Re: draft-housley-two-maturity-levels

Tony Hansen <tony@att.com> Tue, 25 January 2011 04:11 UTC

Return-Path: <tony@att.com>
X-Original-To: ietf@core3.amsl.com
Delivered-To: ietf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AA7AA28B797 for <ietf@core3.amsl.com>; Mon, 24 Jan 2011 20:11:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -107.535
X-Spam-Level:
X-Spam-Status: No, score=-107.535 tagged_above=-999 required=5 tests=[AWL=1.064, BAYES_00=-2.599, GB_I_LETTER=-2, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZJZRRipmhBAI for <ietf@core3.amsl.com>; Mon, 24 Jan 2011 20:11:15 -0800 (PST)
Received: from mail119.messagelabs.com (mail119.messagelabs.com [216.82.241.195]) by core3.amsl.com (Postfix) with ESMTP id 9FFBA3A6B76 for <ietf@ietf.org>; Mon, 24 Jan 2011 20:11:13 -0800 (PST)
X-VirusChecked: Checked
X-Env-Sender: tony@att.com
X-Msg-Ref: server-13.tower-119.messagelabs.com!1295928848!3354854!1
X-StarScan-Version: 6.2.9; banners=-,-,-
X-Originating-IP: [144.160.20.145]
Received: (qmail 22625 invoked from network); 25 Jan 2011 04:14:09 -0000
Received: from sbcsmtp6.sbc.com (HELO mlpd192.enaf.sfdc.sbc.com) (144.160.20.145) by server-13.tower-119.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 25 Jan 2011 04:14:09 -0000
Received: from enaf.sfdc.sbc.com (localhost.localdomain [127.0.0.1]) by mlpd192.enaf.sfdc.sbc.com (8.14.4/8.14.4) with ESMTP id p0P4EVlP021150 for <ietf@ietf.org>; Mon, 24 Jan 2011 23:14:31 -0500
Received: from alpd052.aldc.att.com (alpd052.aldc.att.com [130.8.42.31]) by mlpd192.enaf.sfdc.sbc.com (8.14.4/8.14.4) with ESMTP id p0P4EOC0021073 for <ietf@ietf.org>; Mon, 24 Jan 2011 23:14:24 -0500
Received: from aldc.att.com (localhost.localdomain [127.0.0.1]) by alpd052.aldc.att.com (8.14.4/8.14.4) with ESMTP id p0P4E19J004708 for <ietf@ietf.org>; Mon, 24 Jan 2011 23:14:01 -0500
Received: from dns.maillennium.att.com (dns.maillennium.att.com [135.25.114.99]) by alpd052.aldc.att.com (8.14.4/8.14.4) with ESMTP id p0P4DpXW003698 for <ietf@ietf.org>; Mon, 24 Jan 2011 23:13:52 -0500
Received: from [135.70.111.58] (vpn-135-70-111-58.vpn.swst.att.com[135.70.111.58]) by maillennium.att.com (mailgw1) with ESMTP id <20110125041349gw100e4l9ke> (Authid: tony); Tue, 25 Jan 2011 04:13:50 +0000
X-Originating-IP: [135.70.111.58]
Message-ID: <4D3E4DFD.4060906@att.com>
Date: Mon, 24 Jan 2011 23:13:49 -0500
From: Tony Hansen <tony@att.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7
MIME-Version: 1.0
To: Russ Housley <housley@vigilsec.com>
Subject: Re: draft-housley-two-maturity-levels
References: <4B803580-664C-42B3-92A7-712452F12BA3@gmail.com> <01NTJJR8423E000CVY@mauve.mrochek.com> <20101027171037.GB3162@nsn.com> <63DD35D1-1C25-401D-8C05-992A2D11E3DE@vigilsec.com>
In-Reply-To: <63DD35D1-1C25-401D-8C05-992A2D11E3DE@vigilsec.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Cc: IETF <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Jan 2011 04:11:23 -0000

On 1/24/2011 12:37 PM, Russ Housley wrote:
> draft-housley-two-maturity-levels-03 was just posted. ...

Overall I find this spec to be an improvement over the previous version. 
Here are a few areas where improvements can be made.

====

This phrase in Section 1:

     In addition,
     IETF working groups and IESG members providing much more scrutiny
     than is called for by RFC 2026 [1] prior to publication as Proposed
     Standard.

is not a sentence. Should it be "provide"? Should it be "have been 
providing"? Something else?

====

The sentence in Section 1

     One desired outcome is to provide an environment where the
     IETF community is able to publish Proposed Standards as soon
     as rough consensus is achieved.

and these sentences in Section 2.1:

     The intention of the two-tier maturity
     ladder is to restore the requirements for Proposed Standard from RFC
     2026. No new requirements are introduced; no existing published
     requirements are relaxed.

together lay out what is required for PS. Disregarding the other 
arguments over the word "restore", these sentences are otherwise fine 
and dandy.

But I think there needs to be further guidance provided to the IESG and 
Working Groups on how they should change their behavior. What is wrong 
with how the WGs and IESG are currently interpreting the rules of 2026 
for PS? What current behaviors differ or have gone beyond what 2026 
requires, and hence need to be changed to restore those requirements? 
Without such guidance, nothing changes.

====

One major section that has been removed from the previous version of 
this I-D is what to do with documents currently in the Draft Standard 
status. I know that there was significant disagreement with the 
"automatic reclassification to Internet Standard" proposed before, with 
good reason.

I'm going to letter the the rules in section 2.2 as follows. I'm also 
going to indicate how these sort of map into the old classifications:

     a) technical maturity (DS => FS)
     b) belief in significant benefit to Internet community (DS => FS)
     c) significant number of implementations with successful 
operational experience (DS => FS)
     d) no unresolved errata (PS => DS)
     e) no unused features that increases implementation complexity (PS 
=> DS)

Some people have argued that having a significant number of 
implementations (c) is sufficient to demonstrate both technical maturity 
(a) and the belief in benefit (b). The (d) and (e) requirements have 
already been demonstrated by virtue of those RFCs already being at DS 
status, although additional errata may have been filed against the DS.

So I'm going to suggest that the following be applied to documents that 
are currently in Draft Standard status:

     Any protocol or service that is currently in Draft Standard status, 
without
     significant unresolved errata, may be reclassified as an Internet 
Standard
     as soon as it can be demonstrated to have a significant number of
     implementations with successful operational experience.

     This reclassification may be accomplished by filing a request with 
the IESG,
     detailing the Implementation and Operational Experience. After 
review, the
     IESG will hold an IETF-wide Last Call on the reclassification. If 
there is consensus
     for the reclassification, the RFC will be reclassified without 
being reissued.

     Protocols and services that have significant unresolved errata will 
need to be
     re-issued to resolve the errata before the above criteria can be 
applied.

Of course, there is still an open question what it means to have a 
"significant number", which will remain as subjective as it was before 
with the 2026 rules.

     Tony Hansen
     tony@att.com