From mamille2@cisco.com Mon Jan 7 08:45:43 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D70521F8931 for ; Mon, 7 Jan 2013 08:45:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kJR00nkNHVqT for ; Mon, 7 Jan 2013 08:45:42 -0800 (PST) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) by ietfa.amsl.com (Postfix) with ESMTP id 4F75321F88F5 for ; Mon, 7 Jan 2013 08:45:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5634; q=dns/txt; s=iport; t=1357577136; x=1358786736; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=lMaMAn2eZ7Uo5nqr5dft56q6F0lcCTSFxqvld+dp2ms=; b=bVaX3PfIJU24cpuUtuVZfUL4ftyo611GHXEHI0Gd5+35kSu4IMnvBui3 GAnayJdLhPwpf5tT5bK+XTavlVhx+9Y4ak5scW7K17w/OjIwO0ik6P7kR LsjfT2/JWR+6msJmBAM9uM2H/4wW0S+xrlmApkWSTjUHDkxnSXetXHEtU Q=; X-Files: smime.p7s : 2283 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EAB/76lCtJV2Z/2dsb2JhbAA8Cb1UFnOCHgEBAQMBeQULAgEIDgoKJAIwJQIEDgUIBogDBgy1U4xSEgODTWEDjweBIoZ+jy2CdIFoPg X-IronPort-AV: E=Sophos;i="4.84,424,1355097600"; d="p7s'?scan'208";a="159679005" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-6.cisco.com with ESMTP; 07 Jan 2013 16:45:24 +0000 Received: from xhc-rcd-x10.cisco.com (xhc-rcd-x10.cisco.com [173.37.183.84]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id r07GjOwU007629 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 7 Jan 2013 16:45:24 GMT Received: from xmb-aln-x11.cisco.com ([169.254.6.171]) by xhc-rcd-x10.cisco.com ([173.37.183.84]) with mapi id 14.02.0318.004; Mon, 7 Jan 2013 10:45:24 -0600 From: "Matt Miller (mamille2)" To: Philipp Hancke Thread-Topic: [xmpp] UPDATED: draft-miller-xmpp-posh-prooftype Thread-Index: AQHNYQkX9V40zEPjy0GhHDInS5a+QJgd+JGAgCGWt4A= Date: Mon, 7 Jan 2013 16:45:23 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.129.24.74] Content-Type: multipart/signed; boundary="Apple-Mail=_34454647-DAFF-4B77-A467-2578A027A340"; protocol="application/pkcs7-signature"; micalg=sha1 MIME-Version: 1.0 Cc: XMPP Working Group Subject: Re: [xmpp] UPDATED: draft-miller-xmpp-posh-prooftype X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jan 2013 16:45:43 -0000 --Apple-Mail=_34454647-DAFF-4B77-A467-2578A027A340 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii On Dec 17, 2012, at 12:49 AM, Philipp Hancke = wrote: > On Fri, 13 Jul 2012, Matt Miller (mamille2) wrote: >> An update to draft-miller-xmpp-posh-prooftype is now available. The = only change is the syntax of the .well-known URI. >>=20 >> < http://tools.ietf.org/html/draft-miller-xmpp-posh-prooftype-01 > >>=20 >>=20 >> Enjoy! >=20 Thank you for the feedback! > Just had a chance to do so again -- some questions: > 1) can there be multiple certificates (for rollover) in the file? > 2) can the file contain a chain of certificates or is this limited to = the > end entity certificate? The current revision implies a single certificate. However, specifying = a chain and/or rollovers is definitely something that needs to be = supported. I was trying to keep deployment as simple as possible; = ideally not more than "copy the PEMs into the file". I think = concatenation can handle either chains or rollovers fine, but