Should CCC get an PEN / OID prefix from IANA

[dthaler]

This question came up in SIG-Attestation discussion 2022/03/29, where it could be used for things like X.509 extensions.

https://pen.iana.org/pen/PenApplication.page is the application process (30 days, no cost), and there's lots of other Foundations and Consortiums on the list who have done it, at https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers

[spjohnso]

Since we are not a specification organisation, what objects are we needing to define that's specific to our org?

[dthaler]

The question came up in the CCC-Attestation sig since some implementations were looking at X.509 extensions. You can do custom extensions if you are an "enterprise" but unlike member companies, projects aren't enterprises per se. So if any CCC project wants one, we would need a CCC enterprise number. It's an open question whether we actually want projects to do custom extensions etc., so filed this as a question to track.