Publication request for draft-ietf-sip-eku

(As WG chair)

I have just requested publication of draft-ietf-sip-eku-04 as proposed standard.

The proto writeup follows, for information.

regards

Keith

------------------------------------------------------------------------------------
PROTO writeup for http://www.ietf.org/internet-drafts/draft-ietf-sip-eku-04: "Using 
Extended Key Usage (EKU) for Session Initiation Protocol (SIP) X.509 Certificates"

   (1.a)  Who is the Document Shepherd for this document?  Has the
          Document Shepherd personally reviewed this version of the
          document and, in particular, does he or she believe this
          version is ready for forwarding to the IESG for publication?

Keith Drage

The document has been reviewed and is ready for forwarding to IESG for publication.

Document history:

-	The document was separated out from draft-gurbani-sip-domain-certs-06 
which was submitted 9th July 2007 and expired 10th January 2008.
-	draft-ietf-sip-eku-00 was submitted 8th November 2007 and expires 11th 
May 2008.
-	draft-ietf-sip-eku-01 was submitted 18th February 2008 and expired 21st 
August 2008.
-	draft-ietf-sip-eku-02 was submitted 11th July 2008 and expires 12 January 
2009.
-	draft-ietf-sip-eku-03 was submitted 6th October 2008 and expires 9th 
April 2009.
-	draft-ietf-sip-eku-04 was submitted 7th April 2009 and expires 9th 
October 2009.

The document forms a normative dependency from draft-ietf-sip-domain-certs aside from 
being usable in its own right.

WGLC was announced in the SIP WG on 22nd February 2008 to complete 7th March 2008 on -00 
version.

Review was made and comments were received from: John Elwell, Eric Rescorla.

   (1.b)  Has the document had adequate review both from key WG members
          and from key non-WG members?  Does the Document Shepherd have
          any concerns about the depth or breadth of the reviews that
          have been performed?

The document has had adequate review from working group members. 

   (1.c)  Does the Document Shepherd have concerns that the document
          needs more review from a particular or broader perspective,
          e.g., security, operational complexity, someone familiar with
          AAA, internationalization, or XML?

The document shepherd considers that no external review from an external specialist is 
necessary, apart from as follows.

The document has been reviewed by members of the PKIX working group on a number of 
occasions, primarily Stephen Kent.

The document has not had a separate security review, and that should therefore occur, 
although it has been reviewed by the security advisor to the RAI area.

   (1.d)  Does the Document Shepherd have any specific concerns or
          issues with this document that the Responsible Area Director
          and/or the IESG should be aware of?  For example, perhaps he
          or she is uncomfortable with certain parts of the document, or
          has concerns whether there really is a need for it.  In any
          event, if the WG has discussed those issues and has indicated
          that it still wishes to advance the document, detail those
          concerns here.  Has an IPR disclosure related to this document
          been filed?  If so, please include a reference to the
          disclosure and summarize the WG discussion and conclusion on
          this issue.

The document shepherd has no specific concerns with any aspects of this document.

There have been no IPR disclosures on this document.

   (1.e)  How solid is the WG consensus behind this document?  Does it
          represent the strong concurrence of a few individuals, with
          others being silent, or does the WG as a whole understand and
          agree with it?

Full consensus exists on this document.

   (1.f)  Has anyone threatened an appeal or otherwise indicated extreme
          discontent?  If so, please summarize the areas of conflict in
          separate email messages to the Responsible Area Director.  (It
          should be in a separate email because this questionnaire is
          entered into the ID Tracker.)

None indicated.

   (1.g)  Has the Document Shepherd personally verified that the
          document satisfies all ID nits?  (See
          http://www.ietf.org/ID-Checklist.html and
          http://tools.ietf.org/tools/idnits/.)  Boilerplate checks are
          not enough; this check needs to be thorough.  Has the document
          met all formal review criteria it needs to, such as the MIB
          Doctor, media type, and URI type reviews?  If the document
          does not already indicate its intended status at the top of
          the first page, please indicate the intended status here.

