{"action":"created","comment":{"url":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/comments/68628996","id":68628996,"diff_hunk":"@@ -1415,10 +1430,7 @@ but it is expected there will be a variety.\n                 Remove the Transparency Information extension described in <xref target=\"x509v3_transinfo_extension\"/>\n               </t>\n               <t>\n-                Remove the Redacted Labels extension described in <xref target=\"redaction_extension\"/>\n-              </t>\n-              <t>\n-                Replace leftmost labels of each DNS-ID with <spanx style=\"verb\">?</spanx>, based on the INTEGER value corresponding to that DNS-ID in the extension.\n+                If the <xref target=\"redacted_san_extension\">Redacted SAN</xref> extension is present, remove the subjectAltName extension.","path":"rfc6962-bis.xml","position":47,"original_position":47,"commit_id":"29d4870d44eb0b9897f3a236fed59d2404211ba1","original_commit_id":"29d4870d44eb0b9897f3a236fed59d2404211ba1","user":{"login":"AGWA","id":321605,"avatar_url":"https://avatars.githubusercontent.com/u/321605?v=3","gravatar_id":"","url":"https://api.github.com/users/AGWA","html_url":"https://github.com/AGWA","followers_url":"https://api.github.com/users/AGWA/followers","following_url":"https://api.github.com/users/AGWA/following{/other_user}","gists_url":"https://api.github.com/users/AGWA/gists{/gist_id}","starred_url":"https://api.github.com/users/AGWA/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AGWA/subscriptions","organizations_url":"https://api.github.com/users/AGWA/orgs","repos_url":"https://api.github.com/users/AGWA/repos","events_url":"https://api.github.com/users/AGWA/events{/privacy}","received_events_url":"https://api.github.com/users/AGWA/received_events","type":"User","site_admin":false},"body":"I agree there should be a description.  I also think that at least some amount of verification should be required of clients.  We don't want to allow a pre-certificate for `?.example.com` to be used with `www.example.org` for instance.\r\n\r\nHere's some suggested text:\r\n\r\n> If the Redacted SAN extension is present, TLS clients MUST check that the SAN extension is present, that the SAN extension contains the same number of identifiers as the Redacted SAN extension, and that each identifier in the SAN extension has a matching identifier at the same position in the Redacted SAN extension.  Two identifiers are matching if either:\r\n>\r\n> * The two identifiers are identical; or,\r\n>\r\n> * Both identifiers are DNS names, have the same number of labels, and each label in the SAN identifier has a matching label at the same position in the Redacted SAN identifier.  Two DNS labels are matching if either:\r\n>\r\n>   * The two labels are identical; or,\r\n>\r\n>   * The label from the the Redacted SAN identifier is equal to REDACT(label from SAN identifier) [cross-reference to redacting_labels]\r\n>\r\n> If any of these checks fail, the certificate MUST NOT be considered compliant.","created_at":"2016-06-27T18:22:22Z","updated_at":"2016-06-27T18:22:22Z","html_url":"https://github.com/google/certificate-transparency-rfcs/pull/175#discussion_r68628996","pull_request_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/175","_links":{"self":{"href":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/comments/68628996"},"html":{"href":"https://github.com/google/certificate-transparency-rfcs/pull/175#discussion_r68628996"},"pull_request":{"href":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/175"}}},"pull_request":{"url":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/175","id":74609971,"html_url":"https://github.com/google/certificate-transparency-rfcs/pull/175","diff_url":"https://github.com/google/certificate-transparency-rfcs/pull/175.diff","patch_url":"https://github.com/google/certificate-transparency-rfcs/pull/175.patch","issue_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/issues/175","number":175,"state":"open","locked":false,"title":"First stab at simplifed redaction.","user":{"login":"eranmes","id":1072163,"avatar_url":"https://avatars.githubusercontent.com/u/1072163?v=3","gravatar_id":"","url":"https://api.github.com/users/eranmes","html_url":"https://github.com/eranmes","followers_url":"https://api.github.com/users/eranmes/followers","following_url":"https://api.github.com/users/eranmes/following{/other_user}","gists_url":"https://api.github.com/users/eranmes/gists{/gist_id}","starred_url":"https://api.github.com/users/eranmes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eranmes/subscriptions","organizations_url":"https://api.github.com/users/eranmes/orgs","repos_url":"https://api.github.com/users/eranmes/repos","events_url":"https://api.github.com/users/eranmes/events{/privacy}","received_events_url":"https://api.github.com/users/eranmes/received_events","type":"User","site_admin":false},"body":"I'm sure it can be articulated in a better way. ","created_at":"2016-06-21T13:19:54Z","updated_at":"2016-06-27T18:22:22Z","closed_at":null,"merged_at":null,"merge_commit_sha":"5802cf1f3372fc4b2b0e2204804eb2af7e672cd1","assignee":{"login":"robstradling","id":958624,"avatar_url":"https://avatars.githubusercontent.com/u/958624?v=3","gravatar_id":"","url":"https://api.github.com/users/robstradling","html_url":"https://github.com/robstradling","followers_url":"https://api.github.com/users/robstradling/followers","following_url":"https://api.github.com/users/robstradling/following{/other_user}","gists_url":"https://api.github.com/users/robstradling/gists{/gist_id}","starred_url":"https://api.github.com/users/robstradling/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robstradling/subscriptions","organizations_url":"https://api.github.com/users/robstradling/orgs","repos_url":"https://api.github.com/users/robstradling/repos","events_url":"https://api.github.com/users/robstradling/events{/privacy}","received_events_url":"https://api.github.com/users/robstradling/received