Re: NF* (Re: PKCS#11 URI slot attributes & last call)

Nico Williams <nico@cryptonector.com> Sun, 04 January 2015 04:55 UTC

Return-Path: <nico@cryptonector.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C3561A1EFE; Sat, 3 Jan 2015 20:55:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.666
X-Spam-Level:
X-Spam-Status: No, score=-1.666 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EGpoKfWdj61Q; Sat, 3 Jan 2015 20:55:45 -0800 (PST)
Received: from homiemail-a32.g.dreamhost.com (sub4.mail.dreamhost.com [69.163.253.135]) by ietfa.amsl.com (Postfix) with ESMTP id 0BA8A1A1AE3; Sat, 3 Jan 2015 20:55:45 -0800 (PST)
Received: from homiemail-a32.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a32.g.dreamhost.com (Postfix) with ESMTP id BFE0B584059; Sat, 3 Jan 2015 20:55:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h=date :from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=cryptonector.com; bh=3A2jYkf3Rzd+Xx FmghAEyw4fBno=; b=UOlzYufXo2sRlnDw8G++OwdaKSSRPy8hgHFtgoUkkGjCZI lsHMnjcNBQkldLs1bug99QaekQ2ohkNhmptohiPo/XsjkSWw1PgTTEK497zeJenQ jB/E5mo0N+aH9/dkUwuFMBMU5Zn/z6aOaCjKxmDlIVOFzVlniGKwQX2v7DAho=
Received: from localhost (108-207-244-174.lightspeed.austtx.sbcglobal.net [108.207.244.174]) (Authenticated sender: nico@cryptonector.com) by homiemail-a32.g.dreamhost.com (Postfix) with ESMTPA id 3E604584057; Sat, 3 Jan 2015 20:55:44 -0800 (PST)
Date: Sat, 03 Jan 2015 22:55:43 -0600
From: Nico Williams <nico@cryptonector.com>
To: Jan Pechanec <jan.pechanec@oracle.com>
Subject: Re: NF* (Re: PKCS#11 URI slot attributes & last call)
Message-ID: <20150104045539.GY24442@localhost>
References: <CAK3OfOha9qu=uDtqwDTdV78waLMaorYq0T6cq1YX3VzQn2OpKA@mail.gmail.com> <A4CC6CEC-D17E-4235-B615-9D2AD88096D4@frobbit.se> <20141231070328.GK24442@localhost> <B08B813F-B8B4-49F1-A0B9-60F322C8E9C7@frobbit.se> <20141231074641.GM24442@localhost> <947CA101-D717-4B56-8EEE-84B3A53BF4A1@frobbit.se> <20141231082551.GN24442@localhost> <48A18B23-AAF9-44EA-8557-D25EBE398B56@frobbit.se> <20141231091906.GO24442@localhost> <alpine.GSO.2.00.1501031946310.6923@keflavik>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <alpine.GSO.2.00.1501031946310.6923@keflavik>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/aD8jSGG2E7RyhJn_L6QCrkgR7Hg
Cc: Darren J Moffat <Darren.Moffat@oracle.com>, John C Klensin <john-ietf@jck.com>, "ietf@ietf.org" <ietf@ietf.org>, "saag@ietf.org" <saag@ietf.org>, Patrik Fältström <paf@frobbit.se>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 04 Jan 2015 04:55:46 -0000

On Sat, Jan 03, 2015 at 07:58:52PM -0800, Jan Pechanec wrote:
> 	we could recommend the normalize-before-matching approach.  
> Even for objects (keys), the application could use only non-UTF-8 
> value attributes in the PKCS#11 search template.  Then, go through all 
> returning objects and for UTF-8 value attributes, do NFC normalization 
> first before matching them.
> 
> 	however, I think that "SHOULD" would be too strong.  I think 
> it could be mentioned side by side to the warning text based on what 
> John noted about situations with a need to use non-ASCII characters.

"RECOMMEND" and "SHOULD" mean the same thing.  Even if you try to use
"recommend" outside RFC2119 usage, it still kinda means "SHOULD", but
"should", "ought to" -- these can be taken to mean "not quite SHOULD".

Nico
--