Olafur & Warren, I realize that WGLC formally ended on Friday, but I'll note that I have read these two documents and I didn't really much beyond comments that Stephane and Viktor have already made. I support the documents moving ahead subject to the comments that have been sent around.
In https://tools.ietf.org/html/draft-ietf-dane-srv-08 I have these two comments: 1. A nitpick where the abstract says: ---- The DANE specification (RFC 6698) describes how to use TLSA resource records in the DNS to associate a server's host name with its TLS certificate, where the association is secured with DNSSEC. However, application protocols that use SRV records (RFC 2782) to indirectly name the target server host names for a service domain cannot apply the rules from RFC 6698. ---- I think there is a singular/plural mismatch here. I think it should be "to indirectly name the target server host **name** for a service domain" 2. Where is 'Certificate Usage "DANE-EE"' defined? I see it referenced here in section 4.2 but I don't find any reference to "DANE-EE" in RFC 6698 or find a definition in this document? In https://tools.ietf.org/html/draft-ietf-dane-smtp-with-dane-13 nothing leapt out at me in terms of comments, although I will admit I did not read it as thoroughly as the SRV one. I will note that DANE-EE *is* used and defined here in this document. My 2 cents, Dan -- Dan York Senior Content Strategist, Internet Society [email protected]<mailto:[email protected]> +1-802-735-1624 Jabber: [email protected]<mailto:[email protected]> Skype: danyork http://twitter.com/danyork http://www.internetsociety.org/deploy360/ On Dec 3, 2014, at 11:00 PM, Paul Hoffman <[email protected]<mailto:[email protected]>> wrote: I have read these two documents and they seem fine. I'm sure there will be significant comments in IETF Last Call from folks in Apps Area, both about the use of SRV and SMTP, and possibly technical changes based on those, but as a WG product, both of these seem fine. --Paul Hoffman _______________________________________________ dane mailing list [email protected]<mailto:[email protected]> https://www.ietf.org/mailman/listinfo/dane
_______________________________________________ dane mailing list [email protected] https://www.ietf.org/mailman/listinfo/dane
