RE: [TLS] Comments on draft-housley-tls-authz-extns-07

[Russ Housley <housley at vigilsec.com>]

Pasi:

<not wearing any hats either>

> > We have a request from the IESG re draft-housley-tls-authz-extns-07.
> >
> > The IESG is considering publication of this document as a Proposed
> > Standard. The IESG has requested that the TLS WG provide input
> > (positive or negative) on this proposal. Please post comments to the
> > list before Monday June 11.
>
> <not wearing any hats>
>
> Basically repeating the comments I made during the second IETF
> last call:
>
> - I think this document is somewhat useful; and given that there are
> others who seem to share this view -- and basically nobody has claimed
> that the technical solution is flawed or undesirable -- I think IESG
> should publish this document. IMHO not publishing this as a form of
> punishment would be a wrong thing to do.

I agree with this position.

> - IMHO the most appropriate status would be Experimental.

I would prefer standards track.

> - As was already pointed out by others, the IESG should use this
> opportunity (before we have deployments) to change the length fields
> from 16 bits to 24 bits (the rest of TLS already uses 24-bit length
> fields for certificates).

We are discussing this, and if this is the consensus, I'm pleased to 
use a 24-bit length.

Russ


_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls