Re: [COSE] Robert Wilton's No Objection on draft-ietf-cose-rfc8152bis-struct-10: (with COMMENT)

Barry Leiba <barryleiba@computer.org> Mon, 15 June 2020 17:11 UTC

Return-Path: <barryleiba@gmail.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A37623A02C1; Mon, 15 Jun 2020 10:11:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.401
X-Spam-Level:
X-Spam-Status: No, score=-1.401 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.25, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HRtoSoqF9lnn; Mon, 15 Jun 2020 10:11:22 -0700 (PDT)
Received: from mail-io1-f66.google.com (mail-io1-f66.google.com [209.85.166.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8DD4F3A00E0; Mon, 15 Jun 2020 10:11:22 -0700 (PDT)
Received: by mail-io1-f66.google.com with SMTP id x189so9646997iof.9; Mon, 15 Jun 2020 10:11:22 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=AwHDa/NxGR2VoOmOfG+TusPMrERJ1H0UfX0AoxXTIas=; b=dMBWZYm92H7TJEeT4ITAqNrnHr+nuZf5AMOGphbM+Mks+Nw2K5f2KIDKpfQYPx3Zo9 +nl8EnlUHXPFKbu0MOAOlyACvBavJYVqjebpWRSNWHTX9Zbvr24YGS7H5sYGCpvSfqAJ Iv31cQUl20d/10RuC4FOJQvGXIHTB4s/NL6JS8vWJAPwMrVsPv0X4rAxiC1y8KzNSjNV ujO3lN3gbkoZxFkKkl8Qy67Vj+UShcULxA/ynjdytO0BwVl7mbZ4fELo3ElaI/r78kHt raxy9TEyc7zvC0b7TcganNkn8UVyNa+ARn+f9xrXvZfGpFdVEAVZrzrw7TWdPJgHyWcR nCig==
X-Gm-Message-State: AOAM530KUGztmVFWBbAZrkGvP+gZkFAKKk3pSgph6s8+S0CAMQM6dfFh xhXAKgXmrfleW9LwcfOpbiOW/gtKIP9Jb6JVRBg=
X-Google-Smtp-Source: ABdhPJwbK8VzFlVvoeG0xSjGkUkbde7p2QRqRTHzOFbGyGaixCY/nldhEQxIRxlpaQB4mO98OBut8mbO7q4nA5CWQ94=
X-Received: by 2002:a02:ca18:: with SMTP id i24mr22437897jak.70.1592241081708; Mon, 15 Jun 2020 10:11:21 -0700 (PDT)
MIME-Version: 1.0
References: <159181232597.18622.11559246666786395335@ietfa.amsl.com> <004d01d64298$8733f600$959be200$@augustcellars.com> <MN2PR11MB43662A46D16CCD00A6A9B8A1B59C0@MN2PR11MB4366.namprd11.prod.outlook.com> <008401d64334$9ad6ff30$d084fd90$@augustcellars.com>
In-Reply-To: <008401d64334$9ad6ff30$d084fd90$@augustcellars.com>
From: Barry Leiba <barryleiba@computer.org>
Date: Mon, 15 Jun 2020 13:11:08 -0400
Message-ID: <CALaySJL81eaVkhnR7SFJqE=rbw+e8K0Wh7oWPCidBP2EnHP-cQ@mail.gmail.com>
To: Jim Schaad <ietf@augustcellars.com>
Cc: "Rob Wilton (rwilton)" <rwilton@cisco.com>, The IESG <iesg@ietf.org>, draft-ietf-cose-rfc8152bis-struct@ietf.org, cose-chairs@ietf.org, Matthew Miller <linuxwolf+ietf@outer-planes.net>, Benjamin Kaduk <kaduk@mit.edu>, cose@ietf.org
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/QmJKFofhSJwrRJ68aqjWXm2NtuM>
Subject: Re: [COSE] Robert Wilton's No Objection on draft-ietf-cose-rfc8152bis-struct-10: (with COMMENT)
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jun 2020 17:11:24 -0000

>> You need a normative reference on the CDDL document regardless, given
>> that it is not possible to understand the entirety of
>> draft-ietf-cose-rfc8152bis-struct without reading the CDDL draft,
>> hence it is a normative reference.  The only alternative would be to
>> strip all the CDDL text out of the document, and I really doubt that
>> you would want to do that.
>>
>> Even if tools are just being used for validation then you still
>> require the CDDL to be right or otherwise the validation could give an
>> incorrect response.
>>
>> Hence, I would recommend that you bite the bullet, add the normative
>> reference, and make the CDDL text normative.  Given that CDDL has
>> already been published as an RFC, I'm unsure why having a normative
>> reference to it would be a problem.
>
> [JLS] Section 1.4 is designed to avoid the need for CDDL to be
> normative.  Also since the CDDL is explicitly normative I do not
> believe that it needs to be normative.

I can't figure this out, Jim.  Is there a "not" missing, or some such?

In any case, I agree that the CDDL reference can be informative.  8152
predated the CDDL spec and was understandable with only an informative
reference to it, and I don't think 8152bis has changed in that regard.

> I am still under the impression that one needs to look very closely at
> STD downrefs as well as Standards Track downrefs is that not true?

An Internet Standard that cites a Proposed Standard normatively is
making a downref, if that's what you're asking.  That said, it's not a
big problem to accept that -- we would just have to run another
two-week last call to approve the downref.  But, as I said above, I
don't think that's necessary.

Rob, can you give specific examples of things in 8152bis that can't be
properly understood without normative reference to RFC 8610?

Barry