From stephen.farrell@cs.tcd.ie Thu Apr 18 12:36:52 2013 Return-Path: X-Original-To: therightkey@ietfa.amsl.com Delivered-To: therightkey@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D71D21F936E for ; Thu, 18 Apr 2013 12:36:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.519 X-Spam-Level: X-Spam-Status: No, score=-102.519 tagged_above=-999 required=5 tests=[AWL=0.080, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V+ypCfpdsdL8 for ; Thu, 18 Apr 2013 12:36:51 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) by ietfa.amsl.com (Postfix) with ESMTP id 80B7021F9080 for ; Thu, 18 Apr 2013 12:36:51 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id D6D08BE59 for ; Thu, 18 Apr 2013 20:36:29 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J22+6ZktwWsA for ; Thu, 18 Apr 2013 20:36:25 +0100 (IST) Received: from [10.87.48.4] (unknown [86.42.29.212]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 90542BE58 for ; Thu, 18 Apr 2013 20:36:25 +0100 (IST) Message-ID: <51704B39.9080108@cs.tcd.ie> Date: Thu, 18 Apr 2013 20:36:25 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130329 Thunderbird/17.0.5 MIME-Version: 1.0 To: "therightkey@ietf.org" References: <20130418174502.3193.20988.idtracker@ietfa.amsl.com> In-Reply-To: <20130418174502.3193.20988.idtracker@ietfa.amsl.com> X-Enigmail-Version: 1.5.1 X-Forwarded-Message-Id: <20130418174502.3193.20988.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: [therightkey] Fwd: Document Action: 'Certificate Transparency' to Experimental RFC (draft-laurie-pki-sunlight-12.txt) X-BeenThere: therightkey@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Apr 2013 19:36:52 -0000 FYI. Thanks to all for the work getting this done and commenting on it, this'll be in the RFC editor queue for some weeks and then the RFC will pop out. I'll be really interested in how the experiment goes. Cheers, S. -------- Original Message -------- Subject: Document Action: 'Certificate Transparency' to Experimental RFC (draft-laurie-pki-sunlight-12.txt) Date: Thu, 18 Apr 2013 10:45:02 -0700 From: The IESG To: IETF-Announce CC: RFC Editor The IESG has approved the following document: - 'Certificate Transparency' (draft-laurie-pki-sunlight-12.txt) as Experimental RFC This document has been reviewed in the IETF but is not the product of an IETF Working Group. The IESG contact person is Stephen Farrell. A URL of this Internet Draft is: http://datatracker.ietf.org/doc/draft-laurie-pki-sunlight/ Technical Summary This document describes an experimental protocol for publicly logging the existence of TLS certificates as they are issued or observed, in a manner that allows anyone to audit certificate authority activity and notice the issuance of suspect certificates, as well as to audit the certificate logs themselves. The intent is that eventually clients would refuse to honor certificates which do not appear in a log, effectively forcing CAs to add all issued certificates to the logs. Logs are network services which implement the protocol operations for submissions and queries that are defined in this document. Working Group Summary This is an AD sponsored document. It has been discussed on therightkey@ietf.org starting in September 2012. It has undergone two IETF last calls, the 2nd due to the authors changing (based on LC comments) to request a TLS codepoint that required IETF Review. There's also a google group list. [1] The plan would be to allow some experimentation to happen. [1] https://groups.google.com/group/certificate-transparency Document Quality Google have an implementation. [2] The document was updated on March 20th to -09 but only to add some new acknowledgements and a clarification about error content. [2] http://code.google.com/p/certificate-transparency/ Personnel Stephen Farrell is the shepherd and AD. From Jeff.Hodges@KingsMountain.com Thu Apr 18 16:18:09 2013 Return-Path: X-Original-To: therightkey@ietfa.amsl.com Delivered-To: therightkey@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DADA721F8FC6 for ; Thu, 18 Apr 2013 16:18:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -98.549 X-Spam-Level: X-Spam-Status: No, score=-98.549 tagged_above=-999 required=5 tests=[IP_NOT_FRIENDLY=0.334, RCVD_IN_SORBS_WEB=1.117, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YnFUS-MLxuqh for ; Thu, 18 Apr 2013 16:18:09 -0700 (PDT) Received: from oproxy7-pub.bluehost.com (oproxy7-pub.bluehost.com [67.222.55.9]) by ietfa.amsl.com (Postfix) with SMTP id 4937521F8FB8 for ; Thu, 18 Apr 2013 16:18:06 -0700 (PDT) Received: (qmail 20374 invoked by uid 0); 18 Apr 2013 23:17:42 -0000 Received: from unknown (HELO box514.bluehost.com) (74.220.219.114) by oproxy7.bluehost.com with SMTP; 18 Apr 2013 23:17:42 -0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=kingsmountain.com; s=default; h=Content-Transfer-Encoding:Content-Type:Subject:To:MIME-Version:From:Date:Message-ID; bh=3Ij/DMSqvRa/6Mm83anNXqpeXJ3MSChBkmK1uFLZB8Y=; b=1634sd9BEj40GCPERq2G01TDofqMrn/rAeAdOXk3uT5x/Qo+vkjICsG4IchxYAXP1/BXIGNwgqMSq+0p443kGgOUMoHtOcvUonqBNt19jJ9239CuVGEkBDgkh+8j2bGG; Received: from [216.113.168.128] (port=56508 helo=[10.244.136.154]) by box514.bluehost.com with esmtpsa (TLSv1:CAMELLIA256-SHA:256) (Exim 4.80) (envelope-from ) id 1USy5G-0006zF-O4 for therightkey@ietf.org; Thu, 18 Apr 2013 17:17:42 -0600 Message-ID: <51707F14.4010301@KingsMountain.com> Date: Thu, 18 Apr 2013 16:17:40 -0700 From: =JeffH User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130330 Thunderbird/17.0.5 MIME-Version: 1.0 To: therightkey@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Identified-User: {11025:box514.bluehost.com:kingsmou:kingsmountain.com} {sentby:smtp auth 216.113.168.128 authed with jeff.hodges+kingsmountain.com} Subject: Re: [therightkey] Document Action: 'Certificate Transparency' to Experimental RFC (draft-laurie-pki-sunlight-12.txt) X-BeenThere: therightkey@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Apr 2013 23:18:10 -0000 way cool. congrats to Ben & AGL & Emilia =JeffH