not both. = I'm open to suggestions here. > 3) is the subject of the certificate(s) fetched checked against RFC = 6125? > If not, wouldn't it be sufficient to compare hashes? That is a good question. The current revision states that it does not = supersede RFC6125, which one could interpret to mean the fetched = certificate MUST contain a matching reference identifier. I personally think a hash compare is fine. How about something along = the lines of the following? #### 7. Security Considerations This document supplements but does not supersede the security considerations provided in [RFC2616], [RFC2818], [RFC6120], and [RFC6125], except as specified below. Specifically, communication via HTTPS depends on checking the identity of the HTTP server in accordance with [RFC2818]. A client MAY accept the server's TLS certificate if the Public Subject Key Info (or hash thereof) matches the POSH-obtained certificate, forgoing any identifier matches mandated by [RFC6125]. #### Thoughts? - m&m Matt Miller < mamille2@cisco.com > Cisco Systems, Inc. --Apple-Mail=_34454647-DAFF-4B77-A467-2578A027A340 Content-Disposition: attachment; filename="smime.p7s" Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIFejCCBXYw ggNeoAMCAQICAwyLmDANBgkqhkiG9w0BAQUFADB5MRAwDgYDVQQKEwdSb290IENBMR4wHAYDVQQL ExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQgU2lnbmluZyBBdXRob3Jp dHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZzAeFw0xMjExMjgxNzQ5MzFaFw0x NDExMjgxNzQ5MzFaMDwxFzAVBgNVBAMTDk1hdHRoZXcgTWlsbGVyMSEwHwYJKoZIhvcNAQkBFhJt YW1pbGxlMkBjaXNjby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Sh5cQYtd /kfoG3KjXd8i2esxt+BtHCmuiSku2VECC6msLKzA08cGJ31GfyX7+996TV3D5omh51j5fznfFikk cVGsuKe+omo70Aidw48ISGygQk8ZJrU8JVVfTjKVJRX39wgj8w8CI/BCz4kXLirIBWKTv1ARuqsO 7I1aqT7pWHAwlAKIbYYEwfz46OjyzmqknglOecy/1PR09nXwAAIepSo0Jk9edqsU8Pdqsbx8cPUV jlFtVkk+58ORjefl+4BoGrzW24rGG2B04sNPrycNqZEaJLmdk5J9ie/FMV10H8wFW8syomuacPxv NhoUgNnkYsJiO7zJEKUUmbmW1GPFAgMBAAGjggFCMIIBPjAMBgNVHRMBAf8EAjAAMFYGCWCGSAGG +EIBDQRJFkdUbyBnZXQgeW91ciBvd24gY2VydGlmaWNhdGUgZm9yIEZSRUUgaGVhZCBvdmVyIHRv IGh0dHA6Ly93d3cuQ0FjZXJ0Lm9yZzAOBgNVHQ8BAf8EBAMCA6gwQAYDVR0lBDkwNwYIKwYBBQUH AwQGCCsGAQUFBwMCBgorBgEEAYI3CgMEBgorBgEEAYI3CgMDBglghkgBhvhCBAEwMgYIKwYBBQUH AQEEJjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5jYWNlcnQub3JnMDEGA1UdHwQqMCgwJqAk oCKGIGh0dHA6Ly9jcmwuY2FjZXJ0Lm9yZy9yZXZva2UuY3JsMB0GA1UdEQQWMBSBEm1hbWlsbGUy QGNpc2NvLmNvbTANBgkqhkiG9w0BAQUFAAOCAgEAKZeEUJTYYt15cxR3xYospy8OqOLn+03auURM X3eFTrbBy+vJEnEtDS5ffCKbzAho6XqGrgRg/7Frg2wtdfIJvcYnPsWjlF+TIWe69i9r7EfPZI6A DCWHeu5cK3t9h7WsF3iC+lBARWEE49QJcu6ASY4SpVnElADpUZkBLsKnp2vWEVvXdeFg0CCo9UgH gPnE5mUsUaERW0WGIbyR+gkUkfMUsnOj2yvdZzC55UqAfFGqb4ibVlpWMJihaTYaSuN7SOImcJ5V Ya1w4yPRY2GStiHtmwPKtxlMVwMIsj1DQ/knVPpyJ0N67y8TK3R077HMInjk8wF6yCJ7W29mGtsA Y74bHEwn4rMdPDAHK1aHvIhf5KZFBuDYm5Ii6yweR8mpUv66r11h1G9vZKpJyKqR0yikdJfQ+kGN C1mAFN6ZKfQexnzzAPUClzcrJQsLWGl1tss+LHWFEhSq0240bvUqPVNl52WGwMrgzP/W32HZz62W 1CUaWiy3Xr8cHEY3fTSqxPLJiEuRsUmg1+6cjtz9+Ya+IDZwPRtcqzmJFQq+Q1xHLKfS8uf/jxHP xVOzbPpF/O0E0A8Z9ShmfdhgrHNJExXMVerISlzQY6Aq+XzGyOXVwUVyfTnTj7orMacBAVUJNl4s