Re: [Add] [Ext] Updated charter proposal for ADD

[Alissa Cooper <[e-mail]>]

> On Jan 15, 2020, at 10:54 AM, Dave Lawrence <[e-mail]> wrote:
> 
> Ted Lemon writes:
>> Rather than just deleting this text, which I agree is probably not 
>> what we want, how about fixing it?  
> 
> That's where I am on this.  I like the proposal as a whole and just
> think this little bit on the security properties needs tweaking.

I may have been the one to originally propose this language to Tommy and others, and I recognize that was a bit of an error. The formulation in the charter text that Ben Schwartz circulated seems more workable (plus dropping the “any” before “mechanisms”):

"Where possible, mechanisms that specify exchange of information between clients and resolvers should provide the security properties expected of IETF protocols, e.g., confidentiality protection, integrity protection, and authentication with strong work factor.  Each specification must clearly indicate under what circumstances and assumptions these properties are or are not provided.”

I think this would be a good guidepost to have in the charter, and is less prescriptive than the tweak offered by Ted Lemon. But from my POV it’s just a nice-to-have if it’s not so controversial that its inclusion prevents the charter from being approved.

Alissa


>  I've
> got to run at the moment though and apologize for not having a
> concrete proposal for the tweak.
> 
> -- 
> Add mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/add