From nobody Mon Jul 3 10:02:47 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA6AB129A92 for ; Mon, 3 Jul 2017 10:02:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.102 X-Spam-Level: X-Spam-Status: No, score=-0.102 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=andrewayer.name Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XIShKxgLIIR8 for ; Mon, 3 Jul 2017 10:02:43 -0700 (PDT) Received: from alcazar.beanwood.com (alcazar.beanwood.com [70.85.129.230]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3661C126BF6 for ; Mon, 3 Jul 2017 10:02:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=andrewayer.name; s=beanwood20160511; t=1499101362; bh=te0DxPm97wG8am5+iPu9Sk1M3j5OTkXyzuwhjQdqs6Y=; h=Date:From:To:Subject:In-Reply-To:References; b=MFi6b6EIGVdcNe20p5Ov5BoTM7tK9K8YIMdLpGavqTyvAGZIig1+z75IEO9LNIIoC ChEkMni/bJw/OMJtimAB8X/NKQhHzn55iVCDJakXLspp30XxDK1h6loXkiav4Wnk3z TMWKN5qhXaT/71QP1eqV5AXoy1FAkH98g4mNoQHT8WQkJUKQWIdH1gMuh/yEZaHPTi Sx1w563iqCYMbYr5H3egGW2O9/UYvOJLShf4/hCNWiC+YNp7tVA//PGIEQx9h5FDQB 7N3tg4CGYDlhbIM5NG/ZxOZA7lihDlpYNv9nqjlZA267T+UHkBaa4zVqIopDgjLpNb 0CK2Jnw6xzo2g== Date: Mon, 3 Jul 2017 10:02:41 -0700 From: Andrew Ayer To: trans@ietf.org Message-Id: <20170703100241.9dd63b867d0181bae69a3999@andrewayer.name> In-Reply-To: <20170528191028.20f285073eea33a3f23b6b5a@andrewayer.name> References: <20170528191028.20f285073eea33a3f23b6b5a@andrewayer.name> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Trans] Mutability of Certificate Signatures X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Jul 2017 17:02:45 -0000 To get the ball rolling again on fixing this issue, I've submitted a PR which: 1. Changes issuer_key_hash to issuer_key. 2. Adds language to the Monitor section describing what checks a monitor should do to detect signature mutation. https://github.com/google/certificate-transparency-rfcs/pull/270 Regards, Andrew From nobody Tue Jul 4 11:37:43 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91F3813275F for ; Tue, 4 Jul 2017 11:37:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1GbWnkp1-ubv for ; Tue, 4 Jul 2017 11:37:39 -0700 (PDT) Received: from mail-pg0-x231.google.com (mail-pg0-x231.google.com [IPv6:2607:f8b0:400e:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BCE95132760 for ; Tue, 4 Jul 2017 11:37:39 -0700 (PDT) Received: by mail-pg0-x231.google.com with SMTP id u62so113190567pgb.3 for ; Tue, 04 Jul 2017 11:37:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version; bh=6xlRcUT95aKI7PDnz9cZJEUIUKSD+reWWoRqnEDdOQM=; b=syKdrWRE+ua/sjk8Xm8tN8KPz9ZqhKeHYejxKncq7bxj9jktRR/n9M1lKtF090MUjE tfMsLX9sd0qqoP3Ah6o2HxkkX+DoQkTMfK0dZ1SrZ9Bmqvt5UvI3f3evPY2849NXIXUk n/aI2XJuyWEv4HzQzoBoqZz1zT9kY902My+jk2A5csUMr3VuL+Uom5i/Sxf2T1AOSlH9 2S2EnH/yddVTENkLxeyyUN9TtphByt5Aj8l8UM/YAV3tYNlr3CDEfVB0HUU//3eTulaQ Ho0sSshusFASQUaNiwBnQ/G2V+0COEyFPRYM0359pAnaUyildyBZK3a/aniECwAk1bmS TpPA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version; bh=6xlRcUT95aKI7PDnz9cZJEUIUKSD+reWWoRqnEDdOQM=; b=U1YYJbwuqaAruQi5Jls7KQIEGboD0g4IpAmrnAUeY/eWJLAq+SkSQMXGxyMhUmhDu+ YrkxV0M/pq7uoSYmpRiikdtiR3l1dlN6Gnqmpg1MACWTgeiExbnKU1U05bbNrZwrFg1H hqGAWFxGzYTI7TB0a1NJ08PQatfFJyYOxo8R/BeyY/rAH66+iZe0BdpQ6+XI1RL7X3xD CwVvLVVrf2qXayVMD+V2wkTmio3DSQZHytprxkI35EMXgk9CK9rUSly8lcF8nHdoZzoQ CSD0qGki9NUvJIJHzGUf+eMYc5PPKH1/nwwN56MUdGmqIVP3QWu35w1fOyTkh8MFTihB Xb+w== X-Gm-Message-State: AIVw110m1WDsisYxT7OlThIzoa/UgS+EfbYSljKTGRKR+J05fWhzfFnc C13cuTmz0OyovUuy X-Received: by 10.99.107.136 with SMTP id g130mr17459174pgc.3.1499193458934; Tue, 04 Jul 2017 11:37:38 -0700 (PDT) Received: from aspen.local (216-67-119-73-radius.dynamic.acsalaska.net. [216.67.119.73]) by smtp.gmail.com with ESMTPSA id b78sm27875190pfk.71.2017.07.04.11.37.37 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 04 Jul 2017 11:37:38 -0700 (PDT) To: trans@ietf.org From: Melinda Shore Message-ID: <4d5455cc-3fb6-40be-5597-64236203b182@gmail.com> Date: Tue, 4 Jul 2017 10:37:33 -0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Ov6puBFB5WNf0L3Q6dXdc867JXXSB1wkH" Archived-At: Subject: [Trans] Working group last call, draft-ietf-trans-rfc6962-bis X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Jul 2017 18:37:42 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Ov6puBFB5WNf0L3Q6dXdc867JXXSB1wkH Content-Type: multipart/mixed; boundary="cbfdIIR3Phpf0iJAgAwCkMSaaiPQUK1Wc"; protected-headers="v1" From: Melinda Shore To: trans@ietf.org Message-ID: <4d5455cc-3fb6-40be-5597-64236203b182@gmail.com> Subject: Working group last call, draft-ietf-trans-rfc6962-bis --cbfdIIR3Phpf0iJAgAwCkMSaaiPQUK1Wc Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, all: This is to announce the (re)start of working group last call on draft-ietf-trans-rfc6962-bis. The draft is available at: https://datatracker.ietf.org/doc/draft-ietf-trans-rfc6962-b= is/ Last call will close on July 18, 2017. Please send comments to this mailing list. Melinda --cbfdIIR3Phpf0iJAgAwCkMSaaiPQUK1Wc-- --Ov6puBFB5WNf0L3Q6dXdc867JXXSB1wkH Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJZW+BuAAoJELiGRpM6HoEuBKoP/0bTPhZli8KXgBZe9h+4/nTQ fHSmWIMjs8cOyE0iwkoyf1YgMe85KZmJqYN9oq+RidvnBrT/dJZFJNFwcvg2Sts8 Vs8cntr8T4Kx1B9DVApgYosHz4rRML+tGaMXxmSf3+J/iLfM/2VIiD+6Nx4ZfkX4 IoZzqrLMe2+uxIYKcx7aJhK7bXGSerNa5XKgpCXO8CtMJnqMYXdzhOdvoYiMBFbF 9tETVMY8rkQHtXiB0GEZR6cEfd8S5tzLL8Fo1BwXh2dNwYwXNhvHXrC7eqvWEDlU 3QuUpQ9ufh7ak3JlA2pPWUQmOfEHbV8eRVA1ML4e2J2zZZhkO2xNaVZbUPCDdkoK 3kx9Vz3kw0lS53b1wQ97hlAlWjvvbN6LdiGb8EYCArM8APoXkj8bEQ8XkqPoNxWC GHkIbfc4xs6Bulj3wy1UQOTTWnYnOLBZDdOKnJg+29Rk40N0txKNgLJtIqvyukmG NMGQGDduwy1Clrd3iJBtEEwz7MCnvVt0veB0LKQdj4Fa9TmZDtmjRwDk6Nbz/4xq C1preCwPI9reP1503HEYqfFQ6t0nq/2KiYMTsTSgfUN910Btpli47n/FVhlme5xY PNVnZfTqirB5TOjbvslL+0Y94Ps3gadF0wqH47w9wHTPvZ6n5Yj+CxXsYPTncfeE 07leu+s+RNgyGIcqnoLE =BkJp -----END PGP SIGNATURE----- --Ov6puBFB5WNf0L3Q6dXdc867JXXSB1wkH-- From nobody Sat Jul 15 22:56:15 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1688129B36 for ; Sat, 15 Jul 2017 22:56:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=nomountain-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z7iUJELfaceN for ; Sat, 15 Jul 2017 22:56:07 -0700 (PDT) Received: from mail-wr0-x235.google.com (mail-wr0-x235.google.com [IPv6:2a00:1450:400c:c0c::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0ABF71289C3 for ; Sat, 15 Jul 2017 22:56:07 -0700 (PDT) Received: by mail-wr0-x235.google.com with SMTP id u110so18546222wrb.0 for ; Sat, 15 Jul 2017 22:56:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nomountain-net.20150623.gappssmtp.com; s=20150623; h=to:from:subject:message-id:date:user-agent:mime-version; bh=yXzH1CjPm6T7/wdFhqdZAMbTcUcUyTeto7HTEypc9sQ=; b=wlX02OjN6MsAsRY+exqxSjODyl2ND4/EtY+g6h1Ow3in/IarTLj/uhUYeU82xP5p4a 9Gv7JAcSwdKuljaT/4v6Wjjhcj3+BQKRKJu29ko2xOEi9PQqsQsvi+IRwPeRRV8qIl9L KpmFbWd4oN5QalpuTHVbQG6bkizZjrGhPFeR4OO6pG63DDokwtV+bj0SK8nh+6aR6TaU r2tMWtcsODi3dPf517nYniEJyLigOCcYff/WiASVPfmM5TWPwnU0Bi37ttYsMkMrI7DC i/8tJP/9vUoaJ3gllSQBJKyhEtpabeXYb3otv3wQY5cZsgs+EJvisx+FZbQ4/YkSJI5o lsSQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version; bh=yXzH1CjPm6T7/wdFhqdZAMbTcUcUyTeto7HTEypc9sQ=; b=rfxxSXWUhJnbJCqVZqcKHxEF27wUAVUhxn4xCHsboqy77z0g1UPUF6KzQOEJd6PDj8 gw4SE+QGQE5usjVwvjEngMlyYTptOcpcN9vL6oS/j+uhjE3xd0tlIGEeUMEOjSKUgyYF f8X3hfXwFj+QkmnRGbQ9Gw7oc/6JzYIDl8g0qaGSM1VTNwqyjkajUCvciMObkGefeA0B zWepDCAJoN2Q3IVn2kacCoOARGqdutcsdn/V3u67yVLDZi1F6GpJfGQae2bkOJP9iUvz