From nobody Fri Aug 18 07:53:28 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E0B013249E for ; Fri, 18 Aug 2017 07:53:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YrRLLgilMI5d for ; Fri, 18 Aug 2017 07:53:25 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A08DC13242F for ; Fri, 18 Aug 2017 07:53:25 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 6D47FB814CC; Fri, 18 Aug 2017 07:53:02 -0700 (PDT) To: philliph@comodo.com, rob.stradling@comodo.com, Kathleen.Moriarty.ietf@gmail.com, ekr@rtfm.com, kent@bbn.com, stefan@aaa-sec.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: mak@kolybabi.com, pkix@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20170818145302.6D47FB814CC@rfc-editor.org> Date: Fri, 18 Aug 2017 07:53:02 -0700 (PDT) Archived-At: Subject: [pkix] [Editorial Errata Reported] RFC6844 (5090) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Aug 2017 14:53:27 -0000 The following errata report has been submitted for RFC6844, "DNS Certification Authority Authorization (CAA) Resource Record". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5090 -------------------------------------- Type: Editorial Reported by: Mak Kolybabi Section: 2.2 Original Text ------------- Resource Record Set (RRSet): A set of Resource Records or a particular owner name, class, and type. The time to live on all RRs with an RRSet is always the same, but the data may be different among RRs in the RRSet. Corrected Text -------------- Resource Record Set (RRSet): A set of Resource Records for a particular owner name, class, and type. The time to live on all RRs with an RRSet is always the same, but the data may be different among RRs in the RRSet. Notes ----- Changed 'or' to 'for', the former not making sense in this context and being a likely typo. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC6844 (draft-ietf-pkix-caa-15) -------------------------------------- Title : DNS Certification Authority Authorization (CAA) Resource Record Publication Date : January 2013 Author(s) : P. Hallam-Baker, R. Stradling Category : PROPOSED STANDARD Source : Public-Key Infrastructure (X.509) Area : Security Stream : IETF Verifying Party : IESG From nobody Fri Aug 18 07:57:03 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F5FD13242F for ; Fri, 18 Aug 2017 07:57:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DrDWVQXm2RU8 for ; Fri, 18 Aug 2017 07:57:00 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE954132063 for ; Fri, 18 Aug 2017 07:57:00 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 11B2930058E for ; Fri, 18 Aug 2017 10:57:00 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id CJ5r7Mdknf_B for ; Fri, 18 Aug 2017 10:56:57 -0400 (EDT) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id ACECC3003D1; Fri, 18 Aug 2017 10:56:57 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Russ Housley In-Reply-To: <20170818145302.6D47FB814CC@rfc-editor.org> Date: Fri, 18 Aug 2017 10:56:47 -0400 Cc: phillip Hallam-Baker , Rob Stradling , IETF PKIX Content-Transfer-Encoding: quoted-printable Message-Id: <693F3E26-4A8E-4BD6-A526-0CB93AF835EE@vigilsec.com> References: <20170818145302.6D47FB814CC@rfc-editor.org> To: Kathleen Moriarty , Eric Rescorla X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [pkix] [Editorial Errata Reported] RFC6844 (5090) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Aug 2017 14:57:02 -0000 Since the LAMPS WG is considering a charter item to update this = document, a resolution of "held for future update" seems right to me. Russ > On Aug 18, 2017, at 10:53 AM, RFC Errata System = wrote: >=20 > The following errata report has been submitted for RFC6844, > "DNS Certification Authority Authorization (CAA) Resource Record". >=20 > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata/eid5090 >=20 > -------------------------------------- > Type: Editorial > Reported by: Mak Kolybabi >=20 > Section: 2.2 >=20 > Original Text > ------------- > Resource Record Set (RRSet): A set of Resource Records or a > particular owner name, class, and type. The time to live on all > RRs with an RRSet is always the same, but the data may be > different among RRs in the RRSet. >=20 > Corrected Text > -------------- > Resource Record Set (RRSet): A set of Resource Records for a > particular owner name, class, and type. The time to live on all > RRs with an RRSet is always the same, but the data may be > different among RRs in the RRSet. >=20 > Notes > ----- > Changed 'or' to 'for', the former not making sense in this context and = being a likely typo. >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party =20 > can log in to change the status and edit the report, if necessary.