Re: List moderator action

Simon Josefsson <simon@josefsson.org> Tue, 05 May 2026 08:25 UTC

Return-Path: <simon@josefsson.org>
X-Original-To: ietf@mail2.ietf.org
Delivered-To: ietf@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 2E1D2E92D109 for <ietf@mail2.ietf.org>; Tue, 5 May 2026 01:25:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1777969554; bh=VevqnJ87osT8wwT2vp5SVF7ZXOC5T59xEQxgj57RA6E=; h=From:To:Cc:Subject:In-Reply-To:References:Date; b=ltE2mwA8uBtYYbjM7nDR0VpVB5UI1F5cl5jT3HlzGmAynAhfkg72tytfWkUFZBFCL pZuKXchjPaE7O9hVii+yAYNpOHPwnRabMaCYo0paT2c18HXplIllGDF+eLJF2nJ0Ft Tp1bwjrg2agN8IXLga0fkFlzUd0SONfY/TYE8D1k=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.401
X-Spam-Level:
X-Spam-Status: No, score=-4.401 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=josefsson.org header.b="xru0E0uR"; dkim=pass (2736-bit key) header.d=josefsson.org header.b="bswIHvS6"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wuyeGJDHOnHF for <ietf@mail2.ietf.org>; Tue, 5 May 2026 01:25:49 -0700 (PDT)
Received: from uggla.sjd.se (uggla.sjd.se [IPv6:2001:9b1:8633::107]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 6BF01E92D0FD for <ietf@ietf.org>; Tue, 5 May 2026 01:25:49 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=ed2303; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=SV9F/8QH+uVDkldxJXKHjaknrmmElLjLhfUc2UsQ5XQ=; t=1777969547; x=1779179147; b=xru0E0uRb+h/4mxwPDSKFeu5A7sSZGPY4XWmomPmmBisPZDNMM3VtoF1zLS+7BKSXog75vNRJ8B wL2wmQgBRAg==;
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=rsa2303; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=SV9F/8QH+uVDkldxJXKHjaknrmmElLjLhfUc2UsQ5XQ=; t=1777969547; x=1779179147; b=bswIHvS6alphsSUGCLJ/hYOsZ4Lr9HiA3Wc6/5V1OuPAuEH56Q7062gPmw7q5sBMJ0ncRS69Fhl +/M7M/TqWpQ+7OBRXdULyBNxZ85Gjm0PxFN03jSwUGPA7T/Xj+tIl8ZIZFofSNlklYgA03axy0WaV SjIM/cfOfZKW9RTHa2mHBbE75l8cp04iHibiPs7K7DEEGuommXjEUDLJsr1zCxr/qk3SyI1og/ywR ClKiZBmOJdC/fQaM0w8sX+cQZL3ve0GarZNPahuocpCXMSBDnWmOKbuiC1bJIYdQpyxM6uzSPZG7C 6y/3uboCdo8lC+YmocIuNudoU35Cq2q8JxK0CSGn8nApty0FyQgJhcvxATmISGaPpHEPcaRK6Kgwi PSMyMsSDuGgi5v3jsyOC/mrGlE3AFnhJHY6RAgo1Vs8cQIiqxfdHa7MMdv0yCVxTMLfnGDzqE;
Received: from h-178-174-130-130.a498.priv.bahnhof.se ([178.174.130.130]:58946 helo=frallan) by uggla.sjd.se with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from <simon@josefsson.org>) id 1wKB65-001sTu-82; Tue, 05 May 2026 08:25:41 +0000
From: Simon Josefsson <simon@josefsson.org>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
Subject: Re: List moderator action
In-Reply-To: <ffe1fea6-852d-427b-bd27-50fd2afbe714@gmail.com> (Brian E. Carpenter's message of "Tue, 5 May 2026 08:25:28 +1200")
References: <CAChr6Sw9NH=jFrnr+rB2aA7C7N9shgE1gjimQCxMvPW-0vh1HA@mail.gmail.com> <323b0599-475c-47ae-b3b1-beeeb2069eaf@gmail.com> <87cxzbd428.fsf@josefsson.org> <ffe1fea6-852d-427b-bd27-50fd2afbe714@gmail.com>
OpenPGP: id=B1D2BD1375BECB784CF4F8C4D73CF638C53C06BE; url=https://josefsson.org/key-20190320.txt
X-Hashcash: 1:23:260505:ietf@ietf.org::NFsbu2r1+TL6WOQP:5ywY
X-Hashcash: 1:23:260505:brian.e.carpenter@gmail.com::W+uY/xi8Rj1VZhfs:3u3/
X-Hashcash: 1:23:260505:sayrer@gmail.com::zdlzZX79/xx/1x8V:0L7KF
Date: Tue, 05 May 2026 10:25:42 +0200
Message-ID: <87a4uew9dl.fsf@josefsson.org>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha512"; protocol="application/pgp-signature"
Message-ID-Hash: URWNIA2LCN7PQFF3WI6ZLJZIEB5EVIQT
X-Message-ID-Hash: URWNIA2LCN7PQFF3WI6ZLJZIEB5EVIQT
X-MailFrom: simon@josefsson.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ietf.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Rob Sayre <sayrer@gmail.com>, IETF discussion list <ietf@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
List-Id: "IETF-Discussion. This is the most general IETF mailing list, intended for discussion of technical, procedural, operational, and other topics for which no dedicated mailing lists exist." <ietf.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/D7geKvwTRidjYviQYFBst5ymcz4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Owner: <mailto:ietf-owner@ietf.org>
List-Post: <mailto:ietf@ietf.org>
List-Subscribe: <mailto:ietf-join@ietf.org>
List-Unsubscribe: <mailto:ietf-leave@ietf.org>