NBpZCYO+o8OQ4Kh1S2U3wmIUwfmWuNvO+dR/KV5zapFX83YPmavNDaY6IkaM3WLjlerq eQtQ== X-Gm-Message-State: AIVw110LyOaeopEKeVO/+noaBoKRD07NVC7a1Nzgg3dNz5IH4pp1VZuE ECMozfnj9Ro1mp5T8aHh7Q== X-Received: by 10.223.173.246 with SMTP id w109mr6979332wrc.113.1500184565196; Sat, 15 Jul 2017 22:56:05 -0700 (PDT) Received: from dhcp-9730.meeting.ietf.org ([2001:67c:1232:144:e80d:3c44:1d6e:df40]) by smtp.gmail.com with ESMTPSA id r187sm8579221wmg.15.2017.07.15.22.56.04 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 15 Jul 2017 22:56:04 -0700 (PDT) To: "trans@ietf.org" From: Melinda Shore Message-ID: <42941e4f-4dbc-1e1b-6883-82bf956a0a5b@nomountain.net> Date: Sun, 16 Jul 2017 07:56:03 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="HL1bcL1h4P87LqkU9NDABUCNeep3hXQWO" Archived-At: Subject: [Trans] Distributed Internet Infrastructure side meeting on Monday X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Jul 2017 05:56:09 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --HL1bcL1h4P87LqkU9NDABUCNeep3hXQWO Content-Type: multipart/mixed; boundary="eqxjkDK5VKtqpu4kSGXvH8VrWmV02Pv3A"; protected-headers="v1" From: Melinda Shore To: "trans@ietf.org" Message-ID: <42941e4f-4dbc-1e1b-6883-82bf956a0a5b@nomountain.net> Subject: Distributed Internet Infrastructure side meeting on Monday --eqxjkDK5VKtqpu4kSGXvH8VrWmV02Pv3A Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, all: Given our work on a gossip protocol and trying to develop a consistent view of CT logs, it seems likely that some of you may be interested in this side meeting on Monday. Note that this is a potential activity in the IRSG, not the IETF. We are holding another side meeting on Distributed Internet Infrastructure at IETF-99. We had some good discussions with interested folks in and outside the IRTF in the past months and thought that it might be a good time now to try to start a more structured activity in the IRTF. The scope would be =E2=80=9CDistributed Internet Infrastructure=E2=80=9D,= I.e., applying distributed ledger technologies (such as blockchain, but not limited to it) to Internet technologies, for example to decentralized name registries, identity management, decentralized web etc. We have some people looking at the topic from different angles, i.e., IoT, decentralized web, Internet architecture and think that there is an interesting and potentially very productive scope we could work in the IR= TF. The meeting to discuss this will be a side meeting on Monday, July 17, 18:50 to 20:50 in the Tyrolka room of the Hilton hotel (meeting hotel). The agenda (as of current planning): 1) Background and Purpose 2) Selected Use Cases and Related Efforts - Decentralized OAuth - IoT - COALA.global 3) Ledger Technology 4) Next steps, RG Formation We=E2=80=99ll post agenda details, updated etc. on https://trac.ietf.org/trac/irtf/wiki/blockchain-federation --eqxjkDK5VKtqpu4kSGXvH8VrWmV02Pv3A-- --HL1bcL1h4P87LqkU9NDABUCNeep3hXQWO Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJZav/zAAoJELiGRpM6HoEu1yEP/1O0vc65pX4Cs29zEj2WQEO8 iiYS5cFIZqdSsxy0Nev7tVCLE5KsL1+RwYz22XbkmKd2n7pNjKowOlIZzaVokyRv K1Kx5edf46RURabvZ6G0o2qQz0TW+xeBSO9fRlMdYDv+FsHequcEJ+76k4FyNNUL AL+KvjWfxRHSK5tM1ih4FC02c8V4hOYTGh5RW+z80B8fF8IDPEgVnPsmcypsejmQ baxrd6BZDB7sf6i8diTz7rABnKTKev1wg5AvHf0PnMfj5nvud4MiLM2O00BzFwWP 8I5CleBudOT6eQW/i4KtbB6QFxSWFDqv4Fa+2pXsuXbTBYa8s+m1trVFfsD7iAnj D1zpxzlHM1R+rezkQgkuyqivy85EeauGkPPvJ9Dqf4bEEIwtg97Wkvlw1R890M/1 e/pnw5/Gy/G5ILbWawjB0gbPFtCQBFkPLyd79wQw/AY+E9c1+XEdIcufEbjiNeMY P9PqvXLg1CJKoWZfqdphuAEOKCoqHqhXK90fPxqGquCe3qeesJTpxSFQZ8UR7PuS +MqN1RAJcga/9KNSenW9U8NWLKYt4AgKf1nRZ14PjmGY6BZoiN9lXWmep/jY+zVk V67xEmPt/fXCpi6vhQRadMxWgQnElLWz+J/610FC+Ome+yFY3L6CZMT38Fl31P42 +bZo7tjYoKEWYx2+vqiC =RdqN -----END PGP SIGNATURE----- --HL1bcL1h4P87LqkU9NDABUCNeep3hXQWO-- From nobody Sun Jul 16 04:26:37 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63BA112F3CB for ; Sun, 16 Jul 2017 04:26:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=nomountain-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oZOphF2oT9O6 for ; Sun, 16 Jul 2017 04:26:35 -0700 (PDT) Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com [IPv6:2a00:1450:400c:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A793E12F268 for ; Sun, 16 Jul 2017 04:26:34 -0700 (PDT) Received: by mail-wm0-x22f.google.com with SMTP id 70so16953977wmo.1 for ; Sun, 16 Jul 2017 04:26:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nomountain-net.20150623.gappssmtp.com; s=20150623; h=to:from:subject:message-id:date:user-agent:mime-version; bh=pTxNXP41uePnXMOGDD/aP5zNL9O95cyJq+gtsFpOh/4=; b=qIIGr5rnPvRf+a/yLCLz6LWadggO6nVt1Vea1DTC31dZ5GOM9rLIfPhjkev61pEW7P BVRh3gen5T0AzMpdpt/UHUaKOZmwO+CsoGD0Zw3ChF4+ji8zynUZJtLo1/Eh2Qrm6Pxb iAMdPO5UIr3EX+k73dkMyn9jao6uXD8p//78QWRchf1rXeBwxrPT3++BrjMJMQZ2x3mS fSlJI2CNyg7na3EeGaGuVk34MEALlYdP8jOD6EHiW+byXH8VV37CHxZC2bIW9J7xzdTq MHqYT0VDGs8ef8xRyosDX0ORTYoXLjw8GayqErjux62udZVkYMNcBVeawyfo20LKxyQ/ QO+w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version; bh=pTxNXP41uePnXMOGDD/aP5zNL9O95cyJq+gtsFpOh/4=; b=aExb+VYwRe9OJcKFlPOEstC9Aewix/yvd2tVADX4uYlmvxucKc0wRZu/PKZc3bHwnj fsbl/c/vGuIioxq2zGgPDTpj4wrz3HTe58pJijjk72dcyt68Oj1WTYejjIdXVrL1Xo2I zF0Uj4/ZzQ6E36ievd7Dt6IWB/CIgoT7OJzlORUvOZkmAKP//YHGGpNZKa5bFzZgNG4Z eoyujN2ijaRoNMgiJynw8DWaqL7ONeNADMlCt6I2I04ATeVvRSmRCvkgU54au7vONCST f/td+piMcrFABOhWRxVsp9BXfqiSyJmaGKGqyGjQGNst5aACgXdkQCWwFA2T/i97BZxU uTwQ== X-Gm-Message-State: AIVw1116zKjJuyKpN8Eiu2SN91fH9PcuIGDrNLv+m/rZJ5TRSO20v8xo BiRMGInjb2p3p5KPlqrmJQ== X-Received: by 10.28.141.142 with SMTP id p136mr1266000wmd.125.1500204392957; Sun, 16 Jul 2017 04:26:32 -0700 (PDT) Received: from dhcp-80d4.meeting.ietf.org ([2001:67c:370:128:fc18:c319:fb87:630c]) by smtp.gmail.com with ESMTPSA id w96sm11146696wrc.33.2017.07.16.04.26.32 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 16 Jul 2017 04:26:32 -0700 (PDT) To: "trans@ietf.org" From: Melinda Shore Message-ID: <8ca4f1ee-febb-a5fa-e820-7bb18fa76484@nomountain.net> Date: Sun, 16 Jul 2017 13:26:31 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="DL7Hk07v60jXSVBLco3KFoMCBf5JPioI3" Archived-At: Subject: [Trans] Reminder, wglc for 6962-bis X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Jul 2017 11:26:36 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --DL7Hk07v60jXSVBLco3KFoMCBf5JPioI3 Content-Type: multipart/mixed; boundary="ovPRdRmwFsxq57528nxuH0TSebdoi2VJX"; protected-headers="v1" From: Melinda Shore To: "trans@ietf.org" Message-ID: <8ca4f1ee-febb-a5fa-e820-7bb18fa76484@nomountain.net> Subject: Reminder, wglc for 6962-bis --ovPRdRmwFsxq57528nxuH0TSebdoi2VJX Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, all: This is just a reminder that working group last call for 6962-bis (https://datatracker.ietf.org/doc/draft-ietf-trans-rfc6962-bis/)= closes on Tuesday, 7/18. Please review the document and send any comments to the mailing list. Thanks! Melinda --ovPRdRmwFsxq57528nxuH0TSebdoi2VJX-- --DL7Hk07v60jXSVBLco3KFoMCBf5JPioI3 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJZa01nAAoJELiGRpM6HoEu3xgQAIuKAPROo3aULxhG59wykyZT IQ2fUKZxzy3KKExU/g6tGF9aTtwuQ3GTmOBjWIIGOrPNjXAwt3tq5uuzdwh40wcN c7DQolWbTei4CaxBGAywDsge5P7DQ5/Vp0x24/H9/blPPyFVwTOu/FyaHtcWzKfi jXasra550imPeu3R+jD17+4D3rLpSdYzwg8mbvVwC8vbPCvP1WtO/WT14x5arKv9 cG9NleisqEvDso8Q78ZuFxh3xySaMWtFNthaG1fbibyh9GRGjct2Ps8TLRxnNnDJ hVhPlGZ6THjJEDl8N8b1/+je8sx3BJSy4XwwHHsLu6++E2VvyrinWokNdtCwOSaw