[drinks] Barry Leiba's No Objection on draft-ietf-drinks-spp-protocol-over-soap-07: (with COMMENT)

"Barry Leiba" <barryleiba@computer.org> Wed, 18 February 2015 22:51 UTC

Return-Path: <barryleiba@computer.org>
X-Original-To: drinks@ietfa.amsl.com
Delivered-To: drinks@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4CFD1A1B8B; Wed, 18 Feb 2015 14:51:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hC-DQJKQg0tD; Wed, 18 Feb 2015 14:51:22 -0800 (PST)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D50DB1A1B89; Wed, 18 Feb 2015 14:51:22 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Barry Leiba <barryleiba@computer.org>
To: The IESG <iesg@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 5.11.0.p2
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20150218225122.15605.69434.idtracker@ietfa.amsl.com>
Date: Wed, 18 Feb 2015 14:51:22 -0800
Archived-At: <http://mailarchive.ietf.org/arch/msg/drinks/OiFORzwblH-8bd9UFjvEEmvf4hk>
Cc: drinks@ietf.org, draft-ietf-drinks-spp-protocol-over-soap.all@tools.ietf.org, drinks-chairs@ietf.org
Subject: [drinks] Barry Leiba's No Objection on draft-ietf-drinks-spp-protocol-over-soap-07: (with COMMENT)
X-BeenThere: drinks@ietf.org
X-Mailman-Version: 2.1.15
List-Id: IETF DRINKS WG <drinks.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/drinks>, <mailto:drinks-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/drinks/>
List-Post: <mailto:drinks@ietf.org>
List-Help: <mailto:drinks-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/drinks>, <mailto:drinks-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Feb 2015 22:51:25 -0000

Barry Leiba has entered the following ballot position for
draft-ietf-drinks-spp-protocol-over-soap-07: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
http://datatracker.ietf.org/doc/draft-ietf-drinks-spp-protocol-over-soap/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

-- Section 4 --

   Implementations compliant with this document MUST use HTTP 1.1
   [RFC2616] or higher.  Also, implementations SHOULD use persistent
   connections.

You could remove "compliant with this document".  But more importantly,
the "SHOULD" is not an interoperability requirement.  I'd rather see
"implementations should use persistent connections for the performance
reasons specified above."  But this is non-blocking, and there's no need
to discuss it.

-- Section 5 --
I support Stephen's DISCUSS here.  Further on what he says in his
comment, this MUST requirement locks you into Digest for all time,
regardless of what other authentication mechanisms might be defined and
deployed later.  That doesn't seem wise.

If the real point here is that there are two mechanisms (Basic and
Digest), and you want to use Digest because you don't want Basic, then
maybe that's how you should say it: ban Basic rather than requiring
Digest.