Re: I-D Action: draft-ietf-xmpp-posh-04.txt

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

This revision should address all of Ben's outstanding concerns.


Thanks!

- -- 
- - m&m

Matt Miller < [email protected] >
Cisco Systems, Inc.

On 2/23/15 4:05 PM, [email protected] wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts
> directories. This draft is a work item of the Extensible Messaging
> and Presence Protocol Working Group of the IETF.
> 
> Title           : PKIX over Secure HTTP (POSH) Authors         :
> Matthew Miller Peter Saint-Andre Filename        :
> draft-ietf-xmpp-posh-04.txt Pages           : 15 Date            :
> 2015-02-23
> 
> Abstract: Experience has shown that it is extremely difficult to
> deploy proper PKIX certificates for TLS in multi-tenanted
> environments.  As a result, domains hosted in such environments
> often deploy applications using certificates that identify the
> hosting service, not the hosted domain.  Such deployments force end
> users and peer services to accept a certificate with an improper
> identifier, resulting in obvious security implications.  This
> document defines two methods that make it easier to deploy
> certificates for proper server identity checking in non-HTTP
> application protocols.  While these methods developed for use in
> the Extensible Messaging and Presence Protocol (XMPP) as a Domain
> Name Association (DNA) prooftype, they might also be usable in 
> other non-HTTP application protocols.
> 
> 
> The IETF datatracker status page for this draft is: 
> https://datatracker.ietf.org/doc/draft-ietf-xmpp-posh/
> 
> There's also a htmlized version available at: 
> http://tools.ietf.org/html/draft-ietf-xmpp-posh-04
> 
> A diff from the previous version is available at: 
> http://www.ietf.org/rfcdiff?url2=draft-ietf-xmpp-posh-04
> 
> 
> Please note that it may take a couple of minutes from the time of
> submission until the htmlized version and diff are available at
> tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at: 
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________ xmpp mailing list 
> [email protected] https://www.ietf.org/mailman/listinfo/xmpp
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - https://gpgtools.org

iQEcBAEBCgAGBQJU67MHAAoJEDWi+S0W7cO1x4cH/RkY1LsJdpc9t8DbaPNrLdTz
3nN1gjQQj8aJkoz7c9ZNRVsFStJlHBVoX5GidRmbl4ZnFY8OevSarzddrrITgArN
C3dUQrqzhs2MRNsQfzFOmj7m0Mu+jlhStZjt8GDV/NnDFnR7dUHl6JrSek80KI6w
cDtJvBbsskGGNb10XhbQaTRErjhyd7K/pDH+eerTcOHNlHchGUXhZ8MmENCjDrWO
E1Mu8MwcEclG4ox6/zcr8Y158ZOU9Pi+VJWbzYa+rpv3Kbv1fSjjilZCJYIKEs1Q
bzZtbLY6TZHwiZTbt0+4wCaXsO6EabAqMwJ+zGhBmWjO7Yse2XtfOFD2RAj4KlY=
=QN87
-----END PGP SIGNATURE-----