Re: draft-housley-two-maturity-levels

SM <sm@resistor.net> Wed, 27 October 2010 19:41 UTC

Return-Path: <sm@resistor.net>
X-Original-To: ietf@core3.amsl.com
Delivered-To: ietf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A6B193A69B0 for <ietf@core3.amsl.com>; Wed, 27 Oct 2010 12:41:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.238
X-Spam-Level:
X-Spam-Status: No, score=-103.238 tagged_above=-999 required=5 tests=[AWL=-0.639, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YS1xcba5ZzFr for <ietf@core3.amsl.com>; Wed, 27 Oct 2010 12:41:07 -0700 (PDT)
Received: from ns1.qubic.net (ns1.qubic.net [208.69.177.116]) by core3.amsl.com (Postfix) with ESMTP id 205E93A69A1 for <ietf@ietf.org>; Wed, 27 Oct 2010 12:41:07 -0700 (PDT)
Received: from SUBMAN.resistor.net ([10.0.0.1]) (authenticated bits=0) by ns1.qubic.net (8.14.5.Alpha0/8.14.5.Alpha0) with ESMTP id o9RJgS6Y026026 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <ietf@ietf.org>; Wed, 27 Oct 2010 12:42:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=opendkim.org; s=mail2010; t=1288208575; x=1288294975; bh=HSxHGmdrD3Galp9tS1junvyhFY+AwrYhTGAsRXM247g=; h=Message-Id:Date:To:From:Subject:In-Reply-To:References: Mime-Version:Content-Type:Cc; b=TjeYvGFbXjjtkXoHl4QYgEq9gcYmIGynS7+0Zs+YacIcMzuAgKO5Mgq7uYD6PZu4W cQhkyWGGl+SLAGE2fmeOL3csZcLGkUvKipDqwYpC5dWIxdAdKsF4fJ7pxddtlXimRd z6NpHrW88VKNJj4S/6Y5foZ5zdK0xeasIuoEhHIc=
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=resistor.net; s=mail; t=1288208575; x=1288294975; bh=HSxHGmdrD3Galp9tS1junvyhFY+AwrYhTGAsRXM247g=; h=Message-Id:Date:To:From:Subject:In-Reply-To:References: Mime-Version:Content-Type:Cc; b=q/aEcJVdk4rXAhte04gnG18fyqG2ZfgvXNMh6ZE5dAQdqtnPN2yVbeFOmLyMbB+aV kvUY5kog37cGq8B+S4n4K/ecWH51goanXrTw3D12N1arhs4XTOK4K7lX/nI7EtzmQF u8I+GbmuTDfTSQQx9+09tFldlBAZJxWRc45JSTS0=
DomainKey-Signature: a=rsa-sha1; s=mail; d=resistor.net; c=simple; q=dns; b=17T/Hai/5+k9wE/aHzKJCBgkRNlh/tMkw1hjwMUOweJILiI7OrDaJEk+EbSOlR/YY vzNwbxK+rey7KCZlYEM0n5IRciXbFHWrBVTLrF9+/371AV+QQEfB5dVvxjLOa/LtHpn rvAhXz8u2tJI1C0IpgGP8U2X/RWHFFhI0zq/KQU=
Message-Id: <6.2.5.6.2.20101027002830.08c31110@resistor.net>
X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6
Date: Wed, 27 Oct 2010 11:18:56 -0700
To: ietf@ietf.org
From: SM <sm@resistor.net>
Subject: Re: draft-housley-two-maturity-levels
In-Reply-To: <4CC5CE36.5020503@vigilsec.com>
References: <20070.1278510136@erosen-linux> <4C3498CF.90206@dcrocker.net> <4C349E0E.7030904@gmx.de> <4C349ED8.6080706@bbiw.net> <4C7EB142.3030209@vigilsec.com> <4CA54E97.9050208@gmail.com> <201010010314.o913EZob020650@sj-core-3.cisco.com> <4CA557A2.5050002@gmail.com> <4CC5CE36.5020503@vigilsec.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Oct 2010 19:41:10 -0000

Hello,

At 11:36 25-10-10, Russ Housley wrote:
>Should I be seeking a sponsor for this draft?

I ask for your indulgence as I could not resist:

  "If you wish to seek Area Director sponsorship for an
   individual submission, the best solution is to contact the
   most relevant Area Director directly, with an explanation of
   why the draft is appropriate for IETF publication."

