From owner-ietf-ltans Tue Oct 7 09:54:19 2003 Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h97GsJKP035313 for ; Tue, 7 Oct 2003 09:54:19 -0700 (PDT) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.9/8.12.9/Submit) id h97GsJf0035312 for ietf-ltans-bks; Tue, 7 Oct 2003 09:54:19 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from ietf.org (odin.ietf.org [132.151.1.176]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h97GsFKP035307 for ; Tue, 7 Oct 2003 09:54:18 -0700 (PDT) (envelope-from dinaras@cnri.reston.va.us) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA11466; Tue, 7 Oct 2003 12:54:04 -0400 (EDT) Message-Id: <200310071654.MAA11466@ietf.org> From: The IESG To: IETF-Announce: ; Cc: new-work@ietf.org, ietf-ltans@imc.org Subject: WG Review: Long-Term Archive and Notary Services (ltans) Date: Tue, 07 Oct 2003 12:54:03 -0400 Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: A new IETF working group has been proposed in the Security Area. The IESG has not made any determination as yet. The following description was submitted, and is provided for informational purposes only. Please send your comments to the IESG mailing list (iesg@ietf.org) by October 14th. Long-Term Archive and Notary Services (ltans) --------------------------------------------- Current Status: Proposed Working Group DESCRIPTION OF WORKING GROUP: In many scenarios, users need to be able to ensure and prove the existence and validity of data, especially digitally signed data, in a common and reproducible way over a long and possibly undetermined period of time. Cryptographic means are useful, but they do not provide the whole solution. For example, digital signatures (generated with a particular key size) might become weak over time due to improved computational capabilities, new cryptanalytic attacks might "break" a digital signature algorithm, public key certificates might be revoked or expire, and so on. Complementary methods covering potential weaknesses are necessary. Long-term non-repudiation of digitally signed data is an important aspect of PKI-related standards. Standard mechanisms are needed to handle routine events, such as expiry of signer's public key certificate and expiry of trusted time stamp authority certificate. A single timestamp is not sufficient for this purpose. Additionally, the reliable preservation of content across change of formats, application of electronic notarizations, and subsequent notary services require standard solutions. The objective of the LTANS working group is to define requirements, data structures and protocols for the secure usage of the necessary archive and notary services. First, the requirements for the long-term archive will be collected. Based on that information we will develop a protocol to access archive services supplying long-term non-repudiation for signed documents and define common data structures and formats. Upon completion of the archive-related specifications, we will address 'notary services' in a similar way. The term 'notary services' is not clearly defined. The working group will determine which functions need standards, including transformation of documents from one format to another without losing the value of evidence, electronic notarization, and further verification of legal validity of signed documents. We will determine the needs via the requirements paper and act upon the results accordingly. Work done by the IETF Working Groups PKIX, S/MIME and XMLDSIG will be used as the basis to define those structures and protocols. For example, the Internet-Drafts "Archive Time-Stamps Syntax (ATS)" and "Trusted Archive Protocol (TAP)" and RFC 3029, "Data Validation and Certificate Server Protocols (DVCS)", contain applicable concepts. From owner-ietf-ltans Thu Oct 9 10:26:42 2003 Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h99HQgKP078078 for ; Thu, 9 Oct 2003 10:26:42 -0700 (PDT) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.9/8.12.9/Submit) id h99HQgxF078077 for ietf-ltans-bks; Thu, 9 Oct 2003 10:26:42 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from vsmtp2.tin.it (vsmtp2.tin.it [212.216.176.222]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h99HQdKP078057 for ; Thu, 9 Oct 2003 10:26:40 -0700 (PDT) (envelope-from tho@congo.homeunix.net) Received: from congo (80.117.16.115) by vsmtp2.tin.it (7.0.019) id 3F85701A00022BAD; Thu, 9 Oct 2003 19:25:26 +0200 Received: (nullmailer pid 6215 invoked by uid 1001); Thu, 09 Oct 2003 17:25:11 -0000 Date: Thu, 9 Oct 2003 19:25:10 +0200 From: Thomas Fossati To: IESG Cc: LTANS Subject: WG Review: Long-Term Archive and Notary Services (ltans) Message-ID: <20031009192510.A6134@congo.homeunix.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i X-Operating-System: FreeBSD Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Hello, IETF seems to me the most proper venue to host LTANS wg, and I'd like to see it starting as quick as possible. Some sparse reasons follow: - The subject matter is 'hot' but requisites are not completely clear. - At present there is no open forum where to discuss the long-term non-repudiation topic and propose technical solutions (as far as I can tell). - LTANS would boost some very interesting work items started by the PKIX wg which, for one reason or another, has not reached full maturity/deployment. - Last but not least, the company I work with is going to invest in the long-term archival area for the next 2 years, and they know that an open(ly discussed) and standard interface is very desirable. Thomas From owner-ietf-ltans Tue Oct 21 07:05:34 2003 Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LE5YI7025752 for ; Tue, 21 Oct 2003 07:05:34 -0700 (PDT) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9LE5YwP025751 for ietf-ltans-bks; Tue, 21 Oct 2003 07:05:34 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from ietf.org (odin.ietf.org [132.151.1.176]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LE5WI7025746 for ; Tue, 21 Oct 2003 07:05:33 -0700 (PDT) (envelope-from dinaras@cnri.reston.va.us) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA18078; Tue, 