Using Secure DNS to Associate Certificates with Domain Names for S/MIME
draft-ietf-dane-smime-16
Revision differences
Document history
Date | Rev. | By | Action |
---|---|---|---|
2017-05-30
|
16 | (System) | RFC Editor state changed to AUTH48-DONE from AUTH48 |
2017-04-29
|
16 | (System) | RFC Editor state changed to AUTH48 from RFC-EDITOR |
2017-04-25
|
16 | (System) | RFC Editor state changed to RFC-EDITOR from EDITlt;paragraph> The size of this Information Element is 3 octets. … RFC Editor state changed to RFC-EDITOR from EDITlt;paragraph> The size of this Information Element is 3 octets. </paragraph> </description> <reference> <paragraph> See RFC 3032. </paragraph> </reference> </field> <field name="mplsLabelStackSection5" dataType="octetArray" group="subIpHeader" dataTypeSemantics="identifier" elementId="74" applicability="all" status="current"> <description> <paragraph> The Label, Exp, and S fields from the label stack entry that was pushed immediately before the label stack entry that would be reported by mplsLabelStackSection4. See the definition of mplsTopLabelStackSection for further details. </paragraph> <paragraph> The size of this Information Element is 3 octets. </paragraph> </description> <reference> <paragraph> See RFC 3032. </paragraph> Quittek, et al. Standards Track [Page 128] RFC 5102 IPFIX Information Model January 2008 </reference> </field> <field name="mplsLabelStackSection6" dataType="octetArray" group="subIpHeader" dataTypeSemantics="identifier" elementId="75" applicability="all" status="current"> <description> <paragraph> The Label, Exp, and S fields from the label stack entry that was pushed immediately before the label stack entry that would be reported by mplsLabelStackSection5. See the definition of mplsTopLabelStackSection for further details. </paragraph> <paragraph> The size of this Information Element is 3 octets. </paragraph> </description> <reference> <paragraph> See RFC 3032. </paragraph> </reference> </field> <field name="mplsLabelStackSection7" dataType="octetArray" group="subIpHeader" dataTypeSemantics="identifier" elementId="76" applicability="all" status="current"> <description> <paragraph> The Label, Exp, and S fields from the label stack entry that was pushed immediately before the label stack entry that would be reported by mplsLabelStackSection6. See the definition of mplsTopLabelStackSection for further details. </paragraph> <paragraph> The size of this Information Element is 3 octets. </paragraph> </description> <reference> <paragraph> See RFC 3032. </paragraph> </reference> </field> <field name="mplsLabelStackSection8" dataType="octetArray" Quittek, et al. Standards Track [Page 129] RFC 5102 IPFIX Information Model January 2008 group="subIpHeader" dataTypeSemantics="identifier" elementId="77" applicability="all" status="current"> <description> <paragraph> The Label, Exp, and S fields from the label stack entry that was pushed immediately before the label stack entry that would be reported by mplsLabelStackSection7. See the definition of mplsTopLabelStackSection for further details. </paragraph> <paragraph> The size of this Information Element is 3 octets. </paragraph> </description& |
2017-04-21
|
16 | Gunter Van de Velde | Closed request for Last Call review by OPSDIR with state 'No Response' |
2017-03-22
|
16 | (System) | IANA Action state changed to RFC-Ed-Ack from Waiting on RFC Editor |
2017-03-22
|
16 | (System) | IANA Action state changed to Waiting on RFC Editor from Waiting on Authors |
2017-03-22
|
16 | (System) | IANA Action state changed to Waiting on Authors |
2017-03-20
|
16 | (System) | RFC Editor state changed to EDIT |
2017-03-20
|
