This version addresses all outstanding IESG comments, including a bunch of
comments from Ben and two Discusses.
Thanks,
Yaron
On 13/10/2019, 18:08, "[email protected]" <[email protected]>
wrote:
A new version of I-D, draft-ietf-acme-star-10.txt
has been successfully submitted by Yaron Sheffer and posted to the
IETF repository.
Name: draft-ietf-acme-star
Revision: 10
Title: Support for Short-Term, Automatically-Renewed (STAR)
Certificates in Automated Certificate Management Environment (ACME)
Document date: 2019-10-13
Group: acme
Pages: 29
URL:
https://www.ietf.org/internet-drafts/draft-ietf-acme-star-10.txt
Status: https://datatracker.ietf.org/doc/draft-ietf-acme-star/
Htmlized: https://tools.ietf.org/html/draft-ietf-acme-star-10
Htmlized: https://datatracker.ietf.org/doc/html/draft-ietf-acme-star
Diff: https://www.ietf.org/rfcdiff?url2=draft-ietf-acme-star-10
Abstract:
Public-key certificates need to be revoked when they are compromised,
that is, when the associated private key is exposed to an
unauthorized entity. However the revocation process is often
unreliable. An alternative to revocation is issuing a sequence of
certificates, each with a short validity period, and terminating this
sequence upon compromise. This memo proposes an ACME extension to
enable the issuance of short-term and automatically renewed (STAR)
X.509 certificates.
[RFC Editor: please remove before publication]
While the draft is being developed, the editor's version can be found
at https://github.com/yaronf/I-D/tree/master/STAR.
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
The IETF Secretariat
_______________________________________________
Acme mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/acme