Re: I-D Action: draft-ietf-xmpp-posh-03.txt

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

The authors believe this revision addresses all document feedback from
the Working Group Last Call.


- -- 
- - m&m

Matt Miller < [email protected] >
Cisco Systems, Inc.

On 1/26/15 8:20 AM, [email protected] wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts 
> directories. This draft is a work item of the Extensible Messaging 
> and Presence Protocol Working Group of the IETF.
> 
> Title           : PKIX over Secure HTTP (POSH) Authors         : 
> Matthew Miller Peter Saint-Andre Filename        : 
> draft-ietf-xmpp-posh-03.txt Pages           : 15 Date            : 
> 2015-01-26
> 
> Abstract: Experience has shown that it is extremely difficult to 
> deploy proper PKIX certificates for TLS in multi-tenanted 
> environments.  As a result, domains hosted in such environments 
> often deploy applications using certificates that identify the 
> hosting service, not the hosted domain.  Such deployments force
> end users and peer services to accept a certificate with an
> improper identifier, resulting in obvious security implications.
> This document defines two methods that make it easier to deploy 
> certificates for proper server identity checking in non-HTTP 
> application protocols.  While these methods developed for use in 
> the Extensible Messaging and Presence Protocol (XMPP) as a Domain 
> Name Association (DNA) prooftype, they might also be usable in 
> other non-HTTP application protocols.
> 
> 
> The IETF datatracker status page for this draft is: 
> https://datatracker.ietf.org/doc/draft-ietf-xmpp-posh/
> 
> There's also a htmlized version available at: 
> http://tools.ietf.org/html/draft-ietf-xmpp-posh-03
> 
> A diff from the previous version is available at: 
> http://www.ietf.org/rfcdiff?url2=draft-ietf-xmpp-posh-03
> 
> 
> Please note that it may take a couple of minutes from the time of 
> submission until the htmlized version and diff are available at 
> tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at: 
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________ xmpp mailing list 
> [email protected] https://www.ietf.org/mailman/listinfo/xmpp
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - https://gpgtools.org

iQEcBAEBCgAGBQJUxl6/AAoJEDWi+S0W7cO1k3IH/12+EqSSzrD662Tu3cpoSERP
PGuCjm61e199a25obijwxFSdYGiW0xgarE0NT2RREGtNrlch66goK3y3bH5wy6vC
TZrb4rGHO6NIF/xrsp9iMkQc13iB9UpkAETiJ5bKsT0aeLWXWkMcVMxIdbnAznfq
LHZDDyptztifC0tGmsiUkaUxkbrnhdvffiJFMlP4vkAydwMOXgye7wr9lg6toeV1
xWvPw/KmAXlh/ctgBusyuFv/VTzZsajfuGIYyyCPCzm6on0aKODbi/4XpZ9qsSdJ
VUlVTs1RaHwTYkpAGEmDDHExWy0apt9AAtMo2Mdkg8kN8H6AwRmV3kkwhmAvkdA=
=GZXW
-----END PGP SIGNATURE-----