<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><blockquote type="cite" class="">On 10 Sep 2020 22:47:41 +0300, Rémi Denis-Courmont wrote:<br class=""></blockquote><blockquote type="cite" class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>Hi,<br class=""><br class="">Le torstaina 10. syyskuuta 2020, 21.03.00 EEST Nick Briggs a écrit :<br class=""><blockquote type="cite" style="font-family: Monaco; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">RFC 8882, DNS-Based Service Discovery (DNS-SD) Privacy and Security<br class="">Requirements, was issued today and is relevant to this discussion.<br class=""></blockquote><br class="">Thanks for bringing this up.<br class=""><br class="">I am more concerned about authenticating DNS-SD announces and binding them to <br class="">an x509 certificate and a TLS ServerHello than with the privacy aspects, <br class="">though.<br class=""><br class="">Is there a standard way to pass the advertiser identity (other than matching <br class="">the CommonName)?<br class=""></blockquote><br class="">You might start with RFC 6125 (from 2011?), which goes by the rather long title of<br class="">"Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)" Ref: <a href="https://tools.ietf.org/html/rfc6125" class="">https://tools.ietf.org/html/rfc6125</a><div class=""><br class=""></div><div class="">... and then perhaps look at some of the references from RFC 8882 to authentication schemes (e.g., RFC5054, RFC8235, RFC8236) to see if the properties of those schemes match up with your desired behavior and user experience for a VLC remote control app.<div class=""><br class=""></div><div class="">-- Nick Briggs<br class=""><br class=""><blockquote type="cite" class=""><br class="">-- <br class="">Реми Дёни-Курмон<br class=""><a href="http://www.remlab.net/" class="">http://www.remlab.net/</a><br class=""><br class=""></blockquote><br class=""></div></div></body></html>