21 Oct 2003 10:05:12 -0400 (EDT) Message-Id: <200310211405.KAA18078@ietf.org> From: The IESG To: IETF-Announce: ; Cc: Carl Wallace , T Gondrom , ietf-ltans@imc.org Subject: WG Action: Long-Term Archive and Notary Services (ltans) Date: Tue, 21 Oct 2003 10:05:12 -0400 Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: A new IETF working group has been formed in the Security Area. For additional information, please contact the Area Directors or the WG Chairs. Long-Term Archive and Notary Services (ltans) --------------------------------------------- Current Status: Active Working Group Chair(s): Carl Wallace T Gondrom Security Area Director(s): Russell Housley Steven Bellovin Security Area Advisor: Russell Housley Mailing Lists: General Discussion: ietf-ltans@imc.org To Subscribe: subscribe-ietf-ltans@imc.org In Body: subscribe Archive: http://www.imc.org/ietf-ltans Description of Working Group: In many scenarios, users need to be able to ensure and prove the existence and validity of data, especially digitally signed data, in a common and reproducible way over a long and possibly undetermined period of time. Cryptographic means are useful, but they do not provide the whole solution. For example, digital signatures (generated with a particular key size) might become weak over time due to improved computational capabilities, new cryptanalytic attacks might 'break' a digital signature algorithm, public key certificates might be revoked or expire, and so on. Complementary methods covering potential weaknesses are necessary. Long-term non-repudiation of digitally signed data is an important aspect of PKI-related standards. Standard mechanisms are needed to handle routine events, such as expiry of signer's public key certificate and expiry of trusted time stamp authority certificate. A single timestamp is not sufficient for this purpose. Additionally, the reliable preservation of content across change of formats, application of electronic notarizations, and subsequent notary services require standard solutions. The objective of the LTANS working group is to define requirements, data structures and protocols for the secure usage of the necessary archive and notary services. First, the requirements for the long-term archive will be collected. Based on that information we will develop a protocol to access archive services supplying long-term non-repudiation for signed documents and define common data structures and formats. Upon completion of the archive-related specifications, we will address 'notary services' in a similar way. The term 'notary services' is not clearly defined. The working group will determine which functions need standards, including transformation of documents from one format to another without losing the value of evidence, electronic notarization, and further verification of legal validity of signed documents. We will determine the needs via the requirements paper and act upon the results accordingly. Work done by the IETF Working Groups PKIX, S/MIME and XMLDSIG will be used as the basis to define those structures and protocols. For example, the Internet-Drafts 'Archive Time-Stamps Syntax (ATS)' and 'Trusted Archive Protocol (TAP)' and RFC 3029, 'Data Validation and Certificate Server Protocols (DVCS)', contain applicable concepts. Goals and Milestones: Nov 03 Initial requirements for long-term archive I-D Dec 03 Revised requirements for long-term archive I-D Dec 03 Initial data structures for long-term archive I-D Dec 03 Initial protocol for long-term archive I-D Feb 04 Last call requirements for long-term archive I-D Mar 04 Submit requirements for long-term archive to IESG as informational Mar 04 Revised data structures for long-term archive I-D Mar 04 Revised protocol for long-term archive I-D Apr 04 Last call data structures for long-term archive I-D Apr 04 Last call protocol for long-term archive I-D May 04 Submit data structures for long-term archive to IESG as proposed standard May 04 Submit protocol for long-term archive to IESG as proposed standard Jul 04 Initial requirements for notary services I-D Sep 04 Revised requirements for notary services I-D Nov 04 Last call requirements for notary services I-D Dec 04 Submit requirements for notary services to IESG as proposed standard From owner-ietf-ltans Tue Oct 21 07:27:40 2003 Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LEReI7026601 for ; Tue, 21 Oct 2003 07:27:40 -0700 (PDT) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9LERe7C026600 for ietf-ltans-bks; Tue, 21 Oct 2003 07:27:40 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from edelweb.fr (edelweb.fr [212.234.46.16]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LERcI7026595 for ; Tue, 21 Oct 2003 07:27:39 -0700 (PDT) (envelope-from Peter.Sylvester@EdelWeb.fr) Received: from chandon.edelweb.fr (localhost.edelweb.fr [127.0.0.1]) by edelweb.fr with ESMTP id QAA08874 for ; Tue, 21 Oct 2003 16:27:38 +0200 (MET DST) Received: from chandon.edelweb.fr (chandon.edelweb.fr [193.51.14.162]) by edelweb.fr (nospam/1.7); Tue, 21 Oct 2003 16:27:39 +0200 (MET DST) Received: (from peter@localhost) by chandon.edelweb.fr (8.11.7p1+Sun/8.11.7) id h9LERbv03118 for ietf-ltans@imc.org; Tue, 21 Oct 2003 16:27:37 +0200 (MEST) Date: Tue, 21 Oct 2003 16:27:37 +0200 (MEST) From: Peter Sylvester Message-Id: <200310211427.h9LERbv03118@chandon.edelweb.fr> To: ietf-ltans@imc.org Subject: document repository - http://ltans.edelweb.fr X-Sun-Charset: US-ASCII Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is to inform you that in agreement with the chairmen the site http://ltans.edelweb.fr will contain all relevant documents concerning the activities of the groups. Best effort will be made to keep the contents up to date. Peter Sylvester From owner-ietf-ltans Tue Oct 21 07:42:46 2003 Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LEgkI7027194 for ; Tue, 21 Oct 2003 07:42:46 -0700 (PDT) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9LEgknI027193 for ietf-ltans-bks; Tue, 21 Oct 2003 07:42:46 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from host13.websitesource.com (host13.websitesource.com [209.239.35.152]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LEgjI7027186 for ; Tue, 21 Oct 2003 07:42:45 -0700 (PDT) (envelope-from cwallace@orionsec.com) Received: from wcwallace (dpvc-138-88-161-20.res.east.verizon.net [138.88.161.20]) by host13.websitesource.com (8.12.10/8.12.10) with ESMTP id h9LEggE9005537; Tue, 21 Oct 2003 10:42:42 -0400 From: "Carl Wallace" To: "'The IESG'" , Cc: "'T Gondrom'" , Subject: RE: WG Action: Long-Term Archive and Notary Services (ltans) Date: Tue, 21 Oct 2003 10:42:37 -0400 Message-ID: <002101c397e1$95a218d0$9a00a8c0@hq.orionsec.