Re: [dnsext] I-D Action: draft-ietf-dnsext-dnssec-algo-imp-status-04.txt

Joe Abley <jabley@hopcount.ca> Mon, 11 March 2013 19:28 UTC

Return-Path: <jabley@hopcount.ca>
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E80421F8EB7 for <dnsext@ietfa.amsl.com>; Mon, 11 Mar 2013 12:28:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.824
X-Spam-Level:
X-Spam-Status: No, score=-101.824 tagged_above=-999 required=5 tests=[AWL=-0.776, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RSCQtjTQ16Xx for <dnsext@ietfa.amsl.com>; Mon, 11 Mar 2013 12:28:06 -0700 (PDT)
Received: from mail-ie0-x235.google.com (mail-ie0-x235.google.com [IPv6:2607:f8b0:4001:c03::235]) by ietfa.amsl.com (Postfix) with ESMTP id 1D2F021F8FB0 for <dnsext@ietf.org>; Mon, 11 Mar 2013 12:28:06 -0700 (PDT)
Received: by mail-ie0-f181.google.com with SMTP id 17so5235112iea.26 for <dnsext@ietf.org>; Mon, 11 Mar 2013 12:28:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hopcount.ca; s=google; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=5e/KBj+BgrOr8blH0IKl0yaxls6dMMpqZRDajMEZ04A=; b=cZv2V2dt+k75+wmJPdr6KuzwU191lHJop4X7a3rwaLpF1Xd0taYXu50Lt1End/2ohd opFcq0IIwo6/Prv6hvKSz0RLzCEBpV0WNKAW0eLrhdtsVU6Z7GOwADX/CWR3CqaQ9byL kOEwLFMA1OVM80kSRuHMuR8tlsWJyiua/pLUk=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer :x-gm-message-state; bh=5e/KBj+BgrOr8blH0IKl0yaxls6dMMpqZRDajMEZ04A=; b=SrmLSZAzVJYzCshWvhh/KfNmgdPDmtoR26cIAaCAVhDxLFklSxrt17q3uyNaFFma/Z 1HsOYhTWZ5hdjZGkHa5I2NWir8SamQh2/54HVB73Zqr0dRsXPA06Jb3lQgV9bWd33vAh +EtKAjBA+EJQ01Ax62zWp8L2kDfgDxUkyzPJFx6cNxT8bZ2+PFykqCYTPtBCwrc0IuwG HLNzmSa7ZlnUjsVkhpz6KwPLT9xV7c9n3t4whrTZ9yRO2qmq5DeeuugMA54Tb9Zu9IbW zJVXdDElYaAGSFK8mlQMDVSOZOwDLrFNe3fmBF5Ht2mqfHLiMFAia4yfMraGNRlo8oEo OQVw==
X-Received: by 10.42.203.68 with SMTP id fh4mr9675232icb.36.1363030085594; Mon, 11 Mar 2013 12:28:05 -0700 (PDT)
Received: from [10.254.50.227] ([64.235.96.2]) by mx.google.com with ESMTPS id ew5sm15876648igc.2.2013.03.11.12.28.02 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 11 Mar 2013 12:28:04 -0700 (PDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\))
From: Joe Abley <jabley@hopcount.ca>
In-Reply-To: <20130311191607.GF38303@crankycanuck.ca>
Date: Mon, 11 Mar 2013 15:28:14 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <E99C99C9-73E1-43F8-B09E-B28CA138F526@hopcount.ca>
References: <20130311152035.4888.59295.idtracker@ietfa.amsl.com> <20130311191607.GF38303@crankycanuck.ca>
To: Andrew Sullivan <ajs@crankycanuck.ca>
X-Mailer: Apple Mail (2.1499)
X-Gm-Message-State: ALoCoQnWF8Q+rmNLdSctkiEkYELitSupJLrgl3c4GsbaKC+fsbTBdhV1bYMnCUm2RkOHGAt6ke7W
Cc: dnsext@ietf.org
Subject: Re: [dnsext] I-D Action: draft-ietf-dnsext-dnssec-algo-imp-status-04.txt
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsext>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Mar 2013 19:28:10 -0000

On 2013-03-11, at 15:16, Andrew Sullivan <ajs@crankycanuck.ca> wrote:

> This update from Scott is an attempt to solve the objections raised in
> an IESG DISCUSS without violating the WG's consensus that this
> document was about implementation and not deployment.  I think it
> walks that line, and I am comfortable going ahead.
> 
> If, however, you object, you need to squawk in the next 24 hours.
> Otherwise, our AD is going to sign off.  This is a tight deadline
> because (1) as shepherd, I am convinced this actually solves the
> problem and (2) the document hung fire long enough that we are up
> against the change of the IESG.  Please be aware that, if the current
> changes do not solve the problem, I have no idea how to proceed; we
> will probably have to abandon this document in that case.

I think this document is useful, and solves a problem.

One possible nit: the IANA Considerations Section specifies that this document (when published) act as The reference for the named IANA registry. It's not clear to me whether this adequately anticipates the addition of new algorithms in the future. I think it's reasonable for this document to provide a reference for all algorithms currently listed in that registry, but presumably future algorithms would be listed with different references, and the important thing is to specify that those references exist (i.e. that the documents by which future algorithms are added specify clearly what the implementation status of those new algorithms is).

Hence, I suggest in:

3.  IANA Considerations

   This document lists the implementation status of cryptographic
   algorithms used with DNSSEC.  These algorithms are maintained in an
   IANA registry at http://www.iana.org/assignments/dns-sec-alg-numbers.
   Because this document establishes the implementation status of every
   algorithm, it should be listed as a reference for the entire
   registry.

REMOVE:

   Because this document establishes the implementation status of every
   algorithm, it should be listed as a reference for the entire
   registry.

ADD:

   Because this document establishes the implementation status of every
   algorithm listed in this registry at the time of writing, it should be
   listed as the reference for all those algorithms. Future entries to
   this registry should include an implementation status with corresponding
   pertinent registries.


Joe