_events","type":"User","site_admin":false},"assignees":[{"login":"robstradling","id":958624,"avatar_url":"https://avatars.githubusercontent.com/u/958624?v=3","gravatar_id":"","url":"https://api.github.com/users/robstradling","html_url":"https://github.com/robstradling","followers_url":"https://api.github.com/users/robstradling/followers","following_url":"https://api.github.com/users/robstradling/following{/other_user}","gists_url":"https://api.github.com/users/robstradling/gists{/gist_id}","starred_url":"https://api.github.com/users/robstradling/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robstradling/subscriptions","organizations_url":"https://api.github.com/users/robstradling/orgs","repos_url":"https://api.github.com/users/robstradling/repos","events_url":"https://api.github.com/users/robstradling/events{/privacy}","received_events_url":"https://api.github.com/users/robstradling/received_events","type":"User","site_admin":false}],"milestone":null,"commits_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/175/commits","review_comments_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/175/comments","review_comment_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/comments{/number}","comments_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/issues/175/comments","statuses_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/statuses/29d4870d44eb0b9897f3a236fed59d2404211ba1","head":{"label":"eranmes:simplified_redaction","ref":"simplified_redaction","sha":"29d4870d44eb0b9897f3a236fed59d2404211ba1","user":{"login":"eranmes","id":1072163,"avatar_url":"https://avatars.githubusercontent.com/u/1072163?v=3","gravatar_id":"","url":"https://api.github.com/users/eranmes","html_url":"https://github.com/eranmes","followers_url":"https://api.github.com/users/eranmes/followers","following_url":"https://api.github.com/users/eranmes/following{/other_user}","gists_url":"https://api.github.com/users/eranmes/gists{/gist_id}","starred_url":"https://api.github.com/users/eranmes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eranmes/subscriptions","organizations_url":"https://api.github.com/users/eranmes/orgs","repos_url":"https://api.github.com/users/eranmes/repos","events_url":"https://api.github.com/users/eranmes/events{/privacy}","received_events_url":"https://api.github.com/users/eranmes/received_events","type":"User","site_admin":false},"repo":{"id":21980702,"name":"certificate-transparency-rfcs","full_name":"eranmes/certificate-transparency-rfcs","owner":{"login":"eranmes","id":1072163,"avatar_url":"https://avatars.githubusercontent.com/u/1072163?v=3","gravatar_id":"","url":"https://api.github.com/users/eranmes","html_url":"https://github.com/eranmes","followers_url":"https://api.github.com/users/eranmes/followers","following_url":"https://api.github.com/users/eranmes/following{/other_user}","gists_url":"https://api.github.com/users/eranmes/gists{/gist_id}","starred_url":"https://api.github.com/users/eranmes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eranmes/subscriptions","organizations_url":"https://api.github.com/users/eranmes/orgs","repos_url":"https://api.github.com/users/eranmes/repos","events_url":"https://api.github.com/users/eranmes/events{/privacy}","received_events_url":"https://api.github.com/users/eranmes/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/eranmes/certificate-transparency-rfcs","description":"Certificate Transparency RFC","fork":true,"url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs","forks_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/forks","keys_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/teams","hooks_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/hooks","issue_events_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/issues/events{/number}","events_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/events","assignees_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/assignees{/user}","branches_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/branches{/branch}","tags_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/tags","blobs_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/git/refs{/sha}","trees_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/statuses/{sha}","languages_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/languages","stargazers_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/stargazers","contributors_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/contributors","subscribers_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/subscribers","subscription_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/subscription","commits_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/commits{/sha}","git_commits_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/git/commits{/sha}","comments_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/comments{/number}","issue_comment_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/issues/comments{/number}","contents_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/contents/{+path}","compare_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/merges","archive_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/downloads","issues_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/issues{/number}","pulls_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/pulls{/number}","milestones_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/milestones{/number}","notifications_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/labels{/name}","releases_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/releases{/id}","deployments_url":"https://api.github.com/repos/eranmes/certificate-transparency-rfcs/deployments","created_at":"2014-07-18T13:12:17Z","updated_at":"2016-01-28T10:47:56Z","pushed_at":"2016-06-23T15:27:10Z","git_url":"git://github.com/eranmes/certificate-transparency-rfcs.git","ssh_url":"git@github.com:eranmes/certificate-transparency-rfcs.git","clone_url":"https://github.com/eranmes/certificate-transparency-rfcs.git","svn_url":"https://github.com/eranmes/certificate-transparency-rfcs","homepage":"http://www.certificate-transparency.org/","size":1688,"stargazers_count":0,"watchers_count":0,"language":"Python","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"google:master","ref":"master","sha":"7ffc0ba87c33ad511c8583f6df673815f605d5cc","user":{"login":"google","id":1342004,"avatar_url":"https://avatars.githubusercontent.com/u/1342004?v=3","gravatar_id":"","url":"https://api.github.com/users/google","html_url":"https://github.com/google","followers_url":"https://api.github.com/users/google/followers","following_url":"https://api.github.com/users/google/following{/other_user}","gists_url":"https://api.github.com/users/google/gists{/gist_id}","starred_url":"https://api.github.com/users/google/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/google/subscriptions","organizations_url":"https://api.github.com/users/google/orgs","repos_url":"https://api.github.com/users/google/repos","events_url":"https://api.github.com/users/google/events{/privacy}","received_events_url":"https://api.github.com/users/google/received_events","type":"Organization","site_admin":false},"repo":{"id":20069953,"name":"certificate-transparency-rfcs","full_name":"google/certificate-transparency-rfcs","owner":{"login":"google","id":1342004,"avatar_url":"https://avatars.githubusercontent.com/u/1342004?v=3","gravatar_id":"","url":"https://api.github.com/users/google","html_url":"https://github.com/google","followers_url":"https://api.github.com/users/google/followers","following_url":"https://api.github.com/users/google/following{/other_user}","gists_url":"https://api.github.com/users/google/gists{/gist_id}","starred_url":"https://api.github.com/users/google/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/google/subscriptions","organizations_url":"https://api.github.com/users/google/orgs","repos_url":"https://api.github.com/users/google/repos","events_url":"https://api.github.com/users/google/events{/privacy}","received_events_url":"https://api.github.com/users/google/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/google/certificate-transparency-rfcs","description":"Certificate Transparency RFC","fork":false,"url":"https://api.github.com/repos/google/certificate-transparency-rfcs","forks_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/forks","keys_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/teams","hooks_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/hooks","issue_events_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/issues/events{/number}","events_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/events","assignees_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/assignees{/user}","branches_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/branches{/branch}","tags_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/tags","blobs_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/git/refs{/sha}","trees_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/statuses/{sha}","languages_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/languages","stargazers_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/stargazers","contributors_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/contributors","subscribers_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/subscribers","subscription_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/subscription","commits_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/commits{/sha}","git_commits_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/git/commits{/sha}","comments_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/comments{/number}","issue_comment_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/issues/comments{/number}","contents_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/contents/{+path}","compare_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/merges","archive_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/downloads","issues_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/issues{/number}","pulls_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls{/number}","milestones_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/milestones{/number}","notifications_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/labels{/name}","releases_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/releases{/id}","deployments_url":"https://api.github.com/repos/google/certificate-transparency-rfcs/deployments","created_at":"2014-05-22T17:15:59Z","updated_at":"2016-06-23T23:07:18Z","pushed_at":"2016-06-27T17:37:44Z","git_url":"git://github.com/google/certificate-transparency-rfcs.git","ssh_url":"git@github.com:google/certificate-transparency-rfcs.git","clone_url":"https://github.com/google/certificate-transparency-rfcs.git","svn_url":"https://github.com/google/certificate-transparency-rfcs","homepage":"http://www.certificate-transparency.org/","size":1812,"stargazers_count":40,"watchers_count":40,"language":"Python","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":19,"mirror_url":null,"open_issues_count":5,"forks":19,"open_issues":5,"watchers":40,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/175"},"html":{"href":"https://github.com/google/certificate-transparency-rfcs/pull/175"},"issue":{"href":"https://api.github.com/repos/google/certificate-transparency-rfcs/issues/175"},"comments":{"href":"https://api.github.com/repos/google/certificate-transparency-rfcs/issues/175/comments"},"review_comments":{"href":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/175/comments"},"review_comment":{"href":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/google/certificate-transparency-rfcs/pulls/175/commits"},"statuses":{"href":"https://api.github.com/repos/google/certificate-transparency-rfcs/statuses/29d4870d44eb0b9897f3a236fed59d2404211ba1"}}}}
{"actor":{"display_login":"AGWA"}}