Hi all!

First time asking for an internet draft adoption.


  *   
https://datatracker.ietf.org/doc/draft-carter-high-assurance-dids-with-dns/

As one of the authors of the internet draft titled "High Assurance DIDs with 
DNS" (draft-carter-high-assurance-dids-with-dns), I am writing to request the 
ACME Working Group to review and consider adopting this draft as part of your 
working group.

The draft proposes a method for integrating high assurance Decentralized 
Identifiers (DIDs) with the Domain Name System (DNS), aiming to enhance the 
security and reliability of DIDs by leveraging the established trust 
infrastructure of DNS. We believe that this integration aligns well with the 
goals and expertise of the ACME Working Group, particularly in the areas of 
secure and automated certificate management.

We would greatly appreciate the opportunity to present this draft to the 
working group and discuss its potential benefits and implementation details. 
Your feedback and guidance would be invaluable in refining the draft and 
ensuring its alignment with the broader objectives of the IETF.

Please let us know if there are any specific procedures or additional 
information required for this request. We are eager to collaborate with the 
ACME Working Group and contribute to the advancement of secure and reliable 
internet standards.

In terms of support and reference for this draft, we have the following 
references that may help justify our ask.


  *   
https://dhs-svip.github.io/requirements-for-decentralized-identity/TrustArchitecture/
  *   DID Specification Registries 
(w3c.github.io)<https://w3c.github.io/did-spec-registries/#dnsvalidationdomain>
  *   Trust DID Web - The did:tdw DID Method 
(bcgov.github.io)<https://bcgov.github.io/trustdidweb/>

Example DNS implementation:

$ dig _did.trustroot.ca uri +dnssec +multi

_did.trustroot.ca.      3518 IN URI 0 0 "did:web:trustroot.ca"
_did.trustroot.ca.      3518 IN RRSIG URI 13 3 3600 (
                                20240905000000 20240815000000 17999 
trustroot.ca.
                                4CJsquY7BEcA2YX1iWHIKzXx4lEvWa7k8JWNbp4zu3dp
                                KQXdwZ73geTKgzfNz9g5+HyckxTyNyz8LU8lA+G4lg== )

$ dig _did.trustroot.ca tlsa +dnssec +multi

_did.trustroot.ca.      3527 IN TLSA 3 1 1 (
                                CEEAD59AAE176DDD8889DF0B02083CB393D07655CBA9
                                D668EA334ABDBDB72A39 )
_did.trustroot.ca.      3527 IN TLSA 3 1 0 (
                                302A300506032B6570032100C300A443F0427440AC90
                                BDA85B4F97896879564A7AB649B976FA7D15FEAFC225 )
_did.trustroot.ca.      3527 IN RRSIG TLSA 13 3 3600 (
                                20240905000000 20240815000000 17999 
trustroot.ca.
                                z/E+jECtQzNi0zcBcrVa8P8UKiHx5SHcSEmN2vR6Oe4t
                                nfvjso/8/ZXo/IlWtoqgIYrCeJJ9NLFTu/q0cGwUIg== )

Thank you for your time and consideration.

Best regards,

Jacques, Jesse, Mathieu and Tim.




CLASSIFICATION:CONFIDENTIAL
_______________________________________________
Acme mailing list -- acme@ietf.org
To unsubscribe send an email to acme-le...@ietf.org

Reply via email to