<html><head><base href="x-msg://2/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I just submitted the draft that I wrote with Rob's input back in May.<div><br></div><div>We started off with just doing 'must staple'. Then when we looked at the problem in a little more detail we started to see a potential version downgrade attack on top. So this led to a slightly more general approach (but not very).</div><div><br></div><div><a href="http://tools.ietf.org/html/draft-hallambaker-tlssecuritypolicy-01">http://tools.ietf.org/html/draft-hallambaker-tlssecuritypolicy-01</a></div><div><br></div><div><br><div><div>On Sep 28, 2012, at 12:12 AM, Jeremy Rowley wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div lang="EN-US" link="blue" vlink="purple"><div class="WordSection1" style="page: WordSection1; "><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">Hi everyone,<o:p></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">One of the items discussed during today’s revocation meeting was the use of a “must staple” OID. Does anyone object to using 2.23.140.16.1? 2.23.140 is the ca-browser-forum, 16 is ocsp, and 1 will become “must-staple”.<o:p></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 10pt; font-family: Cambria, serif; ">Jeremy Rowley<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div></div>_______________________________________________<br>Public mailing list<br><a href="mailto:Public@cabforum.org" style="color: blue; text-decoration: underline; ">Public@cabforum.org</a><br><a href="https://cabforum.org/mailman/listinfo/public" style="color: blue; text-decoration: underline; ">https://cabforum.org/mailman/listinfo/public</a></div></blockquote></div><br></div></body></html>