Re: [apps-discuss] DMARC working group charter proposal

[Dave Crocker <[e-mail]>]

Stephen,


On 4/1/2013 5:20 PM, Stephen Farrell wrote:
> On 04/02/2013 12:17 AM, Dave Crocker wrote:
>> DKIM had far less installed base on large operational services than
>> DMARC now has.
>
> Happy to hear that but I don't think it impacts on the
> points below. (Its news to me btw, but then its not my area
> so that's not surprising.)

If affects the chartering issues fundamentally, as I've explained.


> And to be clear: I do welcome folks bringing work to the
> IETF, esp. where it is or will be widely deployed.

Good to hear.  Perhaps you'll therefore consider being less terse, 
precipitous and simplistic in your responses then?

Really, Stephen, the way to encourage folks is to encourage them, not to 
post initial responses that are as dire as you've done.

Being encouraging doesn't mean saying yes to everything, but it does 
mean working to understand what they want to do and why and offering 
specific suggestions that go beyond "do it the way we've done it before 
or go away."


>> As for not knowing how to consult outside the working group, surely you
>> jest.  We do it all the time.
>
> Not with such vaguely characterised "others" and nor with
> giving 'em anti-change-control that I can recall. Feel free
> to point me at examples that do those things. If the text
> isn't meant to severely constrain IETF change-control then
> it needs a re-write 'cause it reads to me like that's the
> intent.

Ahh, so your concern is not what you originally stated, but is more 
nuanced.  Excellent.  That's worthy of discussion.


> If the "others" are actually well-known and are really
> dmarc.org members then saying that would seem to be
> useful to start with.

Clarifying who should be consulted and how could make complete sense.

How is it that the existing draft text "other developers and operators 
of DMARC-based mechanisms" is not sufficient"?  What would you suggest 
as better?


> But in any case since that dmarc.org group apparently want
> to cede change control then I think DKIM-like charter text
> is really what'd work best.

You (and SM) are confusing the difference between handing over change 
control, versus the permissible scope of work for the first effort, that 
is negotiated as part of the hand-over.

This is a balancing act, every time work is brought into the IETF.

It depends upon the maturity of the technology and the nature of its 
deployed based, as well as the list of work the community believes needs 
to be done.

For example, if you or anyone else has specific work to propose, then 
let's talk about it.  As part of the planning for bringing DMARC to the 
IETF, We did this within the dmarc.org group. We knew it's better to 
bring more 'interesting' work items to the initial round of effort in 
the IETF.  Unfortunately, we didn't see technical development tasks for 
the protocol that are needed right now.  Perhaps you or others do?


> If dmarc.org really don't want to cede change control then
> the ISE route would seen more appropriate than an IETF WG.

You appear to think that ceding change control means that the working 
group charter must impose no constraints on the scope of what is 
permitted by the initial working group charter.  That's not the history 
of charters for existing work that's (eventually) brought into the IETF. 
  The permitted types of changes -- and possible disruption to the 
installed base -- are an inherent part of that initial negotiation, each 
time.


>> As for:
>>> I don't know how the not-yet-formed WG can have a preference
>>
>> I don't know what you mean.
>
> WG-doesn't-exist-yet => WG-can't-have-opinion. That ought be
> trivial to fix, but is indicative of a possibly problematic

I do not know what language your are reading that asserts preferences 
for the not-yet-formed WG.


> conflation of the set of folks who drafted this text and the
> set of folks that might participate in a future IETF WG, which
> will include people who've never seen this draft for example.

Huh?  Again, I don't know what you mean, and your terseness about a 
potentially serious point isn't helping.

General request, Stephen:  Rather than tossing off this sort off terse, 
dire assertions, please invest some effort into explaining what you mean 
and what the basis is.



d/
-- 
  Dave Crocker
  Brandenburg InternetWorking
  bbiw.net