Re: [Anima] CRLs in iDevID manufacturer signing certs?

2017-03-11 Thread Michael Richardson
Eliot Lear wrote: > What is the thinking on including CRL pointer in the manufacturer > signing cert? This question came up in industry discussions. Kent Watsen wrote: > 802.1AR says that the IDevID secrets must be stored confidentially and

Re: [Anima] privacy in discovery

2017-03-11 Thread Joel M. Halpern
The question that occurs to me is whether the pre-ACP discovery phase needs privacy protection. The answer is not obvious, since the scope is limited (where DNS queries can go arbitrary distances across the net.) Yours, Joel On 3/11/17 2:20 PM, Brian E Carpenter wrote: On 12/03/2017 08:08,

Re: [Anima] privacy in discovery

2017-03-11 Thread Brian E Carpenter
On 12/03/2017 08:08, Michael Richardson wrote: > > I haven't read the document yet, just the abstract. > > I am not suggesting it, just relaying that this privacy issue seems to be > something others have recognized as a concern. Do you see it as a concern inside the ACP? I would have thought

[Anima] privacy in discovery

2017-03-11 Thread Michael Richardson
I haven't read the document yet, just the abstract. I am not suggesting it, just relaying that this privacy issue seems to be something others have recognized as a concern. --- Begin Message --- A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a