Subject: Re: Escalation: time commitment to fix *production* security bugs for BLS RFC v4?

From: "Salz, Rich" <[email-masked]>
Date: Mon, 26 Apr 2021 15:24:19 +0000

*   It doesn't matter to you, but it does matter to other people like me.

You have been told several times, by several people, that a draft is not a standard.  No matter what vendors do, no matter what emails say about it. Even if the subject of the document says “A Standard BLS Mechanism,” until it is an RFC it is not a standard.

People within the IETF often use the word standard in a number of ways.  That doesn’t mean the document IS a standard.

I unmderstand this is frustrating to you, but just because some vendors implemented a draft, and you found a bug, that doesn’t mean the draft authors have to push out an update immediately. There is a reason, after all, why the document is called a *draft*