Re: [dispatch] draft-levine-herkula-oneclick, additional security consideration

"John Levine" <johnl@taugh.com> Sun, 11 December 2016 20:34 UTC

Return-Path: <johnl@taugh.com>
X-Original-To: dispatch@ietfa.amsl.com
Delivered-To: dispatch@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A83AA129476 for <dispatch@ietfa.amsl.com>; Sun, 11 Dec 2016 12:34:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8diYComhTNGz for <dispatch@ietfa.amsl.com>; Sun, 11 Dec 2016 12:34:40 -0800 (PST)
Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:1126::2]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52AF1126BF7 for <dispatch@ietf.org>; Sun, 11 Dec 2016 12:34:40 -0800 (PST)
Received: (qmail 23676 invoked from network); 11 Dec 2016 20:34:41 -0000
Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 11 Dec 2016 20:34:41 -0000
Date: Sun, 11 Dec 2016 20:34:13 -0000
Message-ID: <20161211203413.59975.qmail@ary.lan>
From: John Levine <johnl@taugh.com>
To: dispatch@ietf.org
In-Reply-To: <f455ec04-349f-421f-86bf-d79e66b16590@rolandturner.com>
Organization:
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dispatch/_LkhI90KzGLQkyf2POdkeeOcToI>
Subject: Re: [dispatch] draft-levine-herkula-oneclick, additional security consideration
X-BeenThere: dispatch@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: DISPATCH Working Group Mail List <dispatch.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dispatch>, <mailto:dispatch-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dispatch/>
List-Post: <mailto:dispatch@ietf.org>
List-Help: <mailto:dispatch-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dispatch>, <mailto:dispatch-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 11 Dec 2016 20:34:41 -0000

>I agree, that is the nature of security considerations. Are you arguing 
>for not including this concern and potential countermeasure?

Well, actually, I'm saying that the IETF review is over and it's in
the RFC editor's hopper, so it's too late.

R's,
John