Re: [dane] Encoding local parts in better ways

Sean Leonard <dev+ietf@seantek.com> Wed, 14 October 2015 15:33 UTC

Return-Path: <dev+ietf@seantek.com>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 531611AC443 for <dane@ietfa.amsl.com>; Wed, 14 Oct 2015 08:33:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G19SRXNP7O64 for <dane@ietfa.amsl.com>; Wed, 14 Oct 2015 08:33:38 -0700 (PDT)
Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A3A61AC43A for <dane@ietf.org>; Wed, 14 Oct 2015 08:33:38 -0700 (PDT)
Received: from [192.168.123.105] (unknown [75.83.2.34]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id E4B52509C6; Wed, 14 Oct 2015 11:33:36 -0400 (EDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_3D22A3BD-E401-41D2-AF9E-0D9E5AEAF97C"; protocol="application/pkcs7-signature"; micalg="sha1"
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
From: Sean Leonard <dev+ietf@seantek.com>
In-Reply-To: <D243E95D.1C5E0%gwiley@verisign.com>
Date: Wed, 14 Oct 2015 08:32:44 -0700
Message-Id: <6F819457-0EC4-4206-82AE-A2B713BA28D8@seantek.com>
References: <20150921035448.5523.qmail@ary.lan> <D243D61B.1C562%gwiley@verisign.com> <41654219-9895-465D-B17A-C35CD16224D4@seantek.com> <D243E95D.1C5E0%gwiley@verisign.com>
To: "Wiley, Glen" <gwiley@verisign.com>
X-Mailer: Apple Mail (2.1878.6)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dane/EaZ9FI0DSIZgzxlTvOfyTktJ9KQ>
Cc: "dane@ietf.org" <dane@ietf.org>
Subject: Re: [dane] Encoding local parts in better ways
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 15:33:40 -0000

Correct, it says base32 encoding. I am not saying to interpret it otherwise.

I am saying that the animating principle of Section 4 “Encoded bytes” is to transform the local-part into a form that preserves case sensitivity.

So yes, perhaps Section 4 should be expanded to include the different types of transformations: reversible, irreversible, and irreversible with collision resistance. (In this context, collision resistance is a pretty important property, so just “irreversible” may not be a useful sub-category.)

Sean

On Oct 14, 2015, at 8:14 AM, Wiley, Glen <gwiley@verisign.com> wrote:

> Section 4 reads as though it is specifying base32 encoding, as it is
> written I don’t see room for interpreting that as allowing for a hash.
> -- 
> Glen Wiley
> 
> Principal Engineer
> Verisign, Inc.
> (571) 230-7917
> 
> A5E5 E373 3C75 5B3E 2E24
> 6A0F DC65 2354 9946 C63A
> 
> 
> 
> 
> On 10/14/15, 11:10 AM, "Sean Leonard" <dev+ietf@seantek.com> wrote:
> 
>> 
>> On Oct 14, 2015, at 6:59 AM, Wiley, Glen <gwiley@verisign.com> wrote:
>> 
>>> John,
>>> 
>>> I read the draft.
>>> 
>>> In the list of approaches you include literal, encoded, regex and
>>> pointer
>>> but I didn¹t see a place to refer to hashes (such as SHA224).  While
>>> there
>>> are different views on the use of hashes for local parts, would it makes
>>> sense to allow for the future use of a hash?
>> 
>> Probably makes sense conceptually as a sub-part of “encoded” (Section 4).
>> Some encodings are reversible (e.g., base32); others are one-way (e.g.,
>> CRC); yet others are one-way and also collision-resistant (e.g.,
>> SHA-224). The commonality that they share is that they preserve the
>> byte-for-byte/case-sensitive matching of SMTP.
>> 
>> Sean
>> 
> _______________________________________________
> dane mailing list
> dane@ietf.org
> https://www.ietf.org/mailman/listinfo/dane