<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-NZ" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Dina,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">I fully concur with your rationale. Getting something working encourages others to get their platform working. And gives a public comparison point.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">We are still looking for an IMAP/POP Open Source application that is EAI ready.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">D<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> UA-discuss <ua-discuss-bounces@icann.org>
<b>On Behalf Of </b>Dmitry Belyavsky<br>
<b>Sent:</b> Sunday, 15 July 2018 5:36 AM<br>
<b>To:</b> icann@thomascovenant.org<br>
<b>Cc:</b> ua-discuss@icann.org<br>
<b>Subject:</b> Re: [UA-discuss] Implementing RFC 8398<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Hello,<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">the initial diff providing some (poor) visualization can be found here:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://github.com/openssl/openssl/compare/master...beldmit:rfc8398">https://github.com/openssl/openssl/compare/master...beldmit:rfc8398</a><o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Tue, Jun 19, 2018 at 4:01 PM, Jalkanen Dina Solveig <<a href="mailto:icann@thomascovenant.org" target="_blank">icann@thomascovenant.org</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<p class="MsoNormal">Hey Dmitry,<br>
<br>
Implementing RFC 8398 support in OpenSSL is a good first move for the adoption of any TLS specification. Unfortunately, to the best of my knowledge, most major mail clients do not use OpenSSL.<br>
For instance, Thunderbird uses NSS, Android's crypto services are underpinned by BoringSSL as of Android 6.0, and Microsoft Outlook uses Microsoft's own libraries.<br>
As such, the actual impact of getting EAI X.509 certificates usable on the general internet via OpenSSL support is somewhat minimal.<br>
<br>
That being said, providing a known good reference implementation has value, especially when combined with solid test cases and examples.<br>
Looking further, since OpenSSL's projects BoringSSL and LibreSSL could directly benefit from this work, it's likely to be an excellent point to begin wider spread deployment and support of RFC 8398.<br>
<br>
Given that just enabling IDNs and EAIs to work with email is one aspect of UA work, having PKI simply “just work” with common tools and frameworks is extremely important.<br>
Would be happy to be of help. o/<br>
<br>
BR,<br>
Thomas<br>
<br>
***<br>
Thomas aka Jalkanen Dina Solveig<br>
Friendly geek in Amsterdam Chaos<br>
<a href="https://wiki.techinc.nl/index.php/User:Thomascovenant" target="_blank">https://wiki.techinc.nl/index.php/User:Thomascovenant</a><o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
On 19.06.2018 10:23, Dmitry Belyavsky wrote:<br>
> Hello,<br>
><br>
> Some time ago IETF has finalized RFC 8398 (Internationalized Email<br>
> Addresses in X.509 Certificates). It describes using EAI in X.509<br>
> certificates, validation rules of such certificates etc.<br>
><br>
> There are a lot of standards where ASCII-only email is the only<br>
> option, and new standards allowing the EAI are just appearing. The<br>
> X.509 certificates and email in it is just one such a place. <br>
><br>
> I'm familiar with OpenSSL enough to implement the RFC 8398<br>
> (Internationalized Email Addresses in X.509 Certificates) standard in<br>
> OpenSSL code, if the UA community is interested enough in it.<br>
><br>
> Thank you!<br>
> -- <br>
> SY, Dmitry Belyavsky<br>
<br>
<o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><br>
<br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<p class="MsoNormal">SY, Dmitry Belyavsky<o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>