Skip to content

Commit

Permalink
Add an initial text on requirements on "how to dance" documents
Browse files Browse the repository at this point in the history
Signed-off-by: Olle E. Johansson <[email protected]>
  • Loading branch information
oej committed Sep 4, 2024
1 parent 4e1d280 commit 10aebf5
Showing 1 changed file with 14 additions and 0 deletions.
14 changes: 14 additions & 0 deletions draft-ietf-dance-architecture.md
Original file line number Diff line number Diff line change
Expand Up @@ -407,6 +407,20 @@ There is, as yet, no URI scheme which says that the key can be found via the DNS

In order to make use of x5u, a DANCEr would have to define a new URI scheme that explained how to get the right key from DNS.

# Protocol implementations

For each protocol implementation, a specific usage document needs to be published. In this document,
the DANCE protocol requirements and usage needs to be specified (this is refered above as the "How to DANCE" document).
These documents should as a minimum contain the following sections:

- Specifics on naming: How the name of the client is defined and how this is related to the name in
a DNS zone. This defines the organization of the related DNS zone. Whether a flat namespace is used,
or a way to use a DNS Zone hierarchy is applied to this usage. (see notes above on DNS zone design)
- Privacy: If the subject name is a personal identifier, how to protect that name from being exposed
in the DNS zone. {{?RFC7929}} describes one way to handle privacy for personal identifiers in DNS.
- TTL: Recommended TTL settings for records in this usage
- Security: Security considerations for this usage

# Security Considerations

## Confidentiality
Expand Down

0 comments on commit 10aebf5

Please sign in to comment.