Subject: Re: [lamps] [Anima] on certification authorities.

From: Tim Hollebeek <[email-masked]>
Date: Wed, 8 Jul 2020 19:55:43 +0000

I check the CABF Bylaws, Baseline Requirements, and EV Guidelines, and was
surprised to find that they mostly get this right.

-Tim

> -----Original Message-----
> From: Spasm <[email-masked]> On Behalf Of Erik Andersen
> Sent: Sunday, June 28, 2020 3:41 AM
> To: 'Carsten Bormann' <[email-masked]>
> Cc: LAMPS <[email-masked]>
> Subject: Re: [lamps] [Anima] on certification authorities.
> 
> 32 years ago X.509 (1988) defined certification authority. There has been
> plenty of time to get acquainted with the term.
> 
> Erik
> 
> -----Original Message-----
> From: Carsten Bormann <[email-masked]>
> Sent: 27 June 2020 22:19
> To: Erik Andersen <[email-masked]>
> Cc: [email-masked]
> Subject: Re: [Anima] [lamps] on certification authorities.
> 
> On 2020-06-27, at 09:57, Erik Andersen <[email-masked]> wrote:
> >
> > certificate authority
> 
> 4 matches in 1id-abstracts.txt.
> 7292 files on my laptop happen to match.
> 
> Enjoy how RFC 4523 dances right into the fire here:
> 
>       ( 2.5.6.16 NAME 'certificationAuthority'
>            DESC 'X.509 certificate authority'
>            SUP top AUXILIARY
>            MUST ( authorityRevocationList $
>                 certificateRevocationList $ cACertificate )
>            MAY crossCertificatePair )
> 
> RFCs with “certificate authority” released before RFC 5280:
> 
> rfc1305.txt rfc2246.txt rfc2408.txt rfc2633.txt rfc2634.txt rfc2752.txt
> rfc2828.txt rfc2847.txt rfc2904.txt rfc3108.txt rfc3182.txt rfc3193.txt
> rfc3520.txt rfc3552.txt rfc3588.txt rfc3720.txt rfc3723.txt rfc3760.txt
> rfc3851.txt rfc3854.txt rfc3911.txt rfc3920.txt rfc3923.txt rfc4171.txt
> rfc4230.txt rfc4255.txt rfc4261.txt rfc4346.txt rfc4474.txt rfc4523.txt
> rfc4534.txt rfc4582.txt rfc4795.txt rfc4870.txt rfc4949.txt rfc4953.txt
> rfc5040.txt rfc5197.txt rfc5246.txt
> 
> RFCs with “certificate authority” released after RFC 5280:
> 
> rfc5479.txt rfc5763.txt rfc5765.txt rfc5981.txt rfc6101.txt rfc6187.txt
> rfc6189.txt rfc6376.txt rfc6406.txt rfc6810.txt rfc6818.txt rfc6837.txt
> rfc6940.txt rfc6950.txt rfc6962.txt rfc7143.txt rfc7146.txt rfc7211.txt
> rfc7340.txt rfc7378.txt rfc7427.txt rfc7533.txt rfc7576.txt rfc7671.txt
> rfc7826.txt rfc7858.txt rfc7859.txt rfc7958.txt rfc8023.txt rfc8071.txt
> rfc8446.txt rfc8572.txt rfc8705.txt
> 
> (Not all of these are about X.509 certificates, of course.
> And I’m probably missing a few because line breaking obscures the
> combination.)
> 
> Yes, you saw TLS 1.0, 1.1, 1.2, and 1.3 there.
> 
> Now starting to write the errata reports :-)
> 
> Grüße, Carsten
> 
> _______________________________________________
> Spasm mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/spasm