16 | (System) | IESG state changed to RFC Ed Queue See RFC 3031 for the association between MPLS labels and IP addresses. … IESG state changed to RFC Ed Queue See RFC 3031 for the association between MPLS labels and IP addresses. </paragraph> </reference> </field> <field name="mplsTopLabelIPv6Address" dataType="ipv6Address" group="derived" dataTypeSemantics="identifier" elementId="140" applicability="data" status="current"> <description> <paragraph> The IPv6 address of the system that the MPLS top label will cause this Flow to be forwarded to. </paragraph> </description> <reference> <paragraph> See RFC 3031 for the association between MPLS labels and IP addresses. </paragraph> </reference> </field> <field name="mplsVpnRouteDistinguisher" dataType="octetArray" group="derived" dataTypeSemantics="identifier" elementId="90" applicability="all" status="current"> <description> <paragraph> The value of the VPN route distinguisher of a corresponding entry in a VPN routing and forwarding table. Route distinguisher ensures that the same address can be used in several different MPLS VPNs and that it is possible for BGP to carry several completely different routes to that address, one for each VPN. According to RFC 4364, the size of mplsVpnRouteDistinguisher is 8 octets. However, in RFC 4382 an octet string with flexible length was chosen for representing a VPN route distinguisher by object MplsL3VpnRouteDistinguisher. This choice was made in order to be open to future changes of the size. This idea was adopted when choosing octetArray as abstract data type for this Information Element. The maximum length of this Information Element is 256 octets. </paragraph> </description> <reference> <paragraph> See RFC 4364 for the specification of the route Quittek, et al. Standards Track [Page 136] RFC 5102 IPFIX Information Model January 2008 distinguisher. See RFC 4382 for the specification of the MPLS/BGP Layer 3 Virtual Private Network (VPN) Management Information Base. </paragraph> </reference> </field> <field name="minimumIpTotalLength" dataType="unsigned64" group="minMax" elementId="25" applicability="all" status="current"> <description> <paragraph> Length of the smallest packet observed for this Flow. The packet length includes the IP header(s) length and the IP payload length. </paragraph> </description> <reference> <paragraph> See RFC 791 for the specification of the IPv4 total length. See RFC 2460 for the specification of the IPv6 payload length. See RFC 2675 for the specification of the IPv6 jumbo payload length. </paragraph> </reference> <units>octets</units> </field> <field name="maximumIpTotalLength" dataType="unsigned64" group="minMax" elementId="26" applicability="all" status="current"> <description> <paragraph> Length of the largest packet observed for this Flow. The packet length includes the IP header(s) length and the IP payload length. </paragraph> </description> <reference> <paragraph> See RFC 791 for the specification of the IPv4 total length. See RFC 2460 for the specification of the IPv6 payload length. See RFC 2675 for the specification of the IPv6 jumbo payload length. Quittek, et al. Standards Track [Page 137] RFC 5102 IPFIX Information Model January 2008 </paragraph> </reference> <units>octets</units> </field> <field name="minimumTTL" dataType="unsigned8" group="minMax" elementId="52" applicability="data" status="current"> <description> <paragraph> Minimum TTL value observed for any packet in this Flow. </paragraph> </description> <reference> <paragraph> See RFC 791 for the definition of the IPv4 Time to Live field. See RFC 2460 for the definition of the IPv6 Hop Limit field. </paragraph> </reference> <units>hops</units> </field> <field name="maximumTTL" dataType="unsigned8" group="minMax" elementId="53" applicability="data" status="current"> <description> <paragraph> Maximum TTL value observed for any packet in this Flow. </paragraph> </description> <reference> <paragraph> See RFC 791 for the definition of the IPv4 Time to Live field. See RFC 2460 for the definition of the IPv6 Hop Limit field. </paragraph> </reference> <units>hops</units> </field> <field name="ipv4Options" dataType="unsigned32" dataTypeSemantics="flags" group="minMax" elementId="208" applicability="all" status="current"from Approved-announcement sent |
2017-03-20
|
16 | (System) | Announcement was received by RFC Editor |
2017-03-20
|
16 | Amy Vezza | IESG state changed to Approved-announcement sent from Approved-announcement to be sent::Point Raised - writeup needed |