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Importance: Normal In-Reply-To: <200310211405.KAA18078@ietf.org> Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: All, please note the email address for me given below is incorrect. It should be cwallace@orionsec.com. Carl -----Original Message----- From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org] On Behalf Of The IESG Sent: Tuesday, October 21, 2003 10:05 AM To: IETF-Announce: Cc: Carl Wallace; T Gondrom; ietf-ltans@imc.org Subject: WG Action: Long-Term Archive and Notary Services (ltans) A new IETF working group has been formed in the Security Area. For additional information, please contact the Area Directors or the WG Chairs. Long-Term Archive and Notary Services (ltans) --------------------------------------------- Current Status: Active Working Group Chair(s): Carl Wallace T Gondrom Security Area Director(s): Russell Housley Steven Bellovin Security Area Advisor: Russell Housley Mailing Lists: General Discussion: ietf-ltans@imc.org To Subscribe: subscribe-ietf-ltans@imc.org In Body: subscribe Archive: http://www.imc.org/ietf-ltans Description of Working Group: In many scenarios, users need to be able to ensure and prove the existence and validity of data, especially digitally signed data, in a common and reproducible way over a long and possibly undetermined period of time. Cryptographic means are useful, but they do not provide the whole solution. For example, digital signatures (generated with a particular key size) might become weak over time due to improved computational capabilities, new cryptanalytic attacks might 'break' a digital signature algorithm, public key certificates might be revoked or expire, and so on. Complementary methods covering potential weaknesses are necessary. Long-term non-repudiation of digitally signed data is an important aspect of PKI-related standards. Standard mechanisms are needed to handle routine events, such as expiry of signer's public key certificate and expiry of trusted time stamp authority certificate. A single timestamp is not sufficient for this purpose. Additionally, the reliable preservation of content across change of formats, application of electronic notarizations, and subsequent notary services require standard solutions. The objective of the LTANS working group is to define requirements, data structures and protocols for the secure usage of the necessary archive and notary services. First, the requirements for the long-term archive will be collected. Based on that information we will develop a protocol to access archive services supplying long-term non-repudiation for signed documents and define common data structures and formats. Upon completion of the archive-related specifications, we will address 'notary services' in a similar way. The term 'notary services' is not clearly defined. The working group will determine which functions need standards, including transformation of documents from one format to another without losing the value of evidence, electronic notarization, and further verification of legal validity of signed documents. We will determine the needs via the requirements paper and act upon the results accordingly. Work done by the IETF Working Groups PKIX, S/MIME and XMLDSIG will be used as the basis to define those structures and protocols. For example, the Internet-Drafts 'Archive Time-Stamps Syntax (ATS)' and 'Trusted Archive Protocol (TAP)' and RFC 3029, 'Data Validation and Certificate Server Protocols (DVCS)', contain applicable concepts. Goals and Milestones: Nov 03 Initial requirements for long-term archive I-D Dec 03 Revised requirements for long-term archive I-D Dec 03 Initial data structures for long-term archive I-D Dec 03 Initial protocol for long-term archive I-D Feb 04 Last call requirements for long-term archive I-D Mar 04 Submit requirements for long-term archive to IESG as informational Mar 04 Revised data structures for long-term archive I-D Mar 04 Revised protocol for long-term archive I-D Apr 04 Last call data structures for long-term archive I-D Apr 04 Last call protocol for long-term archive I-D May 04 Submit data structures for long-term archive to IESG as proposed standard May 04 Submit protocol for long-term archive to IESG as proposed standard Jul 04 Initial requirements for notary services I-D Sep 04 Revised requirements for notary services I-D Nov 04 Last call requirements for notary services I-D Dec 04 Submit requirements for notary services to IESG as proposed standard From owner-ietf-ltans Mon Oct 27 22:56:15 2003 Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9S6uFI7019928 for ; Mon, 27 Oct 2003 22:56:15 -0800 (PST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9S6uFI8019926 for ietf-ltans-bks; Mon, 27 Oct 2003 22:56:15 -0800 (PST) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from hitpro.hitachi.co.jp (hitpro.hitachi.co.jp [133.145.224.7]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9S6uDI7019901 for ; Mon, 27 Oct 2003 22:56:13 -0800 (PST) (envelope-from y-honda@sdl.hitachi.co.jp) Received: from mc3.mcg.hitachi.co.jp by hitpro.hitachi.co.jp (8.12.9p1/eHI-hitpro) id h9S6uGmW026529; Tue, 28 Oct 2003 15:56:16 +0900 (JST) Received: (from root@localhost) by mc3.mcg.hitachi.co.jp (8.11.6+Sun/8.11.6) id h9S6uED08555 for ; Tue, 28 Oct 2003 15:56:14 +0900 (JST) Received: from unknown [192.168.2.1] by mc3.mcg.hitachi.co.jp with SMTP id RAA08550 ; Tue, 28 Oct 2003 15:56:14 +0900 Received: from navsg2.hitachi.co.jp by navsg2.hitachi.co.jp (8.9.3/3.7W-navsg2) id PAA25288; Tue, 28 Oct 2003 15:56:12 +0900 (JST) Received: from hsdlgw92.sdl.hitachi.co.jp ([133.144.7.20]) by navsg2.hitachi.co.jp (NAVGW 2.5.2.17) with SMTP id M2003102815561118087 for ; Tue, 28 Oct 2003 15:56:11 +0900 Received: from vgate2.sdl.hitachi.co.jp by hsdlgw92.sdl.hitachi.co.jp (8.9.3/3.7W01100113) id PAA26829; Tue, 28 Oct 2003 15:56:11 +0900 Received: from maila.sdl.hitachi.co.jp ([133.144.14.196]) by vgate2.sdl.hitachi.co.jp (SAVSMTP 3.1.1.32) with SMTP id M2003102815541911151 for ; Tue, 28 Oct 2003 15:54:19 +0900 Received: from jinro.sdl.hitachi.co.jp (ip06128.sdl.hitachi.co.jp [133.144.6.128]) by maila.sdl.hitachi.co.jp (8.9.3/3.7W02021014) with SMTP id PAA17139 for ; Tue, 28 Oct 2003 15:56:11 +0900 Message-Id: <200310280656.AA00285@jinro.sdl.hitachi.co.jp> From: Yoshinori HONDA Date: Tue, 28 Oct 2003 15:56:58 +0900 To: ietf-ltans@imc.org MIME-Version: 1.0 X-Mailer: AL-Mail32 Version 1.13 Content-Type: text/plain; charset=iso-2022-jp Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: $BK\B?$G$9!#(B [Tue, 28 Oct 2003 15:56:51 +0900] From owner-ietf-ltans Fri Oct 31 03:57:43 2003 Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9VBvhkT086510 for ; Fri, 31 Oct 2003 03:57:43 -0800 (PST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9VBvhEc086509 for ietf-ltans-bks; Fri, 31 Oct 2003 03:57:43 -0800 (PST) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from mucmx02.ixos.de (HOST.31.93.ixos.de [149.235.31.93]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9VBvekT086503 for ; Fri, 31 Oct 2003 03:57:41 -0800 (PST) (envelope-from tobias.gondrom@ixos.de) Received: from muc-imc.ixos.de (localhost [127.0.0.1]) by mucmx02.ixos.de (8.12.9/8.12.9) with ESMTP id h9VBvWEY003661; Fri, 31 Oct 2003 12:57:33 +0100 (MET) Received: by muc_mx.ixos.de with Internet Mail Service (5.5.2657.72) id ; Fri, 31 Oct 2003 12:58:38 +0100 Message-ID: <077097E85A6BD3119E910800062786A9094D517F@muc-mail5.ixos.de> From: Tobias Gondrom To: "'ietf-ltans@imc.org'" Cc: "Carl Wallace (E-mail)" Subject: LTANS - WG: last call for topics for the agenda for WG meeting at IETF conference 11/11/2003 Date: Fri, 31 Oct 2003 12:58:21 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2657.72) Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by above.proper.com id h9VBvgkT086505 Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Hello, as we already start with our first WG meeting on November 11, I would like to announce the last call for topics for the agenda. If you have something you want to adress or propose, please contact me and Carl until November 4th. (please also provide some detailed information about the motivation and the content of the presentation) To offer a first glance on the proposed agenda, here is the current preliminary version. Agenda: Role of the LTANS group within the Security Area (Russ Housley - 5 minutes) General introduction to technical, legal, other issues (Tobias Gondrom - 15 minutes) Review of LTANS charter (Tobias Gondrom/Carl Wallace - 10 minutes) Aerospace perspective (Jacqueline Knoll - 15 minutes) Draft requirements document (Carl Wallace - 15 minutes) Open Discussion of requirements (Group, Moderation: Tobias Gondrom - 15 minutes) ATS (Ulrich Pordesch - 15 minutes) TAP (Carl Wallace - 15 minutes) Open discussion on mechanisms (Group - 25 minutes) WG document production plan (Tobias Gondrom - 10 minutes) The final version of the agenda will be available on November 5th. Tobias Tobias Gondrom Senior Software Architect Engineering IXOS Software AG Technopark Neukeferloh Bretonischer Ring 12 D-85630 Grasbrunn/München E-Mail: Tobias.Gondrom@ixos.de WWW: http://www.ixos.com Tel: +49-89-4629-1816 Fax: +49-89-4629-33-1816 This eMail may contain confidential and/or privileged information. If you are not the intended recipient or have received this eMail in error, please notify the sender immediately and destroy this eMail. Any use, disclosure or distribution of the material in this eMail is strictly forbidden. Diese eMail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese eMail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese eMail. Jegliche Art der Verwendung, Vervielfältigung oder Weitergabe ist nicht gestattet. From owner-ietf-ltans Fri Oct 31 11:51:57 2003 Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9VJpvkT004406 for ; Fri, 31 Oct 2003 11:51:57 -0800 (PST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9VJpvps004405 for ietf-ltans-bks; Fri, 31 Oct 2003 11:51:57 -0800 (PST) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from host13.websitesource.com (host13.websitesource.com [209.239.35.152]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9VJpukT004392 for ; Fri, 31 Oct 2003 11:51:56 -0800 (PST) (envelope-from cwallace@orionsec.com) Received: from wcwallace (dpvc-138-88-161-20.res.east.verizon.net [138.88.161.20]) by host13.websitesource.com (8.12.10/8.12.10) with ESMTP id h9VJpvXB001006 for ; Fri, 31 Oct 2003 14:51:57 -0500 From: "Carl Wallace" To: Subject: draft requirements doc Date: Fri, 31 Oct 2003 14:51:52 -0500 Message-ID: <00d301c39fe8$7125d640$9a00a8c0@hq.orionsec.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00D4_01C39FBE.884FCE40" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Importance: Normal Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is a multi-part message in MIME format. ------=_NextPart_000_00D4_01C39FBE.884FCE40 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit An initial draft of the long-term archive service requirements document has been posted to http://ltans.edelweb.fr/draft-ietf-ltans-reqs-00.txt. Please review and post any comments to the list. We will discuss the draft at the WG session in Minneapolis next month. ------=_NextPart_000_00D4_01C39FBE.884FCE40 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Message
An = initial draft of=20 the long-term archive service requirements document has been posted to = http://ltan= s.edelweb.fr/draft-ietf-ltans-reqs-00.txt.   =20 Please review and post any comments to the list.  We will discuss = the draft=20 at the WG session in Minneapolis next month.
