pkix - Tuesday, March 12, 2013

pkix

pkix@jabber.ietf.org

Tuesday, March 12, 2013< ^ >

mrex-ietf has set the subject to: PKIX-WG @ IETF-84

Room Configuration

Room Occupants

GMT+0
[19:07:37] yngve_n_pettersen joins the room
[19:08:11] yngve_n_pettersen leaves the room
[19:16:09] Stefan Santesson joins the room
[19:16:45] burcam joins the room
[19:19:02] yngve_n_pettersen joins the room
[19:22:11] wilton@jabber.isoc.org joins the room
[19:24:56] Sean Turner joins the room
[19:28:27] satoru.kanno@jabber.org joins the room
[19:34:35] =JeffH joins the room
[19:46:05] <yngve_n_pettersen> (mic) The long time to discovery of the incorrectly issued TurkTrust intermediate CA certificates was, in part, made possible by clients failing to treat web site certificates with basic Constraint CA:True, without "use as Web Site cert" extensiosn, as unsuitable for that purpose. Should the PKIX or the relevant PKIX implementation profiles be updated to be stricter about the CA usage extensions? Is this something for PKIX WG, WPKOPS WG or some other group?
[19:47:33] bkihara.l joins the room
[19:47:36] <=JeffH> not wpkops except to note the issue (i would suspect)
[19:47:50] <=JeffH> is this question relevant to this presentation ?
[19:48:25] <yngve_n_pettersen> It might be an idea to raise it to the WG meeting, for discussion during open mike
[19:48:33] <=JeffH> ok
[19:49:05] <Sean Turner> yngve thanks for getting back to me on your TLS draft
[19:51:45] <wilton@jabber.isoc.org> Jeff Hodges relayed Yngve's question
[19:53:22] <=JeffH> Mr. Steve Kent sez -- basic constraints are supported in pkix impls, 5280 addresses it. perhaps noting this issue and exploring it is something for wpkops.
[19:53:31] <=JeffH> pkix is not taking on new work items
[19:53:52] <yngve_n_pettersen> expected that, but wanted to raise the issue
[19:55:50] <=JeffH> yep
[19:55:59] burcam leaves the room
[19:56:05] =JeffH leaves the room
[19:56:11] satoru.kanno@jabber.org leaves the room
[19:56:11] yngve_n_pettersen leaves the room
[19:56:37] Stefan Santesson leaves the room
[19:57:28] Sean Turner leaves the room
[20:04:57] kasamatsu.kouhei joins the room
[20:05:02] kasamatsu.kouhei leaves the room
[20:05:29] wilton@jabber.isoc.org leaves the room
[20:06:02] Stefan Santesson joins the room
[20:12:24] wilton@jabber.isoc.org joins the room
[20:18:22] mrex-ietf joins the room
[20:18:54] <mrex-ietf> I guess I'm late. :-o
[20:19:13] mrex-ietf has set the subject to: PKIX-WG @ IETF-86
[20:19:32] Stefan Santesson leaves the room
[20:33:56] bkihara.l leaves the room
[20:39:04] wilton@jabber.isoc.org leaves the room
[21:04:08] Sean Turner joins the room
[21:16:29] mrex-ietf leaves the room
[21:17:39] mrex-ietf joins the room
[21:27:44] Sean Turner leaves the room
[21:39:08] mrex-ietf leaves the room
[21:47:12] Stefan Santesson joins the room
[21:53:27] Stefan Santesson leaves the room
[21:59:12] Stefan Santesson joins the room
[22:12:29] Stefan Santesson leaves the room
[22:16:57] Stefan Santesson joins the room
[22:32:02] Stefan Santesson leaves the room