Errata Search
RFC Number:		Errata ID:
Source of RFC		Status:	All/Any Verified+Reported Verified Reported Held for Document Update Rejected
Area Acronym:	All/Any app art gen int ops rai rtg sec tsv wit	Type:	All/Any Editorial Technical
WG Acronym:		Submitter Name:
Other:	All/Any IAB INDEPENDENT IRTF Legacy Editorial	Date Submitted:
Summary Table Full Records

RFC 8894, "Simple Certificate Enrolment Protocol", September 2020

Source of RFC: IETF - NON WORKING GROUP
Area Assignment: sec
See Also: RFC 8894 w/ inline errata

---

Errata ID: 8247
Status: Verified
Type: Technical
Publication Format(s) : TEXT, PDF, HTML
Reported By: Daniel Van Geest
Date Reported: 2025-01-10
Verifier Name: Deb Cooley
Date Verified: 2025-01-17

Throughout the document, when it says:

authenticated attributes

and

authenticatedAttributes

It should say:

signed attributes

and

signedAttrs

Notes:

Throughout the document it refers to "authenticated attributes" and the "authenticatedAttributes" set. However, SCEP uses the SignedData content type which doesn't have an authenticatedAttributes field (other content types do have this field, e.g. the RFC 2630 version of AuthenticatedData). It should refer to signed attributes instead. This aligns with Figure 6 which includes the signerInfo.signedAttrs field.

Note, if this errata is correct then errata 8245 is incorrect.

Report New Errata