--- 1/draft-ietf-lamps-rfc5280-i18n-update-01.txt 2017-06-23 12:13:18.238262153 -0700
+++ 2/draft-ietf-lamps-rfc5280-i18n-update-02.txt 2017-06-23 12:13:18.258262634 -0700
@@ -1,19 +1,19 @@
INTERNET-DRAFT
Internet Engineering Task Force R. Housley
Intended Status: Proposed Standard Vigil Security
-Updates: RFC 5280 (once approved)
-Expires: 14 December 2017 14 June 2017
+Updates: 5280 (once approved)
+Expires: 23 December 2017 23 June 2017
Internationalization Updates to RFC 5280
- draft-ietf-lamps-rfc5280-i18n-update-01
+ draft-ietf-lamps-rfc5280-i18n-update-02
Abstract
These updates to RFC 5280 provide clarity on the handling of
Internationalized Domain Names (IDNs) and Internationalized Email
Addresses in X.509 Certificates.
Status of this Memo
This Internet-Draft is submitted to IETF in full conformance with the
@@ -43,20 +43,32 @@
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
+ This document may contain material from IETF Documents or IETF
+ Contributions published or made publicly available before November
+ 10, 2008. The person(s) controlling the copyright in some of this
+ material may not have granted the IETF Trust the right to allow
+ modifications of such material outside the IETF Standards Process.
+ Without obtaining an adequate license from the person(s) controlling
+ the copyright in such materials, this document may not be modified
+ outside the IETF Standards Process, and derivative works of it may
+ not be created outside the IETF Standards Process, except to format
+ it for publication as an RFC or to translate it into languages other
+ than English.
+
1. Introduction
This document updates RFC 5280 [RFC5280]. The Introduction in
Section 1, the Name Constraints certificate extension discussion in
Section 4.2.1.10, and the Processing Rules for Internationalized
Names in Section 7 are updated to provide clarity on the handling of
Internationalized Domain Names (IDNs) and Internationalized Email
Addresses in X.509 Certificates.
An IDN in Unicode (native character) form contains at least one
@@ -65,21 +77,21 @@
IDN are converted to A-labels. Conversion of an U-label to an
A-label is described in [RFC5891].
The GeneralName structure supports many different names forms,
including otherName for extensibility. [ID.lamps-eai-addresses]
specifies the SmtpUTF8Name for Internationalized Email addresses,
which include IDNs with U-labels.
Note that Internationalized Domain Names in Applications
specifications published in 2003 (IDNA2003) [RFC3490] and 2008
- (IDNA2008) [RFC5980] both refer to the Punycode Algorithm for
+ (IDNA2008) [RFC5890] both refer to the Punycode Algorithm for
conversion [RFC3492].
1.1. Terminology
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
document are to be interpreted as described in RFC 2119 [RFC2119].
2. Updates
@@ -323,31 +336,36 @@
[CABF] CA/Browser Forum, "Internal Server Names and IP Address
Requirements for SSL", Version 1.0, June 2012,
[RFC3490] Faltstrom, P., Hoffman, P., and A. Costello,
"Internationalizing Domain Names in Applications (IDNA)",
RFC 3490, DOI 10.17487/RFC3490, March 2003,
.
- [RFC3639] St. Johns, M., Ed., Huston, G., Ed., and IAB,
- "Considerations on the use of a Service Identifier in
- Packet Headers", RFC 3639, DOI 10.17487/RFC3639, October
- 2003, .
+ [RFC3492] Costello, A., "Punycode: A Bootstring encoding of Unicode
+ for Internationalized Domain Names in Applications
+ (IDNA)", RFC 3492, DOI 10.17487/RFC3492, March 2003,
+ .
+
+ [RFC3629] Yergeau, F., "UTF-8, a transformation format of ISO
+ 10646", STD 63, RFC 3629, DOI 10.17487/RFC3629, November
+ 2003, .
Acknowledgements
Thanks to Alexey Melnikov for the encouragement to write this update.
Thanks to John Klensin and Patrik Falstrom for confirming many of the
- details in this update. Thanks to Wei Chuang, Alexey Melnikov, Tim
- Ruehsen, and Sean Turner for their careful review and comments.
+ details in this update. Thanks to Wei Chuang, Phillip Hallam-Baker,
+ Alexey Melnikov, Tim Ruehsen, and Sean Turner for their careful
+ review and comments.
Authors' Address
Russ Housley
Vigil Security, LLC
918 Spring Knoll Drive
Herndon, VA 20170
USA
EMail: housley@vigilsec.com