Re: Call for discussion topics for Apps Area meeting in Hiroshima

["tom.petch" <cfinss at dial.pipex.com>]

----- Original Message -----
From: "Dave CROCKER" <dhc at dcrocker.net>
Sent: Wednesday, October 28, 2009 5:12 PM
>
> Peter Saint-Andre wrote:
> > I'd like to discuss draft-saintandre-tls-server-id-check so that we can
> > get closer to consensus about what exactly we want to cover in that I-D
> > and whether we need additional I-Ds for related topics.
>
> If I read the draft correctly:
>
>     "If a client wishes to connect to a server securely, it needs to check
>     the identity of the server so that it can determine if the server is
>     what it claims to be"
>
> seems to be the salient statement about the problem to be solved.
>
> Can you elaborate a bit? I'm only looking for a somewhat more extensive spec
of
> your topic goal, rather than trying resolving it, here.

Dave

We did discuss scope back in June without anything very concrete
emerging, apart from limiting ourselves to X.509, but there was a
faint consensus for a cookbook that other RFC would then refer to,
selecting a profile, when wanting to verify that a certificate received
over a security protocol matched something that the box had 'configured'
into it.

Tom Petch

> d/
> --
>
>    Dave Crocker
>    Brandenburg InternetWorking
>    bbiw.net