Subject: Re: [TLS] WG Call for adoption of draft-rescorla-tls-subcerts

From: Sean Turner <[email-masked]>
Date: Thu, 18 May 2017 18:53:28 -0400

All,

During the WG call for adoption, a couple of questions were raised about comparison/analysis of sub-certs versus proxy and/or short-lived certificates.  There is some discussion currently in the draft, but the chairs feel that these issues need further discussion (and elaboration in the draft) prior to WG adoption.  So let’s keep the conversation going.

J&S

> On Apr 12, 2017, at 15:31, Sean Turner <[email-masked]> wrote:
> 
> All,
> 
> At our IETF 98 session, there was support in the room to adopt draft-rescorla-tls-subcerts [0].  We need to confirm this support on the list so please let the list know whether you support adoption of the draft and are willing to review/comment on the draft before 20170429.  If you object to its adoption, please let us know why.
> 
> Clearly, the WG is going to need to work through the trade-offs between short-lived certificates and sub-certs because both seem, to some, to be addressing the same problem. 
> 
> Cheers,
> 
> J&S
> 
> [0] https://datatracker.ietf.org/doc/html/draft-rescorla-tls-subcerts