OPENPGPKEY RRTYPE review - Comments period ends Aug 6th

Frederico A C Neves <[email protected]> Wed, 23 Jul 2014 18:34:03 -0300
Newsgroups gmane.ietf.dnsext
Message-ID <[email protected]>
Dear Colleagues,

Bellow is a completed template requesting a new RRTYPE assignment
under the procedures of RFC6895.

This message starts a 2 weeks period for an expert review of the DNS
RRTYPE parameter allocation for OPENPGPKEY specified at:

http://tools.ietf.org/html/draft-ietf-dane-openpgpkey-00#section-2

If you have comments regarding this request please post them here
before Aug 6th 21:00 UTC.

Best Regards,
Frederico Neves

--begin 6895 template TLSA--
 A. Submission Date: 23-07-2014

 B.1 Submission Type:  [x] New RRTYPE  [ ] Modification to RRTYPE
 B.2 Kind of RR:  [x] Data RR  [ ] Meta-RR

 C. Contact Information for submitter (will be publicly posted):
    Name: Paul Wouters         Email Address: [email protected]
    International telephone number: +1-647-896-3464
    Other contact handles: [email protected]

 D. Motivation for the new RRTYPE application.

    Publishing RFC-4880 OpenPGP formatted keys in DNS with DNSSEC
    protection to faciliate automatic encryption of emails in
    defense against pervasive monitoring.

 E. Description of the proposed RR type.

    http://tools.ietf.org/html/draft-ietf-dane-openpgpkey-00#section-2

 F. What existing RRTYPE or RRTYPEs come closest to filling that need
    and why are they unsatisfactory?

    The CERT RRtype is the closest match. It unfortunately depends on
    subtyping, and its use in general is no longer recommended. It
    also has no human usable presentation format. Some usage types of
    CERT require external URI's which complicates the security model.
    This was discussed in the dane working group.

 G. What mnemonic is requested for the new RRTYPE (optional)?

    OPENPGPKEY

 H. Does the requested RRTYPE make use of any existing IANA registry
    or require the creation of a new IANA subregistry in DNS
    Parameters?  If so, please indicate which registry is to be used
    or created.  If a new subregistry is needed, specify the
    allocation policy for it and its initial contents.  Also include
    what the modification procedures will be.

    The RDATA part uses the key format specified in RFC-4880, which
    itself use https://www.iana.org/assignments/pgp-parameters/pgp-parameters.xhtm

    This RRcode just uses the formats specified in those registries
    for its RRdata part.


 I. Does the proposal require/expect any changes in DNS
    servers/resolvers that prevent the new type from being processed
    as an unknown RRTYPE (see [RFC3597])?

    No.

 J. Comments:

    Currently, three software implementations of draft-ietf-dane-openpgpkey
    are using a private number.
--end 6895 template TLSA--

_______________________________________________
dnsext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsext