Re: adapting IETF in light of github and similar tools

Nick Hilliard <nick@foobar.org> Tue, 20 April 2021 16:38 UTC

Return-Path: <nick@foobar.org>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 298133A006A for <ietf@ietfa.amsl.com>; Tue, 20 Apr 2021 09:38:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xaHwy3qOyzW3 for <ietf@ietfa.amsl.com>; Tue, 20 Apr 2021 09:38:16 -0700 (PDT)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74C413A00C4 for <ietf@ietf.org>; Tue, 20 Apr 2021 09:38:15 -0700 (PDT)
X-Envelope-To: ietf@ietf.org
Received: from crumpet.local (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.16.1/8.16.1) with ESMTPSA id 13KGc5VT023915 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 20 Apr 2021 17:38:05 +0100 (IST) (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.local
Subject: Re: adapting IETF in light of github and similar tools
To: John Levine <johnl@taugh.com>
Cc: ietf@ietf.org, lloyd.wood@yahoo.co.uk
References: <20210420160859.BF41573B7076@ary.qy>
From: Nick Hilliard <nick@foobar.org>
Message-ID: <9678ca2c-207d-51ef-1979-c982253d7ecf@foobar.org>
Date: Tue, 20 Apr 2021 17:38:03 +0100
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:52.0) Gecko/20100101 PostboxApp/7.0.47
MIME-Version: 1.0
In-Reply-To: <20210420160859.BF41573B7076@ary.qy>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/ektojrTZjbIdvGckHfzb6Mf7a4E>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Apr 2021 16:38:21 -0000

John Levine wrote on 20/04/2021 17:08:
> There are certainly reasons to worry about depending on an unpaid third party but
> MS subverting Github is rather low on my list of concerns.

in addition to which, any claim of GH capture risk can be averted with a 
surprisingly low overhead "git clone" operation.

Nick