MHEJ02oUeALFMoa2TvwtGEw6Ou7/UlNXt/E1iUkxggMzMIIDLwIBATCBgDB5MRAwDgYDVQQKEwdS b290IENBMR4wHAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQg U2lnbmluZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZwIDDIuY MAkGBSsOAwIaBQCgggGHMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8X DTEzMDEwNzE2NDUyNFowIwYJKoZIhvcNAQkEMRYEFOqMXhNHL+NaDiteeeJwq1aofnuIMIGRBgkr BgEEAYI3EAQxgYMwgYAweTEQMA4GA1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5j YWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcN AQkBFhJzdXBwb3J0QGNhY2VydC5vcmcCAwyLmDCBkwYLKoZIhvcNAQkQAgsxgYOggYAweTEQMA4G A1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlD QSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5v cmcCAwyLmDANBgkqhkiG9w0BAQEFAASCAQCuEvhl6LQCZvgoByOBPcUkp8krk+0IEChbL1ojKVLI CT16ZLS8LOdTuBsCC7lUzDJ42vyRnKYdyQVC3K68iAN3VM7pDxpfeekfXbKrI5J9YJyk75pPyl76 YK/QdNrl4MjMxfw4fWh7jt+1CqvMDCWh10JwwC0Jf93Z9w8GoTJo1EI1RkwQESFl90hnKFSx20xT YwOONl79BK7AwC/abqn2p4bFg86/c+R4pF/hWB05PlUz2MGjtfwekBJMu9VoAnhUrozlaNL0EDPK au562g+KXLsElhHvwuHXw10lbisKk2Hp1vIOKt++n/iMK2KSREV8fyAJzcoS/VEmfbrQwMO5AAAA AAAA --Apple-Mail=_34454647-DAFF-4B77-A467-2578A027A340-- From stpeter@stpeter.im Mon Jan 7 09:46:05 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E80C21F8929 for ; Mon, 7 Jan 2013 09:46:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AFCAPsG07TwG for ; Mon, 7 Jan 2013 09:46:04 -0800 (PST) Received: from stpeter.im (mailhost.stpeter.im [207.210.219.225]) by ietfa.amsl.com (Postfix) with ESMTP id 606B221F891A for ; Mon, 7 Jan 2013 09:46:04 -0800 (PST) Received: from [10.129.24.67] (unknown [128.107.239.234]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id D3CDD404EB for ; Mon, 7 Jan 2013 10:51:07 -0700 (MST) Message-ID: <50EB09E2.7020501@stpeter.im> Date: Mon, 07 Jan 2013 10:46:10 -0700 From: Peter Saint-Andre User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: XMPP Working Group X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Subject: [xmpp] DNA prooftypes: advertising support and preference order? X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jan 2013 17:46:05 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Currently in DNA (draft-saintandre-xmpp-dna, recently expired but soon to be updated), there is no way for the receiving server or the connecting client / peer server to advertise the prooftypes it supports, or its preference order for prooftypes. This means it is possible that: (1) the set of mutually supported prooftypes might be null (in which case a connection attempt might be futile, depending on local security policies) (2) "expensive" prooftypes might be tried too early in the process (in which case the connecting client / peer server might spend time more trying to connect than necessary). My co-author and I chatted about this last week. Our rough sense is that we won't have enough prooftypes for this to be a significant concern, that the cost of adding and supporting more protocol (e.g., stream features) here isn't worth the potential benefit, that conventions regarding the prooftypes that need to be supported will emerge naturally in the relatively small market of XMPP systems