=20 >=20 > -------------------------------------- > RFC6844 (draft-ietf-pkix-caa-15) > -------------------------------------- > Title : DNS Certification Authority Authorization (CAA) = Resource Record > Publication Date : January 2013 > Author(s) : P. Hallam-Baker, R. Stradling > Category : PROPOSED STANDARD > Source : Public-Key Infrastructure (X.509) > Area : Security > Stream : IETF > Verifying Party : IESG >=20 > _______________________________________________ > pkix mailing list > pkix@ietf.org > https://www.ietf.org/mailman/listinfo/pkix From nobody Fri Aug 18 08:06:56 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 682C913250D for ; Fri, 18 Aug 2017 08:06:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id boNEZljFW306 for ; Fri, 18 Aug 2017 08:06:53 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3064413248D for ; Fri, 18 Aug 2017 08:06:53 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 12CE1B814E2; Fri, 18 Aug 2017 08:06:30 -0700 (PDT) To: philliph@comodo.com, rob.stradling@comodo.com, Kathleen.Moriarty.ietf@gmail.com, ekr@rtfm.com, kent@bbn.com, stefan@aaa-sec.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: mak@kolybabi.com, pkix@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20170818150630.12CE1B814E2@rfc-editor.org> Date: Fri, 18 Aug 2017 08:06:30 -0700 (PDT) Archived-At: Subject: [pkix] [Editorial Errata Reported] RFC6844 (5091) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Aug 2017 15:06:54 -0000 The following errata report has been submitted for RFC6844, "DNS Certification Authority Authorization (CAA) Resource Record". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5091 -------------------------------------- Type: Editorial Reported by: Mak Kolybabi Section: 4 Original Text ------------- o If CAA(X) is not empty, R(X) = CAA (X), otherwise Corrected Text -------------- o If CAA(X) is not empty, R(X) = CAA(X), otherwise Notes ----- Remove unnecessary space after second CAA, making appearances of CAA(X) consistent throughout the section. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC6844 (draft-ietf-pkix-caa-15) -------------------------------------- Title : DNS Certification Authority Authorization (CAA) Resource Record Publication Date : January 2013 Author(s) : P. Hallam-Baker, R. Stradling Category : PROPOSED STANDARD Source : Public-Key Infrastructure (X.509) Area : Security Stream : IETF Verifying Party : IESG From nobody Fri Aug 18 08:14:55 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 188821321A3 for ; Fri, 18 Aug 2017 08:14:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x-D7dL-LJh8h for ; Fri, 18 Aug 2017 08:14:52 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9D951320D9 for ; Fri, 18 Aug 2017 08:14:52 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 1EDF3300563 for ; Fri, 18 Aug 2017 11:14:52 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id uy1pt6EBAvtl for ; Fri, 18 Aug 2017 11:14:49 -0400 (EDT) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id 586FF300295; Fri, 18 Aug 2017 11:14:49 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Russ Housley In-Reply-To: <20170818150630.12CE1B814E2@rfc-editor.org> Date: Fri, 18 Aug 2017 11:14:48 -0400 Cc: Phillip Hallam-Baker , Rob Stradling , IETF PKIX Content-Transfer-Encoding: quoted-printable Message-Id: References: <20170818150630.12CE1B814E2@rfc-editor.org> To: Kathleen Moriarty , Eric Rescorla X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [pkix] [Editorial Errata Reported] RFC6844 (5091) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Aug 2017 15:14:54 -0000 I do not think the extra space will confuse any implementers. Also, = since the LAMPS WG is considering a charter item to update this = document, a resolution of "held for future update" seems right to me. Russ > On Aug 18, 2017, at 11:06 AM, RFC Errata System = wrote: >=20 > The following errata report has been submitted for RFC6844, > "DNS Certification Authority Authorization (CAA) Resource Record". >=20 > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata/eid5091 >=20 > -------------------------------------- > Type: Editorial > Reported by: Mak Kolybabi >=20 > Section: 4 >=20 > Original Text > ------------- > o If CAA(X) is not empty, R(X) =3D CAA (X), otherwise >=20 > Corrected Text > -------------- > o If CAA(X) is not empty, R(X) =3D CAA(X), otherwise >=20 > Notes > ----- > Remove unnecessary space after second CAA, making appearances of = CAA(X) consistent throughout the section. >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party =20 > can log in to change the status and edit the report, if necessary.=20 >=20 > -------------------------------------- > RFC6844 (draft-ietf-pkix-caa-15) > -------------------------------------- > Title : DNS Certification Authority Authorization (CAA) = Resource Record > Publication Date : January 2013 > Author(s) : P. Hallam-Baker, R. Stradling > Category : PROPOSED STANDARD > Source : Public-Key Infrastructure (X.509) > Area : Security > Stream : IETF > Verifying Party : IESG >=20 > _______________________________________________ > pkix mailing list > pkix@ietf.org > https://www.ietf.org/mailman/listinfo/pkix From nobody Fri Aug 18 08:18:48 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA538132969 for ; Fri, 18 Aug 2017 08:18:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LBXPptW47EdW for ; Fri, 18 Aug 2017 08:18:36 -0700 (PDT) Received: from mail-pg0-x22c.google.com (mail-pg0-x22c.google.com [IPv6:2607:f8b0:400e:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4BED51320D9 for ; Fri, 18 Aug 2017 08:18:36 -0700 (PDT) Received: by mail-pg0-x22c.google.com with SMTP id y129so66305139pgy.4 for ; Fri, 18 Aug 2017 08:18:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=WQIZ4aZQEUauiTaAem5/umhXwafS0CLozlk8acoBOeo=; b=j5hypOtzh/ppNdEnaoTEx9xmzhYCi9bQyXpKjwh2N/bFzMmNBhZLoGBVfFCFzBc2ao qDTbdzXVw5BphsTG76M+wfCGv0/Sx/+r4WfIKrbsmtPQyxZl5wkIf1qNJaP2DGs2ptS4 sd6iazEhNjqw8cjscAR/t+Wxp5D7Am/Feu8vd9bk73zYvOoaOyWcWtrQ15lZDUukgzdu DCPIbjIVJiG77m5GpbOoFff+vuQak+2ue17Owkj90V+uf45/AeUUwWtZRi0pxwXjCJ8O S+V2sHQS3WUb0mmdKxnZpoB2sEUHOKs5RARwwO6SuT+pfTYhIOADhoukvKn/KRys7qUO JVXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=WQIZ4aZQEUauiTaAem5/umhXwafS0CLozlk8acoBOeo=; b=Tcfikr7TcwwFCjcAnGd5k1220dhjNWBTaPbLCl7Ix/kYRwxEzLRZpfkZ0eTSSdBkLP 60lr39j+4ZwsSzyl5bnsiY8BhaJHDdwMcrbqODCQZ313Z51rG8aYRz+VvR5mipblHevf 0xyzH599JpJ5t4a6rYLvvXfhqMW8rlqRnm+MbE9kFk3K3slinyYTDX30FMR5sbQBouKG v48iH701C3nuO1go8AzNfprFC9EHWneWrYI53SOVoEELBQWO6PZRnkZ3iNFMKZHX1jAI XMMIRx8UtfEqby4QyFGy31sZCE4TuKd8KTSAyMyJyRyxFrFuy/F3VKmPKG8TSmedN3OO wtFQ== X-Gm-Message-State: AHYfb5gdjrGIFl3QABUBjteWa0qmD93xV8Rle3tOH1TiFYx/9vMWkk4f kEs7WUGFh97xWel7/Zrp3cd64cfjyA== X-Received: by 10.99.114.19 with SMTP id n19mr563320pgc.10.1503069515905; Fri, 18 Aug 2017 08:18:35 -0700 (PDT) MIME-Version: 1.0 Received: by 10.100.144.1 with HTTP; Fri, 18 Aug 2017 08:17:55 -0700 (PDT) In-Reply-To: References: <20170818150630.12CE1B814E2@rfc-editor.org> From: Kathleen Moriarty Date: Fri, 18 Aug 2017 11:17:55 -0400 Message-ID: To: Russ Housley Cc: Eric Rescorla , Phillip Hallam-Baker , Rob Stradling , IETF PKIX Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [pkix] [Editorial Errata Reported] RFC6844 (5091) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Aug 2017 15:18:47 -0000 Russ, thanks for the quick response on each of these! On Fri, Aug 18, 2017 at 11:14 AM, Russ Housley wrote: > I do not think the extra space will confuse any implementers. Also, since the LAMPS WG is considering a charter item to update this document, a resolution of "held for future update" seems right to me. > > Russ > > >> On Aug 18, 2017, at 11:06 AM, RFC Errata System wrote: >> >> The following errata report has been submitted for RFC6844, >> "DNS Certification Authority Authorization (CAA) Resource Record". >> >> -------------------------------------- >> You may review the report below and at: >> http://www.rfc-editor.org/errata/eid5091 >> >> -------------------------------------- >> Type: Editorial >> Reported by: Mak Kolybabi >> >> Section: 4 >> >> Original Text >> ------------- >> o If CAA(X) is not empty, R(X) = CAA (X), otherwise >> >> Corrected Text >> -------------- >> o If CAA(X) is not empty, R(X) = CAA(X), otherwise >> >> Notes >> ----- >> Remove unnecessary space after second CAA, making appearances of CAA(X) consistent throughout the section. >> >> Instructions: >> ------------- >> This erratum is currently posted as "Reported". If necessary, please >> use "Reply All" to discuss whether it should be verified or >> rejected. When a decision is reached, the verifying party >> can log in to change the status and edit the report, if necessary. >> >> -------------------------------------- >> RFC6844 (draft-ietf-pkix-caa-15) >> -------------------------------------- >> Title : DNS Certification Authority Authorization (CAA) Resource Record >> Publication Date : January 2013 >> Author(s) : P. Hallam-Baker, R. Stradling >> Category : PROPOSED STANDARD >> Source : Public-Key Infrastructure (X.509) >> Area : Security >> Stream : IETF >> Verifying Party : IESG >> >> _______________________________________________ >> pkix mailing list >> pkix@ietf.org >> https://www.ietf.org/mailman/listinfo/pkix > -- Best regards, Kathleen From nobody Fri Aug 18 09:27:37 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E4151329FE for ; Fri, 18 Aug 2017 09:27:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.19 X-Spam-Level: X-Spam-Status: No, score=-4.19 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5xmrncKCZ7Ta for ; Fri, 18 Aug 2017 09:27:31 -0700 (PDT) Received: from mmextmx2.mcr.colo.comodoca.net (mmextmx2.mcr.colo.comodoca.net [IPv6:2a02:1788:402:c00::c0a8:9cd6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F6001329F3 for ; Fri, 18 Aug 2017 09:27:31 -0700 (PDT) Received: (qmail 7726 invoked by uid 1004); 18 Aug 2017 16:27:28 -0000 Received: from clofcgmail2.cl.office.comodo.net (HELO clofcgmail2.cl.office.comodo.net) (10.104.70.204) by mmextmx2.mcr.colo.comodoca.net (qpsmtpd/0.84) with ESMTP; Fri, 18 Aug 2017 17:27:28 +0100 Received: (qmail 13007 invoked by uid 1012); 18 Aug 2017 16:27:27 -0000 Received: from pool-100-0-244-109.bstnma.fios.verizon.net (HELO VooDoo) (100.0.244.109) (smtp-auth username philliph, mechanism login) by clofcgmail2.cl.office.comodo.net (qpsmtpd/0.84/v0.84-169-ga857589) with (ECDHE-RSA-AES256-GCM-SHA384 encrypted) ESMTPSA; Fri, 18 Aug 2017 12:27:27 -0400 From: "Phillip" To: "'Russ Housley'" , "'Kathleen Moriarty'" , "'Eric Rescorla'" Cc: "'Phillip Hallam-Baker'" , "'Rob Stradling'" , "'IETF PKIX'" References: <20170818150630.12CE1B814E2@rfc-editor.org> In-Reply-To: Date: Fri, 18 Aug 2017 12:27:26 -0400 Message-ID: <00d301d3183e$e1d15df0$a57419d0$@comodo.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQGSOx0SL7MfQHNqOUPxFmmjd3PbhQG6RoP1ov40gYA= Archived-At: Subject: Re: [pkix] [Editorial Errata Reported] RFC6844 (5091) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Aug 2017 16:27:35 -0000 Please reject, Errata 5065 already updates this section, we should avoid errata of errata. https://www.rfc-editor.org/errata_search.php?rfc=6844&rec_status=15&presenta tion=records The second space does not worry me nearly as much as the issues to do with CNAME handling. -----Original Message----- From: Russ Housley [mailto:housley@vigilsec.com] Sent: Friday, August 18, 2017 11:15 AM To: Kathleen Moriarty ; Eric Rescorla Cc: Phillip Hallam-Baker ; Rob Stradling ; IETF PKIX Subject: Re: [pkix] [Editorial Errata Reported] RFC6844 (5091) I do not think the extra space will confuse any implementers. Also, since the LAMPS WG is considering a charter item to update this document, a resolution of "held for future update" seems right to me. Russ > On Aug 18, 2017, at 11:06 AM, RFC Errata System wrote: > > The following errata report has been submitted for RFC6844, "DNS > Certification Authority Authorization (CAA) Resource Record". > > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata/eid5091 > > -------------------------------------- > Type: Editorial > Reported by: Mak Kolybabi > > Section: 4 > > Original Text > ------------- > o If CAA(X) is not empty, R(X) = CAA (X), otherwise > > Corrected Text > -------------- > o If CAA(X) is not empty, R(X) = CAA(X), otherwise > > Notes > ----- > Remove unnecessary space after second CAA, making appearances of CAA(X) consistent throughout the section. > > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or rejected. > When a decision is reached, the verifying party can log in to change > the status and edit the report, if necessary. > > -------------------------------------- > RFC6844 (draft-ietf-pkix-caa-15) > -------------------------------------- > Title : DNS Certification Authority Authorization (CAA) Resource Record > Publication Date : January 2013 > Author(s) : P. Hallam-Baker, R. Stradling > Category : PROPOSED STANDARD > Source : Public-Key Infrastructure (X.509) > Area : Security > Stream : IETF > Verifying Party : IESG > > _______________________________________________ > pkix mailing list > pkix@ietf.org > https://www.ietf.org/mailman/listinfo/pkix From nobody Fri Aug 18 13:02:38 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60EC11321EA for ; Fri, 18 Aug 2017 13:02:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.501 X-Spam-Level: X-Spam-Status: No, score=-0.501 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B560PQ1XfNwn for ; Fri, 18 Aug 2017 13:02:35 -0700 (PDT) Received: from mail2.safelayer.com (mail2.safelayer.com [80.25.227.156]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A3231320BB for ; Fri, 18 Aug 2017 13:02:34 -0700 (PDT) Received: from [192.168.8.23] (port=60210 helo=mailmad.safelayer.lan) by mail2.safelayer.com with esmtp (Exim 4.82_1-5b7a7c0-XX) (envelope-from ) id 1dinTI-0008GV-27 for pkix@ietf.org; Fri, 18 