Re: [Acme] Happy Birthday ACME!

Yoav Nir <ynir.ietf@gmail.com> Tue, 12 March 2024 21:32 UTC

Return-Path: <ynir.ietf@gmail.com>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B46C8C14E513 for <acme@ietfa.amsl.com>; Tue, 12 Mar 2024 14:32:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.103
X-Spam-Level:
X-Spam-Status: No, score=-2.103 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QwsyI9K55dwr for <acme@ietfa.amsl.com>; Tue, 12 Mar 2024 14:32:47 -0700 (PDT)
Received: from mail-wm1-x329.google.com (mail-wm1-x329.google.com [IPv6:2a00:1450:4864:20::329]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6081AC14F6AC for <acme@ietf.org>; Tue, 12 Mar 2024 14:32:47 -0700 (PDT)
Received: by mail-wm1-x329.google.com with SMTP id 5b1f17b1804b1-4132cbe26a9so14764585e9.0 for <acme@ietf.org>; Tue, 12 Mar 2024 14:32:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1710279166; x=1710883966; darn=ietf.org; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:from:to:cc:subject:date:message-id:reply-to; bh=lz+f/YgG5xeW3PEi5gVb4d3EBpb9XmT11UpsPJYQsWg=; b=GddB//8Den8IWidQgp8+MtrhUecsVt14yrBzGx5M+pN051IwbIk+bUDjGvQ33mgL9x jvznoGRGUpxTd0EUT3ZrhWIqog9c/vYYe3Nf343vKn3NvUZBCH/AwdHP7LMZDI/Astyk YS2rmnFhpEtH7fp6Quj3MFv4q2UXicfJBC/BrsElO0Xz+uMcaH58bXUMCNPWqvnsuPCn S1DLsCPpWRsAK7Kcq03CCet8AHYpEEwZVR0QjgMI50DAwtohlRD88eHJdNjbf+Bd2Rz5 gPnwof+dG6xVdxC6b98cb902ArTFuEhUYmP02MQLTJWfZcX6fE8ragAe3svq8NhZKKeJ J9eg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1710279166; x=1710883966; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=lz+f/YgG5xeW3PEi5gVb4d3EBpb9XmT11UpsPJYQsWg=; b=MkILCI09GWCYMB+BMgThfZ5FavE10cROYsIfOtNOIb7g+HApC4jxVCyxuP+6//5LQX eCR8U0vLAXX7TTlZP06qr4L5uLbyU4umQNQGodeHJKTtSJhcbO/iqPCr9xrelj3Cpsfn x0jiISOQkvNCdWwLSI2B0btSbIltuHg7YQ55YJPWhLCWirNuwUjitiUblpmz9PIKtStW 2cC0iIokjkA98pX+GzUKFO4g9lS0+4NSQdUIlV7YE14QjeSD8enNeuYwlfhgaCdhxPQ8 e55yKCRCeAWGA744zi9Ul8agv0DVi2qsl5U31dtt7qWAPIboFLV8ZPm7Ek2P2drMOTjy medQ==
X-Gm-Message-State: AOJu0YwtV82DqtvR6hfytLZnnNmUaP8MjZAz0nBJopFElRBPcZb9aGSH 0vdZdZ9E1cPcpTOxyZF5C6nxrj7A1PM6dk39rBxB9WjGglTI98j7hP1xxIPo8c8cFA==
X-Google-Smtp-Source: AGHT+IEV2Xb0MUmeAwMwcf/L0l73dld+TgKlV9EBHtqFggN8aL2WFeaHNQpY41vHokTRkZARA73yeQ==
X-Received: by 2002:a05:600c:1e19:b0:413:2d05:7de3 with SMTP id ay25-20020a05600c1e1900b004132d057de3mr2247192wmb.3.1710279165438; Tue, 12 Mar 2024 14:32:45 -0700 (PDT)
Received: from smtpclient.apple (84.94.37.215.cable.012.net.il. [84.94.37.215]) by smtp.gmail.com with ESMTPSA id f13-20020adfb60d000000b0033e43756d11sm9956337wre.85.2024.03.12.14.32.44 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 12 Mar 2024 14:32:45 -0700 (PDT)
From: Yoav Nir <ynir.ietf@gmail.com>
Message-Id: <0827828D-4128-44F2-BC96-7CE7E7B3DEB7@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_9236E9BA-FA48-4451-BC63-76A57CC7AEA0"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.200.91.1.1\))
Date: Tue, 12 Mar 2024 23:32:34 +0200
In-Reply-To: <MW4PR17MB4729CE648A221338301FF016AA242@MW4PR17MB4729.namprd17.prod.outlook.com>
Cc: "acme@ietf.org" <acme@ietf.org>
To: Rob Stradling <rob=40sectigo.com@dmarc.ietf.org>
References: <MW4PR17MB4729CE648A221338301FF016AA242@MW4PR17MB4729.namprd17.prod.outlook.com>
X-Mailer: Apple Mail (2.3774.200.91.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/SYusUQk9WISeqXgUwFilwm5bYUE>
Subject: Re: [Acme] Happy Birthday ACME!
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Mar 2024 21:32:51 -0000

