Re: [Acme] On multiple CAs and contact-based recovery

2016-03-26 Thread Karthik Bhargavan
> Between these two options, I would be more attracted to the latter. It's > always been a bit of a sore point that the request URI was not covered by the > client's signature, but to avoid the complexity of URL comparison, we did the > "resource" thing instead. But maybe it makes sense to

Re: [Acme] On multiple CAs and contact-based recovery

2016-03-23 Thread Karthik Bhargavan
Will you or your co-authors be in Buenos Aires for > the IETF? Would you like to present this work to the working group there, if > so? > > thanks, > > Ted > > On Wed, Mar 23, 2016 at 3:33 PM, Karthik Bhargavan > <karthikeyan.bharga...@inria.fr <mailto

[Acme] On multiple CAs and contact-based recovery

2016-03-23 Thread Karthik Bhargavan
Dear All, Recently, after being asked by Josh Aas, I wrote a formal model of the ACME protocol in ProVerif and analyzed it for various properties. I am still in the process of cleaning up the model and writing up a proper report, but with the next IETF being so close, here’re some early