Aug 2017 22:02:20 +0200 Auto-Submitted: auto-generated From: Cesar Armenta To: pkix@ietf.org Message-ID: Date: Fri, 18 Aug 2017 22:02:20 +0200 X-MIMETrack: Serialize by Router on mailmad/SFLY(Release 9.0.1FP8|February 23, 2017) at 18/08/2017 22:02:20 MIME-Version: 1.0 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: quoted-printable Archived-At: Subject: [pkix] AUTO: Cesar Armenta is out of office (returning 28/08/2017) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Aug 2017 20:02:36 -0000 I am out of the office until 28/08/2017. Me encuentro fuera de la oficina hasta el 28/08/2017. Si se trata de alguna cuesti=F3n urgente, por favor, escriba a support@safelayer.com I am out of the office until August 28th 2017 For any urgent matters, please contact support@safelayer.com Note: This is an automated response to your message "pkix Digest, Vol = 97, Issue 1" sent on 18/08/2017 21:00:16. This is the only notification you will receive while this person is awa= y.= From nobody Tue Aug 22 09:58:26 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE1A613213F; Tue, 22 Aug 2017 09:58:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vxQJKZjk24Kg; Tue, 22 Aug 2017 09:58:16 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E36E132026; Tue, 22 Aug 2017 09:58:16 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 59981B8106A; Tue, 22 Aug 2017 09:57:48 -0700 (PDT) To: philliph@comodo.com, philliph@comodo.com, rob.stradling@comodo.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: ekr@rtfm.com, iesg@ietf.org, pkix@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20170822165748.59981B8106A@rfc-editor.org> Date: Tue, 22 Aug 2017 09:57:48 -0700 (PDT) Archived-At: Subject: [pkix] [Errata Held for Document Update] RFC6844 (5065) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Aug 2017 16:58:18 -0000 The following errata report has been held for document update for RFC6844, "DNS Certification Authority Authorization (CAA) Resource Record". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5065 -------------------------------------- Status: Held for Document Update Type: Technical Reported by: Phillip Hallam-Baker Date Reported: 2017-07-10 Held by: EKR (IESG) Section: 4 Original Text ------------- Let CAA(X) be the record set returned in response to performing a CAA record query on the label X, P(X) be the DNS label immediately above X in the DNS hierarchy, and A(X) be the target of a CNAME or DNAME alias record specified at the label X. o If CAA(X) is not empty, R(X) = CAA (X), otherwise o If A(X) is not null, and R(A(X)) is not empty, then R(X) = R(A(X)), otherwise o If X is not a top-level domain, then R(X) = R(P(X)), otherwise o R(X) is empty. Corrected Text -------------- Let CAA(X) be the record set returned in response to performing a CAA record query on the label X, P(X) be the DNS label immediately above X in the DNS hierarchy, and A(X) be the target of a CNAME or DNAME alias record chain specified at the label X. o If CAA(X) is not empty, R(X) = CAA (X), otherwise o If A(X) is not null, and CAA(A(X)) is not empty, then R(X) = CAA(A(X)), otherwise o If X is not a top-level domain, then R(X) = R(P(X)), otherwise o R(X) is empty. Thus, when a search at node X returns a CNAME record, the CA will follow the CNAME record chain to its target. If the target label contains a CAA record, it is returned. ?O?therwise, the CA continues the search at the parent of node X. Note that the search does not include the parent of a target of a CNAME record (except when the CNAME points back to its own path). To prevent resource exhaustion attacks, CAs SHOULD limit the length of CNAME chains that are accepted. However CAs MUST process CNAME chains that contain 8 or fewer CNAME records. Notes ----- This is the updated errata to replace the ones previously deleted. It has been reviewed by all the parties concerned. Since this is a breaking change, this will have to go to hold for document update. The LAMPS working group is currently considering a more radical re-working of the CAA discovery scheme as a work item for its new charter. I will be in Prague to discuss... -------------------------------------- RFC6844 (draft-ietf-pkix-caa-15) -------------------------------------- Title : DNS Certification Authority Authorization (CAA) Resource Record Publication Date : January 2013 Author(s) : P. Hallam-Baker, R. Stradling Category : PROPOSED STANDARD Source : Public-Key Infrastructure (X.509) Area : Security Stream : IETF Verifying Party : IESG From nobody Tue Aug 22 10:29:39 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C0CF1321A3 for ; Tue, 22 Aug 2017 