Xy/UyCs7HVO/OEu7jeBWi78hzXAAvSOrZi4TSYEfGl58scWS+QiMlKRjzGhvDWUg 9QIWtrX2OTw0edg86cKrZfm1LwLdfe0Y1Sn+LpFRZ/3NER/FL4ZTpRWgtpJrXZcN dX92t/7icViSZxfbkcd9dz3BIfkUgUhyAVf1u9JL0+1qJO+vRXnOBLkRGBbEEtHf 19iz+STdKmhEaStMs599lfeZdruXIv4X+ZYkXei7RYIZVqv65sGzaORO1OJAMtX4 VBPGSCXk08xSWZGZdtQVSzdVUlRmXeVEAR7ZBC0NpR1Bxn1wW88tZUwHqdiLq1I0 iXKnzDxVP0omw7vXbS76 =yzWg -----END PGP SIGNATURE----- --DL7Hk07v60jXSVBLco3KFoMCBf5JPioI3-- From nobody Mon Jul 17 20:46:13 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1ACD512EC05 for ; Mon, 17 Jul 2017 20:46:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=andrewayer.name Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zr8ndocf3ZFV for ; Mon, 17 Jul 2017 20:46:11 -0700 (PDT) Received: from alcazar.beanwood.com (alcazar.beanwood.com [70.85.129.230]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBE10129A97 for ; Mon, 17 Jul 2017 20:46:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=andrewayer.name; s=beanwood20160511; t=1500349570; bh=Bhmo2VWxnpBliwITKQC/WNpF1QrJc1bZegLZXo8C1jo=; h=Date:From:To:Subject:In-Reply-To:References; b=MVTIPJ1jfQt4KQXGCXDglIIds4qgFHtdT2kvtu6QrwehlB+Jb/hLGnR9wBaj9/qq4 PKaJ3P+iiebkwW9ScS71GX+p3cVvlhFX2UDifSH1atZwaEkvO+lSVaYJGAjD2eUl1r jb8GTO0s4qsNERE2F+ox51r0Vbj4qXX+m6Y+rGBkWUMKPurKH90So2/Ir7yE6Adr82 x9OkjbV7toYkbaa74SCHQHxg1FxtYfpjH+jlEpZLcFi1GOGFTo1TQSI7kNNw1FtH7H kZQzSNFu7j3/7LuTD2/m7datDyqKY1SzLwiG+gV1Q+Ol2rzDRk6mWmrNmxWNq76IkC VI6IwDEZNzPhw== Date: Mon, 17 Jul 2017 20:46:10 -0700 From: Andrew Ayer To: trans@ietf.org Message-Id: <20170717204610.78bd9106c6974fc9ad548f50@andrewayer.name> In-Reply-To: <4d5455cc-3fb6-40be-5597-64236203b182@gmail.com> References: <4d5455cc-3fb6-40be-5597-64236203b182@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Archived-At: Subject: [Trans] WGLC comments on draft-ietf-trans-6962-bis-25 X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jul 2017 03:46:13 -0000 On page 27, the following doesn't make sense to me: > If the returned "sct" is intended to be provided to clients, then > "sth" and "inclusion" (if returned) SHOULD also be provided to > clients (e.g., if "type" was 1 then all three "TransItem"s could be > embedded in the certificate). First, I assume "client" means TLS client? Second, since a type of 1 means a certificate (not a precertificate), it's unclear how the returned TransItems could be embedded in a certificate. Should it say 2 (precertificate) instead? Page 32 refers to the '"submission" output parameter'. There is no submission output parameter. It should say "submitted_entry" instead. I think section 1.3 (Major Differences from CT 1.0) should mention the replacement of the add-chain and add-pre-chain API endpoints with submit-entry. I am disappointed that the get-sths endpoint isn't included, though I accept that this can go in a future document. A more serious issue is that the signature mutation attack I reported is not fixed. This is a correctness issue and needs to be fixed. I have put a proposed fix out for discussion[1]. Regards, Andrew [1] https://www.ietf.org/mail-archive/web/trans/current/msg03035.html From nobody Tue Jul 18 08:39:47 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42E26131B65 for ; Tue, 18 Jul 2017 08:39:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OGlYayaI8ZAp for ; Tue, 18 Jul 2017 08:39:44 -0700 (PDT) Received: from mail-it0-x22c.google.com (mail-it0-x22c.google.com [IPv6:2607:f8b0:4001:c0b::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 32E6A131B70 for ; Tue, 18 Jul 2017 08:39:44 -0700 (PDT) Received: by mail-it0-x22c.google.com with SMTP id a62so22505368itd.1 for ; Tue, 18 Jul 2017 08:39:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=gEGChTRsioNxmrA5G9+tklrcaz55qPzkrxrsV6hLq9E=; b=DsqqeE1tfqiMNjXzi6OVMcnMtrndcM5HOX9BG9sP5S+l/wA6n356HPzK3D+vNSPp2n Du1DPl3y8U30+VQahUKMR9ifH11ryTNGqlar935Pn7GtPE0I22/RDJJz8gGBMtF03KoX XmatyzeuQrMmXJpJbcXpQhWfyGAQWmeAaWH37lFT+cI14J+7z5xlDQswNC0aEPUCK5vf V/shaSDVmYG0vIfvJXtM0mBdXCBRB3Ob6WhTyj5t7rloP9vMfpEfWTgMFGSvdMEzufzg RCdeEbIIbDRjuVH1/gM3u5FLqSIagCVHqAmyU/mXKymrLyVFr+EuGFmkgl3jLbOqe0Do BSLw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=gEGChTRsioNxmrA5G9+tklrcaz55qPzkrxrsV6hLq9E=; b=uIJVhluyqPvOQ8mCWpZvh8vfS7dLYm3xGuhH2bwPRldVeqo782yq9HxWe7PBdGV88a sJFQxJ0KEF0M0M8YKPzbxIioeIRZgxEblMbeYEXduo7cgdoemSx39ihfD+iUWBk53eFU FWK5pch7rS43K9vNIbur9NDXB963FMrQGaptYraviFpcgTiZiwipmbP+mIPCPJq3heiO 1lLtX8OA0ATVZ3Q8Axmo7zF1BBy3JfoBgmXXwgwDPmG7Un0geL0bMMcUaWB4W9z5nZID A/yivFRKGGGjCBOoXVIwdjUmgrMAgFSo1I4nTgcap0WfVCJRI+ml0F3NfKkghmUDXf1f Aizw== X-Gm-Message-State: AIVw112QtC6Ce1BJ/eMM46FTSfJmd3Z4ugnH63fM++fyDkL2xE7309WL zDs4PlUBN4tGVsWGkKh4kXn1nuvIFxwEea9Uyw== X-Received: by 10.36.106.5 with SMTP id l5mr2599150itc.95.1500392383247; Tue, 18 Jul 2017 08:39:43 -0700 (PDT) MIME-Version: 1.0 Received: by 10.107.10.88 with HTTP; Tue, 18 Jul 2017 08:39:12 -0700 (PDT) In-Reply-To: <20170717204610.78bd9106c6974fc9ad548f50@andrewayer.name> References: <4d5455cc-3fb6-40be-5597-64236203b182@gmail.com> <20170717204610.78bd9106c6974fc9ad548f50@andrewayer.name> From: Eran Messeri Date: Tue, 18 Jul 2017 16:39:12 +0100 Message-ID: To: Andrew Ayer Cc: "trans@ietf.org" Content-Type: multipart/alternative; boundary="001a1147236a0817a00554995366" Archived-At: Subject: Re: [Trans] WGLC comments on draft-ietf-trans-6962-bis-25 X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jul 2017 15:39:46 -0000 --001a1147236a0817a00554995366 Content-Type: text/plain; charset="UTF-8" Thanks for the thorough review of the document, Andrew, replies below. On Tue, Jul 18, 2017 at 4:46 AM, Andrew Ayer wrote: > On page 27, the following doesn't make sense to me: > > > If the returned "sct" is intended to be provided to clients, then > > "sth" and "inclusion" (if returned) SHOULD also be provided to > > clients (e.g., if "type" was 1 then all three "TransItem"s could be > > embedded in the certificate). > > First, I assume "client" means TLS client? > > Second, since a type of 1 means a certificate (not a precertificate), > it's unclear how the returned TransItems could be embedded in a > certificate. Should it say 2 (precertificate) instead? > Proposed fix in https://github.com/google/certificate-transparency-rfcs/pull/271. > > Page 32 refers to the '"submission" output parameter'. There is no > submission output parameter. It should say "submitted_entry" instead. > > I think section 1.3 (Major Differences from CT 1.0) should mention the > replacement of the add-chain and add-pre-chain API endpoints with > submit-entry. > Proposed fix for both in https://github.com/google/certificate-transparency-rfcs/pull/272. > > I am disappointed that the get-sths endpoint isn't included, though I > accept that this can go in a future document. > > A more serious issue is that the signature mutation attack I reported > is not fixed. This is a correctness issue and needs to be fixed. I > have put a proposed fix out for discussion[1]. > I'll follow up on that thread. > > Regards, > Andrew > > [1] https://www.ietf.org/mail-archive/web/trans/current/msg03035.html > > _______________________________________________ > Trans mailing list > Trans@ietf.org > https://www.ietf.org/mailman/listinfo/trans > --001a1147236a0817a00554995366 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks for the thorough review of the document, Andrew, re= plies below.