Hi, Rob

The first question whenever someone proposes a bis document is, of course, “are you volunteering to edit?”

Jokes aside, it’s always a question of whether or not it is worth the effort. Not just for whoever is editing, but the usual effort associated with any document, such as WG participants, shepherd, AD, IESG, various directorates, RFC editor.

So before embarking on something like this, it’s not enough to just count the number of errata. You need to put yourself in the shoes of a naive implementer who doesn’t know about errata. Are the errors big enough that they might lead them to make a mistake in the implementation?  Text that uses “example.com <http://example.com/>” instead of “example.org <http://example.org/>” probably isn’t. Text that says that a challenge object with an error cannot have the “processing” status when it can likely is.

As for adding other RFCs, that’s again a judgement call. We did merge some add-ons to IKEv2 in one of its revisions. It make sense to merge them if the add-on is so obvious and so necessary, that pretty much every implementation of 8555 would also implement the other document. Is RFC8738 like that? Or are IP identifiers so rare and curious that many implementations exclude them?

As always, it’s up to the group whether making a significantly bigger document with some of the add-ons makes sense. In general, groups and ADs tend to prefer smaller documents, but that is decided on a case-by-case basis.

Yoav

> On 11 Mar 2024, at 23:08, Rob Stradling <rob=40sectigo.com@dmarc.ietf.org> wrote:
> 
> RFC8555 was published [1] 5 years ago today!
> 
> Just thinking aloud, 'cos I'm curious what folks here think...
> At what point might it make sense to start work on an 8555-bis?
> 
> There's a fairly long list of Errata [2]: 10 Verified, 5 Reported, and 4 Held for Document Update.
> 
> Would it make sense for an 8555-bis document to incorporate and obsolete any of the "add-on" RFCs / I-Ds, such as RFC8738, that have been published since RFC8555?  Or, conversely, would it be preferable to not do that?
> 
> With 5 years of deployment experience behind us, have any "missing" features in RFC8555 been identified that would be best addressed by updating the core specification (i.e., in an 8555-bis document) rather than by writing new "add-on" I-Ds?  Or, conversely, are "add-on" I-Ds always the preferred approach?  (The "missing" feature that immediately springs to my mind is "profiles" [3]).
> 
> 
> [1] https://mailarchive.ietf.org/arch/msg/rfc-dist/25pD6Za_dVkXMbJwyPhBJR6nIlo/
> [2] https://www.rfc-editor.org/errata_search.php?rfc=8555
> [3] https://mailarchive.ietf.org/arch/msg/acme/BLVAayrTrUCegT4s2twci3Q2BY8/
> 
> --
> Rob Stradling
> Senior Research & Development Scientist
> Sectigo Limited
> 
> _______________________________________________
> Acme mailing list
> Acme@ietf.org <mailto:Acme@ietf.org>
> https://www.ietf.org/mailman/listinfo/acme