10:29:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C06T7vWYpB2T for ; Tue, 22 Aug 2017 10:29:36 -0700 (PDT) Received: from mail-pg0-x232.google.com (mail-pg0-x232.google.com [IPv6:2607:f8b0:400e:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C7D5132031 for ; Tue, 22 Aug 2017 10:29:36 -0700 (PDT) Received: by mail-pg0-x232.google.com with SMTP id s14so13205182pgs.1 for ; Tue, 22 Aug 2017 10:29:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=TsBz6cUgmM/GJ2DCEEhsHrR7UyCvgkKkAevKpyiyzbM=; b=Ju1GtLrogd0ikCk5vKOrMiuPx/Soc1Y4x4wuMbGE7zuTdiC+scKbiDUiAQ0wQeTxAk +yvDIcglYc8bnbsHz05VIvY1BKB1fMelqhuRgwtxkirj2n439H9NZ36mNlvVKD3TbhG2 sJ37YPJ5D3mDrqHDSEAlQF/2Dnue6ztrAIphB6Vz8YEvWe3XAv3MyM569R1JO1DiUuH7 T5LxvbphGJsS8fQezTEYFbkkoeOcyc6SRUvQQK6fPxzk8gCvagOI5P29329d1gx7ZlPn 053L4JZX6Y61gCvhHQkVm1XGaathp5GNT4/EhNDBKxBhTDYm+DGZA88zQhLW7DU199YT tfsQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=TsBz6cUgmM/GJ2DCEEhsHrR7UyCvgkKkAevKpyiyzbM=; b=ZisVxz+OpuXy3OgjK9ofVJ2Lnp4jyfBYzLjKrFfbV7Cm6rsM1h7r/rLjmURGpvfCPO 6PEfTH0PHQCithOz9CZdRQixGTkPbgECpDw2s8MrRhMd6asrfkkeKbLxqe5RDnVvNB0V Eh66NNPQTri9IW2Bnp1T0YbFRcyjf1B/YBw96FWrm3Gefpd6FBmxjsn3KhLcZLeznLSx JVVU2gZjJAvApjNOJD0CGYvs9Fo9t1uOHvQhXGfXLfNKJI6zSAQeqOvSbk29VicOHAGZ 666S6bPaHfiEr0Ozqh5puS4HgQe3SP+LAkcMBoKMex8TSCcJSoFv6hdDeFqF+hDSkguF n4cg== X-Gm-Message-State: AHYfb5iRBsltGXTbMcoW+Uzk2NNyO4xSFOMlh6ueNXGjjaKt6rnQ3NkR r1YypluYR9pIyGqv58MROQoBlRhw8w== X-Received: by 10.84.210.175 with SMTP id a44mr1584763pli.274.1503422975672; Tue, 22 Aug 2017 10:29:35 -0700 (PDT) MIME-Version: 1.0 Received: by 10.100.144.1 with HTTP; Tue, 22 Aug 2017 10:28:55 -0700 (PDT) In-Reply-To: <00d301d3183e$e1d15df0$a57419d0$@comodo.com> References: <20170818150630.12CE1B814E2@rfc-editor.org> <00d301d3183e$e1d15df0$a57419d0$@comodo.com> From: Kathleen Moriarty Date: Tue, 22 Aug 2017 13:28:55 -0400 Message-ID: To: Phillip Cc: Russ Housley , Eric Rescorla , Phillip Hallam-Baker , Rob Stradling , IETF PKIX Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [pkix] [Editorial Errata Reported] RFC6844 (5091) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Aug 2017 17:29:38 -0000 Thanks, Philip. I see your point on errata of errata, but your errata didn't fix the space, so HFDU seems right to me so this change isn't forgotten. Best regards, Kathleen On Fri, Aug 18, 2017 at 12:27 PM, Phillip wrote: > Please reject, Errata 5065 already updates this section, we should avoid > errata of errata. > > https://www.rfc-editor.org/errata_search.php?rfc=6844&rec_status=15&presenta > tion=records > > The second space does not worry me nearly as much as the issues to do with > CNAME handling. > > > -----Original Message----- > From: Russ Housley [mailto:housley@vigilsec.com] > Sent: Friday, August 18, 2017 11:15 AM > To: Kathleen Moriarty ; Eric Rescorla > > Cc: Phillip Hallam-Baker ; Rob Stradling > ; IETF PKIX > Subject: Re: [pkix] [Editorial Errata Reported] RFC6844 (5091) > > I do not think the extra space will confuse any implementers. Also, since > the LAMPS WG is considering a charter item to update this document, a > resolution of "held for future update" seems right to me. > > Russ > > >> On Aug 18, 2017, at 11:06 AM, RFC Errata System > wrote: >> >> The following errata report has been submitted for RFC6844, "DNS >> Certification Authority Authorization (CAA) Resource Record". >> >> -------------------------------------- >> You may review the report below and at: >> http://www.rfc-editor.org/errata/eid5091 >> >> -------------------------------------- >> Type: Editorial >> Reported by: Mak Kolybabi >> >> Section: 4 >> >> Original Text >> ------------- >> o If CAA(X) is not empty, R(X) = CAA (X), otherwise >> >> Corrected Text >> -------------- >> o If CAA(X) is not empty, R(X) = CAA(X), otherwise >> >> Notes >> ----- >> Remove unnecessary space after second CAA, making appearances of CAA(X) > consistent throughout the section. >> >> Instructions: >> ------------- >> This erratum is currently posted as "Reported". If necessary, please >> use "Reply All" to discuss whether it should be verified or rejected. >> When a decision is reached, the verifying party can log in to change >> the status and edit the report, if necessary. >> >> -------------------------------------- >> RFC6844 (draft-ietf-pkix-caa-15) >> -------------------------------------- >> Title : DNS Certification Authority Authorization (CAA) > Resource Record >> Publication Date : January 2013 >> Author(s) : P. Hallam-Baker, R. Stradling >> Category : PROPOSED STANDARD >> Source : Public-Key Infrastructure (X.509) >> Area : Security >> Stream : IETF >> Verifying Party : IESG >> >> _______________________________________________ >> pkix mailing list >> pkix@ietf.org >> https://www.ietf.org/mailman/listinfo/pkix > > -- Best regards, Kathleen From nobody Tue Aug 22 10:31:14 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F8041326F6; Tue, 22 Aug 2017 10:31:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lSD7HlCSoXGS; Tue, 22 Aug 2017 10:31:04 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADFFE1321A3; Tue, 22 Aug 2017 10:31:04 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id C30CFB80DE0; Tue, 22 Aug 2017 10:30:36 -0700 (PDT) To: mak@kolybabi.com, philliph@comodo.com, rob.stradling@comodo.