O= n Tue, Jul 18, 2017 at 4:46 AM, Andrew Ayer <agwa@andrewayer.name= > wrote:
On = page 27, the following doesn't make sense to me:

> If the returned "sct" is intended to be provided to clients,= then
> "sth" and "inclusion" (if returned) SHOULD also be= provided to
> clients (e.g., if "type" was 1 then all three "TransIte= m"s could be
> embedded in the certificate).

First, I assume "client" means TLS client?

Second, since a type of 1 means a certificate (not a precertificate),
it's unclear how the returned TransItems could be embedded in a
certificate.=C2=A0 Should it say 2 (precertificate) instead?

Page 32 refers to the '"submission" output parameter'.=C2= =A0 There is no
submission output parameter.=C2=A0 It should say "submitted_entry"= ; instead.

I think section 1.3 (Major Differences from CT 1.0) should mention the
replacement of the add-chain and add-pre-chain API endpoints with
submit-entry.

I am disappointed that the get-sths endpoint isn't included, though I accept that this can go in a future document.

A more serious issue is that the signature mutation attack I reported
is not fixed.=C2=A0 This is a correctness issue and needs to be fixed.=C2= =A0 I
have put a proposed fix out for discussion[1].
I'l= l follow up on that thread.=C2=A0

Regards,
Andrew

[1] https://www.ietf.org/mail-arch<= wbr>ive/web/trans/current/msg03035.html

_______________________________________________
Trans mailing list
Trans@ietf.org
https://www.ietf.org/mailman/listinfo/trans

--001a1147236a0817a00554995366-- From nobody Tue Jul 18 09:58:09 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91724131B6C for ; Tue, 18 Jul 2017 09:58:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IUq_w5PylZ2b for ; Tue, 18 Jul 2017 09:58:05 -0700 (PDT) Received: from mail-io0-x235.google.com (mail-io0-x235.google.com [IPv6:2607:f8b0:4001:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 730AB131B51 for ; Tue, 18 Jul 2017 09:58:05 -0700 (PDT) Received: by mail-io0-x235.google.com with SMTP id 5so16472217iow.0 for ; Tue, 18 Jul 2017 09:58:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=9Os629ImPEZ0lzXOvrK7x0LNJfTSCrkYORifRHdxy7E=; b=BiY59nb/KsOXC88GbYrICJsp2UrVqmf8i4LLh5pBuk7Ca9u+HnoQHtS5Y9jEHn8mmF DGHtI6TEbf0okdLNNG9aUCybSCrKxVQ54j2LeMsL9p6gR1QcQOYFPWmtJDA+KevYPyT0 xZy+mABDgewYGomeIDvAj3vPlg14Pzsy0GDO50cZaT2A95/rORCzX3WtfSw5wNCb8Mje EbLkbShf6+7UQJpB1zG0Pwf5vq+32Wyl39Cnl3rvXp54fVc2XD3Ef7XEvixCT61ZqnR4 2U1olqGp00oJZta2S2x2jbVmfWYw5jbC3vcN3F6XRRs9m9HQNjL27gcm/AY/aO5Xr+4D IKyA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=9Os629ImPEZ0lzXOvrK7x0LNJfTSCrkYORifRHdxy7E=; b=L9BdKoikNcC1A6AlJhXhuOySXsn0XpnyKgsRaUpACakVMfnS1VGWuETqgLvVjDdT/w vL25LmiQuwf5seE5n0Vwe7/yp58XOiMu3t0SHP0ToOY4PP1ohckPhOBCJwZpmalEtSYx l5tvvVrYKy7pF4asQWo/b1sXjIJBlbz9rQLC1d7t9sOgnyXhhQIw/uNQMo4IvgdbHZq+ F7Q0qBo9NML8Vf7qplJfn5BKGrT3mAdDuLHuJsSFGwn0KiifRngzTMmuvJCoV1OwWpD/ h81TR6VAd3oQUJeWTV52SxmoB8pVTk/RUCGkcZ2uTnLIxnoxu2XTa1s6lmSZDUc5vx+c wXJg== X-Gm-Message-State: AIVw112vg9pW+pm8RZjJt0D9dBtB+6+kgPHfuRCNvtUFzf4JwYq51I7w LEWrG2BK8AqOZJbkIsfi5WSV0pbN0lkwEQk= X-Received: by 10.107.7.222 with SMTP id g91mr2557737ioi.218.1500397084452; Tue, 18 Jul 2017 09:58:04 -0700 (PDT) MIME-Version: 1.0 Received: by 10.107.10.88 with HTTP; Tue, 18 Jul 2017 09:57:33 -0700 (PDT) In-Reply-To: <20170703100241.9dd63b867d0181bae69a3999@andrewayer.name> References: <20170528191028.20f285073eea33a3f23b6b5a@andrewayer.name> <20170703100241.9dd63b867d0181bae69a3999@andrewayer.name> From: Eran Messeri Date: Tue, 18 Jul 2017 17:57:33 +0100 Message-ID: To: Andrew Ayer Cc: "trans@ietf.org" Content-Type: multipart/alternative; boundary="001a113f93ea3e38a605549a6b86" Archived-At: Subject: Re: [Trans] Mutability of Certificate Signatures X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jul 2017 16:58:07 -0000 --001a113f93ea3e38a605549a6b86 Content-Type: text/plain; charset="UTF-8" Going back to the original email, I support the proposal to fix the issue by adding language to the document saying that a failure to produce a full, valid chain with the (immediate) issuer's key hash identical to the key hash covered by the SCT signature. I do not think the full key should be present in the SCT - even though it would be convenient for monitors, the full chain *is* present in the get-entries response, and requiring that the chain returned includes the intermediate with the same key whose hash is covered by the SCT signature is enough to guarantee monitors have the key. While a CT log can present different, valid chains, leading to different trust anchors, for a particular entry (as long as the same key was used for signing the submission) - but that is true when certificates are used in TLS connections, and in the context of CT this is more of a spam/log credibility problem than a security problem: The log could present chains that seem "uninteresting" to the general public (because they terminate in a trust anchor unrecognized by any major UA) while, in fact, there is a valid path from the submitted entry to a trust anchor recognized by UAs. This could be detected by identifying which intermediates have the key that was used to sign the submission. Regardless, this is not an attack on the protocol or log implementation - but an ecosystem issue: Logs that accept a mix of credible and unvetted trust anchors could always be spammed, and so may not have the same utility as logs that accept TAs. Signing the entire chain in the submission won't be useful to TLS clients (because TLS certificates can be served with different, valid chains), so I think that from a correctness perspective 6962-bis should just require the log to serve a valid chain for each entry (which monitors can verify), and if it can't, then it misbehaved. Would that resolve the concern? IMHO such an addition to 6962-bis would not require restarting WGLC as this is already implied by the protocol. Eran On Mon, Jul 3, 2017 at 6:02 PM, Andrew Ayer wrote: > To get the ball rolling again on fixing this issue, I've submitted a PR > which: > > 1. Changes issuer_key_hash to issuer_key. > > 2. Adds language to the Monitor section describing what checks a > monitor should do to detect signature mutation. > > https://github.com/google/certificate-transparency-rfcs/pull/270 > > Regards, > Andrew > > _______________________________________________ > Trans mailing list > Trans@ietf.org > https://www.ietf.org/mailman/listinfo/trans > --001a113f93ea3e38a605549a6b86 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Going back to the original email, I support the proposal t= o fix the issue by adding language to the document saying that a failure to= produce a full, valid chain with the (immediate) issuer's key hash ide= ntical to the key hash covered by the SCT signature.

I d= o not think the full key should be present in the SCT - even though it woul= d be convenient for monitors, the full chain *is* present in the get-entrie= s response, and requiring that the chain returned includes the intermediate= with the same key whose hash is covered by the SCT signature is enough to = guarantee monitors have the key.

While a CT log ca= n present different, valid chains, leading to different trust anchors, for = a particular entry (as long as the same key was used for signing the submis= sion) - but that is true when certificates are used in TLS connections, and= in the context of CT this is more of a spam/log credibility problem than a= security problem: The log could present chains that seem "uninteresti= ng" to the general public (because they terminate in a trust anchor un= recognized by any major UA) while, in fact, there is a valid path from the = submitted entry to a trust anchor recognized by UAs.

This could be detected by identifying which intermediates have the key t= hat was used to sign the submission. Regardless, this is not an attack on t= he protocol or log implementation - but an ecosystem issue: Logs that accep= t a mix of credible and unvetted trust anchors could always be spammed, and= so may not have the same utility as logs that accept TAs.
Signin= g the entire chain in the submission won't be useful to TLS clients (be= cause TLS certificates can be served with different, valid chains), so I th= ink that from a correctness perspective 6962-bis should just require the lo= g to serve a valid chain for each entry (which monitors can verify), and if= it can't, then it misbehaved.

Would that reso= lve the concern? IMHO such an addition to 6962-bis would not require restar= ting WGLC as this is already implied by the protocol.

<= div>Eran



On Mon, Jul 3, 2017 at 6:02 PM, Andrew Aye= r <agwa@andrewayer.name> wrote:
To get the ball rolling again on fixing this issue, I've submi= tted a PR
which:

1. Changes issuer_key_hash to issuer_key.

2. Adds language to the Monitor section describing what checks a
monitor should do to detect signature mutation.

https://github.com/google/certi= ficate-transparency-rfcs/pull/270

Regards,
Andrew

_______________________________________________
Trans mailing list
Trans@ietf.org
https://www.ietf.org/mailman/listinfo/trans

