[cabfpub] Preballot for IPv6 Support

[Eddy Nigg]

On 12/15/2014 11:02 PM, Ryan Sleevi wrote:
> As discussed on our call last week, I'd like to put together a ballot 
> requiring that CAs support IPv6 for their external (relying party 
> facing) infrastructure.

Funny that you want to start with that part first - most of the time 
that's the part CAs have the least control over it and depend on third 
parties.

> As both servers and clients transition to IPv6-only networks, the goal 
> is to ensure that services RPs need are accessible.

Hardly 5 % as of today - and I assume they all (must) support IPv4 in 
any case since the vast majority doesn't support IPv6.

> Before proposing dates/timelines, it'd be helpful to understand where 
> the CA's current infrastructure and plans are, so that we can reach a 
> happy medium.

I believe this is premature by any standard. Of course CAs may and 
probably want to support IPv6 as soon as there is a real demand for it. 
It's also not overly difficult - but the real problem is the third party 
service providers involved including CDNs and ISPs which must provide 
IPv6 support first before the CA can.

But besides that I'm a bit curious why Google would have even the 
slightest interest in revocation checking services and how they are 
accessed considering that its products don't check revocation in first 
place :-)

-- 
Regards
Signer: 	Eddy Nigg, COO/CTO
	StartCom Ltd. <http://www.startcom.org>
XMPP: 	startcom at startcom.org <xmpp:startcom at startcom.org>
Blog: 	Join the Revolution! <http://blog.startcom.org>
Twitter: 	Follow Me <http://twitter.com/eddy_nigg>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/public/attachments/20141215/f3ff92b0/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4313 bytes
Desc: S/MIME Cryptographic Signature
Url : https://cabforum.org/pipermail/public/attachments/20141215/f3ff92b0/attachment.bin