[Errata Held for Document Update] RFC3779 (7653)

RFC Errata System <[email protected]> Fri, 12 Jan 2024 12:44:15 -0800 (PST)
Newsgroups gmane.ietf.x509
Message-ID <[email protected]>
The following errata report has been held for document update 
for RFC3779, "X.509 Extensions for IP Addresses and AS Identifiers". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid7653

--------------------------------------
Status: Held for Document Update
Type: Technical

Reported by: Job Snijders <[email protected]>
Date Reported: 2023-09-22
Held by: Paul Wouters (IESG)

Section: 3.2.3

Original Text
-------------
Section 3.2.3.8:
The ASRange type is a SEQUENCE consisting of a min and a max element,
and is used to specify a range of AS identifier values.

Corrected Text
--------------
Section 3.2.3.8:
The ASRange type is a SEQUENCE consisting of a min and a max element,
and is used to specify a range of AS identifier values. The min and max
elements MUST specify two distinct AS identifiers.

Notes
-----
The introduction in section 1 stresses that the objective of the encoding rules in section 2 and section 3
is to produce unique encoding and minimal size encoding of the information.

Allowing ASRanges where the minimum value is the same as the maximum value clearly violates the
objective of specifying a canonical form (in order to produce a unique representation); however the
specification as-is doesn't forbid min & max to be the same value. The corrected text addresses this.

Note: erratum edited per https://mailarchive.ietf.org/arch/msg/pkix/iZnCd58xgl1C47GSeFemAU9CF1g/

--------------------------------------
RFC3779 (draft-ietf-pkix-x509-ipaddr-as-extn-03)
--------------------------------------
Title               : X.509 Extensions for IP Addresses and AS Identifiers
Publication Date    : June 2004
Author(s)           : C. Lynn, S. Kent, K. Seo
Category            : PROPOSED STANDARD
Source              : Public-Key Infrastructure (X.509)
Area                : Security
Stream              : IETF
Verifying Party     : IESG