Re: [ietf-dkim] [Technical Errata Reported] RFC6376 (4926)

Barry Leiba <barryleiba@computer.org> Tue, 14 February 2017 01:34 UTC

Return-Path: <ietf-dkim-bounces@mipassoc.org>
X-Original-To: ietfarch-ietf-dkim-archive@ietfa.amsl.com
Delivered-To: ietfarch-ietf-dkim-archive@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E46F91299B5 for <ietfarch-ietf-dkim-archive@ietfa.amsl.com>; Mon, 13 Feb 2017 17:34:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.291
X-Spam-Level:
X-Spam-Status: No, score=-1.291 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_SORBS_SPAM=0.5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (2048-bit key) reason="fail (message has been altered)" header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6Pelwfa0_Euo for <ietfarch-ietf-dkim-archive@ietfa.amsl.com>; Mon, 13 Feb 2017 17:34:26 -0800 (PST)
Received: from simon.songbird.com (simon.songbird.com [72.52.113.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF355129994 for <ietf-dkim-archive@ietf.org>; Mon, 13 Feb 2017 17:34:26 -0800 (PST)
Received: from simon.songbird.com (simon.songbird.com [127.0.0.1]) by simon.songbird.com (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id v1E1Yi8X028343; Mon, 13 Feb 2017 17:34:45 -0800
Authentication-Results: simon.songbird.com; dkim=fail reason="verification failed; unprotected key" header.d=gmail.com header.i=@gmail.com header.b=uG8jdfPu; dkim-adsp=none (unprotected policy); dkim-atps=neutral
Received: from mail-it0-f53.google.com (mail-it0-f53.google.com [209.85.214.53]) by simon.songbird.com (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id v1E1YeBx028339 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT) for <ietf-dkim@mipassoc.org>; Mon, 13 Feb 2017 17:34:42 -0800
Received: by mail-it0-f53.google.com with SMTP id d9so12897718itc.0 for <ietf-dkim@mipassoc.org>; Mon, 13 Feb 2017 17:32:59 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=VPXEFrd3+fCqrtzpDeHr4NHUjQg+EI6c9aBewGtG2Dw=; b=uG8jdfPu4emf5rOp5+QCmt84Zen+u0EUjRRd6oGCaKZNzsEPpeWmFNSR2ee4fsEI2W 4oPm+ETbyh33NviMykMoUQuWIVFWQBfVteBaJ906dAiGjvQhiDpMw6fl4brZos+27QDX rUrkpc82mMXXCZpYMALNJ4baVHkra32QhTaZMDLOpeJHvu+OMSI1N0BohlGqPe1hQZo0 HoouGDoqh0syFuk6KH1JljmdaeFpHT8OezYz5DI133GNl6kmOLlXxpLSB6g64sVCzEiD fO0O5axVUSvPmvjsREBC+KqPIF7GQMMkJGL095OLP4a7xeLm1HX7BpZ/kYiZXfjLcd5S MIaw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=VPXEFrd3+fCqrtzpDeHr4NHUjQg+EI6c9aBewGtG2Dw=; b=uPXUU0RR5cbPbQ7nBpanwEHziRnRAkH/MIQO96COYXspN/utTctcQdHiULrh/A11WP eCuRhmbizu0csHV3SnRXsz0SZeganF90eweoUAxLQ5cdKcvwFThAw7ATpCNo1LzUzFjs QEbf/znCToKCVm0OIUsL2bDe8uYFa8ur3qGZYCDzuxSch34hcdjPXXrvez/sJjp4/rjh tkc1wmr9YliT78ejKU4mudyr0bWsShLrTkxqvxdoUT+9Z8BgTBYSJDQFdDsSwoITuGLq 42PXXReAcptO+X8rtwjYvErakus0XM+a8FvL57RV3In5gBCCDxb6DSwrWafSRrLYukiA 0ToA==
X-Gm-Message-State: AMke39mJVwUznCJpG2tiFEFPe09h0eq2djdySJIl3ywzsYiaDTkX2C7yRpRLlTZBicw0A37rjkxx1uNV8fFszQ==
X-Received: by 10.107.19.196 with SMTP id 65mr25922998iot.185.1487035973226; Mon, 13 Feb 2017 17:32:53 -0800 (PST)
MIME-Version: 1.0
Received: by 10.107.55.134 with HTTP; Mon, 13 Feb 2017 17:32:52 -0800 (PST)
In-Reply-To: <CAL0qLwatr10gmSVoV_xFDHAVp5QCBpg_=aF=EdmXk45ZdHbNpA@mail.gmail.com>
References: <CALaySJJ8QvWp=QChL9Pvt5ytySpeRnU1y4xaXAiRD9vi4M+oZg@mail.gmail.com> <20170207181909.9946.qmail@ary.lan> <CALaySJKWvg+92jSk25OvMR1J9vBqtsSgp+VUTw+KuYDY+zJS=g@mail.gmail.com> <CAL0qLwatr10gmSVoV_xFDHAVp5QCBpg_=aF=EdmXk45ZdHbNpA@mail.gmail.com>
From: Barry Leiba <barryleiba@computer.org>
Date: Mon, 13 Feb 2017 20:32:52 -0500
X-Google-Sender-Auth: Z9FXrsG9vgPYWhDHczweQRxB0vw
Message-ID: <CAC4RtVBAKVYsPN5tO-hYPAuymA=ET_41ME+atyVQJuXi7pdpgw@mail.gmail.com>
To: "Murray S. Kucherawy" <superuser@gmail.com>, Stephen Farrell <stephen.farrell@cs.tcd.ie>
Cc: DKIM Mailing List <ietf-dkim@mipassoc.org>
Subject: Re: [ietf-dkim] [Technical Errata Reported] RFC6376 (4926)
X-BeenThere: ietf-dkim@mipassoc.org
X-Mailman-Version: 2.1.16
Precedence: list
List-Id: IETF DKIM Discussion List <ietf-dkim.mipassoc.org>
List-Unsubscribe: <http://mipassoc.org/mailman/options/ietf-dkim>, <mailto:ietf-dkim-request@mipassoc.org?subject=unsubscribe>
List-Archive: <http://mipassoc.org/pipermail/ietf-dkim/>
List-Post: <mailto:ietf-dkim@mipassoc.org>
List-Help: <mailto:ietf-dkim-request@mipassoc.org?subject=help>
List-Subscribe: <http://mipassoc.org/mailman/listinfo/ietf-dkim>, <mailto:ietf-dkim-request@mipassoc.org?subject=subscribe>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: ietf-dkim-bounces@mipassoc.org
Sender: ietf-dkim <ietf-dkim-bounces@mipassoc.org>

