Re: [saag] i18n requirements (was: Re: NF* (Re: PKCS#11 URI slot attributes & last call))

Nico Williams <> Mon, 12 January 2015 04:54 UTC

Return-Path: <>
Received: from localhost ( []) by (Postfix) with ESMTP id 0CE551A8844; Sun, 11 Jan 2015 20:54:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -1.666
X-Spam-Status: No, score=-1.666 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id VAKrMJnGDMxi; Sun, 11 Jan 2015 20:54:14 -0800 (PST)
Received: from ( []) by (Postfix) with ESMTP id D5E531A87F1; Sun, 11 Jan 2015 20:54:14 -0800 (PST)
Received: from (localhost []) by (Postfix) with ESMTP id 420212005CF2C; Sun, 11 Jan 2015 20:54:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed;; h=date :from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to;; bh=tS/vru6vW6LPRu rQ0mBxO0mQksw=; b=DjMnJYZCczxxCwifHmqBpOXhUEfbVD2iUnOngiAj3Z2zfl 5qPGWVFpiM7TmejzL0iDclP0/SlBVAf8OedSRamba3WyFkb3pzpIp6Y8d7pYc/l3 r5H1ELlfofOYm2SbHgoXIoOAvlEoqrEwLonW0m5PpQEg45Y2h5j4/G3HD3hCE=
Received: from localhost ( []) (Authenticated sender: by (Postfix) with ESMTPA id C72742005CF07; Sun, 11 Jan 2015 20:54:13 -0800 (PST)
Date: Sun, 11 Jan 2015 22:54:13 -0600
From: Nico Williams <>
To: "Salz, Rich" <>
Subject: Re: [saag] i18n requirements (was: Re: NF* (Re: PKCS#11 URI slot attributes & last call))
Message-ID: <20150112045411.GD16323@localhost>
References: <> <>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <>
Cc: "" <>, "" <>, Jan Pechanec <>, Peter Gutmann <>
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Mon, 12 Jan 2015 04:54:16 -0000

On Sun, Jan 11, 2015 at 05:28:30PM -0500, Salz, Rich wrote:
> > I'd go even further than that and just mandate MUST ASCII. 
> I don't know if the IETF is "allowed" to do that any more, but +1 for
> the reasons you list.

I'm not sure if the IESG will agree to that, and I'm not sure if the
IETF will agree to that (well, this is an IETF LC, so we're finding
out).  The shepherd can probably give us a sense of the IESG, and we can
always come back and make it fit what the IESG wants.

As for myself, I'd rather we do something like this:

 - note that PKCS#11 used to be just-use-8

 - note that what used to interop did because of local conventions (what
   locales systems and/or user sessions use)

 - note that PKCS#11 _now_ says use-UTF-8 with no further advice

 - [therefore] note that

   a) US-ASCII is most likely to interop,
   b) where non-US-ASCII is needed then UTF-8 is most likely to interop
      (and is required by the latest PKCS#11 spec),
   c) where UTF-8 is used then one should normalize to NFC on create and
      lookup (and possibly use form-insensitive string matching).

I can't see the harm in any of those.  Requiring US-ASCII when PKCS#11
doesn't does strike me as a bit too pessimistic, but I'd be fine with