGQYDVQQI ExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9E TyBDQSBMaW1pdGVkMTkwNwYDVQQDEzBDT01PRE8gQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFu ZCBTZWN1cmUgRW1haWwgQ0ECEGerFZa0xGI8C2gT6MVMBGkwgbsGCyqGSIb3DQEJEAILMYGr oIGoMIGTMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD VQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE5MDcGA1UEAxMwQ09N T0RPIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhBnqxWWtMRi PAtoE+jFTARpMA0GCSqGSIb3DQEBAQUABIIBADjXSH5cDLornHA5GaObs9UrMqsiGYdzNMJn nlTrUj7KJeiDNvMooyyUjrgx0Q836+NpEy0eoHWW25EJINPtq4cjoP4pJQgbKpPuMQUIcDF7 8/Pjzop2AISkbE+tpdSCp454yeIg7H50yiejStBJq4OEvBTwU7RKc1lZT14O2ah6YadXHunr Co7BRx66MIuFX2pZCYv8O1T4d58DL+AvBuzsx3MBapYtX07CM8tk9aTFX01LhwoDLYsDWvqm zhw2wSTP1znT6FE9OPz2BfNx0DJ27G/UWePPqyHDHvKW6MKcbYUxt7537E3gX5wQ3vi+Dlog 6NldmFMv9hRHh9FXWa0AAAAAAAA= --------------ms070308060006050904030805--