Re: [Iasa20] Comments on draft-ietf-iasa2-rfc4844-bis-01

Richard Barnes <rlb@ipv.sx> Sun, 10 February 2019 01:27 UTC

Return-Path: <rlb@ipv.sx>
X-Original-To: iasa20@ietfa.amsl.com
Delivered-To: iasa20@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F02C12F295 for <iasa20@ietfa.amsl.com>; Sat, 9 Feb 2019 17:27:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ipv-sx.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NxdgLkU7XOJ2 for <iasa20@ietfa.amsl.com>; Sat, 9 Feb 2019 17:27:18 -0800 (PST)
Received: from mail-ot1-x32a.google.com (mail-ot1-x32a.google.com [IPv6:2607:f8b0:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC8AE12D861 for <iasa20@ietf.org>; Sat, 9 Feb 2019 17:27:17 -0800 (PST)
Received: by mail-ot1-x32a.google.com with SMTP id n8so12106126otl.6 for <iasa20@ietf.org>; Sat, 09 Feb 2019 17:27:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipv-sx.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=8YMOYosJYBTj1UwPWGEFOFa9JwGXpZOw4CAV6pYcK4U=; b=qYBKI7uSnCN0xw2hPSl5QluMedpQBCyH/TH+DApnozI5UAVngw4UliDXwWOSiHBDkT /Eu01OyBj8rGD19LC+G77qLsMJjMCWHM2ek0oXFpyN4Oyrcy0/tYBRJEVaITIvJMI67j o8YpVCCmeceZ5BCDjMSd4om2dUjyDNzRlvlo7TLSo/jsNWsa9WYzqM/k7pW/YTwM1xLF ShG1w0sXDGxwjEkKWkNt8juXkovCA8ZguZAwa1mM9tCmOG7jswsWHX9t/VUOIApmmg6x 3aS7PbPdQxMhCxrXIozFerVAKD+W11rRwmkTBnhUnuIvSLmJu+NRDbvD7e1+kSeDPmeO a6sw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=8YMOYosJYBTj1UwPWGEFOFa9JwGXpZOw4CAV6pYcK4U=; b=t2c7cmAnlxebTkC2S/+LOuX5SVPZfQg96jJAb94MLxx95GHUjkv5UOPohPZfoAEg9r RT0c31SUr1Bp6q3Eupczd0QQPqQt6JuZ5TV/IQXUpRP17OJTJ+xFn9NFy2I6/OUPq4nW vTI8z8IG4OyDYP39d8CHb0jLReriiZqpNN9bUvUTJA/QrOImqTIBvJCf0WyutaqhPWJL 6mXVoVeMEHwgrHQaRLgKTSEYQiW9WutszqPvj9gUN4Ia6EkOjxQuIbZOeOGg3I78ShYy 5zhb3Q3Fm9OvYkJWeHVaSoHIc5ASy6cJhX9WfgicV0wV5nD4pFZh3NonVd1AsCGQIk+k DIBg==
X-Gm-Message-State: AHQUAuZFyjJBPmXxO+/qWOKs6FHpZ56tg4DNc8AhYtNtpU1JJDxanrtK 3+HLFaqPdp8H5HWVnmyHKnmXXTWlB86f6+m8jflPHEJx
X-Google-Smtp-Source: AHgI3IZ74wgylQoEuO8J1eE3821hyA7mJjFk23GZetjW8N4lqXNmRwFu9IK8pb1QvxcGw95qg3BOJ/f8CtLVPhR+kcc=
X-Received: by 2002:a9d:3f34:: with SMTP id m49mr19872003otc.23.1549762036240; Sat, 09 Feb 2019 17:27:16 -0800 (PST)
MIME-Version: 1.0
References: <32C06675-C60B-4D6A-979A-FC3653E56D42@cooperw.in> <23C614C4-5C79-4355-9D74-2ED7D0DE63B2@vigilsec.com> <CAL02cgTzEQPTXyPL-ermABDne2G8F8UjbPpYADkyxxWHnVVf4g@mail.gmail.com> <a0a2ef94-335f-5ab6-e49c-7b1c985af3fc@cs.tcd.ie> <CAL02cgSnxB8-W_m13KM_HsSrE308vv5DuRJzt=t140G9JBdhUw@mail.gmail.com> <8873e4a0-a3d4-02b3-1c7b-28a9ea347165@joelhalpern.com>
In-Reply-To: <8873e4a0-a3d4-02b3-1c7b-28a9ea347165@joelhalpern.com>
From: Richard Barnes <rlb@ipv.sx>
Date: Sat, 9 Feb 2019 20:27:04 -0500
Message-ID: <CAL02cgQTzWtNVAWRZizFEekLDmapL7wOUMkJ0CWT_P_t3SDEtA@mail.gmail.com>
To: "Joel M. Halpern" <jmh@joelhalpern.com>
Cc: draft-ietf-iasa2-rfc4844-bis@ietf.org, IASA 2 WG <iasa20@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000a829760581801765"
Archived-At: <https://mailarchive.ietf.org/arch/msg/iasa20/QFFI-apjfaOKTQf9i3Tfxg9Rt1M>
Subject: Re: [Iasa20] Comments on draft-ietf-iasa2-rfc4844-bis-01
X-BeenThere: iasa20@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: =?iso-8859-1?q?Discussions_relating_to_reorganising_the_IETF_administrative_structures_in_the_so_called_=93IASA_2=2E0=94_project=2E?= <iasa20.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/iasa20>, <mailto:iasa20-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/iasa20/>
List-Post: <mailto:iasa20@ietf.org>
List-Help: <mailto:iasa20-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/iasa20>, <mailto:iasa20-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 10 Feb 2019 01:27:22 -0000

