[cabf_validation] BR section 3.2.2.5: Authentication for an IP address

[Tim Hollebeek]

I think in those cases, my position is that the IPS still owns the IP, they
are just allowing you to pay for exclusive use of it.

Whether an individual who is paying their ISP for exclusive use of a static
IP should be able to get a IP address certificate for that IP is actually a
bit
of an interesting question.

It's kind of half-way between a stable, long term static IP, and a dynamic,
hosted IP.  Thanks for bringing up this important use case.

-Tim

> -----Original Message-----
> From: Validation [mailto:validation-bounces at cabforum.org] On Behalf Of
Kurt
> Roeckx via Validation
> Sent: Monday, January 22, 2018 8:55 AM
> To: Doug Beattie <doug.beattie at globalsign.com>; CA/Browser Forum
> Validation WG List <validation at cabforum.org>
> Subject: Re: [cabf_validation] BR section 3.2.2.5: Authentication for an
IP
> address
> 
> On Mon, Jan 22, 2018 at 03:45:09PM +0000, Doug Beattie via Validation
> wrote:
> > When IP addresses can be assigned dynamically, for example by ISPs, you
can
> demonstrate technical control over an IP address today, but that doesn't
mean
> you will have it tomorrow.  Does that bother anyone else?
> 
> An other issue you might run into is that you can pay an ISP for a static
IP
> address but things like whois will only show the name of the ISP. I think
you
> only show up in whois if you buy an IP range, not just an individual IP.
> 
> 
> Kurt
> 
> _______________________________________________
> Validation mailing list
> Validation at cabforum.org
> https://clicktime.symantec.com/a/1/7WgQ8P8epr49-BDEtR-_A2KA73ptodoT-
> 8iB2lE7nf8=?d=31SR3hRVZHDILIEWMyDV3H6QCAA9-
> FaBnI9lbyGmFOuhdKLjnEL1n-
> MMFQKYuUIsfqOgNazfEjSnEBbQDkztuvSVyslpG3meX_bA9VEsQS3a8ap5SU1kd
> hqog2Ge5wFHoEByZ2VyXv_2n3J5OTjpAl1PGLHqGI63qgt5bqX9eSdMo_vt8QX
> m2U6fEhOMbdEg_46QWrQdEtT42IpSZIRcTGHeJch3bMXQqg3HreiWOaKC5g3
> UC7V4n9D2SoxpqYGkdnTBnp0VGMrN3vrhNY1fpxLAEvBLNIgu1B9zWaePekRc9
> ACS-mOXmyqsN2BUBvi1Sy5QbPCKCv7sIBPxdviVTq-
> 8k6utp3yt29Pj1WaMgBQIxerOX-q4fT4toeMRMwz8whMtoR-
> 5TteTFriZkcSwsmhTjo_zF6VeBy8mC5wG7bzbRQ%3D%3D&u=https%3A%2F%2
> Fcabforum.org%2Fmailman%2Flistinfo%2Fvalidation
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4940 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/validation/attachments/20180122/3d7f19d9/attachment.p7s>