Re: [Acme] Secdir last call review of draft-ietf-acme-star-delegation-06

2021-03-25 Thread Thomas Fossati
Hi Russ, On 25/03/2021, 20:15, "Russ Housley" wrote: > Thomas: > > As I said in GitHub, I think the Abstract could be more clear. There > are two key points. First, the certificate contains the identifier that > is delegated. Second, that the third party has control of the private > key, and

Re: [Acme] Secdir last call review of draft-ietf-acme-star-delegation-06

2021-03-25 Thread Russ Housley
Thomas: As I said in GitHub, I think the Abstract could be more clear. There are two key points. First, the certificate contains the identifier that is delegated. Second, that the third party has control of the private key, and the certificate contains the corresponding public key. All of

Re: [Acme] Secdir last call review of draft-ietf-acme-star-delegation-06

2021-03-25 Thread Thomas Fossati
Hi Russ, On 25/03/2021, 19:28, "Russ Housley" wrote: > > You will see my comments in those issues. Thanks very much! We have prepared https://github.com/yaronf/I-D/pull/167/files Could you please review it and see if fixes your remaining concerns? Cheers, t > Russ > > > On Mar 25, 2021, at

Re: [Acme] Secdir last call review of draft-ietf-acme-star-delegation-06

2021-03-25 Thread Russ Housley
Yaron: You will see my comments in those issues. Russ > On Mar 25, 2021, at 10:28 AM, Yaron Sheffer wrote: > > Hi Russ, > > Please see the remaining open issues from your review - we have reopened the > GitHub issues: > > https://github.com/yaronf/I-D/issues/139 >

Re: [Acme] Secdir last call review of draft-ietf-acme-star-delegation-06

2021-03-25 Thread Yaron Sheffer
Hi Russ, Please see the remaining open issues from your review - we have reopened the GitHub issues: https://github.com/yaronf/I-D/issues/139 https://github.com/yaronf/I-D/issues/145 https://github.com/yaronf/I-D/issues/146 https://github.com/yaronf/I-D/issues/147

Re: [Acme] Secdir last call review of draft-ietf-acme-star-delegation-06

2021-03-23 Thread Russ Housley
Thomas: Thanks for the diff. The revised structure looks good to me. Much more clear. Russ > On Mar 23, 2021, at 5:58 AM, Thomas Fossati wrote: > > Hi Russ, > > A quick follow-up to try and close the issues that you could not confirm > had been addressed because of the complexity of

Re: [Acme] Secdir last call review of draft-ietf-acme-star-delegation-06

2021-03-22 Thread Russ Housley
Yaron and Thomas: Comments below ... >> Abstract: It says: "... party access to a certificate associated with >> said identifier." This is odd wording, and it is incorrect. The >> party needs access to the private key that corresponds to the public >> key in the certificate, and the

Re: [Acme] Secdir last call review of draft-ietf-acme-star-delegation-06

2021-03-14 Thread Thomas Fossati
Hi Russ, Thanks very much for your clear and thorough review! Your comments are now tracked in the following tickets: On 14/03/2021, 22:02, "Russ Housley via Datatracker" wrote: > Abstract: It says: "... party access to a certificate associated with > said identifier." This is odd wording,

[Acme] Secdir last call review of draft-ietf-acme-star-delegation-06

2021-03-14 Thread Russ Housley via Datatracker
Reviewer: Russ Housley Review result: Not Ready I reviewed this document as part of the Security Directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the Security Area Directors. Document authors,