The text that's in IETF process docs does not matter here.  I'm talking
about the raw legal facts.

The RSE contract is an agreement between some legal entity and the RSE.
That entity has decision power over the contract, no matter what we say on
this mailing list or in an RFC.  That entity was ISOC; it is now the LLC,
since the contract has been reassigned.  In neither case does the IAB have
decision authority, nor did they ever.

--Richard

On Sat, Feb 9, 2019 at 8:10 PM Joel M. Halpern <jmh@joelhalpern.com> wrote:

> Richard, as far as I can tell you have this backwards.
> The responsibility for the RFC Series, and for the RSE, rests with the
> IAB.
> The IAB, as a practical matter, does not have the ability to contract.
> So the IAD was the person to handle the contract with the RSE.  And the
> ISOC provided the money.
>
> The only say Ray had in the RSE process was if there was a problem and
> the contract could not be agreed.
>
> For the IASA2 working group to change the authority over the RSE would
> be a major structural change.  The ONLY reason we are revising 6635 is
> to update the references to the IASA.  Bob has been careful about that.
>
> Do NOT attempt to make this change under this rubric.
>
> Yours,
> Joel
>
> On 2/9/19 7:23 PM, Richard Barnes wrote:
> >
> >
> > On Sat, Feb 9, 2019 at 6:59 PM Stephen Farrell
> > <stephen.farrell@cs.tcd.ie <mailto:stephen.farrell@cs.tcd.ie>> wrote:
> >
> >
> >
> >     On 09/02/2019 23:48, Richard Barnes wrote:
> >      > On Sat, Feb 9, 2019 at 1:44 PM Russ Housley <housley@vigilsec.com
> >     <mailto:housley@vigilsec.com>> wrote:
> >      >
> >      >> Alissa:
> >      >>
> >      >> I think we want the hiring/firing of the RFC Series Editor to
> >     stay with
> >      >> the IAB, but the funding to stay with IASA.
> >      >>
> >      >
> >      > This is not a reasonable thing to ask.
> >
> >     I'm way behind in being up to speed on this wg's stuff, so I
> >     may be off base here, but I reckon I strongly agree with Russ.
> >     The IAB are picked by the community and ought be the ones to
> >     hire a new RSE if one is needed. With no disrespect meant to
> >     trades-persons, I'd be fine with the hiring of electricians
> >     being handled internal to IASA; but not an RSE - the context
> >     here means those are utterly different.
> >
> >
> > When the IAB wants to take legal responsibility for the RSE contract,
> > they can control it.  If they don't, then they can't.
> >
> > That doesn't mean they can't be extensively consulted, but they can't
> > have ultimate authority over the contract, since they aren't a party.
> >
> > --Richard
> >
> >
> >     Cheers,
> >     S.
> >
> >     PS: I'd have said the above even were I not an incoming IAB
> >     member and hope not to be involved in picking a new RSE whilst
> >     on the IAB:-)
> >
> >      > One of the key driving factors for
> >      > this whole endeavor it makes no legal sense for an organization
> >     to delegate
> >      > its hiring / firing / contracting decisions to people external to
> >     that
> >      > organization.
> >      >
> >      > By all means, the IASA should work with the IAB on the RSE, but
> >     since the
> >      > IASA is ultimately the responsible party, it can't totally cede
> >      > responsibility.  The "operational oversight" text that's in there
> >     now seems
> >      > like it captures this accurately.
> >      >
> >      >
> >      >
> >      >> The decision whether the ED serves on the ROC should not be
> >     determined by
> >      >> this document.  If the IAB wants the ED to be part of RSOC, they
> >     can make
> >      >> that appointment.
> >      >>
> >      >> Perhaps it would be best to make this change:
> >      >>
> >      >> OLD:
> >      >>
> >      >>    The IASA is tasked with providing the funding for and
> operational
> >      >>    oversight of the RFC Editor.
> >      >>
> >      >> NEW:
> >      >>
> >      >>    The IASA is tasked with providing the funding for the RFC
> Editor.
> >      >>    The IETF Executive Director is tasked with overnight of
> contracts
> >      >>    and operational agreements related to the RFC Editor.
> >      >>
> >      >
> >      > I don't see how this accomplishes what you claim above.  The IETF
> >     ED is
> >      > part of the IASA.  And especially given that, the second sentence
> >     here is