2017-03-20
|
16 | Amy Vezza | IESG has approved the document |
2017-03-20
|
16 | Amy Vezza | Closed "Approve" ballot |
2017-03-20
|
16 | Amy Vezza | Ballot approval text was generated |
2017-03-20
|
16 | Amy Vezza | Ballot writeup was changed |
2017-03-16
|
16 | (System) | IANA Review state changed to Version Changed - Review Needed from IANA OK - Actions Needed |
2017-03-16
|
16 | Cindy Morgan | New version available: draft-ietf-dane-smime-16.txt |
2017-03-16
|
16 | (System) | Secretariat manually posting. Approvals already received |
2017-03-16
|
16 | Cindy Morgan | Uploaded new revision |
2017-03-16
|
15 | Cindy Morgan | IESG state changed to Approved-announcement to be sent::Point Raised - writeup needed from IESG Evaluation |
2017-03-16
|
15 | Joel Jaeggli | [Ballot Position Update] New position, No Objection, has been recorded for Joel Jaeggli |
2017-03-15
|
16 | (System) | IANA Review state changed to IANA OK - Actions Needed from Version Changed - Review Needed |
2017-03-15
|
15 | Suresh Krishnan | [Ballot comment] Agree with Mirja and Alexey's position about the references. At least RFC6698 needs to be normative. |
2017-03-15
|
15 | Suresh Krishnan | [Ballot Position Update] New position, No Objection, has been recorded for Suresh Krishnan |
2017-03-15
|
15 | Ben Campbell | [Ballot comment] There's a rather icky IPR disclosure that basically says that licensing terms won't be disclosed until they see where the draft is going. … [Ballot comment] There's a rather icky IPR disclosure that basically says that licensing terms won't be disclosed until they see where the draft is going. The shepherd's review doesn't mention whether the working group discussed that. Since this is experimental, it probably doesn't matter very much right now. I hope that gets some discussion prior to any attempt to promote this work to standards track. |
2017-03-15
|
15 | Ben Campbell | [Ballot Position Update] New position, No Objection, has been recorded for Ben Campbell |
2017-03-15
|
15 | Kathleen Moriarty | [Ballot Position Update] New position, Yes, has been recorded for Kathleen Moriarty |
2017-03-15
|
15 | Jari Arkko | [Ballot Position Update] New position, No Objection, has been recorded for Jari Arkko |
2017-03-15
|
15 | Alia Atlas | [Ballot Position Update] New position, No Objection, has been recorded for Alia Atlas |
2017-03-15
|
15 | Tero Kivinen | Request for Last Call review by SECDIR Completed: Ready. Reviewer: Watson Ladd. |
2017-03-15
|
15 | Deborah Brungard | [Ballot Position Update] New position, No Objection, has been recorded for Deborah Brungard |
2017-03-15
|
15 | Alvaro Retana | [Ballot Position Update] New position, No Objection, has been recorded for Alvaro Retana |
2017-03-15
|
15 | Alexey Melnikov | [Ballot comment] Thank you for this document. I have a small list of comments: 1) You are pointing to Unicode 5.2, which is rather old. … [Ballot comment] Thank you for this document. I have a small list of comments: 1) You are pointing to Unicode 5.2, which is rather old. You should reference the most recent version. 2) In Section 9.2: NSEC and NSEC3 need references. 3) In Section 11: All of your references are Informative. This is not correct, as several of the references are needed to implement or understand this specification. It doesn't matter that this document is Experimental, references needed to implement or understand the document still need to be Normative. |
2017-03-15
|
15 | Alexey Melnikov | [Ballot Position Update] New position, No Objection, has been recorded for Alexey Melnikov |
2017-03-14
|
15 | Mirja Kühlewind | [Ballot comment] Minor comments: - Point 8 in the shepherd write-up is not addressed and this docuemnt has 2 IPR claims... - Intro: "Thus, the … |
2017-03-14
|
15 | Mirja Kühlewind | Ballot comment text updated for Mirja Kühlewind |
2017-03-14
|
15 | Mirja Kühlewind | [Ballot comment] Minor comments: - Point 8 in the shepherd write-up is not addressed and this docuemnt has 2 IPR claims... - Intro: "Thus, the … |
2017-03-14
|
