RFC 3280bis and URI schemes without hostname

Sam Hartman <hartmans-ietf@mit.edu> Thu, 29 November 2007 21:58 UTC

From: Sam Hartman <hartmans-ietf@mit.edu>
To: ietf-pkix@imc.org
Subject: RFC 3280bis and URI schemes without hostname
Date: Thu, 29 Nov 2007 14:39:39 -0500
Message-ID: <tslwss04z9g.fsf@mit.edu>
User-Agent: Gnus/5.110006 (No Gnus v0.6) Emacs/21.4 (gnu/linux)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Sender: owner-ietf-pkix@mail.imc.org
Precedence: bulk



Folks, I seem to have dropped the ball on rfc3280bis.

It's my understanding that the comments I raised have been addressed.

I do have one comment that I failed to raise earlier.  I'm going to
raise it now, but I'm going to send the document to IETF last call.
Any changes regarding this comment are going to be minor and we can
call them out on the ietf list.


RFC 3286 does not require that schemes have an authority component.
For example take a look at RFC 4622.  It does support authority
components, but if I were going to issue a certificate for an XMPP
identity I would actually expect that which server the end user
authenticates to would not be important for the whether they were
reaching a given subject.  Other URIs simply don't use authority.
However the URI in subjectAltName requires the host portion to be
present, which requires an authority section.


I'd like the WG to consider what to do about this.  Options include:

* Decide that this name type is not appropriate for URI schemes that tend not to use authorities.  

* Relax the rules.  I strongly urge the WG not to take on the task of name constraints for URIs without authority in this document.

Thanks for your consideration,

--Sam

RFC 3280bis and URI schemes without hostname Sam Hartman
Re: RFC 3280bis and URI schemes without hostname Stephen Farrell
Re: RFC 3280bis and URI schemes without hostname Paul Hoffman
Re: RFC 3280bis and URI schemes without hostname Paul Hoffman
Re: RFC 3280bis and URI schemes without hostname Sam Hartman
Re: RFC 3280bis and URI schemes without hostname David A. Cooper
Re: RFC 3280bis and URI schemes without hostname Stephen Farrell
Re: RFC 3280bis and URI schemes without hostname Stephen Kent
Re: RFC 3280bis and URI schemes without hostname David A. Cooper
Re: RFC 3280bis and URI schemes without hostname David A. Cooper
Re: RFC 3280bis and URI schemes without hostname David A. Cooper