<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 12/15/2014 11:02 PM, Ryan Sleevi
wrote:<br>
</div>
<blockquote
cite="mid:CACvaWvZd=PqOUt7Td=H3gKvqyFDZ=VXSU_r+-gmnH3HKy_RFmg@mail.gmail.com"
type="cite">
<div dir="ltr">As discussed on our call last week, I'd like to put
together a ballot requiring that CAs support IPv6 for their
external (relying party facing) infrastructure.</div>
</blockquote>
<br>
Funny that you want to start with that part first - most of the time
that's the part CAs have the least control over it and depend on
third parties.<br>
<br>
<blockquote
cite="mid:CACvaWvZd=PqOUt7Td=H3gKvqyFDZ=VXSU_r+-gmnH3HKy_RFmg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>As both servers and clients transition to IPv6-only
networks, the goal is to ensure that services RPs need are
accessible. </div>
</div>
</blockquote>
<br>
Hardly 5 % as of today - and I assume they all (must) support IPv4
in any case since the vast majority doesn't support IPv6. <br>
<br>
<blockquote
cite="mid:CACvaWvZd=PqOUt7Td=H3gKvqyFDZ=VXSU_r+-gmnH3HKy_RFmg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Before proposing dates/timelines, it'd be helpful to
understand where the CA's current infrastructure and plans
are, so that we can reach a happy medium.</div>
</div>
</blockquote>
<br>
I believe this is premature by any standard. Of course CAs may and
probably want to support IPv6 as soon as there is a real demand for
it. It's also not overly difficult - but the real problem is the
third party service providers involved including CDNs and ISPs which
must provide IPv6 support first before the CA can.<br>
<br>
But besides that I'm a bit curious why Google would have even the
slightest interest in revocation checking services and how they are
accessed considering that its products don't check revocation in
first place :-)<br>
<br>
<div class="moz-signature">-- <br>
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, COO/CTO</td>
</tr>
<tr>
<td> </td>
<td><a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>XMPP: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Twitter: </td>
<td><a href="http://twitter.com/eddy_nigg">Follow Me</a></td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
</body>
</html>