 
 
------=_NextPart_000_00D4_01C39FBE.884FCE40-- Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9VJpvkT004406 for ; Fri, 31 Oct 2003 11:51:57 -0800 (PST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9VJpvps004405 for ietf-ltans-bks; Fri, 31 Oct 2003 11:51:57 -0800 (PST) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from host13.websitesource.com (host13.websitesource.com [209.239.35.152]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9VJpukT004392 for ; Fri, 31 Oct 2003 11:51:56 -0800 (PST) (envelope-from cwallace@orionsec.com) Received: from wcwallace (dpvc-138-88-161-20.res.east.verizon.net [138.88.161.20]) by host13.websitesource.com (8.12.10/8.12.10) with ESMTP id h9VJpvXB001006 for ; Fri, 31 Oct 2003 14:51:57 -0500 From: "Carl Wallace" To: Subject: draft requirements doc Date: Fri, 31 Oct 2003 14:51:52 -0500 Message-ID: <00d301c39fe8$7125d640$9a00a8c0@hq.orionsec.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00D4_01C39FBE.884FCE40" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Importance: Normal Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is a multi-part message in MIME format. ------=_NextPart_000_00D4_01C39FBE.884FCE40 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit An initial draft of the long-term archive service requirements document has been posted to http://ltans.edelweb.fr/draft-ietf-ltans-reqs-00.txt. Please review and post any comments to the list. We will discuss the draft at the WG session in Minneapolis next month. ------=_NextPart_000_00D4_01C39FBE.884FCE40 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Message
An = initial draft of=20 the long-term archive service requirements document has been posted to = http://ltan= s.edelweb.fr/draft-ietf-ltans-reqs-00.txt.   =20 Please review and post any comments to the list.  We will discuss = the draft=20 at the WG session in Minneapolis next month.
 
 
------=_NextPart_000_00D4_01C39FBE.884FCE40-- Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9VBvhkT086510 for ; Fri, 31 Oct 2003 03:57:43 -0800 (PST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9VBvhEc086509 for ietf-ltans-bks; Fri, 31 Oct 2003 03:57:43 -0800 (PST) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from mucmx02.ixos.de (HOST.31.93.ixos.de [149.235.31.93]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9VBvekT086503 for ; Fri, 31 Oct 2003 03:57:41 -0800 (PST) (envelope-from tobias.gondrom@ixos.de) Received: from muc-imc.ixos.de (localhost [127.0.0.1]) by mucmx02.ixos.de (8.12.9/8.12.9) with ESMTP id h9VBvWEY003661; Fri, 31 Oct 2003 12:57:33 +0100 (MET) Received: by muc_mx.ixos.de with Internet Mail Service (5.5.2657.72) id ; Fri, 31 Oct 2003 12:58:38 +0100 Message-ID: <077097E85A6BD3119E910800062786A9094D517F@muc-mail5.ixos.de> From: Tobias Gondrom To: "'ietf-ltans@imc.org'" Cc: "Carl Wallace (E-mail)" Subject: LTANS - WG: last call for topics for the agenda for WG meeting at IETF conference 11/11/2003 Date: Fri, 31 Oct 2003 12:58:21 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2657.72) Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by above.proper.com id h9VBvgkT086505 Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Hello, as we already start with our first WG meeting on November 11, I would like to announce the last call for topics for the agenda. If you have something you want to adress or propose, please contact me and Carl until November 4th. (please also provide some detailed information about the motivation and the content of the presentation) To offer a first glance on the proposed agenda, here is the current preliminary version. Agenda: Role of the LTANS group within the Security Area (Russ Housley - 5 minutes) General introduction to technical, legal, other issues (Tobias Gondrom - 15 minutes) Review of LTANS charter (Tobias Gondrom/Carl Wallace - 10 minutes) Aerospace perspective (Jacqueline Knoll - 15 minutes) Draft requirements document (Carl Wallace - 15 minutes) Open Discussion of requirements (Group, Moderation: Tobias Gondrom - 15 minutes) ATS (Ulrich Pordesch - 15 minutes) TAP (Carl Wallace - 15 minutes) Open discussion on mechanisms (Group - 25 minutes) WG document production plan (Tobias Gondrom - 10 minutes) The final version of the agenda will be available on November 5th. Tobias Tobias Gondrom Senior Software Architect Engineering IXOS Software AG Technopark Neukeferloh Bretonischer Ring 12 D-85630 Grasbrunn/München E-Mail: Tobias.Gondrom@ixos.de WWW: http://www.ixos.com Tel: +49-89-4629-1816 Fax: +49-89-4629-33-1816 This eMail may contain confidential and/or privileged information. If you are not the intended recipient or have received this eMail in error, please notify the sender immediately and destroy this eMail. Any use, disclosure or distribution of the material in this eMail is strictly forbidden. Diese eMail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese eMail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese eMail. Jegliche Art der Verwendung, Vervielfältigung oder Weitergabe ist nicht gestattet. Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9S6uFI7019928 for ; Mon, 27 Oct 2003 22:56:15 -0800 (PST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9S6uFI8019926 for ietf-ltans-bks; Mon, 27 Oct 2003 22:56:15 -0800 (PST) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from hitpro.hitachi.co.jp (hitpro.hitachi.co.jp [133.145.224.7]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9S6uDI7019901 for ; Mon, 27 Oct 2003 22:56:13 -0800 (PST) (envelope-from y-honda@sdl.hitachi.co.jp) Received: from mc3.mcg.hitachi.co.jp by hitpro.hitachi.co.jp (8.12.9p1/eHI-hitpro) id h9S6uGmW026529; Tue, 28 Oct 2003 15:56:16 +0900 (JST) Received: (from root@localhost) by mc3.mcg.hitachi.co.jp (8.11.6+Sun/8.11.6) id h9S6uED08555 for ; Tue, 28 Oct 2003 15:56:14 +0900 (JST) Received: from unknown [192.168.2.1] by mc3.mcg.hitachi.co.jp with SMTP id RAA08550 ; Tue, 28 Oct 2003 15:56:14 +0900 Received: from navsg2.hitachi.co.jp by navsg2.hitachi.co.jp (8.9.3/3.7W-navsg2) id PAA25288; Tue, 28 Oct 2003 15:56:12 +0900 (JST) Received: from hsdlgw92.sdl.hitachi.co.jp ([133.144.7.20]) by navsg2.hitachi.co.jp (NAVGW 2.5.2.17) with SMTP id M2003102815561118087 for ; Tue, 28 Oct 2003 15:56:11 +0900 Received: from vgate2.sdl.hitachi.co.jp by hsdlgw92.sdl.hitachi.co.jp (8.9.3/3.7W01100113) id PAA26829; Tue, 28 Oct 2003 15:56:11 +0900 Received: from maila.sdl.hitachi.co.jp ([133.144.14.196]) by vgate2.sdl.hitachi.co.jp (SAVSMTP 3.1.1.32) with SMTP id M2003102815541911151 for ; Tue, 28 Oct 2003 15:54:19 +0900 Received: from jinro.sdl.hitachi.co.jp (ip06128.sdl.hitachi.co.jp [133.144.6.128]) by maila.sdl.hitachi.co.jp (8.9.3/3.7W02021014) with SMTP id PAA17139 for ; Tue, 28 Oct 2003 15:56:11 +0900 Message-Id: <200310280656.AA00285@jinro.sdl.hitachi.co.jp> From: Yoshinori HONDA Date: Tue, 28 Oct 2003 15:56:58 +0900 To: ietf-ltans@imc.org MIME-Version: 1.0 X-Mailer: AL-Mail32 Version 1.13 Content-Type: text/plain; charset=iso-2022-jp Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: $BK\B?$G$9!#(B [Tue, 28 Oct 2003 15:56:51 +0900] Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LEgkI7027194 for ; Tue, 21 Oct 2003 07:42:46 -0700 (PDT) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9LEgknI027193 for ietf-ltans-bks; Tue, 21 Oct 2003 07:42:46 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from host13.websitesource.com (host13.websitesource.com [209.239.35.152]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LEgjI7027186 for ; Tue, 21 Oct 2003 07:42:45 -0700 (PDT) (envelope-from cwallace@orionsec.com) Received: from wcwallace (dpvc-138-88-161-20.res.east.verizon.net [138.88.161.20]) by host13.websitesource.com (8.12.10/8.12.10) with ESMTP id h9LEggE9005537; Tue, 21 Oct 2003 10:42:42 -0400 From: "Carl Wallace" To: "'The IESG'" , Cc: "'T Gondrom'" , Subject: RE: WG Action: Long-Term Archive and Notary Services (ltans) Date: Tue, 21 Oct 2003 10:42:37 -0400 Message-ID: <002101c397e1$95a218d0$9a00a8c0@hq.orionsec.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Importance: Normal In-Reply-To: <200310211405.KAA18078@ietf.org> Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: All, please note the email address for me given below is incorrect. It should be cwallace@orionsec.com. Carl -----Original Message----- From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org] On Behalf Of The IESG Sent: Tuesday, October 21, 2003 10:05 AM To: IETF-Announce: Cc: Carl Wallace; T Gondrom; ietf-ltans@imc.org Subject: WG Action: Long-Term Archive and Notary Services (ltans) A new IETF working group has been formed in the Security Area. For additional information, please contact the Area Directors or the WG Chairs. Long-Term Archive and Notary Services (ltans) --------------------------------------------- Current Status: Active Working Group Chair(s): Carl Wallace T Gondrom Security Area Director(s): Russell Housley Steven Bellovin Security Area Advisor: Russell Housley Mailing Lists: General Discussion: ietf-ltans@imc.org To Subscribe: subscribe-ietf-ltans@imc.org In Body: subscribe Archive: http://www.imc.org/ietf-ltans Description of Working Group: In many scenarios, users need to be able to ensure and prove the existence and validity of data, especially digitally signed data, in a common and reproducible way over a long and possibly undetermined period of time. Cryptographic means are useful, but they do not provide the whole solution. For example, digital signatures (generated with a particular key size) might become weak over time due to improved computational capabilities, new cryptanalytic attacks might 'break' a digital signature algorithm, public key certificates might be revoked or expire, and so on. Complementary methods covering potential weaknesses are necessary. Long-term non-repudiation of digitally signed data is an important aspect of PKI-related standards. Standard mechanisms are needed to handle routine events, such as expiry of signer's public key certificate and expiry of trusted time stamp authority certificate. A single timestamp is not sufficient for this purpose. Additionally, the reliable preservation of content across change of formats, application of electronic notarizations, and subsequent notary services require standard solutions. The objective of the LTANS working group is to define requirements, data structures and protocols for the secure usage of the necessary archive and notary services. First, the requirements for the long-term archive will be collected. Based on that information we will develop a protocol to access archive services supplying long-term non-repudiation for signed documents and define common data structures and formats. Upon completion of the archive-related specifications, we will address 'notary services' in a similar way. The term 'notary services' is not clearly defined. The working group will determine which functions need standards, including transformation of documents from one format to another without losing the value of evidence, electronic notarization, and further verification of legal validity of signed documents. We will determine the needs via the requirements paper and act upon the results accordingly. Work done by the IETF Working Groups PKIX, S/MIME and XMLDSIG will be used as the basis to define those structures and protocols. For example, the Internet-Drafts 'Archive Time-Stamps Syntax (ATS)' and 'Trusted Archive Protocol (TAP)' and RFC 3029, 'Data Validation and Certificate Server Protocols (DVCS)', contain applicable concepts. Goals and Milestones: Nov 03 Initial requirements for long-term archive I-D Dec 03 Revised requirements for long-term archive I-D Dec 03 Initial data structures for long-term archive I-D Dec 03 Initial protocol for long-term archive I-D Feb 04 Last call requirements for long-term archive I-D Mar 04 Submit requirements for long-term archive to IESG as informational Mar 04 Revised data structures for long-term archive I-D Mar 04 Revised protocol for long-term archive I-D Apr 04 Last call data structures for long-term archive I-D Apr 04 Last call protocol for long-term archive