Re: [dane] Working group Last call: draft-ietf-dane-smime-11.txt

"Patrik Fältström " <paf@frobbit.se> Sat, 09 July 2016 20:35 UTC

Return-Path: <paf@frobbit.se>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79F8D12D177 for <dane@ietfa.amsl.com>; Sat, 9 Jul 2016 13:35:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.988
X-Spam-Level:
X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ST6FIBTn8vnT for <dane@ietfa.amsl.com>; Sat, 9 Jul 2016 13:35:41 -0700 (PDT)
Received: from mail.frobbit.se (mail.frobbit.se [IPv6:2a02:80:3ffe::176]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 505F412B035 for <dane@ietf.org>; Sat, 9 Jul 2016 13:35:41 -0700 (PDT)
Received: from [192.165.72.17] (unknown [IPv6:2a02:80:3ffc:0:cc8e:2e18:fab4:9ecc]) by mail.frobbit.se (Postfix) with ESMTPSA id 7608A249E1; Sat, 9 Jul 2016 22:35:38 +0200 (CEST)
From: Patrik Fältström <paf@frobbit.se>
To: Paul Hoffman <paul.hoffman@vpnc.org>
Date: Sat, 09 Jul 2016 22:35:37 +0200
Message-ID: <4C6AB4A2-5A25-4FBD-AA85-35B0702BA133@frobbit.se>
In-Reply-To: <DE78F5CC-AE00-4E10-8F17-BB5FB39EB297@vpnc.org>
References: <20160709181518.19778.qmail@ary.lan> <DE78F5CC-AE00-4E10-8F17-BB5FB39EB297@vpnc.org>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=_MailMate_8E315166-7B3D-4D60-A9EF-44AFE33E11BD_="; micalg="pgp-sha1"; protocol="application/pgp-signature"
X-Mailer: MailMate (2.0BETAr6042)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dane/z-_vKb_Xma96EtihIGJlnQHE56g>
Cc: John Levine <johnl@taugh.com>, dane@ietf.org
Subject: Re: [dane] Working group Last call: draft-ietf-dane-smime-11.txt
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 09 Jul 2016 20:35:42 -0000

On 9 Jul 2016, at 20:40, Paul Hoffman wrote:

> On 9 Jul 2016, at 11:15, John Levine wrote:
>
>> Section 3 is wrong
>
> The wording in this draft matches the wording in draft-ietf-dane-openpgpkey that has IETF consensus. Get over it.

In practice, I would be surprised if not matching algorithms used do normalize to normalization form c and case folding before doing matching.

But, to be honest, I think the correct wording we will never know before we actually do have implementations, so lets beat this horse to death when we know what people actually have implemented.

And, FWIW, I have not implemented it. Just to make it clear.

   Patrik