--001a113f93ea3e38a605549a6b86-- From nobody Tue Jul 18 20:43:01 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 53F30127076 for ; Tue, 18 Jul 2017 20:42:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=andrewayer.name Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eOB09nuGEKYm for ; Tue, 18 Jul 2017 20:42:58 -0700 (PDT) Received: from alcazar.beanwood.com (alcazar.beanwood.com [70.85.129.230]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E3E42126D85 for ; Tue, 18 Jul 2017 20:42:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=andrewayer.name; s=beanwood20160511; t=1500435777; bh=KSsmPo3ju1bVOYcWYZHAgB7MzzMGF65a/p9ukEz6pds=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=LIMOul0dEhdhNweAzrwI6UG4KFE7MzvfQoPehQ3STCMGxv/3QVCjMscxv33V0rCi4 ub6wMqyuykRN4cbXpoIyjPKBn0P3IujrXoExsRP622BaCf13CNiQOzD/aB5JYh5FEP Z+nwHHorqwHLggUyupykYFAXiri+WQYEpeoYYx5dvWv04oZ+6NEuUTjy1OZX2r7D2b 9xgQL/tfxuIPgz+eMuXGk4c7hWD8OPmYGYNzTpBjjE1vlINdweVV8lVGMXMfLEPQJo H1jCpE76Mv+RSQb4NgPXSeMhvLGnc+Bv7WT3OfUdG1ZXJRw/2ISci5U1+52f5L10/k PP9SikidrX5vw== Date: Tue, 18 Jul 2017 20:42:56 -0700 From: Andrew Ayer To: Eran Messeri Cc: "trans@ietf.org" Message-Id: <20170718204256.d932dee67d792891bb20729e@andrewayer.name> In-Reply-To: References: <20170528191028.20f285073eea33a3f23b6b5a@andrewayer.name> <20170703100241.9dd63b867d0181bae69a3999@andrewayer.name> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Trans] Mutability of Certificate Signatures X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jul 2017 03:42:59 -0000 On Tue, 18 Jul 2017 17:57:33 +0100 Eran Messeri wrote: > Going back to the original email, I support the proposal to fix the > issue by adding language to the document saying that a failure to > produce a full, valid chain with the (immediate) issuer's key hash > identical to the key hash covered by the SCT signature. > > I do not think the full key should be present in the SCT - even > though it would be convenient for monitors, the full chain *is* > present in the get-entries response, and requiring that the chain > returned includes the intermediate with the same key whose hash is > covered by the SCT signature is enough to guarantee monitors have the > key. I'm not proposing storing the key in the SCT, but in the TimestampedCertificateEntryDataV2 structure (i.e. the Merkle leaf input). Logs would have to store some extra data (though in most cases they could dedupe it with the chain), but there would be no increase in the size of SCTs. To be clear, are you proposing a requirement that the chain always contain a certificate with the issuer's public key, even if the logged certificate is a trust anchor? This would be a new requirement, as 6962-bis currently allows a non-self-signed trust anchor to be logged without a chain containing its issuer. Such a requirement would fix the problem, but it seems rather awkward (chains wouldn't always end with a trust anchor) and it's such an edge case that I fear logs might get it wrong (and if that happens, the log can no longer be trusted). I think converting issuer_key_hash to issuer_key is a more conservative change, but I won't object to your approach if it's what you prefer. The wording would need to be extremely clear so there is no doubt that a log needs to make the issuer available in this case. > While a CT log can present different, valid chains, leading to > different trust anchors, for a particular entry (as long as the same > key was used for signing the submission) - but that is true when > certificates are used in TLS connections, and in the context of CT > this is more of a spam/log credibility problem than a security > problem: The log could present chains that seem "uninteresting" to > the general public (because they terminate in a trust anchor > unrecognized by any major UA) while, in fact, there is a valid path > from the submitted entry to a trust anchor recognized by UAs. > > This could be detected by identifying which intermediates have the > key that was used to sign the submission. Regardless, this is not an > attack on the protocol or log implementation - but an ecosystem > issue: Logs that accept a mix of credible and unvetted trust anchors > could always be spammed, and so may not have the same utility as logs > that accept TAs. Signing the entire chain in the submission won't be > useful to TLS clients (because TLS certificates can be served with > different, valid chains), so I think that from a correctness > perspective 6962-bis should just require the log to serve a valid > chain for each entry (which monitors can verify), and if it can't, > then it misbehaved. Presenting different, valid chains is a separate problem so I'm curious what the relevance is? I agree there's nothing 6962-bis needs to do about the multiple chain problem. Regards, Andrew From nobody Wed Jul 19 02:13:46 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AABF61277BB for ; Wed, 19 Jul 2017 02:13:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.19 X-Spam-Level: X-Spam-Status: No, score=-4.19 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M-R4zXYVuFZ8 for ; Wed, 19 Jul 2017 02:13:41 -0700 (PDT) Received: from mmextmx2.mcr.colo.comodoca.net (mmextmx2.mcr.colo.comodoca.net [IPv6:2a02:1788:402:c00::c0a8:9cd6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 82BE9131C45 for ; Wed, 19 Jul 2017 02:13:40 -0700 (PDT) Received: (qmail 28104 invoked by uid 1004); 19 Jul 2017 09:13:38 -0000 Received: from rmdccgwarp1.reyn.mcr.dc.comodo.net (HELO maileu.comodo.net) (10.1.72.82) by mmextmx2.mcr.colo.comodoca.net (qpsmtpd/0.84) with ESMTP; Wed, 19 Jul 2017 10:13:38 +0100 Received: from [192.168.0.58] ([192.168.0.58]) by maileu.comodo.net (IceWarp 11.4.5.0 DEB8 x64) with ASMTP (SSL) id 201707191013376215; Wed, 19 Jul 2017 10:13:37 +0100 To: Andrew Ayer , Eran Messeri Cc: "trans@ietf.org" References: <20170528191028.20f285073eea33a3f23b6b5a@andrewayer.name> <20170703100241.9dd63b867d0181bae69a3999@andrewayer.name> <20170718204256.d932dee67d792891bb20729e@andrewayer.name> From: Rob Stradling Message-ID: <6d7d81bc-dc28-884d-e684-840cca9a117f@comodo.com> Date: Wed, 19 Jul 2017 10:13:36 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.0 MIME-Version: 1.0 In-Reply-To: <20170718204256.d932dee67d792891bb20729e@andrewayer.name> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Trans] Mutability of Certificate Signatures X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jul 2017 09:13:45 -0000 On 19/07/17 04:42, Andrew Ayer wrote: > To be clear, are you proposing a requirement that the chain always > contain a certificate with the issuer's public key, even if the logged > certificate is a trust anchor? This would be a new requirement, as > 6962-bis currently allows a non-self-signed trust anchor to be logged > without a chain containing its issuer. How about we revert to the RFC6962 requirement that only self-signed certificates may be trust anchors? It would still be possible for an "intermediate CA" to be a trust anchor, since there's nothing to stop an "intermediate CA" from also self-certifying itself. -- Rob Stradling Senior Research & Development Scientist COMODO - Creating Trust Online From nobody Wed Jul 19 06:33:54 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 825D61276AF; Wed, 19 Jul 2017 06:33:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JbFvFEAIffEA; Wed, 19 Jul 2017 06:33:51 -0700 (PDT) Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E9F7E120725; Wed, 19 Jul 2017 06:33:47 -0700 (PDT) Received: from pps.filterd (m0050096.ppops.net [127.0.0.1]) by m0050096.ppops.net-00190b01. (8.16.0.21/8.16.0.21) with SMTP id v6JDVawd020762; Wed, 19 Jul 2017 14:33:45 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : content-type : mime-version; s=jan2016.eng; bh=Iiqpzy8dktFSE+Z2B12FZTzLG3fjDl70uL1/BRuvUvg=; b=Z5G2U5cZv1ObheDCbsLr7Doj1dB3e2JTEmvsjarOAlKGbwt7NxPsqu9fyfyf+QTA24rX DVEpq000/YcdLa6SoOA7bU70Zkn6avgwYK7Dkhrl4Hv3IAcwAqH6G2MGLna760lwRkhZ d9LiCxFs+27G86Tv+IbgwR+wn9QJ7hhN/HF819hgPYdNhvOGny6e5mqv+aQUrfmFDnNQ 9XIeVAdkKZRIhoHn9KPZ+iG0hrnWk6RpsyWVNqcDxH8FbVQkhslm0ZxgNeOJgpARSkYs 7Q4c/hPwULLtfkWfaEcc40ftasYcTcLoa4tpZGQqyTkr2bx1lIUo0XLLEfAhlrczukjT zA== Received: from prod-mail-ppoint1 (a184-51-33-18.deploy.static.akamaitechnologies.com [184.51.33.18] (may be forged)) by m0050096.ppops.net-00190b01. with ESMTP id 2bsqv53kyt-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 19 Jul 2017 14:33:44 +0100 Received: from pps.filterd (prod-mail-ppoint1.akamai.com [127.0.0.1]) by prod-mail-ppoint1.akamai.com (8.16.0.17/8.16.0.17) with SMTP id v6JDUkem027782; Wed, 19 Jul 2017 09:33:44 -0400 Received: from email.msg.corp.akamai.com ([172.27.123.31]) by prod-mail-ppoint1.akamai.com with ESMTP id 2bqecucb4x-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 19 Jul 2017 09:33:43 -0400 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb2.msg.corp.akamai.com (172.27.123.102) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Wed, 19 Jul 2017 09:33:43 -0400 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1263.000; Wed, 19 Jul 2017 09:33:43 -0400 From: "Salz, Rich" To: "'trans-chairs@ietf.org'" CC: "trans@ietf.org" Thread-Topic: Draft minutes for IETF 99 meeting Thread-Index: AdMAk6DohZlYt/dIRVyA3nhYHLFbUw== Date: Wed, 19 Jul 2017 13:33:42 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.152.126] Content-Type: multipart/alternative; boundary="_000_c97ea9691c3345cf8f5ddf0da06dfc88usma1exdag1mb1msgcorpak_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2017-07-19_09:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 suspectscore=0 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1706020000 definitions=main-1707190220 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2017-07-19_09:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1706020000 definitions=main-1707190219 Archived-At: Subject: [Trans] Draft minutes for IETF 99 meeting X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jul 2017 13:33:53 -0000 --_000_c97ea9691c3345cf8f5ddf0da06dfc88usma1exdag1mb1msgcorpak_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable TRANS session ietf 99 Weds 6962-bis WGLC finished, some editorial issues to address (no need to re-ent= er LC) Gossip - waiting AD review Redaction - Proponents not active, on-hold Threat-analysis - still stuck Ct-dnssec - still in brainstorming Ct-binaries - back to drawing board TLS extension for CT -it is registered in 6962 (bis); do we need a document= ? Probably moot, but Emily Stark will check with google. Log monitoring API - no update AD (ekr) question - when are you done? Melinda: Lack of progress on other documents, so maybe close to done. Ekr: if you can't recruit people, let's close Melinda: agree. --_000_c97ea9691c3345cf8f5ddf0da06dfc88usma1exdag1mb1msgcorpak_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

TRANS session ietf 99

Weds

 

6962-bis WGLC finished, some editorial issues to add= ress (no need to re-enter LC)

Gossip – waiting AD review

Redaction – Proponents not active, on-hold

Threat-analysis – still stuck

Ct-dnssec – still in brainstorming<= /p>

Ct-binaries – back to drawing board=

TLS extension for CT –it is registered in 6962= (bis); do we need a document?  Probably moot, but Emily Stark will ch= eck with google.

Log monitoring API – no update

 

AD (ekr) question – when are you done?

Melinda: Lack of progress on other documents, so may= be close to done.

Ekr: if you can’t recruit people, let’s = close

Melinda: agree.

 

