From housley@vigilsec.com Fri Mar 4 16:30:52 2011 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A5193A69FA for ; Fri, 4 Mar 2011 16:30:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.619 X-Spam-Level: X-Spam-Status: No, score=-102.619 tagged_above=-999 required=5 tests=[AWL=-0.020, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JqmL3nxeQmPy for ; Fri, 4 Mar 2011 16:30:51 -0800 (PST) Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by core3.amsl.com (Postfix) with ESMTP id C8C5028C0E3 for ; Fri, 4 Mar 2011 16:30:33 -0800 (PST) Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id 4E4C2F2405A for ; Fri, 4 Mar 2011 19:31:55 -0500 (EST) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id z2mfJz2wdDNL for ; Fri, 4 Mar 2011 19:31:40 -0500 (EST) Received: from [192.168.2.101] (pool-71-178-218-117.washdc.fios.verizon.net [71.178.218.117]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 4BC96F24010 for ; Fri, 4 Mar 2011 19:31:54 -0500 (EST) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Fri, 4 Mar 2011 19:31:41 -0500 References: <20110304232222.1291.31805.idtracker@localhost> To: IETF SMIME Message-Id: Mime-Version: 1.0 (Apple Message framework v1082) X-Mailer: Apple Mail (2.1082) Subject: [smime] Fwd: Last Call: (Suite B in Secure/Multipurpose Internet Mail Extensions (S/MIME)) to Informational RFC X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2011 00:30:52 -0000 Begin forwarded message: > From: The IESG > Date: March 4, 2011 6:22:22 PM EST > To: IETF-Announce > Subject: Last Call: (Suite B in = Secure/Multipurpose Internet Mail Extensions (S/MIME)) to Informational = RFC > Reply-To: ietf@ietf.org >=20 >=20 > The IESG has received a request from an individual submitter to = consider > the following document: > - 'Suite B in Secure/Multipurpose Internet Mail Extensions (S/MIME)' > as an Informational RFC >=20 > The IESG plans to make a decision in the next few weeks, and solicits > final comments on this action. Please send substantive comments to the > ietf@ietf.org mailing lists by 2011-04-01. Exceptionally, comments may = be > sent to iesg@ietf.org instead. In either case, please retain the > beginning of the Subject line to allow automated sorting. >=20 > The file can be obtained via > http://datatracker.ietf.org/doc/draft-housley-rfc5008bis/ >=20 > IESG discussion can be tracked via > http://datatracker.ietf.org/doc/draft-housley-rfc5008bis/ >=20 >=20 >=20 > The following IPR Declarations may be related to this I-D: >=20 > /ipr/1501/ From anders.rundgren@telia.com Thu Mar 10 23:26:07 2011 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E8A163A68F7 for ; Thu, 10 Mar 2011 23:26:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.549 X-Spam-Level: X-Spam-Status: No, score=-3.549 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hVME8ZII9Nyc for ; Thu, 10 Mar 2011 23:26:07 -0800 (PST) Received: from smtp-out21.han.skanova.net (smtp-out21.han.skanova.net [195.67.226.208]) by core3.amsl.com (Postfix) with ESMTP id F0A8E3A68E4 for ; Thu, 10 Mar 2011 23:26:06 -0800 (PST) Received: from [192.168.0.202] (81.232.45.215) by smtp-out21.han.skanova.net (8.5.133) (authenticated as u36408181) id 4D6517A1005FEFFA for smime@ietf.org; Fri, 11 Mar 2011 08:27:24 +0100 Message-ID: <4D79CEE4.9000109@telia.com> Date: Fri, 11 Mar 2011 08:27:32 +0100 From: Anders Rundgren User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.15) Gecko/20110303 Thunderbird/3.1.9 MIME-Version: 1.0 To: smime@ietf.