Brian E Carpenter <brian.e.carpenter@gmail.com> writes:

> Simon,
>
> IANAL so I will not debate whether section 3.3 would or would not
> be considered effective by a hypothetical court in a hypothetical
> jurisdiction.

That wasn't my point.  My point was that we harm the IETF's relevance by
banning people from making contributions related to non-hybrid/NIST PQ
crypto.  The harm is increased when the rationale is based on text that
we ourselves explicitly say is not normative.  And then again further by
normative text confirming the opposite.

> However, I don't think it matters since any IETF participant is bound
> by all the IETF processes and policies, and that includes IESG
> statements, and the list moderator action is based on an IESG
> statement.

Where does it follow from https://www.ietf.org/about/note-well/ that
IESG statements override BCP9, BCP78 etc?

I can't find the term 'IESG statement' in any of BCP9, BCP78 etc
documents.

/Simon

> Regards/Ngā mihi
>    Brian Carpenter
>
> On 04-May-26 19:30, Simon Josefsson wrote:
>> Brian E Carpenter <brian.e.carpenter@gmail.com> writes:
>> 
>>> On 03-May-26 07:32, Rob Sayre wrote:
>>>> Hi,
>>>> Apologies in advance for being a giant pain.
>>>> Lars Eggert <lars@eggert.org <mailto:lars@eggert.org>> wrote:
>>>>   > If you read Section 3.3 of RFC 5378 you will find the “specific
>>>>   > context” is about documents.
>>>> It is not. It is about "Contributions" in caps.
>>>> While I agree with the goal of the IESG statement, and the moderator
>>>> actions here, we have to go fix RFC 5378 for this one.
>>>
>>> What needs fixing? It says that the IETF requires the right to make
>>> derivative works of all contributions, which includes emails.
>>>
>>> The final paragraph of section 3.3 allows "no derivative works"
>>> legends only for two special cases: "information about proprietary
>>> technologies" and republishing standards from other SDOs. Most emails
>>> are neither of those cases; therefore "no derivative works" legends
>>> are forbidden.
>> Section 5.3 is clear and uses well-defined terms, and according to
>> the
>> multiple legal advice I've gotten over the years, those are the terms
>> that are binding.
>> Regarding the entire section 3, consider that its title is:
>>     3. Exposition of Why These Procedures Are the Way They Are
>> .........6
>> The section is written informally and try to explain the legal words
>> in
>> other ways.  The introduction of the document re-inforces this:
>>     Section 1 provides definitions used in these policies.  Sections
>> 3
>>     and 4 of this document explain the rationale for these provisions.
>>     Sections 1, 2, 5, and 6 of this document are normative, the other
>>     sections are informative.  RFC 3979 (BCP 79) [RFC3979] deals with
>> Read that again: Section 3 has no normative bearing.
>> It is unfortunate that the IESG made a statement that enforce a
>> particular legal interpretation which is based on content in Section 3.
>> That puts the IETF into legal jeopardy and opens up for anti-trust
>> and/or anti-openness risks, and harms the reputation of the IETF as an
>> open standardization organization.
>> /Simon
>