OK, so, Stephen:
This should definitely be closed out in some sort of accepted state.

Verified as Editorial is my preference.  Editorial because I don't
think it's a technical issue and it won't cause technical difficulties
in implementation.  Verified (not HFDU) because I think implementors
might use these examples to test their implementations, and will be
confused when they find examples that don't work (they're likely to
think they made implementation errors).

If you decide to leave it as Technical, then we should definitely go
with HFDU and *not* Verified.  The combination of Verified and
Technical implies a real technical error that would cause technically
incorrect implementations.

Barry


On Fri, Feb 10, 2017 at 11:29 AM, Murray S. Kucherawy
<superuser@gmail.com> wrote:
> On Tue, Feb 7, 2017 at 10:25 AM, Barry Leiba <barryleiba@computer.org>
> wrote:
>>
>> >>Murray, Tony, or someone else: Can you independently check that these
>> >>examples need the extra space in order to be verified correctly?
>> >
>> > Murray did that for us a decade ago -- it's one of the test cases that
>> > opendkim uses.
>>
>> Yes, but the point is: did Murray (or anyone) extract the text *from
>> the published RFC* and use that as input?  That is apparently what
>> Simon did, which resulted in this report.
>
>
> It looks to me like this was some loss of precision in the transition from
> RFC4871 to RFC6376.  The former has six spaces, and the latter has five.  I
> very likely didn't change my test suite in between, or re-test the examples
> in RFC6376 before it shipped.
>
> -MSK
>
> _______________________________________________
> NOTE WELL: This list operates according to
> http://mipassoc.org/dkim/ietf-list-rules.html
>
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html