Re: [http-auth] Alissa Cooper's No Objection on draft-ietf-httpauth-hoba-09: (with COMMENT)

[Stephen Farrell <[e-mail]>]

On 08/01/15 00:39, Kathleen Moriarty wrote:>>> >> = Section 8 =
>>> >>
>>> >> "Binding my CPK with someone else's account would be fun and
>>> >>   profitable so SHOULD be appropriately hard."
>>> >>
>>> >> Sarcasm translates pretty poorly across cultures. I would suggest
saying
>>> >> what you actually mean here.
>> >
>> > Wasn't meant to be sarcastic at all. I guess it is a little opaque but
>> > surely the threat is so obvious that the "fun and profit" colloquialism
>> > is ok.

> I think it's better to replace this text, I agree with Alissa that other
> cultures may have problems with it.

Alissa didn't mention other cultures but a form of speech, at least
as I read her comment, and a form of speech that wasn't intended
as it happened;-)

In this case the colloquialism is colloquial to security nerds and
not people from a particular lat/long. So yes, we could replace this
but IMO that'd be us being silly, as it's a quite well known
phrase for security researchers [1] and, turns out, (and I
didn't know) is actually not very modern. [2]

S.

[1]
http://scholar.google.com/scholar?hl=en&q=%22fun+and+profit%22&btnG=&as_sdt=1%2C5&as_sdtp=
[2]
https://english.stackexchange.com/questions/25205/what-is-the-origin-of-phrase-for-fun-and-profit