Subject: [Acme] FW: New Version Notification for draft-ietf-acme-star-delegation-03.txt

From: Yaron Sheffer <[email-masked]>
Date: Sun, 08 Mar 2020 23:03:42 +0200

As promised, we submitted another version of this draft before Vancouver. In addition to the recent work on the CSR template, this version includes a lot more detail on the STIR and CDNI use cases, including recursive delegation.

We would greatly appreciate your comments!

Thanks,
	Yaron

On 3/8/20, 22:41, "[email-masked]" <[email-masked]> wrote:

    A new version of I-D, draft-ietf-acme-star-delegation-03.txt
    has been successfully submitted by Yaron Sheffer and posted to the
    IETF repository.
    
    Name:		draft-ietf-acme-star-delegation
    Revision:	03
    Title:		An ACME Profile for Generating Delegated STAR Certificates
    Document date:	2020-03-08
    Group:		acme
    Pages:		26
    URL:            https://www.ietf.org/internet-drafts/draft-ietf-acme-star-delegation-03.txt
    Status:         https://datatracker.ietf.org/doc/draft-ietf-acme-star-delegation/
    Htmlized:       https://tools.ietf.org/html/draft-ietf-acme-star-delegation-03
    Htmlized:       https://datatracker.ietf.org/doc/html/draft-ietf-acme-star-delegation
    Diff:           https://www.ietf.org/rfcdiff?url2=draft-ietf-acme-star-delegation-03
    
    Abstract:
       This memo proposes a profile of the ACME protocol that allows the
       owner of an identifier (e.g., a domain name) to delegate to a third
       party access to a certificate associated with said identifier.  A
       primary use case is that of a CDN (the third party) terminating TLS
       sessions on behalf of a content provider (the owner of a domain
       name).  The presented mechanism allows the owner of the identifier to
       retain control over the delegation and revoke it at any time by
       cancelling the associated STAR certificate renewal with the ACME CA.
       Another key property of this mechanism is it does not require any
       modification to the deployed TLS ecosystem.

    
    Please note that it may take a couple of minutes from the time of submission
    until the htmlized version and diff are available at tools.ietf.org.
    
    The IETF Secretariat