Re: [Idna-update] IDNA and combining sequences (was: Re: Expiration impending: <draft-klensin-idna-rfc5891bis-01.txt>)

Mark Davis ☕️ <mark@macchiato.com> Sat, 10 March 2018 16:24 UTC

Return-Path: <mark.edward.davis@gmail.com>
X-Original-To: idna-update@ietfa.amsl.com
Delivered-To: idna-update@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E31A126C26 for <idna-update@ietfa.amsl.com>; Sat, 10 Mar 2018 08:24:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.408
X-Spam-Level:
X-Spam-Status: No, score=-0.408 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.25, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_FONT_FACE_BAD=0.981, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com header.b=iBxBoCrS; dkim=pass (2048-bit key) header.d=macchiato-com.20150623.gappssmtp.com header.b=rZteaDDF
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SvTcAp83nIoB for <idna-update@ietfa.amsl.com>; Sat, 10 Mar 2018 08:24:44 -0800 (PST)
Received: from mail-ot0-x234.google.com (mail-ot0-x234.google.com [IPv6:2607:f8b0:4003:c0f::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D08C7126B7E for <idna-update@ietf.org>; Sat, 10 Mar 2018 08:24:43 -0800 (PST)
Received: by mail-ot0-x234.google.com with SMTP id h8so11491960oti.6 for <idna-update@ietf.org>; Sat, 10 Mar 2018 08:24:43 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=HDhoGoxFGFEB3ccIMYGPDQYBwjQ4dnkLmrLHcs5dEd4=; b=iBxBoCrSqKPP7hhyGOYJcr34ZxrvnYOEjDGjaC0Qo/KVFWPbAU3SaWLQDfVLAHyYXB Imb0zVnOf/YZlgd7QEm0pJa1ZSwaMaKyrvtm06CrIWDDM5ihJn+PB82s9gQ/iMEvZqEd MurGVa7MBLXS/qdh7OLdvNCeKKD4Uv0T1zMsY0XuopA3zx8zi+EuwTfgXsc/Rgq3Hwn3 YgEgeAJp+XtwFX346qevqPxnqpqhgpdCraOiUk90NsGlbJqcOYPVBVdUO01N1wgN8VAo 3JNuLcunDOdqWvmvzIrRhth9c0nYRVtJLZ6xdTz30/gv0R0B6+ApkMNitD5MO9uuGVDb iTmA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=macchiato-com.20150623.gappssmtp.com; s=20150623; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=HDhoGoxFGFEB3ccIMYGPDQYBwjQ4dnkLmrLHcs5dEd4=; b=rZteaDDFOx2CJdIKrKHvg9LKNOXOPPQyHBtMBq9vrBSMMty/LlTnI7i9Zx8he65hcm jggQCEeFkkjhDjRYigdrKkKXRHbv9J3pbUN12hdCpV7KoNcACV71BKnTpmSL2NQxq3Se F3liWRQo+tob0dlo9oa9Ygl1HZIcfBQo3tlxoGpBhkzMqU/fsGXyxzvImWn/LHRkRCvu tKWcNtI656vJZkvBkWt4243Ege9yaM8/0lq3oIg5G7LCS9ayu4Inm0iU73uSVZLQuwCK IJgKrcw97pL9xCd9itDj2fdpGgcII5QXFFhs+JCXl+1GX1e6ZneeoeZA3wtLmEMPw17J lMRg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=HDhoGoxFGFEB3ccIMYGPDQYBwjQ4dnkLmrLHcs5dEd4=; b=AuSRi8gpMsj3Xu4aDdicptrWkMujYSiXhGvIx7a4WrVzM8fiaelqK2MdaEQ6t1A9wX iW+LAddFoY+fJu3drLytdzBziVQbN+OeE5g0FBIMraIKGFaOBRVblxKBga6N8C51VfH3 8foNa0xDT4KIao/YN7OSVWAq22jJC8qtMjZXk1Gt50gcmtb/8cWgxhZN9+xpryQ24Nej Fw3wg2/cQK7r/+BSyCOmWT7qiEiMcFPXgYGmNsk8mGWmvBI8tD//i6rOev2fORXNyhNM PlNkVcqU/JjLLGCUshn2WPseHwISzJbEnLeEmjwqE6nP9MNv7dOoV4vWIIce59Tsf0dX Na0Q==
X-Gm-Message-State: AElRT7Ek2k6M/s928g/d1FTcSmUmX6GYYI4LlQbNzwMwkCo0JVu4s62p DemCzkJMzGHydzSosp6sIyRkOU3eoKNx1YvzxQg=
X-Google-Smtp-Source: AG47ELvyziE4BSHDDg0noN5Klh1qmxHWbf8NDUEh/teCnER7jrIbwRBRXU8DAspEJE54Ftn7wW+Nf9olWbhhezHQCn4=
X-Received: by 10.157.38.175 with SMTP id l44mr1608467otb.217.1520699082984; Sat, 10 Mar 2018 08:24:42 -0800 (PST)
MIME-Version: 1.0
Sender: mark.edward.davis@gmail.com
Received: by 2002:a9d:7385:0:0:0:0:0 with HTTP; Sat, 10 Mar 2018 08:24:22 -0800 (PST)
In-Reply-To: <516E58F3-015D-4AD7-A3FD-0749A6890245@frobbit.se>
References: <C4FBCF12821031786F472AA2@PSB> <02c29140-29f1-cc81-8c4f-8249d0f23b2c@ix.netcom.com> <1E562CDE39B4224F227E765D@PSB> <516E58F3-015D-4AD7-A3FD-0749A6890245@frobbit.se>
From: =?UTF-8?B?TWFyayBEYXZpcyDimJXvuI8=?= <mark@macchiato.com>
Date: Sat, 10 Mar 2018 17:24:22 +0100
X-Google-Sender-Auth: pbE3cw203YzNWXz372F9gsUG-UE
Message-ID: <CAJ2xs_Gfh+wS3w2AH9rAusCmb+=xS0WsRH18zsUqeXP1kZmb+A@mail.gmail.com>
To: =?UTF-8?B?UGF0cmlrIEbDpGx0c3Ryw7Zt?= <paf@frobbit.se>
Cc: John C Klensin <john-ietf@jck.com>, idna-update@ietf.org, Asmus Freytag <asmusf@ix.netcom.com>
Content-Type: multipart/alternative; boundary="001a113ec6d8a6d3aa0567115804"
Archived-At: <https://mailarchive.ietf.org/arch/msg/idna-update/C9avSamUXZG4Gn4jVoaI3F_t_r4>
Subject: Re: [Idna-update] IDNA and combining sequences (was: Re: Expiration impending: <draft-klensin-idna-rfc5891bis-01.txt>)
X-BeenThere: idna-update@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Internationalized Domain Names in Applications \(IDNA\) implementation and update discussions" <idna-update.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idna-update>, <mailto:idna-update-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idna-update/>
List-Post: <mailto:idna-update@ietf.org>
List-Help: <mailto:idna-update-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idna-update>, <mailto:idna-update-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 10 Mar 2018 16:24:46 -0000