  "Also, please consider the normal IETF publication path
   through an existing working group, or consider proposing
   a BoF at a future IETF meeting."

In Section 1 of draft-housley-two-maturity-levels-02:

  "In the current environment, many documents are published as Proposed
   Standards and never advance to a higher maturity level.  Over time,
   this has resulted in IETF working groups and IESG members providing
   much more scrutiny than is called for by RFC 2026 [1] prior to
   publication as Proposed Standard."

Quoting a message from James M. Polk [1]:

  "I'm not in love with the 3 maturity levels, especially when I was asked by
   an AD during Maastricht to provide proof of 2 independent implementations
   just to have an ID I was presenting be considered to become a WG item."

That does not sound like IESG members providing much more 
scrutiny.  It sounds more like an undocumented rule being applied by 
IESG members.  A clarification about this has been posted [2].

Quoting the message:

   "If there were two independent implementations, this would
    clearly demonstrate the implementability of a Spec."

It is not a stretch too far to say that people will take that case 
and read it as a rule.

In Section 1:

  "One desired outcome is to provide an environment where the IETF
   community is able to publish Proposed Standards as soon as rough
   consensus is achieved."

That lowers the bar from "consensus" to "rough consensus" instead of 
setting consensus as the end-goal and falling back to rough consensus 
if people "agree to disagree".

In Section 2:

  "The requirements for Proposed Standard are unchanged; they remain
   exactly as specified in RFC 2026."

Does that mean that IESG members will not ask for two independent 
implementations?

In Section 5:

   "Lack of this review has not revealed any ill effects on the
    Internet Standards Process."

That means that evaluating the viability of the standardization 
effort and the usefulness of the technology is not important.

In Section 6:

   "The rules that make references to documents at lower maturity
    levels are a major cause of stagnation in the advancement of
    documents."

I would be grateful if anyone could point me to specific cases of 
that which could not have been addressed under current rules.

One of the bottlenecks of the process is the IESG.  It is not 
practical to ask IESG members to do a line by line review of hundreds 
of pages of Internet-Drafts before each IESG evaluation.  The number 
of Internet-Drafts seeking to attain Gold (proposed) Standard is 
quite high.  This proposal cannot change that.

The issue of timeliness of specifications has been mentioned.  If the 
actual specification is going to be delivered in two years or more, 
people will fall back to the Internet-Draft whatever the IETF 
says.  If the IETF is concerned about the IETF Standards Process, it 
could consider whether that can be brought down to one year.  This 
might entail:

  (i) one month for discussing what problem the author is trying to solve

  (ii) one month to haggle about process details

  (iii) nine months to go from Internet-Draft to Last Call

Review the document in a year, nit pick on it and refine it.  The 
IESG can ask for the implementation report at that stage.  Turn Draft 
into where the IETF tries to get it right.  The author would have 
some less than painful experience of the process by then to handle 
this.  The last stage could be seen as documents that have withstood 
the test of time.  If the Internet did not crash by then, the 
document is good enough.

The above is to encourage a "do or die" approach and leave it up to 
the community to go and write code to keep the IETF label.  It is 
infeasible to have IESG members catch all the bad ideas that are 
submitted for evaluation.  The IETF cannot protect the Internet.

   "The benefit of a standard to the Internet is in interoperability -
    that multiple products implementing a standard are able to work
    together in order to deliver valuable functions to the Internet's
    users."

The IETF could turn quality into:

    "the ability to express ideas with enough clarity that they
     can be understood in the same way by all people building
     systems to conform to them, and the ability (and willingness)
     to describe the properties of the system well enough to
     understand important consequences of its design, and to ensure
     that those consequences are beneficial to the Internet as a whole."

As mentioned in RFC 3935:

   "A part of being relevant is being timely - very often, documents
    delivered a year after core decisions have been taken are far
    less useful than documents that are available to the
    decision-makers at decision time."

As nothing has changed since the year 2004, it would be disingenuous 
to place the blame on the current IESG.

At 13:01 26-10-10, Hadriel Kaplan wrote:
>solve a problem anyone has.  For example, I don't think being at 
>only PS has prevented anyone from deploying HTTP or the myriad of 
>other protocols at PS level.  At this point, going above PS is for masochists.

The HTTP RFC is at Draft Standard level.

Regards,
-sm

1. http://www.ietf.org/mail-archive/web/ietf/current/msg64201.html
2. http://www.ietf.org/mail-archive/web/ietf/current/msg64298.html