--_000_c97ea9691c3345cf8f5ddf0da06dfc88usma1exdag1mb1msgcorpak_-- From nobody Wed Jul 19 07:12:28 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DEF4B131692; Wed, 19 Jul 2017 07:12:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XmTqE9BgFGpC; Wed, 19 Jul 2017 07:12:25 -0700 (PDT) Received: from mail-wm0-x233.google.com (mail-wm0-x233.google.com [IPv6:2a00:1450:400c:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7843A131A7A; Wed, 19 Jul 2017 07:12:25 -0700 (PDT) Received: by mail-wm0-x233.google.com with SMTP id w191so284589wmw.1; Wed, 19 Jul 2017 07:12:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:cc:from:message-id:date:user-agent :mime-version:in-reply-to; bh=K6yd+RC60eUOw03Fpbm2NFlroDXJjzd8Mevbvev8szg=; b=E0/rFw46TRo87yB+VRuLk7CJ2a6WNzuUAGcRCw8nptKrTCIcDIfiuxXPrBhuZMjTFE V/JBYtL49mhzisnX0GhHV9jknkldmi6C0y1QtgfOWyZ04kLjl8xKXPUlcDgYdGjmR/vj h9vzfvid50rzMSNCyQp54Hgf5F9O0PFqtAPqjXDzTcYCJ3Y5wp4xFRK9Jo4YEEoNziz8 3OpFO4c5F0W4HD8wzLbCEzWPRevBUeDmvofbav0SwmEbkm3RtQpKV2LiOime/iN2+XdF YFLD71ZR8c1Z/qNNYxGAK8HE4+t6C8cXMq+4Z7bef1LUbzDzepZdwOY/nunHZbAumDFG 8LFw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:cc:from:message-id:date :user-agent:mime-version:in-reply-to; bh=K6yd+RC60eUOw03Fpbm2NFlroDXJjzd8Mevbvev8szg=; b=TMFYaeHwM5F5ZZDMGI+mrdcHP07U6Ck87ju7DFVarSxdBkYdswzjNggwI0wgShaYLp DG5V9sC6I0gwNS2sdEZ3MeGFqAbr82si5kcLsiCtST1HKTXvAChrFX6WscjJv1qjwV1c GOeq6HlPC8JVtI8oZyKQo4PX0SzO1JyweyZIlhmcreOs2tuaPFumuCVYsl7huCC9sXDG fExHyy/1gz/0AgMLWfF0Kb8BkPh5E5CwXhO15ZQ5KoXgf/5h1So+iUyFCRRtI3v+FMMl 5uZxCKKgk7XFtgnth6FaZq7eAosRQ3WMJNjYnkqIqVzJFc1/EwKa92HrI/WgsGVGXa8p Srsg== X-Gm-Message-State: AIVw111/gVz8Wbt7Bg93241vkrlBmR3JwYB7HxhS97KEa08NoyxipknF p3Ef1L6T0YAbcBZ8ffI= X-Received: by 10.28.230.17 with SMTP id d17mr98304wmh.17.1500473543338; Wed, 19 Jul 2017 07:12:23 -0700 (PDT) Received: from dhcp-9730.meeting.ietf.org ([2001:67c:1232:144:c1ab:a17c:97ce:dd55]) by smtp.gmail.com with ESMTPSA id w30sm6263882wrb.49.2017.07.19.07.12.21 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 19 Jul 2017 07:12:22 -0700 (PDT) To: "Salz, Rich" , "'trans-chairs@ietf.org'" References: Cc: "trans@ietf.org" From: Melinda Shore Message-ID: <0cccd0f5-a8ce-22e0-6388-f9426be5aa3d@gmail.com> Date: Wed, 19 Jul 2017 16:12:19 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="XhSpFfj8Gjd71GEHmwtGClFIhilPr6fRo" Archived-At: Subject: Re: [Trans] Draft minutes for IETF 99 meeting X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jul 2017 14:12:27 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --XhSpFfj8Gjd71GEHmwtGClFIhilPr6fRo Content-Type: multipart/mixed; boundary="5C8c7tkWj9hOwImTh9m46xPOQ918mm6XV"; protected-headers="v1" From: Melinda Shore To: "Salz, Rich" , "'trans-chairs@ietf.org'" Cc: "trans@ietf.org" Message-ID: <0cccd0f5-a8ce-22e0-6388-f9426be5aa3d@gmail.com> Subject: Re: Draft minutes for IETF 99 meeting References: In-Reply-To: --5C8c7tkWj9hOwImTh9m46xPOQ918mm6XV Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Excellent - thanks! Melinda --5C8c7tkWj9hOwImTh9m46xPOQ918mm6XV-- --XhSpFfj8Gjd71GEHmwtGClFIhilPr6fRo Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJZb2jEAAoJELiGRpM6HoEuZrsQAKHWerCuIft7SerznLdrHpLa oyBJEONKyAwE8Cwi/fO/5r4FL6cgHICQyJ7eEZF0OgMTZ+PqSbA1mSbqsyDD+rzj xRVG9iHYMMDEQ5yV7x7+0H8Q1e9BfErBGl59j8yKauAqMkfh5caRvZBz8El8H+uM 09w/89A7BRcG18D+/lAhIPBEcD7MWEuOKbOZ0wkgliJo3+9VtXB0Nv0AWHuVX7Gk HACxUu+K/el87hxI6LYK1lIkglpswss8SHlXED1Ll4ZGpQqeh9R/Vko4Ln9yc4GZ D+zkAz/gjC5DlNYdRrQF6epagxEkx1Sqo3IUPK0bfYv/8tpJ3sfs6KNcmrrIJ/uJ qioqfRveXj5qUYfIwtqxPj5hKSSIYS+SzoBgl4sfC3yJ5aFRaUyhsAcY/ifA6bKB QhRsM9Go7Muil0urC5CvyaENRoQYb6T6mKudr7pjuh8x1ezYCLITsEWwGOUkcKc9 aQo9xFH+CbNFtSjUhxcO8FmTuwTr1LwHFQKaTcrFJ6Z/78mGNbZh6xgoc32EeQEn gQ2qnLIgjiuWjGbNh5GVCR4C64g/5usQK/y5LBzX4BOg62oYijfNCpyefJHHS54P OWmND9FZxI1OK6V3xqhsquqahUfmogbPOAJ64j98DPdTs6jJyw1uY2X71auUPG60 /iyXpsawQBxkvTfZ+PHZ =Waen -----END PGP SIGNATURE----- --XhSpFfj8Gjd71GEHmwtGClFIhilPr6fRo-- From nobody Wed Jul 19 09:55:50 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BCC312EBF4 for ; Wed, 19 Jul 2017 09:55:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dppvzuhPGBoH for ; Wed, 19 Jul 2017 09:55:47 -0700 (PDT) Received: from mail-wr0-x236.google.com (mail-wr0-x236.google.com [IPv6:2a00:1450:400c:c0c::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F102129482 for ; Wed, 19 Jul 2017 09:55:47 -0700 (PDT) Received: by mail-wr0-x236.google.com with SMTP id v105so30875898wrb.0 for ; Wed, 19 Jul 2017 09:55:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version; bh=ws0Xks6B7heLPwoUTiMoHRvVzE6Uk9Moe8/QHCx1lC4=; b=I3HcgT86muxhYc9LOUY3kiMtnFSFraWvEABCJIcGDjJdSEnGvbFywhr7ye+SPHQrs3 jhzQik3+XgAWgMunvw4UobOTvldfGy4jhYT3R1pQRd7hjYL8cMySmjGO20t/BYgfZddX VyUotDUezOd4ReTgSnw11EWvBTJlg1PsUntWqpNBMd8GnBQY9hkeOIxJc3Gh63WPwMpU c2A7vk04cYgtVL9R1g0Za4miLa0iMTYwWWGDrhPfCv/nG0Rc/FxAPH6Q1XD08jmL7aFE c++dDNwkpeXVMfERJv07k+VSIFEpN/5BOJ5MAsbVBznnF4QewQFhx2OBNaoZGJlbXzy6 yR8w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version; bh=ws0Xks6B7heLPwoUTiMoHRvVzE6Uk9Moe8/QHCx1lC4=; b=bnx0PrFT01c2iGzDDMgbKOdHiFdMadvpl91Vwcxv7dYoKZILkfG2yv6oCj2HwQFi3y XCNJbXsl41KAzDD6bGuP/6lcv0sEGZFNWrSRPs/NxJruTwsMMtqiX8DW4IOx62/uUPqo y0c6E4XD0GCqD1AlJZiXl1NXA+q/0T4ANGDoeuZspkHZ347nfW/l+H1jeB31dssZ0Ol3 5ePgJJpw5a+t0i4GM68XpPRvo96Z1GoJfGj2OExw1OTnLqE4Fzffmsf5S+sbXWlIZXNi FF8LMv5SKyyGcYu8/T+ex9kQap2d5GdANectf39+ckUjg4kO3q16nbur6C3aoAMCGX65 oJPQ== X-Gm-Message-State: AIVw113FX0vYDDeXzszT8Cr0LVqRBVKXwBazGUAOki8f8TAe1EZSWNgO SZ/Ta3z9twjXXHrR7D8= X-Received: by 10.223.148.230 with SMTP id 93mr849882wrr.225.1500483344726; Wed, 19 Jul 2017 09:55:44 -0700 (PDT) Received: from dhcp-9730.meeting.ietf.org ([2001:67c:1232:144:c1ab:a17c:97ce:dd55]) by smtp.gmail.com with ESMTPSA id 39sm993570wrc.84.2017.07.19.09.55.42 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 19 Jul 2017 09:55:43 -0700 (PDT) To: "trans@ietf.org" From: Melinda Shore Message-ID: Date: Wed, 19 Jul 2017 18:55:41 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="20uRIsRSxsRoxn4I56UmFRqKCF4OtcfPD" Archived-At: Subject: [Trans] Minutes uploaded X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jul 2017 16:55:49 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --20uRIsRSxsRoxn4I56UmFRqKCF4OtcfPD Content-Type: multipart/mixed; boundary="2QRgh0R7ifwN3F2oonwHM8AlNuDlOsFf4"; protected-headers="v1" From: Melinda Shore To: "trans@ietf.org" Message-ID: Subject: Minutes uploaded --2QRgh0R7ifwN3F2oonwHM8AlNuDlOsFf4 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Many thanks to Rich Salz for taking minutes during our session today. They've been uploaded (https://www.ietf.org/proceedings/99/minutes/minutes-99-trans-00.txt). Please send any corrections, etc. to the mailing list. Melinda --2QRgh0R7ifwN3F2oonwHM8AlNuDlOsFf4-- --20uRIsRSxsRoxn4I56UmFRqKCF4OtcfPD Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJZb48OAAoJELiGRpM6HoEu+UIP/3GbY+HekkLj1YdKlyd7JYQG dw1rLUYQXbxBcqhQPC6owHa0Ltbx6ORx6ZZckrD7RVQ24tiHTsHxbd8Bg7XF+34I KBiFfQnK+Cvo7K8Ca6obFjrSSwIEuY8Bd5bpZ+kM4I0waeg35qL2VJPdXXx6QfMn H2GBYFF2jS2IqyCSMUYrc8FTjyzlv/6t7pOfxiWFzjIB5pWOUGltsAAkNrH9o85M SZPE4YWqRMRcAvvLu+r+76xUt1fzfbWWtaiJGdXMrTK+YebpuD0hEEZ6Sa0Ao9uZ 7M024hckhLqskDXvukEohxsiGsvQtQk1Rdp7lIVNPaVOBJCCTRt6a6gASG6saHZw nj7JRcBDhEd5AFAJTD5rZIu4qasOpweVseWYKNqBvck4PSSyBwvt4qGC858GS0LU VFhwcEwutZ9UtGpJnUFeCpTGid8xvh4EPz4xrtyynOzqK/7OJvXHhVTwLl0/KFgN 