needing DNA (mostly, large hosting providers), and that initiating entities can support an algorithm similar to "happy eyeballs" (RFC 6555) in order to speed up the connection process. If you disagree with our conclusions, do feel free to say so on the list. :) We *might* add some text about several of these topics in the next version of the spec, but most likely such text would be relegated to implementation and deployment notes or an informational appendix. Peter - -- Peter Saint-Andre https://stpeter.im/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDrCeEACgkQNL8k5A2w/vz8sgCfXOJs5WOq7IFwojqyQBXAltNF oWAAoL2o8qPwS8Qp8lPI5IqTuchsoJgo =oork -----END PGP SIGNATURE----- From stpeter@stpeter.im Thu Jan 10 17:57:57 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9FDF21F86E8 for ; Thu, 10 Jan 2013 17:57:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.569 X-Spam-Level: X-Spam-Status: No, score=-102.569 tagged_above=-999 required=5 tests=[AWL=0.030, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hWU-2kA5o1M3 for ; Thu, 10 Jan 2013 17:57:57 -0800 (PST) Received: from stpeter.im (mailhost.stpeter.im [207.210.219.225]) by ietfa.amsl.com (Postfix) with ESMTP id C56BE21F88CC for ; Thu, 10 Jan 2013 17:57:56 -0800 (PST) Received: from [192.168.1.205] (unknown [71.237.13.154]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id 6C8254060C for ; Thu, 10 Jan 2013 19:03:11 -0700 (MST) Message-ID: <50EF71A4.1050606@stpeter.im> Date: Thu, 10 Jan 2013 18:57:56 -0700 From: Peter Saint-Andre User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: XMPP Working Group References: <20130110184432.5134.57184.idtracker@ietfa.amsl.com> In-Reply-To: <20130110184432.5134.57184.idtracker@ietfa.amsl.com> X-Enigmail-Version: 1.4.6 X-Forwarded-Message-Id: <20130110184432.5134.57184.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Subject: [xmpp] Fwd: I-D Action: draft-miller-xmpp-dnssec-prooftype-03.txt X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Jan 2013 01:57:58 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just a small update to reflect publication of RFC 6698... Peter - -------- Original Message -------- Subject: I-D Action: draft-miller-xmpp-dnssec-prooftype-03.txt Date: Thu, 10 Jan 2013 10:44:32 -0800 From: internet-drafts@ietf.org Reply-To: internet-drafts@ietf.org To: i-d-announce@ietf.org A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Using DNS Security Extensions (DNSSEC) and DNS-based Authentication of Named Entities (DANE) as a Prooftype for XMPP Domain Name Associations Author(s) : Matthew Miller Peter Saint-Andre Filename : draft-miller-xmpp-dnssec-prooftype-03.txt Pages : 7 Date : 2013-01-10 Abstract: This document defines a prooftype that uses DNS-based Authentication of Named Entities (DANE) for associating a domain name with an XML stream in the Extensible Messaging and Presence Protocol (XMPP). It also defines a method that uses DNS Security (DNSSEC) for securely delegating a source domain to a derived domain in XMPP. