Re: Use of private OIDs in WG (standard-track) documents

Viktor Dukhovni <ietf-dane@dukhovni.org> Sat, 28 March 2015 21:19 UTC

Return-Path: <ietf-dane@dukhovni.org>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA2531A8F35 for <ietf@ietfa.amsl.com>; Sat, 28 Mar 2015 14:19:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.8
X-Spam-Level:
X-Spam-Status: No, score=0.8 tagged_above=-999 required=5 tests=[BAYES_50=0.8] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 99CkZp0FoL7D for <ietf@ietfa.amsl.com>; Sat, 28 Mar 2015 14:19:08 -0700 (PDT)
Received: from mournblade.imrryr.org (mournblade.imrryr.org [38.117.134.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 725A11A8EA9 for <ietf@ietf.org>; Sat, 28 Mar 2015 14:19:08 -0700 (PDT)
Received: by mournblade.imrryr.org (Postfix, from userid 1034) id A5A9B283012; Sat, 28 Mar 2015 21:19:06 +0000 (UTC)
Date: Sat, 28 Mar 2015 21:19:06 +0000
From: Viktor Dukhovni <ietf-dane@dukhovni.org>
To: ietf@ietf.org
Subject: Re: Use of private OIDs in WG (standard-track) documents
Message-ID: <20150328211906.GI17637@mournblade.imrryr.org>
References: <55163324.6030504@openca.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <55163324.6030504@openca.org>
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf/JjO8VD0TlJY1Mh9tiKIdYzZgrhU>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: ietf@ietf.org
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 28 Mar 2015 21:19:10 -0000

On Fri, Mar 27, 2015 at 11:50:44PM -0500, Massimiliano Pala wrote:

> I do not really feel
> comfortable adopting OIDs that are under the control of a single
> organization. Would this be a first case ?

I don't see any possibility of "control" of a leaf OID once it is
assigned.  

All that organizations control s the issuing of new OIDS under
particular prefixes, and their prerogative is basically limited to
avoiding collisions with other people assigning OIDs under their
respective prefixes.  Once you publish an OID as fit for a particular
purpose, you cannot take it back.

So I see no risk here.  MIT's and Microsoft's OIDS are used in
Kerberos, for example.  This has not and cannot cause any problems.

-- 
	Viktor.