15 | Mirja Kühlewind | [Ballot Position Update] New position, No Objection, has been recorded for Mirja Kühlewind |
2017-03-08
|
15 | Stephen Farrell | IESG state changed to IESG Evaluation from Waiting for Writeup |
2017-03-08
|
15 | Stephen Farrell | Ballot has been issued |
2017-03-08
|
15 | Stephen Farrell | [Ballot Position Update] New position, Yes, has been recorded for Stephen Farrell |
2017-03-08
|
15 | Stephen Farrell | Created "Approve" ballot |
2017-03-08
|
15 | Stephen Farrell | Ballot writeup was changed |
2017-03-03
|
15 | (System) | IESG state changed to Waiting for Writeup from In Last Call |
2017-03-01
|
15 | (System) | IANA Review state changed to IANA OK - Actions Needed from IANA - Review Needed |
2017-03-01
|
15 | Sabrina Tanamal | (Via drafts-lastcall@iana.org): IESG/Authors/WG Chairs: The IANA Services Operator has completed its review of draft-ietf-dane-smime-15.txt. If any part of this review is inaccurate, please let … (Via drafts-lastcall@iana.org): IESG/Authors/WG Chairs: The IANA Services Operator has completed its review of draft-ietf-dane-smime-15.txt. If any part of this review is inaccurate, please let us know. The IANA Services Operator understands that, upon approval of this document, there is a single action which we must complete. In the Resource Record (RR) TYPEs subregistry of the Domain Name System (DNS) Parameters registry located at: https://www.iana.org/assignments/dns-parameters/ the temporary DNS RRtype, SMIMEA, whose value (53) was previously registered will now be made permanent and the reference will be changed to [ RFC-to-be ]. The IANA Services Operator understands that this is the only action required to be completed upon approval of this document. Note: The actions requested in this document will not be completed until the document has been approved for publication as an RFC. This message is only to confirm what actions will be performed. Thank you, Sabrina Tanamal IANA Services Specialist PTI |
2017-02-26
|
15 | Dale Worley | Request for Last Call review by GENART Completed: Ready with Nits. Reviewer: Dale Worley. Sent review to list. |
2017-02-23
|
15 | Jean Mahoney | Request for Last Call review by GENART is assigned to Dale Worley |
2017-02-23
|
15 | Jean Mahoney | Request for Last Call review by GENART is assigned to Dale Worley |
2017-02-23
|
15 | Tero Kivinen | Request for Last Call review by SECDIR is assigned to Watson Ladd |
2017-02-23
|
15 | Tero Kivinen | Request for Last Call review by SECDIR is assigned to Watson Ladd |
2017-02-20
|
15 | Gunter Van de Velde | Request for Last Call review by OPSDIR is assigned to Lionel Morand |
2017-02-20
|
15 | Gunter Van de Velde | Request for Last Call review by OPSDIR is assigned to Lionel Morand |
2017-02-17
|
15 | Cindy Morgan | IANA Review state changed to IANA - Review Needed |
2017-02-17
|
15 | Cindy Morgan | The following Last Call announcement was sent out: From: The IESG To: "IETF-Announce" CC: dane-chairs@ietf.org, ogud@ogud.com, draft-ietf-dane-smime@ietf.org, dane@ietf.org, stephen.farrell@cs.tcd.ie Reply-To: ietf@ietf.org … The following Last Call announcement was sent out: From: The IESG To: "IETF-Announce" CC: dane-chairs@ietf.org, ogud@ogud.com, draft-ietf-dane-smime@ietf.org, dane@ietf.org, stephen.farrell@cs.tcd.ie Reply-To: ietf@ietf.org Sender: Subject: Last Call: (Using Secure DNS to Associate Certificates with Domain Names For S/MIME) to Experimental RFC The IESG has received a request from the DNS-based Authentication of Named Entities WG (dane) to consider the following document: - 'Using Secure DNS to Associate Certificates with Domain Names For S/MIME' as Experimental RFC The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2017-03-03. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document describes how to use secure DNS to associate an S/MIME user's certificate with the intended domain name, similar to the way that DNS-Based Authentication of Named Entities (DANE), RFC 6698, does for TLS. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-dane-smime/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-dane-smime/ballot/ The following IPR Declarations may be related to this I-D: https://datatracker.ietf.org/ipr/2468/ https://datatracker.ietf.org/ipr/2446/ |
