|
38 | 38 | pycountry 24.6.1 |
39 | 39 | PyYAML 6.0.3 |
40 | 40 | requests 2.33.1 |
41 | | - wcwidth 0.8.1 |
| 41 | + wcwidth 0.8.2 |
42 | 42 | --> |
43 | 43 | <link href="draft-ietf-anima-rfc8366bis.xml" rel="alternate" type="application/rfc+xml"> |
44 | 44 | <link href="#copyright" rel="license"> |
|
1057 | 1057 | <thead><tr> |
1058 | 1058 | <td class="left">Internet-Draft</td> |
1059 | 1059 | <td class="center">Voucher Artifact</td> |
1060 | | -<td class="right">June 2026</td> |
| 1060 | +<td class="right">July 2026</td> |
1061 | 1061 | </tr></thead> |
1062 | 1062 | <tfoot><tr> |
1063 | 1063 | <td class="left">Watsen, et al.</td> |
1064 | | -<td class="center">Expires 30 December 2026</td> |
| 1064 | +<td class="center">Expires 6 January 2027</td> |
1065 | 1065 | <td class="right">[Page]</td> |
1066 | 1066 | </tr></tfoot> |
1067 | 1067 | </table> |
|
1080 | 1080 | <a href="https://www.rfc-editor.org/rfc/rfc8995" class="eref">8995</a> (if approved)</dd> |
1081 | 1081 | <dt class="label-published">Published:</dt> |
1082 | 1082 | <dd class="published"> |
1083 | | -<time datetime="2026-06-28" class="published">28 June 2026</time> |
| 1083 | +<time datetime="2026-07-05" class="published">5 July 2026</time> |
1084 | 1084 | </dd> |
1085 | 1085 | <dt class="label-intended-status">Intended Status:</dt> |
1086 | 1086 | <dd class="intended-status">Standards Track</dd> |
1087 | 1087 | <dt class="label-expires">Expires:</dt> |
1088 | | -<dd class="expires"><time datetime="2026-12-30">30 December 2026</time></dd> |
| 1088 | +<dd class="expires"><time datetime="2027-01-06">6 January 2027</time></dd> |
1089 | 1089 | <dt class="label-authors">Authors:</dt> |
1090 | 1090 | <dd class="authors"> |
1091 | 1091 | <div class="author"> |
@@ -1160,7 +1160,7 @@ <h2 id="name-status-of-this-memo"> |
1160 | 1160 | time. It is inappropriate to use Internet-Drafts as reference |
1161 | 1161 | material or to cite them other than as "work in progress."<a href="#section-boilerplate.1-3" class="pilcrow">¶</a></p> |
1162 | 1162 | <p id="section-boilerplate.1-4"> |
1163 | | - This Internet-Draft will expire on 30 December 2026.<a href="#section-boilerplate.1-4" class="pilcrow">¶</a></p> |
| 1163 | + This Internet-Draft will expire on 6 January 2027.<a href="#section-boilerplate.1-4" class="pilcrow">¶</a></p> |
1164 | 1164 | </section> |
1165 | 1165 | </div> |
1166 | 1166 | <div id="copyright"> |
@@ -1953,12 +1953,12 @@ <h2 id="name-voucher-artifact"> |
1953 | 1953 | <p id="section-8-6">Only the format of Voucher that is expected is signaled in the form of a (MIME) media |
1954 | 1954 | type in the HTTP "Accept" header <span>[<a href="#RFC9110" class="cite xref">RFC9110</a>]</span>.<a href="#section-8-6" class="pilcrow">¶</a></p> |
1955 | 1955 | <p id="section-8-7">For Vouchers stored/transferred via methods like a USB storage device (USB key), the Voucher format is usually signaled by a filename extension.<a href="#section-8-7" class="pilcrow">¶</a></p> |
1956 | | -<p id="section-8-8">In the constrained versions of the voucher and voucher-request (as used by <span>[<a href="#cBRSKI" class="cite xref">cBRSKI</a>]</span>), the fields <code>pinned-domain-pubk</code> (<code>proximity-registrar-pubk</code> for requests) and <code>pinned-domain-pubk-sha256</code> (<code>proximity-registrar-pubk-sha256</code> for requests) can be used to pin the raw public key, or just the SHA256 hash of the raw public key. |
| 1956 | +<p id="section-8-8">In the constrained versions of the voucher and voucher-request (as used by <span>[<a href="#cBRSKI" class="cite xref">cBRSKI</a>]</span>), the attributes <code>pinned-domain-pubk</code> (<code>proximity-registrar-pubk</code> for requests) and <code>pinned-domain-pubk-sha256</code> (<code>proximity-registrar-pubk-sha256</code> for requests) are involved in the process of pinning a raw public key. |
1957 | 1957 | The public keys are to be encoded according to <span>[<a href="#RFC7250" class="cite xref">RFC7250</a>], <a href="https://rfc-editor.org/rfc/rfc7250#section-3" class="relref">Section 3</a></span> for RSA and EcDSA keys, noting that <span>[<a href="#RFC8032" class="cite xref">RFC8032</a>]</span> extends this to include an OID for EdDSA. |
1958 | 1958 | The old (1024-bit) DSA algorithm is not supported.<a href="#section-8-8" class="pilcrow">¶</a></p> |
1959 | 1959 | <p id="section-8-9">When EcDSA is supported, curves secp256r1 and secp384r1 <span class="bcp14">SHOULD</span> be supported. |
1960 | 1960 | When EdDSA is supported, curves Ed25519 and Ed448 <span class="bcp14">SHOULD</span> be supported. |
1961 | | -When RSA is supported by an implementation, it <span class="bcp14">SHOULD</span> support key lengths between 2048 and 4096 bits, and <span class="bcp14">MAY</span> support longer keys.<a href="#section-8-9" class="pilcrow">¶</a></p> |
| 1961 | +When RSA is supported by an implementation, it <span class="bcp14">SHOULD</span> support key lengths between 2048 and 4096 bits.<a href="#section-8-9" class="pilcrow">¶</a></p> |
1962 | 1962 | <p id="section-8-10">Of the above, EcDSA <span class="bcp14">SHOULD</span> be supported by all implementations, until some quantum-safe variant is standardized.<a href="#section-8-10" class="pilcrow">¶</a></p> |
1963 | 1963 | <p id="section-8-11">Should SHA256 need to be replaced, then a new YANG module will be published with a new leaf, obsoleting <code>pinned-domain-pubk-sha256</code> and <code>proximity-registrar-pubk-sha256</code>.<a href="#section-8-11" class="pilcrow">¶</a></p> |
1964 | 1964 | <div id="voucher-tree-diagram"> |
|
0 commit comments