Skip to main content

Using the Server-Based Certificate Validation Protocol (SCVP) to Convey Long-Term Evidence Records
RFC 5276

Revision differences

Document history

Date Rev. By Action
2015-10-14
07 (System) Notify list changed from ltans-chairs@ietf.org, draft-ietf-ltans-ers-scvp@ietf.org to (None)
2012-08-22
07 (System) post-migration administrative database adjustment to the No Objection position for Russ Housley
2008-08-13
07 Cindy Morgan State Changes to RFC Published from RFC Ed Queue by Cindy Morgan
2008-08-13
07 Cindy Morgan [Note]: 'RFC 5276' added by Cindy Morgan
2008-08-13
07 (System) RFC published
2008-06-24
07 Amy Vezza State Changes to RFC Ed Queue from Approved-announcement sent by Amy Vezza
2008-06-23
07 (System) IANA Action state changed to No IC from In Progress
2008-06-23
07 (System) IANA Action state changed to In Progress
2008-06-23
07 Amy Vezza IESG state changed to Approved-announcement sent
2008-06-23
07 Amy Vezza IESG has approved the document
2008-06-23
07 Amy Vezza Closed "Approve" ballot
2008-06-20
07 (System) New version available: draft-ietf-ltans-ers-scvp-07.txt
2008-06-20
07 (System) Removed from agenda for telechat - 2008-06-19
2008-06-19
07 Cindy Morgan State Changes to Approved-announcement to be sent::Point Raised - writeup needed from IESG Evaluation by Cindy Morgan
2008-06-19
07 Jari Arkko
[Ballot comment]
A review by Christian Vogt:

This document specifies extensions to the Server-based Certificate
Validation Protocol to inquire about changes on the certification path …
[Ballot comment]
A review by Christian Vogt:

This document specifies extensions to the Server-based Certificate
Validation Protocol to inquire about changes on the certification path
of a certificate of interest.  Such changes may happen due to expiry
of previous certificates, or due to replacement of compromised
cryptographic algorithms.

The document is in good shape.  I have one main comment though, which
I think should be addressed before forwarding this document for
publication:  The specified technique enables the establishment of
trust into a certificate even after certificates in the certification
path have changed.  To which extent can this be used when certificates
have been revoked explicitly?  Suggest adding a discussion on this.

Some smaller comments:

- Abstract:  SCVP is the *Server-based* Certificate Validation
  Protocol, not the Simple Certificate Validation Protocol.

- Abstract/Introduction:  The document is unclear about the purpose of
  the technique it specifies.  Although the document states in its
  abstract that it defines an extension to SCVP, the ultimate
  purpose of this extension remains a bit blurry.

- Security considerations:  It is unclear which security
  vulnerabilities this section is trying to address.  It seems that
  the section focuses on possible protocol extensions, or
  alternative ways to realize the protocol.  This is not what the
  Security Considerations section is to be used for; it should
  instead focus on security aspects of the specified protocol
  itself.

- Appendix A:  Suggest adding an introductory paragraph that explains
  the ASN.1 constructs defined in this appendix and their relation
  to the protocol elements defined earlier in the document.
2008-06-19
07 Russ Housley [Ballot Position Update] Position for Russ Housley has been changed to No Objection from Discuss by Russ Housley
2008-06-19
07 Jari Arkko [Ballot Position Update] New position, No Objection, has been recorded by Jari Arkko
2008-06-19
07 Ross Callon [Ballot Position Update] New position, No Objection, has been recorded by Ross Callon
2008-06-19
07 David Ward [Ballot Position Update] New position, No Objection, has been recorded by David Ward
2008-06-19
07 Cullen Jennings [Ballot Position Update] New position, No Objection, has been recorded by Cullen Jennings
2008-06-19
07 Ron Bonica [Ballot Position Update] New position, No Objection, has been recorded by Ron Bonica
2008-06-19
07 Mark Townsley [Ballot Position Update] New position, No Objection, has been recorded by Mark Townsley
2008-06-19
07 Dan Romascanu [Ballot Position Update] New position, No Objection, has been recorded by Dan Romascanu
2008-06-19
07 Jon Peterson [Ballot Position Update] New position, No Objection, has been recorded by Jon Peterson
2008-06-18
07 Lars Eggert [Ballot Position Update] New position, No Objection, has been recorded by Lars Eggert
2008-06-18
07 Pasi Eronen [Ballot Position Update] New position, No Objection, has been recorded by Pasi Eronen
2008-06-15
07 Russ Housley [Ballot discuss]
At least one ASN.1 compiler cannot handle LTANS_SCVP_EXTENSION as a
  module name.  I suggest using LTANS-SCVP-EXTENSION instead.
2008-06-15
07 Russ Housley [Ballot Position Update] New position, Discuss, has been recorded by Russ Housley
2008-06-09
07 Tim Polk Placed on agenda for telechat - 2008-06-19 by Tim Polk
2008-05-30
07 Samuel Weiler Request for Last Call review by SECDIR Completed. Reviewer: Kurt Zeilenga.
2008-05-29
07 Tim Polk State Changes to IESG Evaluation from Waiting for AD Go-Ahead by Tim Polk
2008-05-29
07 Tim Polk [Ballot Position Update] New position, Yes, has been recorded for Tim Polk
2008-05-29
07 Tim Polk Ballot has been issued by Tim Polk
2008-05-29
07 Tim Polk Created "Approve" ballot
2008-05-27
07 (System) State has been changed to Waiting for AD Go-Ahead from In Last Call by system
2008-05-20
07 Amanda Baber IANA Last Call comments:

As described in the IANA Considerations section, we understand this document
to have NO IANA Actions.
2008-05-15
07 Samuel Weiler Request for Last Call review by SECDIR is assigned to Kurt Zeilenga
2008-05-15
07 Samuel Weiler Request for Last Call review by SECDIR is assigned to Kurt Zeilenga
2008-05-13
07 Amy Vezza Last call sent
2008-05-13
07 Amy Vezza State Changes to In Last Call from Last Call Requested by Amy Vezza
2008-05-13
07 Tim Polk State Changes to Last Call Requested from Publication Requested by Tim Polk
2008-05-13
07 Tim Polk Last Call was requested by Tim Polk
2008-05-13
07 (System) Ballot writeup text was added
2008-05-13
07 (System) Last call text was added
2008-05-13
07 (System) Ballot approval text was added
2008-02-22
07 Tim Polk Draft Added by Tim Polk in state Publication Requested
2008-02-14
06 (System) New version available: draft-ietf-ltans-ers-scvp-06.txt
2007-11-16
05 (System) New version available: draft-ietf-ltans-ers-scvp-05.txt
2007-11-08
04 (System) New version available: draft-ietf-ltans-ers-scvp-04.txt
2007-06-20
03 (System) New version available: draft-ietf-ltans-ers-scvp-03.txt
2007-02-13
02 (System) New version available: draft-ietf-ltans-ers-scvp-02.txt
2006-05-17
01 (System) New version available: draft-ietf-ltans-ers-scvp-01.txt
2005-09-29
00 (System) New version available: draft-ietf-ltans-ers-scvp-00.txt