Okay, with the discussion so far, the charter looks like this: Automated Certificate Management Environment (ACME)
Historically, issuance of certificates for Internet applications (e.g., web servers) has involved many manual identity validation steps by the certification authority (CA). The ACME WG will specify conventions for automated X.509 certificate management, including validation of control over an identifier, certificate issuance, certificate renewal, and certificate revocation. The initial focus of the ACME WG will be on domain name certificates (as used by web servers), but other uses of certificates can be considered as work progresses. ACME certificate management must allow the CA to verify, in an automated manner, that the party requesting a certificate has authority over the requested identifiers, including the subject and subject alternative names. The processing must also confirm that the requesting party has access to the private key that corresponds to the public key that will appear in the certificate. All of the processing must be done in a manner that is compatible with common service deployment environments, such as hosting environments. ACME certificate management must, in an automated manner, allow an authorized party to request revocation of a certificate. The ACME working group is specifying ways to automate certificate issuance, validation, revocation and renewal. The ACME working group is not reviewing or producing certificate policies or practices. The starting point for ACME WG discussions shall be draft-barnes-acme. I think we know of two milestones now, a first draft-ietf and submitting the protocol draft for proposed standard. To give dates for those, how about: Milestones: August 2015 Initial working group draft March 2016 Submit working group to IESG as Proposed Standard Any other obvious edits needed? Ted
_______________________________________________ Acme mailing list [email protected] https://www.ietf.org/mailman/listinfo/acme