> >      > really just micromanagement of the LLC.
> >      >
> >      > --Richard
> >      >
> >      >
> >      >
> >      >>
> >      >> Russ
> >      >>
> >      >> On Feb 8, 2019, at 8:11 PM, Alissa Cooper <alissa@cooperw.in
> >     <mailto:alissa@cooperw.in>> wrote:
> >      >>
> >      >> Earlier this week the IAB discussed whether to
> >      >> put draft-ietf-iasa2-rfc4844-bis-01 out for community review. In
> >     reviewing
> >      >> it I felt there were some clarifications needed before it would
> >     be ready
> >      >> and the IAB thought the most appropriate path would be to bring
> >     those to
> >      >> the WG for resolution first.
> >      >>
> >      >> I haven’t started my AD review of 4071bis yet (hope to next
> >     week), but I
> >      >> think 4071bis has a problem in that the definition of “IASA” in
> that
> >      >> document is broken (it refers to the definition in 4071, which
> >     it itself is
> >      >> obsoleting). And until it is clear how we are defining “IASA,” I
> >     have
> >      >> trouble with statements such as the following from Section 3.3
> >     in 4844bis:
> >      >>
> >      >> "The IASA is tasked with providing the funding for and
> >     operational oversight
> >      >> of the RFC Editor.”
> >      >>
> >      >> Is the RSOC part of IASA? It’s pretty hard to tell without a good
> >      >> definition of IASA, which we do not currently have IMO. (I think
> >     there is a
> >      >> further problem with the sentence above, which is that the
> >     funding comes
> >      >> from the LLC, and it would be better to be that specific.)
> >      >>
> >      >> While looking at Section 3.3, I don’t think this text belongs
> >     there since
> >      >> this document is about the RFC series and editor, not IASA
> >     generally:
> >      >>
> >      >> "The IETF LLC Board provides oversight of the IASA, and the IETF
> >     Executive
> >      >> Director is the chief actor for the IASA.”
> >      >>
> >      >> I also find lack of clarity between 4844bis Section 3 and
> >     6635bis Section
> >      >> 3. For example, 4844bis says:
> >      >>
> >      >> "The IETF Executive Director works with the IAB to identify
> >     suitable persons
> >      >> or entities to fulfill the mandate of the RFC Editor.”
> >      >>
> >      >> While 6635bis says:
> >      >>
> >      >> "For all decisions that affect the RSE individually (e.g.,
> >     hiring and firing),
> >      >> the RSOC prepares recommendations for the IAB, but the final
> >     decision is
> >      >> the responsibility of the IAB.”
> >      >>
> >      >> But under the current model (which I presume we plan to keep),
> >     the ED is a
> >      >> member of the RSOC. So does the ED work directly with the IAB? Or
> >      >> indirectly with the IAB through the RSOC? Or both?
> >      >>
> >      >> 4844bis also says:
> >      >>
> >      >> "The IETF Executive Director may define additional operational
> >      >> requirements and policies for management purposes to meet the
> >      >> requirements defined by the various communities.”
> >      >>
> >      >> I wonder if this is really consistent with what is envisioned in
> >     6635bis.
> >      >>
> >      >> I also find it odd that the budget for an RSE search is
> discussed in
> >      >> 6635bis, while the budget for the RFC Editor function overall is
> >     discussed
> >      >> in 4844bis — is the separation meaningful? Since the LLC Board
> >     approves the
> >      >> whole IETF budget, presumably what 4844bis says about the RFC
> >     Editor budget
> >      >> applies to the search budget mentioned in 6635bis as well, but
> >     since it’s
> >      >> not explicit it isn’t totally clear.
> >      >>
> >      >> Thanks,
> >      >> Alissa
> >      >>
> >      >>
> >      >>
> >      >> _______________________________________________
> >      >> iasa20 mailing list
> >      >> iasa20@ietf.org <mailto:iasa20@ietf.org>
> >      >> https://www.ietf.org/mailman/listinfo/iasa20
> >      >>
> >      >
> >      >
> >      > _______________________________________________
> >      > iasa20 mailing list
> >      > iasa20@ietf.org <mailto:iasa20@ietf.org>
> >      > https://www.ietf.org/mailman/listinfo/iasa20
> >      >
> >
> >
> > _______________________________________________
> > iasa20 mailing list
> > iasa20@ietf.org
> > https://www.ietf.org/mailman/listinfo/iasa20
> >
>