IETF Logo Mail Archive

Re: [idn] Re: process

Erik van der Poel <erik@vanderpoel.org> Fri, 25 February 2005 17:18 UTC

Received: from psg.com (mailnull@psg.com [147.28.0.62]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA09733 for <idn-archive@lists.ietf.org>; Fri, 25 Feb 2005 12:18:44 -0500 (EST)
Received: from majordom by psg.com with local (Exim 4.44 (FreeBSD)) id 1D4j3F-0000ay-Ju for idn-data@psg.com; Fri, 25 Feb 2005 17:14:53 +0000
Received: from [207.115.63.102] (helo=pimout3-ext.prodigy.net) by psg.com with esmtp (Exim 4.44 (FreeBSD)) id 1D4j3E-0000af-3x for idn@ops.ietf.org; Fri, 25 Feb 2005 17:14:52 +0000
Received: from [10.1.1.2] (adsl-64-174-147-206.dsl.sntc01.pacbell.net [64.174.147.206]) by pimout3-ext.prodigy.net (8.12.10 milter /8.12.10) with ESMTP id j1PHEepY359948; Fri, 25 Feb 2005 12:14:40 -0500
Message-ID: <421F5CFA.5020903@vanderpoel.org>
Date: Fri, 25 Feb 2005 09:14:34 -0800
From: Erik van der Poel <erik@vanderpoel.org>
User-Agent: Mozilla Thunderbird 1.0 (X11/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: James Seng <james@seng.cc>
CC: idn@ops.ietf.org, Stephane Bortzmeyer <bortzmeyer@nic.fr>, Doug Ewell <dewell@adelphia.net>
Subject: Re: [idn] Re: process
References: <D872CCF059514053ECF8A198@scan.jck.com> <421D8411.9030006@vanderpoel.org> <p06210208be4390618c81@[192.168.0.101]> <421E0D0C.2000309@vanderpoel.org> <p06210202be43c3888991@[192.168.0.101]> <E07CE813AD23B2D95DA0C740@scan.jck.com> <421E30F2.1040408@vanderpoel.org> <0E7F74C71945B923C52211F3@scan.jck.com> <421EA0C9.1010500@vanderpoel.org> <00a401c51af3$7863aae0$030aa8c0@DEWELL> <20050225113725.GA8820@nic.fr> <421F482B.1060909@vanderpoel.org> <2b4b22d85b2872558414c64071e7b993@seng.cc>
In-Reply-To: <2b4b22d85b2872558414c64071e7b993@seng.cc>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on psg.com
X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.0.1
Sender: owner-idn@ops.ietf.org
Precedence: bulk
Content-Transfer-Encoding: 7bit

James Seng wrote:
> FYI, punctuation were also debated extensively back then so it isn't 
> really 'Oh, we just discover this!'.
> 
> It's just interesting to see people putting it into action. Does apps 
> needs to be fixed? Yes, absolutely. App developers needs to go read the 
> security consideration of rfc3490 and think about how to implement some 
> solution to reduce the spoofing risk.
> 
> but does it warrant changing the existing rfc? I dunno..I havent seen 
> anything that suggest we missed something back then.

That's a pretty cavalier attitude for someone who used to be co-chair of 
an IETF Working Group.

http://ietf.org/html.charters/OLD/idn-charter.html

Maybe I should write an Informational RFC titled "IDN Considered 
Harmful". Would that catch your attention?

Erik

PS Re: RFC 3490 Security Considerations, please tell me exactly where 
punctuation is specifically mentioned.

v2.23.0 | Report a Bug | By Email