3M2avNGEbJQQaILepZbsnKC9pdLv6m1GXyZi5fPCFKNnSy13OkkDHb79EUX3fUu0 xf2RbKp2MuAnjZvE7JYLq9XnAFQlbzfsY8kGQVbHXSjqKImCLcFX23bmOoUpTZhh gUxI/VcYDqE8IVFHqhrHdxX0QtDHErDPBVX612U9fru3r+t4Pl8LeRsk/NhXlnVv HILde7aoHAxHruJj5Kl9 =joU7 -----END PGP SIGNATURE----- --20uRIsRSxsRoxn4I56UmFRqKCF4OtcfPD-- From nobody Thu Jul 20 02:23:06 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D68A3131A5F for ; Thu, 20 Jul 2017 02:23:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ypjj9hJrRDWv for ; Thu, 20 Jul 2017 02:23:03 -0700 (PDT) Received: from mail-wm0-x236.google.com (mail-wm0-x236.google.com [IPv6:2a00:1450:400c:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F302126B72 for ; Thu, 20 Jul 2017 02:23:03 -0700 (PDT) Received: by mail-wm0-x236.google.com with SMTP id w191so21125324wmw.1 for ; Thu, 20 Jul 2017 02:23:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version; bh=yed9JAzJExbz61pV4spkFoFJuTcvCndQMLrUEt059og=; b=NMcCT/cE465yKnYDvi1feg30OFnbZ930KV9vL8vKuWg8cdZYSm6KdUmRPFEHhDheFs udhVDuYEOowUGJq78Au8D7V+EWE0tlRXB+gZn+VjRzMafxr0nIBBW6LIYWlQ+iubjau6 DTuFySdPwdykLMuqnfsyMV7HmZgl1HIzAZyF9cW2Gld0T61EgDGOIAHXmlDy6clYPk3M kZkvSI/HpKcu3gKtnnm13+WKXRfP3jLpZvvz0UQiU97sNxNf9b2lIG7ZCLSK4S9P8fmP /fPH8arqwUAIz6pUMjhNluOyMVMQ0BzubUwp1b0LyjLYauZ04BwJ76mikKhhyRcKHRS8 m/9Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version; bh=yed9JAzJExbz61pV4spkFoFJuTcvCndQMLrUEt059og=; b=H1a27GQeybNGNj78kgvz7JJJB95xaER97i4rgz8nddm/gBbYfFhDcGzGgV5wMGfL93 SLCl71uaLGrGdFtxvFAQSAwoujdq5UFgrO7sZ2L7MqigNlZ+dMI7366EOvU4U7+t47yU HmhewoXY+aCX/qPfc/3HpbU4epj9HHFspzMmxSMnpfk672pjgd2fpT8QdMmIsUCJF7d+ 01+1OrpiSidtDtDJU9pBzn301ETzNRQlVLmz0HmxJERwVRhSAbi92yjzWUyWLMM8/g+z Ac1UoOXkNcbjs/DZiIi0oK7Xfe53drK2u6MFUrGjn3ySKinCCNQAS5KobxabrZFMkThe zsmQ== X-Gm-Message-State: AIVw1112EcGcPLc1aiTsON5BUVh53qhof3+wdEI01gZLVczxHPTm5GXZ /GpyyiLhnPe1ztHZbUM= X-Received: by 10.28.71.206 with SMTP id m75mr1892841wmi.13.1500542581373; Thu, 20 Jul 2017 02:23:01 -0700 (PDT) Received: from dhcp-9730.meeting.ietf.org ([2001:67c:1232:144:d40b:b3f8:52de:8a50]) by smtp.gmail.com with ESMTPSA id q64sm2183470wmg.35.2017.07.20.02.23.00 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Jul 2017 02:23:00 -0700 (PDT) To: "trans@ietf.org" From: Melinda Shore Message-ID: <5fee4bc3-45c1-968d-3e4f-adae7b2e45b5@gmail.com> Date: Thu, 20 Jul 2017 11:22:59 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="umhTKOeUPakgm0ICw8ndCurj9p3rT0JjR" Archived-At: Subject: [Trans] draft-ietf-trans-rfc6962-bis completed working group last call X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jul 2017 09:23:05 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --umhTKOeUPakgm0ICw8ndCurj9p3rT0JjR Content-Type: multipart/mixed; boundary="1qIXdjwumoQXHEKiseuEh6sOvl6jiH1rV"; protected-headers="v1" From: Melinda Shore To: "trans@ietf.org" Message-ID: <5fee4bc3-45c1-968d-3e4f-adae7b2e45b5@gmail.com> Subject: draft-ietf-trans-rfc6962-bis completed working group last call --1qIXdjwumoQXHEKiseuEh6sOvl6jiH1rV Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable draft-ietf-trans-rfc6962-bis completed working group last call. Some minor issues were raised that must be addressed but they are not sufficiently serious to warrant another wglc. This document has been somewhat more difficult than average to get through the process, and many thanks to the authors for their work on getting the document done. Melinda --1qIXdjwumoQXHEKiseuEh6sOvl6jiH1rV-- --umhTKOeUPakgm0ICw8ndCurj9p3rT0JjR Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJZcHZzAAoJELiGRpM6HoEu+WgP/3NgY7gYbFXM4Il36Amb/kqj enIziA3Nqn7R8uBfTCJLitj31d16R1f4rcGLAHNgXlMrgiEX8TasRzAGg4zn8xej +Wu9aQJ91aHEvnCHtWBtZSrlG99v1uVPH0H2ZQh0bvhdAWBtM61p0lBsZ5yxEv/o IwTaoFGgPxDQRU9jh9NBgs3kJGhc5LV3H3wV3XBlk3tKSRu/CpsX97G2pvaQuBgQ zOezTikBU/3XVEJlBbovSa8RMy90wRqxhzI1FuG5yFmD0gNx7TH8SPexo0V8R6B0 WX+0aR5Syys75xIS5pyxWii555S2P2qacxy9htsjSP9dOyZAqHanH0CM0Ve3ikCU VVk4X9r0OJMyiiVmI148E4dwew2m+G97Dezb5pd9eL8s1p+i5xqpa2HgBP/8cMZb ayshOxjUlftrru7i83YSBSlNOag3E0r1P2tAiVobXGDplxJJejRPlmjOGRZ6/luz /DGJe2qF1LM24bw0vmyV4smKF9nEihCAuN61N8MkGbb8ieauVk5iaX7zuop/HZMX HapAzDLiC0qHalEfQZeUsHHa8cFH+AwQ5Qdiz0WEpGLFKj4UnV9vRImd7Mysltmh Ed+ixU5Di5Gk6uHG90hYjECnq7thmqAWUtVDFjW2FzKcLOpLIQaCXviVMHnluvqy EhiD9PNh7FiijI87Rvol =qRkE -----END PGP SIGNATURE----- --umhTKOeUPakgm0ICw8ndCurj9p3rT0JjR-- From nobody Thu Jul 20 07:16:53 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECD9B12704A for ; Thu, 20 Jul 2017 07:16:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2EHYct1U3bDJ for ; Thu, 20 Jul 2017 07:16:50 -0700 (PDT) Received: from mail-ua0-x230.google.com (mail-ua0-x230.google.com [IPv6:2607:f8b0:400c:c08::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6CAEB126CD6 for ; Thu, 20 Jul 2017 07:16:50 -0700 (PDT) Received: by mail-ua0-x230.google.com with SMTP id d29so14580017uai.2 for ; Thu, 20 Jul 2017 07:16:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=3WDZ4bfAinKTR+Amm/gLapNVR/5YT6rr13oMHeu7Glg=; b=OS7N2dV27g9TK6RXlwCGGpUHmD0ZALicDvNF9DDdHjfUMlE3zW7yMpCpcVR1ixnKau R7mSR+BwUYmDDKg6f0zAp9A8VkxcE+GH/NOpSWI38O7uAD05Xn3D/1ioUHRD4mchrPF0 FEEN8HOmK2NEDqX3ADDLNp6vaCm3wszITcMXVrdrBamOAOrkMdLVPe7bN5yIm0l2Y/BB nNgDkr/t6xysFHgoi6I3vgrrWJo8lPGQ/ywF0tKarn1q/Rx8c3wBJuv2b18sFpFDIddb Vze2w0BFOccAu4zaaW4CmQIYbGN6m4rG/HJZPbrYAvlGEWDopbQwAWTtnzBe+hb7Wqqh 3ydw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=3WDZ4bfAinKTR+Amm/gLapNVR/5YT6rr13oMHeu7Glg=; b=d+h+qbAM8gNPYv8Xd+5jfrBjK4ixJNPXIM75P71pNoatRnjhAnblSDf/b9EvzFRocJ jdxdbLQMVr/oqmPGCo0IHtyDpc9S0G39nUEnA1nSHkU4hu+op0rzZr3eRnFTJt+5lLrO GWPS1iOdE6enEv1lpfG5N/FaiUkDXKKlV5a93pxxe1U2j4bmtxkjmXzXE/iZVWP0eauL Lxa7814lELP+h6J/JteyEOj72LSctI9SEd2ffR/XHw4zh+74+mp25Vs5dvuZA2sarO3i zmpLGSyGsTb/SDzh+ffQj3HwNOaeVNyZdeg1AofWzOESsJpx48TZ47Crbmo36wwe1EME GMiw== X-Gm-Message-State: AIVw11207cNbQJHBFh40BHi53VJNavas9pykFG0JhusJnA2dHesdJ6L7 vQvFVSe7YcsSVMS5I1nhyfnnPbSng7V3 X-Received: by 10.176.5.138 with SMTP id e10mr2275222uae.30.1500560209333; Thu, 20 Jul 2017 07:16:49 -0700 (PDT) MIME-Version: 1.0 Received: by 10.31.149.65 with HTTP; Thu, 20 Jul 2017 07:16:48 -0700 (PDT) In-Reply-To: <5fee4bc3-45c1-968d-3e4f-adae7b2e45b5@gmail.com> References: <5fee4bc3-45c1-968d-3e4f-adae7b2e45b5@gmail.com> From: Ben Laurie Date: Thu, 20 Jul 2017 15:16:48 +0100 Message-ID: To: Melinda Shore Cc: "trans@ietf.org" Content-Type: multipart/alternative; boundary="94eb2c1247943e53170554c06629" Archived-At: Subject: Re: [Trans] draft-ietf-trans-rfc6962-bis completed working group last call X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jul 2017 14:16:52 -0000 --94eb2c1247943e53170554c06629 Content-Type: text/plain; charset="UTF-8" Hoorah! On 20 July 2017 at 10:22, Melinda Shore wrote: > draft-ietf-trans-rfc6962-bis completed working group last call. > Some minor issues were raised that must be addressed but they are > not sufficiently serious to warrant another wglc. > > This document has been somewhat more difficult than average to get > through the process, and many thanks to the authors for their > work on getting the document done. > > Melinda > > > > > > _______________________________________________ > Trans mailing list > Trans@ietf.org > https://www.ietf.org/mailman/listinfo/trans > > --94eb2c1247943e53170554c06629 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hoorah!