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: Kathleen.Moriarty.ietf@gmail.com, iesg@ietf.org, pkix@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20170822173036.C30CFB80DE0@rfc-editor.org> Date: Tue, 22 Aug 2017 10:30:36 -0700 (PDT) Archived-At: Subject: [pkix] [Errata Held for Document Update] RFC6844 (5091) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Aug 2017 17:31:06 -0000 The following errata report has been held for document update for RFC6844, "DNS Certification Authority Authorization (CAA) Resource Record". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5091 -------------------------------------- Status: Held for Document Update Type: Editorial Reported by: Mak Kolybabi Date Reported: 2017-08-18 Held by: Kathleen Moriarty (IESG) Section: 4 Original Text ------------- o If CAA(X) is not empty, R(X) = CAA (X), otherwise Corrected Text -------------- o If CAA(X) is not empty, R(X) = CAA(X), otherwise Notes ----- Remove unnecessary space after second CAA, making appearances of CAA(X) consistent throughout the section. This builds on errata 5065, where this error wasn't fixed. -------------------------------------- RFC6844 (draft-ietf-pkix-caa-15) -------------------------------------- Title : DNS Certification Authority Authorization (CAA) Resource Record Publication Date : January 2013 Author(s) : P. Hallam-Baker, R. Stradling Category : PROPOSED STANDARD Source : Public-Key Infrastructure (X.509) Area : Security Stream : IETF Verifying Party : IESG From nobody Tue Aug 22 10:35:03 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D67EA1329DC; Tue, 22 Aug 2017 10:35:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8wiU8KGa-elK; Tue, 22 Aug 2017 10:35:00 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 890A6132328; Tue, 22 Aug 2017 10:35:00 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id BE5CCB80EBD; Tue, 22 Aug 2017 10:34:31 -0700 (PDT) To: tom@tomclegg.ca, philliph@comodo.com, rob.stradling@comodo.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: Kathleen.Moriarty.ietf@gmail.com, iesg@ietf.org, pkix@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20170822173431.BE5CCB80EBD@rfc-editor.org> Date: Tue, 22 Aug 2017 10:34:31 -0700 (PDT) Archived-At: Subject: [pkix] [Errata Rejected] RFC6844 (4515) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Aug 2017 17:35:02 -0000 The following errata report has been rejected for RFC6844, "DNS Certification Authority Authorization (CAA) Resource Record". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid4515 -------------------------------------- Status: Rejected Type: Technical Reported by: Tom Clegg Date Reported: 2015-10-29 Rejected by: Kathleen Moriarty (IESG) Section: 4 Original Text ------------- o If A(X) is not null, and R(A(X)) is not empty, then R(X) = R(A(X)), otherwise Corrected Text -------------- o If A(X) is not null, and CAA(A(X)) is not empty, then R(X) = CAA(A(X)), otherwise Notes ----- R is the algorithm being described here, so R(A(X)) means a recursive search on the CNAME target, including its parents. However, the example that follows, Parent(Alias(x.y.z)) is not part of the search. Either the algorithm is incorrectly specified, or the example is incomplete. While this change is correct, it has already been accepted with HFDU in errata 5065. --VERIFIER NOTES-- Errata 5065 was accepted first and covers this error. -------------------------------------- RFC6844 (draft-ietf-pkix-caa-15) -------------------------------------- Title : DNS Certification Authority Authorization (CAA) Resource Record Publication Date : January 2013 Author(s) : P. Hallam-Baker, R. Stradling Category : PROPOSED STANDARD Source : Public-Key Infrastructure (X.509) Area : Security Stream : IETF Verifying Party : IESG From nobody Tue Aug 22 10:36:07 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC38D1329E5; Tue, 22 Aug 2017 10:36:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1PrBStK5JAzP; Tue, 22 Aug 2017 10:36:05 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1F6571329E2; Tue, 22 Aug 2017 10:36:05 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 4950FB80EC8; Tue, 22 Aug 2017 10:35:37 -0700 (PDT) To: mak@kolybabi.com, philliph@comodo.com, rob.stradling@comodo.