2017-02-17
|
15 | Cindy Morgan | IESG state changed to In Last Call from Last Call Requested |
2017-02-17
|
15 | Stephen Farrell | Placed on agenda for telechat - 2017-03-16 |
2017-02-17
|
15 | Stephen Farrell | Changed consensus to Yes from Unknown |
2017-02-17
|
15 | Stephen Farrell | Last call was requested |
2017-02-17
|
15 | Stephen Farrell | Ballot approval text was generated |
2017-02-17
|
15 | Stephen Farrell | Ballot writeup was generated |
2017-02-17
|
15 | Stephen Farrell | IESG state changed to Last Call Requested from AD Evaluation |
2017-02-17
|
15 | Stephen Farrell | Last call announcement was generated |
2017-02-13
|
15 | Paul Hoffman | New version available: draft-ietf-dane-smime-15.txt |
2017-02-13
|
15 | (System) | New version approved |
2017-02-13
|
15 | (System) | Request for posting confirmation emailed to previous authors: "Paul Hoffman" , "Jakob Schlyter" |
2017-02-13
|
15 | Paul Hoffman | Uploaded new revision |
2017-02-07
|
14 | Stephen Farrell | IESG state changed to AD Evaluation from Publication Requested |
2017-02-06
|
14 | Cindy Morgan | Responsible AD changed to Stephen Farrell |
2017-02-06
|
14 | Cindy Morgan | Intended Status changed to Experimental |
2017-02-06
|
14 | Cindy Morgan | IESG process started in state Publication Requested |
2017-02-06
|
14 | (System) | Earlier history may be found in the Comment Log for /doc/draft-hoffman-dane-smime/ |
2017-02-06
|
14 | Cindy Morgan | Working group state set to Submitted to IESG for Publication |
2017-02-05
|
14 | Ólafur Guðmundsson | Changed document writeup |
2017-02-05
|
14 | Ólafur Guðmundsson | Notification list changed to "Olafur Gudmundsson" <ogud@ogud.com> |
2017-02-05
|
14 | Ólafur Guðmundsson | Document shepherd changed to Ólafur Guðmundsson |
2016-11-30
|
14 | Paul Hoffman | New version available: draft-ietf-dane-smime-14.txt |
2016-11-30
|
14 | (System) | New version approved |
2016-11-30
|
14 | (System) | Request for posting confirmation emailed to previous authors: "Paul Hoffman" , "Jakob Schlyter" |
2016-11-30
|
14 | Paul Hoffman | Uploaded new revision |
2016-11-29
|
13 | Paul Hoffman | New version available: draft-ietf-dane-smime-13.txt |
2016-11-29
|
13 | (System) | New version approved |
2016-11-29
|
13 | (System) | Request for posting confirmation emailed to previous authors: "Paul Hoffman" , "Jakob Schlyter" |
2016-11-29
|
13 | Paul Hoffman | Uploaded new revision |
2016-07-31
|
12 | Jakob Schlyter | New version available: draft-ietf-dane-smime-12.txt |
2016-07-08
|
11 | Paul Hoffman | New version available: draft-ietf-dane-smime-11.txt |
2016-02-24
|
10 | Jakob Schlyter | New version available: draft-ietf-dane-smime-10.txt |
2015-09-03
|
09 | Warren Kumari | Intended Status changed to Proposed Standard from None |
2015-08-27
|
09 | Jakob Schlyter | New version available: draft-ietf-dane-smime-09.txt |
2015-02-20
|
08 | Paul Hoffman | New version available: draft-ietf-dane-smime-08.txt |
2014-10-27
|
(System) | Posted related IPR disclosure: Verisign Inc.'s Statement about IPR related to draft-ietf-dane-smime-07 | |
2014-09-30
|
(System) | Posted related IPR disclosure: Paul Hoffman's Statement about IPR related to draft-ietf-dane-smime and Many other RFCs and drafts belonging to Verisign, Inc. | |
2014-08-22
|
07 | Jakob Schlyter | New version available: draft-ietf-dane-smime-07.txt |
2014-02-14
|
06 | Paul Hoffman | New version available: draft-ietf-dane-smime-06.txt |
2014-02-14
|
05 | Paul Hoffman | New version available: draft-ietf-dane-smime-05.txt |
2014-01-08
|
04 | Paul Hoffman | New version available: draft-ietf-dane-smime-04.txt |
2014-01-06
|
03 | Jakob Schlyter | New version available: draft-ietf-dane-smime-03.txt |
2013-07-09
|
02 | Paul Hoffman | New version available: draft-ietf-dane-smime-02.txt |
2013-03-19
|
01 | Paul Hoffman | New version available: draft-ietf-dane-smime-01.txt |
2012-09-23
|
00 | Paul Hoffman | New version available: draft-ietf-dane-smime-00.txt |