On 20 July 2017 at 10:22, Melinda Shore <= melinda.shore@= gmail.com> wrote:
draft-ie= tf-trans-rfc6962-bis completed working group last call.
Some minor issues were raised that must be addressed but they are
not sufficiently serious to warrant another wglc.

This document has been somewhat more difficult than average to get
through the process, and many thanks to the authors for their
work on getting the document done.

Melinda





_______________________________________________
Trans mailing list
Trans@ietf.org
https://www.ietf.org/mailman/listinfo/trans


--94eb2c1247943e53170554c06629-- From nobody Fri Jul 28 02:40:56 2017 Return-Path: X-Original-To: trans@ietf.org Delivered-To: trans@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4AE2D13217D; Fri, 28 Jul 2017 02:40:55 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: trans@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.57.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150123485526.25176.16992857253408571789@ietfa.amsl.com> Date: Fri, 28 Jul 2017 02:40:55 -0700 Archived-At: Subject: [Trans] I-D Action: draft-ietf-trans-rfc6962-bis-26.txt X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Jul 2017 09:40:55 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Public Notary Transparency WG of the IETF. Title : Certificate Transparency Version 2.0 Authors : Ben Laurie Adam Langley Emilia Kasper Eran Messeri Rob Stradling Filename : draft-ietf-trans-rfc6962-bis-26.txt Pages : 54 Date : 2017-07-28 Abstract: This document describes version 2.0 of the Certificate Transparency (CT) protocol for publicly logging the existence of Transport Layer Security (TLS) server certificates as they are issued or observed, in a manner that allows anyone to audit certification authority (CA) activity and notice the issuance of suspect certificates as well as to audit the certificate logs themselves. The intent is that eventually clients would refuse to honor certificates that do not appear in a log, effectively forcing CAs to add all issued certificates to the logs. Logs are network services that implement the protocol operations for submissions and queries that are defined in this document. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-trans-rfc6962-bis/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-trans-rfc6962-bis-26 https://datatracker.ietf.org/doc/html/draft-ietf-trans-rfc6962-bis-26 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-trans-rfc6962-bis-26 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Jul 28 02:50:39 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3AB0F13217D for ; Fri, 28 Jul 2017 02:50:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.19 X-Spam-Level: X-Spam-Status: No, score=-4.19 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v38RCeoRqXk8 for ; Fri, 28 Jul 2017 02:50:34 -0700 (PDT) Received: from mmextmx2.mcr.colo.comodoca.net (mmextmx2.mcr.colo.comodoca.net [IPv6:2a02:1788:402:c00::c0a8:9cd6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F2C23131FBE for ; Fri, 28 Jul 2017 02:50:33 -0700 (PDT) Received: (qmail 31905 invoked by uid 1004); 28 Jul 2017 09:50:31 -0000 Received: from rmdccgwarp1.reyn.mcr.dc.comodo.net (HELO maileu.comodo.net) (10.1.72.82) by mmextmx2.mcr.colo.comodoca.net (qpsmtpd/0.84) with ESMTP; Fri, 28 Jul 2017 10:50:31 +0100 Received: from [192.168.0.58] ([192.168.0.58]) by maileu.comodo.net (IceWarp 11.4.6.0 DEB8 x64) with ASMTP (SSL) id 201707281050314453; Fri, 28 Jul 2017 10:50:31 +0100 To: Melinda Shore References: <5fee4bc3-45c1-968d-3e4f-adae7b2e45b5@gmail.com> Cc: "trans@ietf.org" From: Rob Stradling Message-ID: Date: Fri, 28 Jul 2017 10:50:31 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.0 MIME-Version: 1.0 In-Reply-To: <5fee4bc3-45c1-968d-3e4f-adae7b2e45b5@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Trans] draft-ietf-trans-rfc6962-bis completed working group last call X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Jul 2017 09:50:38 -0000 Melinda, We've just submitted -26, which addresses the issues that were raised by Andrew Ayer during WGLC. Can we send -26 to the IESG? Here's a diff of the changes: https://www.ietf.org/rfcdiff?url1=draft-ietf-trans-rfc6962-bis-25&url2=draft-ietf-trans-rfc6962-bis-26&difftype=--hwdiff Thanks. On 20/07/17 10:22, Melinda Shore wrote: > draft-ietf-trans-rfc6962-bis completed working group last call. > Some minor issues were raised that must be addressed but they are > not sufficiently serious to warrant another wglc. > > This document has been somewhat more difficult than average to get > through the process, and many thanks to the authors for their > work on getting the document done. > > Melinda -- Rob Stradling Senior Research & Development Scientist COMODO - Creating Trust Online From nobody Sat Jul 29 21:45:59 2017 Return-Path: X-Original-To: trans@ietfa.amsl.com Delivered-To: trans@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5BF21200FC for ; Sat, 29 Jul 2017 21:45:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9GlR_8hnktOl for ; Sat, 29 Jul 2017 21:45:55 -0700 (PDT) Received: from mail-pg0-x22c.google.com (mail-pg0-x22c.google.com [IPv6:2607:f8b0:400e:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E414D126C23 for ; Sat, 29 Jul 2017 21:45:53 -0700 (PDT) Received: by mail-pg0-x22c.google.com with SMTP id 125so125867319pgi.3 for ; Sat, 29 Jul 2017 21:45:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:cc:from:message-id:date:user-agent :mime-version:in-reply-to; bh=SM8rux0n6uXz3AvzCQF4tO3LTNIBO2BCR6HctiLPYOE=; b=eKBYL02nJGaUQIFc2P2Nru7lYjdyPhXQcmnfIvHobWSW8b5Pp+idzTxTCfCIVy509R RL6LaYqj5oeD4JcLVIfOuI0YQTqM1IpmPyD4u2F3xFZtDFjmL+XhBJxqIjJeR7zkj/bb wNzlRE8B9E/B403Hcw9z36T1e1gUL9yppvjbj1mQmWVThzqOuElvUcnzcJoCxO/cUVJD jAxRPrv4HiDzTRdRmV0FkYXDy5G4TJbiHzG3SqNk4wum4ZPJvQUBt+3VyH9RlQQMLhun Ou+KzqAHjBOHVm18h2plTkDT4hNs38BctS8Gjg1bpZIWEXvaqgioVkrH2Rb/pDjfo50h vMLA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:cc:from:message-id:date :user-agent:mime-version:in-reply-to; bh=SM8rux0n6uXz3AvzCQF4tO3LTNIBO2BCR6HctiLPYOE=; b=VB1/X8SSKMaepgkwsd/kcKi8FddOcB29UkYZWa9/9MFbn9bqAmjVt3TPMkd6o/Ei6k 7qdSbJ0nbqy8YRpeXr62B01EfLiTacWFdhcAf/MHeOMZtp/z7VXRVq5Buo5jWqdZKIAy oyrfqAbvpVw0rrJsaoNAA41rrQ0ol839hREwX/TtxrtSrJssS+t50fZQHSe+JjAqNHEG ZuB7ck9oZ3NKrsNe0sW9oUVdHxIuewcMfaz6n/Hv+v6L/INpWAs2cJO3CWT+ZIh+x+Pm AvB3lj9ZsEoQG15Kir+PAr4vRs8GCoWrp6TE1FfGdWOC5Yxap1Xe1k/8xVvx/mqSdx7u iKTA== X-Gm-Message-State: AIVw112YfyEJSF3VZf0P58TDFlST8ZE1Dah2aFPhP18lktO02Sf8rohe hhge6/n/0PbYKg15 X-Received: by 10.99.95.200 with SMTP id t191mr11461467pgb.237.1501389952848; Sat, 29 Jul 2017 21:45:52 -0700 (PDT) Received: from aspen.local (216-67-113-98-radius.dynamic.acsalaska.net. [216.67.113.98]) by smtp.gmail.com with ESMTPSA id u62sm49875321pfa.18.2017.07.29.21.45.50 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 29 Jul 2017 21:45:51 -0700 (PDT) To: Rob Stradling References: <5fee4bc3-45c1-968d-3e4f-adae7b2e45b5@gmail.com> Cc: "trans@ietf.org" From: Melinda Shore Message-ID: Date: Sat, 29 Jul 2017 20:45:45 -0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="uMI9IWHqCNtW1ulsjNhhtjVrRE2eaCK7u" Archived-At: Subject: Re: [Trans] draft-ietf-trans-rfc6962-bis completed working group last call X-BeenThere: trans@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Public Notary Transparency working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Jul 2017 04:45:57 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --uMI9IWHqCNtW1ulsjNhhtjVrRE2eaCK7u Content-Type: multipart/mixed; boundary="EnCQi7JwwigjVGwsr23iCPe795iaDTrRC"; protected-headers="v1" From: Melinda Shore To: Rob Stradling Cc: "trans@ietf.org" Message-ID: Subject: Re: [Trans] draft-ietf-trans-rfc6962-bis completed working group last call References: <5fee4bc3-45c1-968d-3e4f-adae7b2e45b5@gmail.com> In-Reply-To: --EnCQi7JwwigjVGwsr23iCPe795iaDTrRC Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 7/28/17 1:50 AM, Rob Stradling wrote: > Can we send -26 to the IESG? We can. We do need an updated shepherd's write-up from Paul, and I think we need to ping EKR about the responsible AD. Many thanks to you, Eran, and your co-editors for your significant effort in getting this done. Melinda --EnCQi7JwwigjVGwsr23iCPe795iaDTrRC-- --uMI9IWHqCNtW1ulsjNhhtjVrRE2eaCK7u Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJZfWR6AAoJELiGRpM6HoEuXWUQAInJL6ooR6HrJyAPuEyTmpSn WgwiQ7pTU4xr4Wtovz6K47DxHdZl8uzVUGSLj/KAIONbbX1sjIJC/ksArhG/o0Nc cLQh2d5Gxn5lZDKM1p5J+MfB4Mfkt6RelBIyRO/9HFKEwMxsoThXUj5UUPWao8S3 bB9X6pE1M1M0YKWsh8+I1NfSGHY0ip9hd0yk4YclB4ekSVyJxEKBj8VU9xPY76xY SXWibpn+6fdo2LZ2vLtybVAOifgV9DNmVrspxTdpWxBYi6TzuJDebjrYvX3ZR/+/ lrHZKvGimluj6VGPsYfe5sF3QoriRGDMVENiUI3e1WHNyf3TdSIL3792UoF7BQxK 9y3acCiwuwXiLAlz6zMcZNMxr5cnNFN8oVPwd7w+TgzRdonZ0003yMOkHDXERngz nMGcWeZjvXdNRWkYkTZYCPYhp37jzYxQ5nsVG1k95qQXBwMAHMzzOJ939z2jwYuJ zXWHufhysWClbA2AdS/rLuOhuGW9b/w3rnzhcHroMv6blSLq5oMJN77xSvfvLCOd jDNJG0qk4sue0rjplq1/DFx3HNICldJQ9EnqEsa0FeQ0t9P8CxcXfyJZq7eZZCZB XKzSUFg3gUpVCyDlAepoZMi5lLoMHgA9hLZc5LxE7Urk3GLcpEeowm8uW86FLYkS KfGEbPFR1ce7MrWaDVS1 =hqt0 -----END PGP SIGNATURE----- --uMI9IWHqCNtW1ulsjNhhtjVrRE2eaCK7u--