Re: [art] Call for Consensus: Re: On BCP 190

Adam Roach <adam@nostrum.com> Mon, 19 August 2019 21:48 UTC

Return-Path: <adam@nostrum.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C036812087A for <art@ietfa.amsl.com>; Mon, 19 Aug 2019 14:48:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.68
X-Spam-Level:
X-Spam-Status: No, score=-1.68 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=nostrum.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mfpqDf55bHeK for <art@ietfa.amsl.com>; Mon, 19 Aug 2019 14:48:07 -0700 (PDT)
Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18D3C1200FF for <art@ietf.org>; Mon, 19 Aug 2019 14:48:07 -0700 (PDT)
Received: from MacBook-Pro.roach.at (99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id x7JLm2pD017187 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Mon, 19 Aug 2019 16:48:04 -0500 (CDT) (envelope-from adam@nostrum.com)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1566251285; bh=UzU+fhKlFDpIf9M3U1gssn/VMinx58fySItSR626tXA=; h=Subject:From:To:Cc:References:Date:In-Reply-To; b=MCY05HBoQ+88pwV1STYyHYZXjh6K94RUGnjd5tXg4XcIJ+pjFFYuCkTjGFvsYDybQ nP+TUG6NcTr/Ti4NKVt3D2Fr4sZWvq1YjbboAUWywTLPQWc1jtX8zobX5Imwy6TOCs drXkElEXCLgm36mp4LpA2B9oaOJ5PFtbXnLfLTIk=
X-Authentication-Warning: raven.nostrum.com: Host 99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228] claimed to be MacBook-Pro.roach.at
From: Adam Roach <adam@nostrum.com>
To: Mark Nottingham <mnot@mnot.net>, Jacob Hoffman-Andrews <jsha@letsencrypt.org>
Cc: ART Area <art@ietf.org>, Devon O'Brien <devon.obrien@gmail.com>
References: <58BF6171-03BB-4F83-940F-3A101EFDD67F@mnot.net> <CAN3x4Q=Jo1uBvfCG6CSrociYgdG+E4jq+4cB1txPjgboth2q9g@mail.gmail.com> <372FA049-7B33-4981-A0E0-41BD454CB770@mnot.net> <CAN3x4QmJsfx48MdhcBB+XWX+vfv=skSR2Z6kNPBWGVobvzNuFA@mail.gmail.com> <004601d5450d$62b33220$28199660$@acm.org> <CAN3x4Q=XR+=ugv6HEmOgsA6v64GkQ+4u-Hk+OBQ0Lp9jn-Cy=A@mail.gmail.com> <D154BA24-5027-4FAF-8779-CBA5533D24A1@mnot.net> <3000e948-14e6-80d2-e8e6-766d309c361c@nostrum.com>
Message-ID: <ed64dc0e-5b71-63ec-cbac-85673c51109a@nostrum.com>
Date: Mon, 19 Aug 2019 16:47:57 -0500
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.8.0
MIME-Version: 1.0
In-Reply-To: <3000e948-14e6-80d2-e8e6-766d309c361c@nostrum.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/vStlO_HCI46cQX5dcThV4ZyUUjM>
Subject: Re: [art] Call for Consensus: Re: On BCP 190
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Aug 2019 21:48:13 -0000

I've seen precious little response to this (two messages in two weeks), 
and conclude that people either do not care; or, the people who do care 
can't reasonably be reached to weigh in on the topic. That said, I think 
that these responses combined with the input received during IETF 105 
are a weak signal that that there is support for adjusting BCP 190 at 
least to the extent necessary to allow the "provisioned directory 
prefix" approach used by CT.

So I'm going to clear my DISCUSS under the assumption that Mark will be 
putting forth a proposed amendment to BCP 190 in the near future. I'm 
happy to AD sponsor publication of such a change, assuming we can get a 
more vigorous level of participation than we did on this thread.

/a

On 8/2/19 3:15 PM, Adam Roach wrote:
> For the purposes of clearing my discuss, I intend to read the 
> responses to Mark's message below as a reflection of consensus from 
> the community. If you have thoughts on the topic, please weigh in on 
> the ART-area mailing list no later than Friday, August 16th.
>
> People who have participated in the discussion in TRANS are very much 
> welcome to re-express their opinions in this thread. I'm also hoping 
> that we get some input from other participants -- even if it's 
> something as simple as "this sounds good to me" -- to make sure all 
> relevant perspectives are taken into account.
>
> Thanks!
>
> /a
>
> On 8/2/19 1:55 PM, Mark Nottingham wrote:
>> It sounds like you (collectively) want an exception in BCP190 still, 
>> correct?
>>
>> If so, I think we just need to craft some language about that for 
>> inclusion in the spec; I'd imagine it need only be a sentence or two 
>> about it. Then the AD(s) need to convince themselves that it reflects 
>> consensus.
>>
>> The underlying issue is the text in 2.3 of BCP190; I think the 
>> emerging consensus is that it's too strict, in that it can be read to 
>> preclude using a prefix approach with a MUST NOT, when in fact the 
>> potential harm to other applications / the Web overall is pretty small.
>>
>> Does anyone disagree with that?
>>
>> Cheers,
>>
>>
>>> On 31 Jul 2019, at 2:10 pm, Jacob Hoffman-Andrews 
>>> <jsha@letsencrypt.org> wrote:
>>>
>>> On Sat, Jul 27, 2019 at 11:26 PM Larry Masinter <LMM@acm.org> wrote:
>>> The use of / in the path of URLs was supposed to
>>>
>>> be restricted to hierarchical data, and yet CT doesn’t
>>> do that.
>>>
>>> http://masinter.blogspot.com/2019/05/on-nature-of-hierarchical-urls.html 
>>>
>>>
>>>
>>> CT and all prefix-using APIs do that, with a single level hierarchy. 
>>> The domain owner specifies a prefix, ending with a "/". All of the 
>>> URLs that are part of the API follow that prefix - they are 
>>> subordinate in the hierarchy.
>>>
>>> Coming back to the main point: What remains in order to find 
>>> consensus on this issue?
>>>
>>> Thanks,
>>> Jacob
>> -- 
>> Mark Nottingham   https://www.mnot.net/
>>
>> _______________________________________________
>> art mailing list
>> art@ietf.org
>> https://www.ietf.org/mailman/listinfo/art
>
>
> _______________________________________________
> art mailing list
> art@ietf.org
> https://www.ietf.org/mailman/listinfo/art