The document has been reviewed against the guidelines in RFC 4485 and it is believed 
that the document is conformant with those guidelines.

For ID-NITS the checks against idnits 2.11.08 report NITS as follows.

    Summary: 1 error (**), 0 warnings (==), 3 comments (--).

The error relates to an indication that it does not contain an "Introduction". 
However document does contain an early section "Problem Statement" which serves 
exactly this function.

   (1.h)  Has the document split its references into normative and
          informative?  Are there normative references to documents that
          are not ready for advancement or are otherwise in an unclear
          state?  If such normative references exist, what is the
          strategy for their completion?  Are there normative references
          that are downward references, as described in [RFC3967]?  If
          so, list these downward references to support the Area
          Director in the Last Call procedure for them [RFC3967].

The document has separate sections for normative and informative references. The 
normative references have been checked and found to be normative.

   (1.i)  Has the Document Shepherd verified that the document's IANA
          Considerations section exists and is consistent with the body
          of the document?  If the document specifies protocol
          extensions, are reservations requested in appropriate IANA
          registries?  Are the IANA registries clearly identified?  If
          the document creates a new registry, does it define the
          proposed initial contents of the registry and an allocation
          procedure for future registrations?  Does it suggest a
          reasonable name for the new registry?  See [RFC2434].  If the
          document describes an Expert Review process, has the Document
          Shepherd conferred with the Responsible Area Director so that
          the IESG can appoint the needed Expert during IESG Evaluation?

The document has no IANA registration requirements. The object identifiers forms part of 
the existing allocation made by IANA to the PKIX working group.

   (1.j)  Has the Document Shepherd verified that sections of the
          document that are written in a formal language, such as XML
          code, BNF rules, MIB definitions, etc., validate correctly in
          an automated checker?

The document defines an object identifier using the formal language ASN.1. This 
definition is trivial and has been confirmed by visual inspection.

   (1.k)  The IESG approval announcement includes a Document
          Announcement Write-Up.  Please provide such a Document
          Announcement Write-Up.  Recent examples can be found in the
          "Action" announcements for approved documents.  The approval
          announcement contains the following sections:

          Technical Summary
             Relevant content can frequently be found in the abstract
             and/or introduction of the document.  If not, this may be
             an indication that there are deficiencies in the abstract
             or introduction.

          Working Group Summary
             Was there anything in the WG process that is worth noting?
             For example, was there controversy about particular points
             or were there decisions where the consensus was
             particularly rough?

          Document Quality
             Are there existing implementations of the protocol?  Have a
             significant number of vendors indicated their plan to
             implement the specification?  Are there any reviewers that
             merit special mention as having done a thorough review,
             e.g., one that resulted in important changes or a
             conclusion that the document had no substantive issues?  If
             there was a MIB Doctor, Media Type, or other Expert Review,
             what was its course (briefly)?  In the case of a Media Type
             Review, on what date was the request posted?

          Personnel
             Who is the Document Shepherd for this document?  Who is the
             Responsible Area Director?  If the document requires IANA
             experts(s), insert 'The IANA Expert(s) for the registries
             in this document are <TO BE ADDED BY THE AD>.'

Technical summary.

This memo documents an extended key usage (EKU) X.509 certificate extension for 
restricting the applicability of a certificate to use with a Session Initiation 
Protocol (SIP) service.  As such, in addition to providing rules for SIP 
implementations, this memo also provides guidance to issuers of certificates for 
use with SIP.

Working group summary.

There is consensus in the working group to publish this document. 

Document Quality

There has been no indication of implementation.

Personnel

The document shepherd for this document was Keith Drage. The responsible Area Director 
was Cullen Jennings. 'The IANA Expert(s) for the registries in this document are <TO BE 
ADDED BY THE AD>.
_______________________________________________
Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [email protected] for questions on current sip
Use [email protected] for new developments on the application of sip