Re: [core] New Version Notification for draft-amsuess-core-pd-body-error-position-00.txt

[Christian Amsüss <[e-mail]>]

On Sun, Feb 05, 2023 at 02:35:05PM +0100, Michael Richardson wrote:
> Do you think that we will turn this off in production?

No. (It doesn't make much difference in the firmware size). But messages
with this value in would not be part of everyday errors, and thus not
worthy of the 1+0 space.

> Do we need to consider an attacker that if basically doing online fuzzing
> against a live target?

I'd refer to Kerckhoffs's principle here. Sure, there are reasons to
limit leaking implementation details, but when sending Problem Details
responses, we're already way beyond limiting the radar cross-section. In
other words, this remark is valid for most Problem Details items, and
while it's a bit more applicable here than on others, I think that's
only barely so.

BR
c

-- 
To use raw power is to make yourself infinitely vulnerable to greater powers.
  -- Bene Gesserit axiom