On 8/1/22 09:33, Orie Steele wrote:
Bob,
Interesting RFCs...
- https://www.iana.org/assignments/cert-rr-types/cert-rr-types.xhtml
- https://datatracker.ietf.org/doc/html/rfc6698
- https://www.rfc-editor.org/rfc/rfc4398.html
Very much so. Also 8005 for HIP has its own RR that uses IPSECKEY to
represent the public key encoding.
I am also aware or some "DID Methods" that look similar:
- https://danubetech.github.io/did-method-dns/ (relatively new)
- https://tools.ietf.org/id/draft-mayrhofer-did-dns-03.html (fairly old)
I stuck with what is in DNS RR. I have not looked into DID; I have my
own scheme...
I am also interested in your motives :)
Are there any systems that are deployed today that look like this?
Check out draft-ietf-drip-registries.
It will be getting a big kick after work last week, including likely
being split in half, but you can still see our intent.
The DET, which is an Identifier is mapped to an FQDN for DNS lookup. In
this FQDN is the Public Key either, or both available via HIP or TLSA
RR. Of course for TLSA, we have to stuff it into an ASN.1 OID because
that is just how it is done...
But also we are putting the HDA's evidence of the UA's DET registration
into CERT records using the OID Private because that is the only hammer
to get that nail into the RR. And for OID, we are using my arc from
IANA's Enterprise Number. Eventually we will get a better OID...
But all this just SCREAMS for CBOR support.
Particularly if you want to work within DNS for your stuff here.
Bob
Regards,
OS
On Sun, Jul 31, 2022 at 7:15 PM Robert Moskowitz
<[email protected]> wrote:
I have really not paid attention over here. Got other fish to fly
for
the most part. But...
Has there been any discussions of storing these certs in DNS?
Like in TLSA and CERT RR?
Any plans to update these two RFCs: 4398 & 6698?
I have some alterior motives in adding CBOR objects for these RR.
Bob
_______________________________________________
COSE mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/cose
--
*ORIE STEELE*
Chief Technical Officer
www.transmute.industries
<https://www.transmute.industries>
_______________________________________________
COSE mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/cose
_______________________________________________
COSE mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/cose