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: [smime] Secure e-Mail NG? X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Mar 2011 07:26:08 -0000 As an active e-mail user I have always found email indispensable. That e-mail also is the least secure messaging system there is of course a nuisance. Although e-mail hast lost some of its importance to other communication systems, I still think it is worth an upgrade. STARTTLS is nice but its key handling and integration in e-mail clients is not particularly useful. Sending non-encrypted messages should be an exception. IMHO, STARTTLS, DOMKEY and email clients could be combined so that we get domain-secured e-mail as default. Or is it better to create an entirely new messaging system to get rid of the legacy? I believe the update frequency of today makes client upgrades a no-issue. Anders From francesco.gennai@isti.cnr.it Fri Mar 11 06:26:24 2011 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DE6823A6C26 for ; Fri, 11 Mar 2011 06:26:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.719 X-Spam-Level: X-Spam-Status: No, score=-0.719 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nd3eOBgZmaKp for ; Fri, 11 Mar 2011 06:26:24 -0800 (PST) Received: from mx2.isti.cnr.it (mx2.isti.cnr.it [194.119.192.4]) by core3.amsl.com (Postfix) with ESMTP id C79DD3A6BD9 for ; Fri, 11 Mar 2011 06:26:22 -0800 (PST) Received: from notarynodsn-daemon.mx.isti.cnr.it by mx.isti.cnr.it (PMDF V6.5-x5 #31826) id <01NYSIB83TSWQGOE7I@mx.isti.cnr.it> for smime@ietf.org; Fri, 11 Mar 2011 15:27:15 +0100 (MET) Received: from mx.isti.cnr.it by mx.isti.cnr.it (PMDF V6.5-x5 #31825) id <01NYSGTX7ZSGPI0MS8@mx.isti.cnr.it>; Fri, 11 Mar 2011 15:27:15 +0100 (MET) Date: Fri, 11 Mar 2011 15:16:37 +0100 (MET) From: Francesco Gennai In-reply-to: "Your message dated Fri, 11 Mar 2011 08:27:32 +0100" <4D79CEE4.9000109@telia.com> To: Anders Rundgren Message-id: <01NYSIB7XCJOPI0MS8@mx.isti.cnr.it> MIME-version: 1.0 Content-type: TEXT/PLAIN; CHARSET=us-ascii X-INSM-ip-source: localhost X-INSM-ip-source: localhost X-INSM-ip-source: localhost Cc: smime@ietf.org Subject: Re: [smime] Secure e-Mail NG? X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Mar 2011 14:26:25 -0000 Hi Anders, also if it doesn't represent an answer to your points of interest it could be interesting to have a look at the following draft: http://datatracker.ietf.org/doc/draft-gennai-smime-cnipa-pec/ that describes a system currently used in Italy. It is more oriented to "certified email" than "secured email". Francesco > As an active e-mail user I have always found email indispensable. > That e-mail also is the least secure messaging system there is of course > a nuisance. > Although e-mail hast lost some of its importance to other communication > systems, I still think it is worth an upgrade. > STARTTLS is nice but its key handling and integration in e-mail clients is > not particularly useful. Sending non-encrypted messages should be an > exception. > IMHO, STARTTLS, DOMKEY and email clients could be combined so that we > get domain-secured e-mail as default. > Or is it better to create an entirely new messaging system to get rid of > the legacy? > I believe the update frequency of today makes client upgrades a no-issue. > Anders > _______________________________________________ > smime mailing list > smime@ietf.org > https://www.ietf.org/mailman/listinfo/smime From ppatterson@carillon.ca Fri Mar 11 06:34:41 2011 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0C2B73A6C15 for ; Fri, 11 Mar 2011 06:34:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C8HQI8ank-lJ for ; Fri, 11 Mar 2011 06:34:39 -0800 (PST) Received: from mail.carillon.ca (mail.carillon.ca [207.115.107.27]) by core3.amsl.com (Postfix) with ESMTP id 75D033A690F for ; Fri, 11 Mar 2011 06:34:39 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.carillon.ca (Postfix) with ESMTP id A654E32805B; Fri, 11 Mar 2011 09:30:47 -0500 (EST) Received: from mail.carillon.ca ([127.0.0.1]) by localhost (rhea.carillon.ca [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X8PDTUOCCcld; Fri, 11 Mar 2011 09:30:46 -0500 (EST) Received: from [192.168.6.200] (69-196-152-118.dsl.teksavvy.com [69.196.152.118]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.carillon.ca (Postfix) with ESMTPSA id 2BCC4328044; Fri, 11 Mar 2011 09:30:46 -0500 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Patrick Patterson In-Reply-To: <4D79CEE4.9000109@telia.com> Date: Fri, 11 Mar 2011 09:35:55 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <351516ED-7AA4-4668-A1FB-D5408D49946A@carillon.ca> References: <4D79CEE4.9000109@telia.com> To: Anders Rundgren X-Mailer: Apple Mail (2.1082) Cc: smime@ietf.org Subject: Re: [smime] Secure e-Mail NG? X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Mar 2011 14:34:41 -0000 Hi Anders: You may be interested in PLASMA - the draft is: http://www.ietf.org/id/draft-freeman-message-access-control-req-00.txt I believe there will be a BOF at the upcoming meeting in Prague. Best Regards, Patrick. On 2011-03-11, at 2:27 AM, Anders Rundgren wrote: > As an active e-mail user I have always found email indispensable. > That e-mail also is the least secure messaging system there is of = course a nuisance. >=20 > Although e-mail hast lost some of its importance to other = communication systems, > I still think it is worth an upgrade. >=20 > STARTTLS is nice but its key handling and integration in e-mail = clients is not > particularly useful. Sending non-encrypted messages should be an = exception. >=20 > IMHO, STARTTLS, DOMKEY and email clients could be combined so that we > get domain-secured e-mail as default. >=20 > Or is it better to create an entirely new messaging system to get rid = of the legacy? >=20 > I believe the update frequency of today makes client upgrades a = no-issue. >=20 > Anders > _______________________________________________ > smime mailing list > smime@ietf.org > https://www.ietf.org/mailman/listinfo/smime --- Patrick Patterson President and Chief PKI Architect Carillon Information Security Inc. http://www.carillon.ca tel: +1 514 485 0789 mobile: +1 514 994 8699 fax: +1 450 424 9559 From anders.rundgren@telia.com Fri Mar 11 06:51:56 2011 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0A82B3A6C18 for ; Fri, 11 Mar 2011 06:51:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.556 X-Spam-Level: X-Spam-Status: No, score=-3.556 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9h35kE0MNAzf for ; Fri, 11 Mar 2011 06:51:55 -0800 (PST) Received: from smtp-out11.han.skanova.net (smtp-out11.han.skanova.net [195.67.226.200]) by core3.amsl.com (Postfix) with ESMTP id 8918A3A68FE for ; Fri, 11 Mar 2011 06:51:54 -0800 (PST) Received: from [192.168.0.202] (81.232.45.215) by smtp-out11.han.skanova.net (8.5.133) (authenticated as u36408181) id 4D6512CA00632AF8; Fri, 11 Mar 2011 15:53:03 +0100 Message-ID: <4D7A3756.6090204@telia.com> Date: Fri, 11 Mar 2011 15:53:10 +0100 From: Anders Rundgren User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.15) Gecko/20110303 Thunderbird/3.1.9 MIME-Version: 1.0 To: Francesco Gennai References: <01NYSIB7XCJOPI0MS8@mx.isti.cnr.it> In-Reply-To: <01NYSIB7XCJOPI0MS8@mx.isti.cnr.it> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: smime@ietf.org Subject: Re: [smime] Secure e-Mail NG? X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Mar 2011 14:51:56 -0000 Hi Francesco, Yes, "certified mail" is pretty much what I would like to see on a major scale. It seems that you also pushed TLS rather than S/MIME encryption. Good Luck BTW! Anders On 2011-03-11 15:16, Francesco Gennai wrote: > Hi Anders, > > also if it doesn't represent an answer to your points of interest it could > be interesting to have a look at the following draft: > > http://datatracker.ietf.org/doc/draft-gennai-smime-cnipa-pec/ > > that describes a system currently used in Italy. > > It is more oriented to "certified email" than "secured email". > > Francesco > >> As an active e-mail user I have always found email indispensable. >> That e-mail also is the least secure messaging system there is of course >> a nuisance. > >> Although e-mail hast lost some of its importance to other communication >> systems, I still think it is worth an upgrade. > >> STARTTLS is nice but its key handling and integration in e-mail clients is >> not particularly useful. Sending non-encrypted messages should be an >> exception. > >> IMHO, STARTTLS, DOMKEY and email clients could be combined so that we >> get domain-secured e-mail as default. > >> Or is it better to create an entirely new messaging system to get rid of >> the legacy? > >> I believe the update frequency of today makes