I-D May 04 Submit data structures for long-term archive to IESG as proposed standard May 04 Submit protocol for long-term archive to IESG as proposed standard Jul 04 Initial requirements for notary services I-D Sep 04 Revised requirements for notary services I-D Nov 04 Last call requirements for notary services I-D Dec 04 Submit requirements for notary services to IESG as proposed standard Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LEReI7026601 for ; Tue, 21 Oct 2003 07:27:40 -0700 (PDT) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9LERe7C026600 for ietf-ltans-bks; Tue, 21 Oct 2003 07:27:40 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from edelweb.fr (edelweb.fr [212.234.46.16]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LERcI7026595 for ; Tue, 21 Oct 2003 07:27:39 -0700 (PDT) (envelope-from Peter.Sylvester@EdelWeb.fr) Received: from chandon.edelweb.fr (localhost.edelweb.fr [127.0.0.1]) by edelweb.fr with ESMTP id QAA08874 for ; Tue, 21 Oct 2003 16:27:38 +0200 (MET DST) Received: from chandon.edelweb.fr (chandon.edelweb.fr [193.51.14.162]) by edelweb.fr (nospam/1.7); Tue, 21 Oct 2003 16:27:39 +0200 (MET DST) Received: (from peter@localhost) by chandon.edelweb.fr (8.11.7p1+Sun/8.11.7) id h9LERbv03118 for ietf-ltans@imc.org; Tue, 21 Oct 2003 16:27:37 +0200 (MEST) Date: Tue, 21 Oct 2003 16:27:37 +0200 (MEST) From: Peter Sylvester Message-Id: <200310211427.h9LERbv03118@chandon.edelweb.fr> To: ietf-ltans@imc.org Subject: document repository - http://ltans.edelweb.fr X-Sun-Charset: US-ASCII Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is to inform you that in agreement with the chairmen the site http://ltans.edelweb.fr will contain all relevant documents concerning the activities of the groups. Best effort will be made to keep the contents up to date. Peter Sylvester Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LE5YI7025752 for ; Tue, 21 Oct 2003 07:05:34 -0700 (PDT) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.10/8.12.9/Submit) id h9LE5YwP025751 for ietf-ltans-bks; Tue, 21 Oct 2003 07:05:34 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from ietf.org (odin.ietf.org [132.151.1.176]) by above.proper.com (8.12.10/8.12.8) with ESMTP id h9LE5WI7025746 for ; Tue, 21 Oct 2003 07:05:33 -0700 (PDT) (envelope-from dinaras@cnri.reston.va.us) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA18078; Tue, 21 Oct 2003 10:05:12 -0400 (EDT) Message-Id: <200310211405.KAA18078@ietf.org> From: The IESG To: IETF-Announce: ; Cc: Carl Wallace , T Gondrom , ietf-ltans@imc.org Subject: WG Action: Long-Term Archive and Notary Services (ltans) Date: Tue, 21 Oct 2003 10:05:12 -0400 Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: A new IETF working group has been formed in the Security Area. For additional information, please contact the Area Directors or the WG Chairs. Long-Term Archive and Notary Services (ltans) --------------------------------------------- Current Status: Active Working Group Chair(s): Carl Wallace T Gondrom Security Area Director(s): Russell Housley Steven Bellovin Security Area Advisor: Russell Housley Mailing Lists: General Discussion: ietf-ltans@imc.org To Subscribe: subscribe-ietf-ltans@imc.org In Body: subscribe Archive: http://www.imc.org/ietf-ltans Description of Working Group: In many scenarios, users need to be able to ensure and prove the existence and validity of data, especially digitally signed data, in a common and reproducible way over a long and possibly undetermined period of time. Cryptographic means are useful, but they do not provide the whole solution. For example, digital signatures (generated with a particular key size) might become weak over time due to improved computational capabilities, new cryptanalytic attacks might 'break' a digital signature algorithm, public key certificates might be revoked or expire, and so on. Complementary methods covering potential weaknesses are necessary. Long-term non-repudiation of digitally signed data is an important aspect of PKI-related standards. Standard mechanisms are needed to handle routine events, such as expiry of signer's public key certificate and expiry of trusted time stamp authority certificate. A single timestamp is not sufficient for this purpose. Additionally, the reliable preservation of content across change of formats, application of electronic notarizations, and subsequent notary services require standard solutions. The objective of the LTANS working group is to define requirements, data structures and protocols for the secure usage of the necessary archive and notary services. First, the requirements for the long-term archive will be collected. Based on that information we will develop a protocol to access archive services supplying long-term non-repudiation for signed documents and define common data structures and formats. Upon completion of the archive-related specifications, we will address 'notary services' in a similar way. The term 'notary services' is not clearly defined. The working group will determine which functions need standards, including transformation of documents from one format to another without losing the value of evidence, electronic notarization, and further verification of legal validity of signed documents. We will determine the needs via the requirements paper and act upon the results accordingly. Work done by the IETF Working Groups PKIX, S/MIME and XMLDSIG will be used as the basis to define those structures and protocols. For example, the Internet-Drafts 'Archive Time-Stamps Syntax (ATS)' and 'Trusted Archive Protocol (TAP)' and RFC 3029, 'Data Validation and Certificate Server Protocols (DVCS)', contain applicable concepts. Goals and Milestones: Nov 03 Initial requirements for long-term archive I-D Dec 03 Revised requirements for long-term archive I-D Dec 03 Initial data structures for long-term archive I-D Dec 03 Initial protocol for long-term archive I-D Feb 04 Last call requirements for long-term archive I-D Mar 04 Submit requirements for long-term archive to IESG as informational