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: Kathleen.Moriarty.ietf@gmail.com, iesg@ietf.org, pkix@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20170822173537.4950FB80EC8@rfc-editor.org> Date: Tue, 22 Aug 2017 10:35:37 -0700 (PDT) Archived-At: Subject: [pkix] [Errata Held for Document Update] RFC6844 (5090) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Aug 2017 17:36:07 -0000 The following errata report has been held for document update for RFC6844, "DNS Certification Authority Authorization (CAA) Resource Record". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5090 -------------------------------------- Status: Held for Document Update Type: Editorial Reported by: Mak Kolybabi Date Reported: 2017-08-18 Held by: Kathleen Moriarty (IESG) Section: 2.2 Original Text ------------- Resource Record Set (RRSet): A set of Resource Records or a particular owner name, class, and type. The time to live on all RRs with an RRSet is always the same, but the data may be different among RRs in the RRSet. Corrected Text -------------- Resource Record Set (RRSet): A set of Resource Records for a particular owner name, class, and type. The time to live on all RRs with an RRSet is always the same, but the data may be different among RRs in the RRSet. Notes ----- Changed 'or' to 'for', the former not making sense in this context and being a likely typo. -------------------------------------- RFC6844 (draft-ietf-pkix-caa-15) -------------------------------------- Title : DNS Certification Authority Authorization (CAA) Resource Record Publication Date : January 2013 Author(s) : P. Hallam-Baker, R. Stradling Category : PROPOSED STANDARD Source : Public-Key Infrastructure (X.509) Area : Security Stream : IETF Verifying Party : IESG From nobody Fri Aug 25 11:19:22 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08D0C132A19 for ; Fri, 25 Aug 2017 11:19:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B612YqV3JLCn for ; Fri, 25 Aug 2017 11:19:19 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADE75132256 for ; Fri, 25 Aug 2017 11:19:19 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 1F69BB801DC; Fri, 25 Aug 2017 11:18:48 -0700 (PDT) To: philliph@comodo.com, rob.stradling@comodo.com, Kathleen.Moriarty.ietf@gmail.com, ekr@rtfm.com, kent@bbn.com, stefan@aaa-sec.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: agwa@andrewayer.name, pkix@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20170825181848.1F69BB801DC@rfc-editor.org> Date: Fri, 25 Aug 2017 11:18:48 -0700 (PDT) Archived-At: Subject: [pkix] [Technical Errata Reported] RFC6844 (5097) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 18:19:21 -0000 The following errata report has been submitted for RFC6844, "DNS Certification Authority Authorization (CAA) Resource Record". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5097 -------------------------------------- Type: Technical Reported by: Andrew Ayer Section: 4 Original Text ------------- Let CAA(X) be the record set returned in response to performing a CAA record query on the label X, P(X) be the DNS label immediately above X in the DNS hierarchy, and A(X) be the target of a CNAME or DNAME alias record specified at the label X. Corrected Text -------------- Let CAA(X) be the record set returned in response to performing a CAA record query on the label X, P(X) be the DNS label immediately above X in the DNS hierarchy, and A(X) be the target of a CNAME alias record specified at the label X. Notes ----- As currently worded, section 4 tells the CA to look up a DNAME record specified *at* the label X, and if one is found, look up a CAA record at the DNAME's target. This is contrary to the behavior of DNAME as specified in RFC 6672, which is to redirect names subordinate of the DNAME but not the DNAME itself. Since DNAMEs cause CNAMEs to be synthesized for subordinate names, there is no need for implementers of CAA to care about the presence of DNAMEs at all, so this erratum simply removes any mention of DNAME. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC6844 (draft-ietf-pkix-caa-15) -------------------------------------- Title : DNS Certification Authority Authorization (CAA) Resource Record Publication Date : January 2013 Author(s) : P. Hallam-Baker, R. Stradling Category : PROPOSED STANDARD Source : Public-Key Infrastructure (X.509) Area : Security Stream : IETF Verifying Party : IESG