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-miller-xmpp-dnssec-prooftype There's also a htmlized version available at: http://tools.ietf.org/html/draft-miller-xmpp-dnssec-prooftype-03 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-miller-xmpp-dnssec-prooftype-03 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ I-D-Announce mailing list I-D-Announce@ietf.org https://www.ietf.org/mailman/listinfo/i-d-announce Internet-Draft directories: http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDvcaQACgkQNL8k5A2w/vxOswCfSD5OrV7Fgj0gkgrFaBfroWks HWAAn0hwNNsP0pPiX+lRwoz0sEEHj53X =8YV7 -----END PGP SIGNATURE----- From mamille2@cisco.com Fri Jan 11 06:53:23 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAD7021F894C for ; Fri, 11 Jan 2013 06:53:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qb8Er05k8emP for ; Fri, 11 Jan 2013 06:53:22 -0800 (PST) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) by ietfa.amsl.com (Postfix) with ESMTP id 7B1E221F8942 for ; Fri, 11 Jan 2013 06:53:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4982; q=dns/txt; s=iport; t=1357916002; x=1359125602; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=WBzuvvWQHtj4DudVwjOJ9+EdYIU08O6W+K99RYYgCn4=; b=gGYe8VRN/jzsyIghSzcXbSfvCQ8UFLbHYAS3bHFT3+g5VYS0ueome6FY hvf/UR9RsZOFtPjnAhgYfGyJy0pEQ7FGS26q1pZOIn9TBs0NtRjEAGBcZ z6dEkJ3qQFJkG5UbjdXSgvhPvkLKTJkPDwf/f2GW7Ke7aw9xDgOBa0u7Z w=; X-Files: smime.p7s : 2283 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgsFADYn8FCtJV2b/2dsb2JhbABEg2y6ERZzgh4BAQEDAQEBAWsbAgEqJAIlCxsKAgQTCAEFiAUGBwW0e5BFYQOPB4Eihn6KHoUPgnWCJA X-IronPort-AV: E=Sophos;i="4.84,452,1355097600"; d="p7s'?scan'208";a="161372513" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by rcdn-iport-2.cisco.com with ESMTP; 11 Jan 2013 14:53:13 +0000 Received: from xhc-rcd-x01.cisco.com (xhc-rcd-x01.cisco.com [173.37.183.75]) by rcdn-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id r0BErCTG012390 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Fri, 11 Jan 2013 14:53:13 GMT Received: from xmb-aln-x11.cisco.com ([169.254.6.138]) by xhc-rcd-x01.cisco.com ([173.37.183.75]) with mapi id 14.02.0318.004; Fri, 11 Jan 2013 08:53:12 -0600 From: "Matt Miller (mamille2)" To: XMPP Working Group Thread-Topic: I-D Action: draft-miller-xmpp-e2e-03.txt Thread-Index: AQHN72QFn+LIGaEVdkWaOX59JE/JJphEnI2A Date: Fri, 11 Jan 2013 14:53:12 +0000 Message-ID: References: <20130110185432.4512.92709.idtracker@ietfa.amsl.com> In-Reply-To: <20130110185432.4512.92709.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.129.24.74] Content-Type: multipart/signed; boundary="Apple-Mail=_E4A6301C-DAAD-4476-9260-754012C7410B"; protocol="application/pkcs7-signature"; micalg=sha1 MIME-Version: 1.0 Subject: [xmpp] Fwd: I-D Action: draft-miller-xmpp-e2e-03.txt X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Jan 2013 14:53:23 -0000 --Apple-Mail=_E4A6301C-DAAD-4476-9260-754012C7410B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii FYI, minor updates to sync with latest JOSE drafts. - m&m Matt Miller < mamille2@cisco.com > Cisco Systems, Inc. On Jan 10, 2013, at 11:54 AM, internet-drafts@ietf.org wrote: >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. >=20 >=20 > Title : End-to-End Object Encryption for the = Extensible Messaging and Presence Protocol (XMPP) > Author(s) : Matthew Miller > Filename : draft-miller-xmpp-e2e-03.txt > Pages : 24 > Date : 2013-01-10 >=20 > Abstract: > This document defines a method of end-to-end object encryption for > the Extensible Messaging and Presence Protocol (XMPP). >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-miller-xmpp-e2e >=20 > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-miller-xmpp-e2e-03 >=20 > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=3Ddraft-miller-xmpp-e2e-03 >=20 >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html > or ftp://ftp.ietf.org/ietf/1shadow-sites.txt --Apple-Mail=_E4A6301C-DAAD-4476-9260-754012C7410B Content-Disposition: attachment; filename="smime.p7s" Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIFejCCBXYw ggNeoAMCAQICAwyLmDANBgkqhkiG9w0BAQUFADB5MRAwDgYDVQQKEwdSb290IENBMR4wHAYDVQQL ExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQgU2lnbmluZyBBdXRob3Jp dHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZzAeFw0xMjExMjgxNzQ5MzFaFw0x NDExMjgxNzQ5MzFaMDwxFzAVBgNVBAMTDk1hdHRoZXcgTWlsbGVyMSEwHwYJKoZIhvcNAQkBFhJt YW1pbGxlMkBjaXNjby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Sh5cQYtd /kfoG3KjXd8i2esxt+BtHCmuiSku2VECC6msLKzA08cGJ31GfyX7+996TV3D5omh51j5fznfFikk cVGsuKe+omo70Aidw48ISGygQk8ZJrU8JVVfTjKVJRX39wgj8w8CI/BCz4kXLirIBWKTv1ARuqsO 7I1aqT7pWHAwlAKIbYYEwfz46OjyzmqknglOecy/1PR09nXwAAIepSo0Jk9edqsU8Pdqsbx8cPUV jlFtVkk+58ORjefl+4BoGrzW24rGG2B04sNPrycNqZEaJLmdk5J9ie/FMV10H8wFW8syomuacPxv NhoUgNnkYsJiO7zJEKUUmbmW1GPFAgMBAAGjggFCMIIBPjAMBgNVHRMBAf8EAjAAMFYGCWCGSAGG +EIBDQRJFkdUbyBnZXQgeW91ciBvd24gY2VydGlmaWNhdGUgZm9yIEZSRUUgaGVhZCBvdmVyIHRv IGh0dHA6Ly93d3cuQ0FjZXJ0Lm9yZzAOBgNVHQ8BAf8EBAMCA6gwQAYDVR0lBDkwNwYIKwYBBQUH AwQGCCsGAQUFBwMCBgorBgEEAYI3CgMEBgorBgEEAYI3CgMDBglghkgBhvhCBAEwMgYIKwYBBQUH AQEEJjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5jYWNlcnQub3JnMDEGA1UdHwQqMCgwJqAk oCKGIGh0dHA6Ly9jcmwuY2FjZXJ0Lm9yZy9yZXZva2UuY3JsMB0GA1UdEQQWMBSBEm1hbWlsbGUy QGNpc2NvLmNvbTANBgkqhkiG9w0BAQUFAAOCAgEAKZeEUJTYYt15cxR3xYospy8OqOLn+03auURM X3eFTrbBy+vJEnEtDS5ffCKbzAho6XqGrgRg/7Frg2wtdfIJvcYnPsWjlF+TIWe69i9r7EfPZI6A DCWHeu5cK3t9h7WsF3iC+lBARWEE49QJcu6ASY4SpVnElADpUZkBLsKnp2vWEVvXdeFg0CCo9UgH gPnE5mUsUaERW0WGIbyR+gkUkfMUsnOj2yvdZzC55UqAfFGqb4ibVlpWMJihaTYaSuN7SOImcJ5V Ya1w4yPRY2GStiHtmwPKtxlMVwMIsj1DQ/knVPpyJ0N67y8TK3R077HMInjk8wF6yCJ7W29mGtsA Y74bHEwn4rMdPDAHK1aHvIhf5KZFBuDYm5Ii6yweR8mpUv66r11h1G9vZKpJyKqR0yikdJfQ+kGN C1mAFN6ZKfQexnzzAPUClzcrJQsLWGl1tss+LHWFEhSq0240bvUqPVNl52WGwMrgzP/W32HZz62W 1CUaWiy3Xr8cHEY3fTSqxPLJiEuRsUmg1+6cjtz9+Ya+IDZwPRtcqzmJFQq+Q1xHLKfS8uf/jxHP xVOzbPpF/O0E0A8Z9ShmfdhgrHNJExXMVerISlzQY6Aq+XzGyOXVwUVyfTnTj7orMacBAVUJNl4s MHEJ02oUeALFMoa2TvwtGEw6Ou7/UlNXt/E1iUkxggMzMIIDLwIBATCBgDB5MRAwDgYDVQQKEwdS b290IENBMR4wHAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQg U2lnbmluZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZwIDDIuY MAkGBSsOAwIaBQCgggGHMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8X DTEzMDExMTE0NTMxMlowIwYJKoZIhvcNAQkEMRYEFE6ROmIZmllUq7mp31jDveKzVp5FMIGRBgkr BgEEAYI3EAQxgYMwgYAweTEQMA4GA1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5j YWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcN AQkBFhJzdXBwb3J0QGNhY2VydC5vcmcCAwyLmDCBkwYLKoZIhvcNAQkQAgsxgYOggYAweTEQMA4G A1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlD QSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5v cmcCAwyLmDANBgkqhkiG9w0BAQEFAASCAQB/3lJY8q6ALM1rDnX0/fxip5KYk3/AJz69/Mmox6FS XJ4TJr0jRQoof0zmfs5BJRXVVimRvwcms5C9d71LQkJ2YcpPjaXgsL3b1kivcoa7DWq9v3w0hhSA NMSUbqKn+E2XymuU73usKptpPSGuSdO9KvQ3YbNOyYgUgeIl8NKuS1NVrwhUaEX5rIAPk1msL+KM 83B7Lh+UAUXkS//nhecwM4utJA1426M4GeD73Tk15SCHWRSFp4w+7tM7oBY0zWWBydXicYHoJ2e8 YGBCexmszdHSYs3Ge55i1/NX/NLkhw8ocR3x3eT7hW28PtF5NqwXmjcHzECXUVJkDUqeEUHyAAAA AAAA --Apple-Mail=_E4A6301C-DAAD-4476-9260-754012C7410B-- From jhildebr@cisco.com Thu Jan 31 03:31:09 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D109A21F8696 for ; Thu, 31 Jan 2013 03:31:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iMm2nBg06Zwu for ; Thu, 31 Jan 2013 03:31:09 -0800 (PST) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) by ietfa.amsl.com (Postfix) with ESMTP id 395D721F868F for ; Thu, 31 Jan 2013 03:31:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=497; q=dns/txt; s=iport; t=1359631869; x=1360841469; h=from:to:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=GUYaKyQLTvgGoM8nQaAXlWJGcizr9GS3FnQu/o0FzWY=; b=PUjpz+CZeFVJ6M5C1r0aSzBRRgKsRZ2SRrS6WTr5wy+DX2t57oKEviEw Rfjr0v12eDcR8JG8ym02kYRRJF1Iks4/Cwk4Dvvesby7P411+vM5J27/9 zos4Vtvo4DZBY3x4ppfy7k0pf6ZU5mH15v0JQ41Nq20xGUN/ttkj69yNG Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av0EAHVUClGtJXG9/2dsb2JhbABFvx8Wc4IgAQSBCwEqVicEG4gJoFqhMZArYQOIL4ovlACCd4Ik X-IronPort-AV: E=Sophos;i="4.84,575,1355097600"; d="scan'208";a="171066345" Received: from rcdn-core2-2.cisco.com ([173.37.113.189]) by rcdn-iport-4.cisco.com with ESMTP; 31 Jan 2013 11:31:08 +0000 Received: from xhc-aln-x05.cisco.com (xhc-aln-x05.cisco.com [173.36.12.79]) by rcdn-core2-2.cisco.com (8.14.5/8.14.5) with ESMTP id r0VBV8hY028387 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Thu, 31 Jan 2013 11:31:08 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.229]) by xhc-aln-x05.cisco.com ([173.36.12.79]) with mapi id 14.02.0318.004; Thu, 31 Jan 2013 05:31:08 -0600 From: "Joe Hildebrand (jhildebr)" To: XMPP Working Group Thread-Topic: i18n feedback needed Thread-Index: AQHN/6Z2ZDQGmQav3UWrBbrrB903sg== Date: Thu, 31 Jan 2013 11:31:08 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.2.5.121010 x-originating-ip: [10.149.12.17] Content-Type: text/plain; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [xmpp] i18n feedback needed X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Jan 2013 11:31:09 -0000 Responding to Kev's request at the XMPP Summit that we have a thread to talk about Prec=EDs, here are the IDs in Peter's slide that you should review as soon as possible: draft-ietf-precis-framework draft-ietf-precis-nicname draft-ietf-xmpp-6122bis draft-melnikov-precis-saslprepbis Of these, draft-ietf-xmpp-6122bis is the one that is on our charter here, but the others need to be reviewed and commented upon in order to make sure that 6122bis is correct. --=20 Joe Hildebrand