Mar 04 Revised data structures for long-term archive I-D Mar 04 Revised protocol for long-term archive I-D Apr 04 Last call data structures for long-term archive I-D Apr 04 Last call protocol for long-term archive I-D May 04 Submit data structures for long-term archive to IESG as proposed standard May 04 Submit protocol for long-term archive to IESG as proposed standard Jul 04 Initial requirements for notary services I-D Sep 04 Revised requirements for notary services I-D Nov 04 Last call requirements for notary services I-D Dec 04 Submit requirements for notary services to IESG as proposed standard Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h99HQgKP078078 for ; Thu, 9 Oct 2003 10:26:42 -0700 (PDT) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.9/8.12.9/Submit) id h99HQgxF078077 for ietf-ltans-bks; Thu, 9 Oct 2003 10:26:42 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from vsmtp2.tin.it (vsmtp2.tin.it [212.216.176.222]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h99HQdKP078057 for ; Thu, 9 Oct 2003 10:26:40 -0700 (PDT) (envelope-from tho@congo.homeunix.net) Received: from congo (80.117.16.115) by vsmtp2.tin.it (7.0.019) id 3F85701A00022BAD; Thu, 9 Oct 2003 19:25:26 +0200 Received: (nullmailer pid 6215 invoked by uid 1001); Thu, 09 Oct 2003 17:25:11 -0000 Date: Thu, 9 Oct 2003 19:25:10 +0200 From: Thomas Fossati To: IESG Cc: LTANS Subject: WG Review: Long-Term Archive and Notary Services (ltans) Message-ID: <20031009192510.A6134@congo.homeunix.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i X-Operating-System: FreeBSD Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Hello, IETF seems to me the most proper venue to host LTANS wg, and I'd like to see it starting as quick as possible. Some sparse reasons follow: - The subject matter is 'hot' but requisites are not completely clear. - At present there is no open forum where to discuss the long-term non-repudiation topic and propose technical solutions (as far as I can tell). - LTANS would boost some very interesting work items started by the PKIX wg which, for one reason or another, has not reached full maturity/deployment. - Last but not least, the company I work with is going to invest in the long-term archival area for the next 2 years, and they know that an open(ly discussed) and standard interface is very desirable. Thomas Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h97GsJKP035313 for ; Tue, 7 Oct 2003 09:54:19 -0700 (PDT) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.9/8.12.9/Submit) id h97GsJf0035312 for ietf-ltans-bks; Tue, 7 Oct 2003 09:54:19 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from ietf.org (odin.ietf.org [132.151.1.176]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h97GsFKP035307 for ; Tue, 7 Oct 2003 09:54:18 -0700 (PDT) (envelope-from dinaras@cnri.reston.va.us) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA11466; Tue, 7 Oct 2003 12:54:04 -0400 (EDT) Message-Id: <200310071654.MAA11466@ietf.org> From: The IESG To: IETF-Announce: ; Cc: new-work@ietf.org, ietf-ltans@imc.org Subject: WG Review: Long-Term Archive and Notary Services (ltans) Date: Tue, 07 Oct 2003 12:54:03 -0400 Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: A new IETF working group has been proposed in the Security Area. The IESG has not made any determination as yet. The following description was submitted, and is provided for informational purposes only. Please send your comments to the IESG mailing list (iesg@ietf.org) by October 14th. Long-Term Archive and Notary Services (ltans) --------------------------------------------- Current Status: Proposed Working Group DESCRIPTION OF WORKING GROUP: In many scenarios, users need to be able to ensure and prove the existence and validity of data, especially digitally signed data, in a common and reproducible way over a long and possibly undetermined period of time. Cryptographic means are useful, but they do not provide the whole solution. For example, digital signatures (generated with a particular key size) might become weak over time due to improved computational capabilities, new cryptanalytic attacks might "break" a digital signature algorithm, public key certificates might be revoked or expire, and so on. Complementary methods covering potential weaknesses are necessary. Long-term non-repudiation of digitally signed data is an important aspect of PKI-related standards. Standard mechanisms are needed to handle routine events, such as expiry of signer's public key certificate and expiry of trusted time stamp authority certificate. A single timestamp is not sufficient for this purpose. Additionally, the reliable preservation of content across change of formats, application of electronic notarizations, and subsequent notary services require standard solutions. The objective of the LTANS working group is to define requirements, data structures and protocols for the secure usage of the necessary archive and notary services. First, the requirements for the long-term archive will be collected. Based on that information we will develop a protocol to access archive services supplying long-term non-repudiation for signed documents and define common data structures and formats. Upon completion of the archive-related specifications, we will address 'notary services' in a similar way. The term 'notary services' is not clearly defined. The working group will determine which functions need standards, including transformation of documents from one format to another without losing the value of evidence, electronic notarization, and further verification of legal validity of signed documents. We will determine the needs via the requirements paper and act upon the results accordingly. Work done by the IETF Working Groups PKIX, S/MIME and XMLDSIG will be used as the basis to define those structures and protocols. For example, the Internet-Drafts "Archive Time-Stamps Syntax (ATS)" and "Trusted Archive Protocol (TAP)" and RFC 3029, "Data Validation and Certificate Server Protocols (DVCS)", contain applicable concepts.