client upgrades a no-issue. > >> Anders >> _______________________________________________ >> smime mailing list >> smime@ietf.org >> https://www.ietf.org/mailman/listinfo/smime > > From paul.hoffman@vpnc.org Mon Mar 28 08:40:42 2011 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DF49C3A684A for ; Mon, 28 Mar 2011 08:40:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YfVNuxeJ2cB4 for ; Mon, 28 Mar 2011 08:40:42 -0700 (PDT) Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2001:4870:a30c:41::81]) by core3.amsl.com (Postfix) with ESMTP id B76833A6810 for ; Mon, 28 Mar 2011 08:40:41 -0700 (PDT) Received: from dhcp-45cf.meeting.ietf.org (dhcp-45cf.meeting.ietf.org [130.129.69.207]) (authenticated bits=0) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id p2SFgGhK006336 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Mon, 28 Mar 2011 08:42:18 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) From: Paul Hoffman Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Mon, 28 Mar 2011 17:42:15 +0200 References: <20110328121905.23857.9818.idtracker@localhost> To: smime@ietf.org Message-Id: Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) Subject: [smime] Fwd: Protocol Action: 'Additional New ASN.1 Modules for the Cryptographic Message Syntax (CMS) and the Public Key Infrastructure Using X.509 (PKIX)' to Proposed Standard (draft-turner-additional-new-asn-08.txt) X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Mar 2011 15:40:43 -0000 Begin forwarded message: > From: The IESG > Date: March 28, 2011 2:19:05 PM GMT+02:00 > To: IETF-Announce > Cc: RFC Editor > Subject: Protocol Action: 'Additional New ASN.1 Modules for the = Cryptographic Message Syntax (CMS) and the Public Key Infrastructure = Using X.509 (PKIX)' to Proposed Standard = (draft-turner-additional-new-asn-08.txt) >=20 > The IESG has approved the following document: > - 'Additional New ASN.1 Modules for the Cryptographic Message Syntax > (CMS) and the Public Key Infrastructure Using X.509 (PKIX)' > (draft-turner-additional-new-asn-08.txt) as a Proposed Standard >=20 > This document has been reviewed in the IETF but is not the product of = an > IETF Working Group. >=20 > The IESG contact person is Tim Polk. >=20 > A URL of this Internet Draft is: > http://datatracker.ietf.org/doc/draft-turner-additional-new-asn/ >=20 >=20 >=20 >=20 > Technical Summary >=20 > The document updates existing ASN.1 modules from the 1988 > specification to the 2008 specification. This involves the > use of previously defined classes as well as defining some > new classes. Some modules are revised from RFC 5911 to deal > with addition separation that has been found to be required > through use of these modules. >=20 > Working Group Summary >=20 > This document is not a product of any IETF Working Group. > The document was presented to the PKIX Working Group and > no opposition to publication was registered. >=20 > Document Quality >=20 > Portions of the document have been used by one of the > authors in an implementation for CMS. >=20 > Personnel >=20 > Tim Polk is the sponsoring AD and Jim Schaad is the document > Shepherd for this document. He has reviewed this version of = the > document and believes it is ready for publication. >=20 > _______________________________________________ > IETF-Announce mailing list > IETF-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/ietf-announce From blaker@gmail.com Tue Mar 29 23:31:49 2011 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A854D3A6B01 for ; Tue, 29 Mar 2011 23:31:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.599 X-Spam-Level: X-Spam-Status: No, score=-103.