>> We were given a different explanation and answer to our questions, one
much closer to "there is no problem and will be no problem in  the future,
so don't worry - no special rules are needed".
> Correct. Being on the receiving side of the messages, and one of the
persons that asked the questions, yes, we asked, they responded...

I'm mystified as to who exactly you think said "there is no problem and
will be no problem in the future" (or words to that effect), since I can't
imagine any Unicode expert saying that NFC, NFKC, or the then-proposed IDNA
2008 solves the problem of visually visually indistinguishable or confusing
characters. In fact, there are many emails on
https://mailarchive.ietf.org/arch/search/?email_list=idna-update NFKC
making it clear that NFKC reduces, but does not close to solving that
issue. And the same for the then-proposed context rules.

So I'm guessing that there was a misunderstanding as to the problem being
discussed.

Can you point to the email(s) on this list from a Unicode expert that you
would characterize as responding that "there is no problem and will be no
problem in  the future, so don't worry - no special rules are needed" ? (Of
course, it needn't be those exact words — I just want to figure out what
was the foundation for your statement.)


Mark

On Sat, Mar 10, 2018 at 2:06 PM, Patrik Fältström <paf@frobbit.se> wrote:

> On 9 Mar 2018, at 12:27, John C Klensin wrote:
>
> > * Your explanation below is very helpful, at least to me.
>
> Me too.
>
> > I am
> > confident that, if it was what we were given when we started the
> IDNA2008 design, some of the rules would have reflected it.   We were given
> a different explanation and answer to our questions, one much closer to
> "there is no problem and will be no problem in  the future, so don't worry
> - no special rules are needed".
>
> Correct. Being on the receiving side of the messages, and one of the
> persons that asked the questions, yes, we asked, they responded...
>
> > The question is what to do now.  If we were to decide that your
> discussion would made a good addition to the protocol, we would run into at
> least two problems.  One is that we promised the registry community that
> there would be no more disruptive
> > changes and, at least as important, the Unicode Consortium
> > outrage at our altering the way a handful of code points were treated
> would presumably be much greater if we were to make a change that would
> invalidate a large number of labels that might now be registered and in use
> somewhere in the tree.  Another is the problem that started this thread --
> there appears to be no energy in the IETF to consider and process changes
> to IDNA, even fairly trivial clarifications.
>
> I think we should do some scenario planning here. Remember that we do not
> have a world where IDNA2008 based on Unicode 6.x is what people use. People
> use all different kind of mix between IDNA2008, IDNA2003 and Unicode
> versions. I have myself worked with the curl library (that uses libidn) and
> to be honest, I do not think people KNOW what they use. Or they know, and
> they know they violate the rules. For the contracted parties, they have the
> LGR coming down the road anyways, so...
>
> And *if* we go down this path, is it "enough" to do in the LGR (i.e.
> ICANN) or should IETF do some adoption (and W3C?), or should IETF say "we
> can move forward in a more safe way AS WE KNOW ICANN DO LGR"...
>
> Or...
>
>    Patrik
>
> _______________________________________________
> IDNA-UPDATE mailing list
> IDNA-UPDATE@ietf.org
> https://www.ietf.org/mailman/listinfo/idna-update
>
>