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zpvgrnVRs1dU for ; Tue, 29 Mar 2011 23:31:48 -0700 (PDT) Received: from mail-wy0-f172.google.com (mail-wy0-f172.google.com [74.125.82.172]) by core3.amsl.com (Postfix) with ESMTP id 6BCC53A6A9A for ; Tue, 29 Mar 2011 23:31:48 -0700 (PDT) Received: by wyb29 with SMTP id 29so879061wyb.31 for ; Tue, 29 Mar 2011 23:33:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:date:message-id:subject:from:to :content-type; bh=6XqA6JzNM/0hKssB2CIICNmfo37tPWvMr1dAG8SN9sU=; b=F20WCqdPxuHEd2uRC1If8CmDDzMdtyTo7bN0S260+HVMiQYynlrkN4Rae7x3wT0w99 utgNk/YtIXgQOWPoV1JRMAFM7Jv/2FkScqsNhR/zm9s+Qi5fg3j+SePng+/2ILNXSLoO BviCd/ahzwKuJg1QrjLdDw6XcP/vISgzw+m0M= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=WM0J8YPu9EPYhfdw4tGwmfqCIsJS6CjUE6zsp0CaNa3bn/X8jWAWSgFhD9ri6XKwJD wthOQciPNwKSAF4kEiyKj4v4Z37WEhL0OkdqzgCG4VKL/ihwWfqSOJMPs0Oaj1s7/jM3 XwBcPN2lez7wdWaaCbcIkHCdGzKwlYSO5YsnE= MIME-Version: 1.0 Received: by 10.216.205.13 with SMTP id i13mr781877weo.36.1301466806519; Tue, 29 Mar 2011 23:33:26 -0700 (PDT) Received: by 10.216.254.80 with HTTP; Tue, 29 Mar 2011 23:33:26 -0700 (PDT) Date: Tue, 29 Mar 2011 23:33:26 -0700 Message-ID: From: Blake Ramsdell To: smime@ietf.org Content-Type: text/plain; charset=ISO-8859-1 Subject: [smime] draft-gutmann-cms-hmac-enc comments requested X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Mar 2011 06:31:49 -0000 Peter Gutmann would be interested in any comments about his draft: Title : Using MAC-authenticated Encryption in the Cryptographic Message Syntax (CMS) Author(s) : P. Gutmann Filename : draft-gutmann-cms-hmac-enc-03.txt Pages : 19 Date : 2011-03-29 This document specifies the conventions for using MAC-authenticated encryption with the Cryptographic Message Syntax (CMS) authenticated- enveloped-data content type. This mirrors the use of a MAC combined with an encryption algorithm that's already employed in IPsec, SSL/ TLS, and SSH, which is widely supported in existing crypto libraries and hardware, and has been extensively analysed by the crypto community. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-gutmann-cms-hmac-enc-03.txt Blake -- Blake Ramsdell | http://blakeramsdell.com From paul.hoffman@vpnc.org Tue Mar 29 23:46:39 2011 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 81AF03A6859 for ; Tue, 29 Mar 2011 23:46:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1qX4uFc78umL for ; Tue, 29 Mar 2011 23:46:33 -0700 (PDT) Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2001:4870:a30c:41::81]) by core3.amsl.com (Postfix) with ESMTP id 237A33A6982 for ; Tue, 29 Mar 2011 23:46:32 -0700 (PDT) Received: from dhcp-4721.meeting.ietf.org (dhcp-4721.meeting.ietf.org [130.129.71.33]) (authenticated bits=0) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id p2U6m8KT099007 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Tue, 29 Mar 2011 23:48:10 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1084) From: Paul Hoffman In-Reply-To: Date: Wed, 30 Mar 2011 08:48:08 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: smime@ietf.org X-Mailer: Apple Mail (2.1084) Subject: Re: [smime] draft-gutmann-cms-hmac-enc comments requested X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Mar 2011 06:46:39 -0000 On Mar 30, 2011, at 8:33 AM, Blake Ramsdell wrote: > Peter Gutmann would be interested in any comments about his draft: >=20 > Title : Using MAC-authenticated Encryption in the > Cryptographic Message Syntax (CMS) > Author(s) : P. Gutmann > Filename : draft-gutmann-cms-hmac-enc-03.txt > Pages : 19 > Date : 2011-03-29 >=20 > This document specifies the conventions for using MAC-authenticated > encryption with the Cryptographic Message Syntax (CMS) authenticated- > enveloped-data content type. This mirrors the use of a MAC combined > with an encryption algorithm that's already employed in IPsec, SSL/ > TLS, and SSH, which is widely supported in existing crypto libraries > and hardware, and has been extensively analysed by the crypto > community. >=20 > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-gutmann-cms-hmac-enc-03.txt >=20 In specific, it would be good for folks in this group to say whether = they have read the draft and think it is ready for standardization. We = are not a WG any more, so it will be submitted as an Individual = Submission, but the ADs will want to know that it has had "sufficient" = review. Chiming in on this thread with any comments is greatly = appreciated. --Paul Hoffman