Re: Things that used to be clear (was Re: Evolving Documents (nee "Living Documents") side meeting at IETF105.)

Leif Johansson <leifj@mnt.se> Thu, 04 July 2019 21:20 UTC

Return-Path: <leifj@mnt.se>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D475212024C for <ietf@ietfa.amsl.com>; Thu, 4 Jul 2019 14:20:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnt-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O5a6cEwHbpPM for <ietf@ietfa.amsl.com>; Thu, 4 Jul 2019 14:20:20 -0700 (PDT)
Received: from mail-lf1-x133.google.com (mail-lf1-x133.google.com [IPv6:2a00:1450:4864:20::133]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08B3F120165 for <ietf@ietf.org>; Thu, 4 Jul 2019 14:20:20 -0700 (PDT)
Received: by mail-lf1-x133.google.com with SMTP id c9so3241381lfh.4 for <ietf@ietf.org>; Thu, 04 Jul 2019 14:20:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnt-se.20150623.gappssmtp.com; s=20150623; h=to:references:from:openpgp:autocrypt:subject:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=00K9eOa8pR5HwSpLJsEglWbONpUl6fZ6xQy2pw9aa9I=; b=TaBnqR5S+ceXURdZ1UZbPmfPi9nNFgFqhGG5h8daqpJtfy+MN6dlAFsmzv6/ILJcRw 4SMCRAQeWGh7atVsbcUXHDoFoNIe/iBQGLgoaTG5TIGFR7OxZXj7FR7mRi+lzG8jktR2 1myTB70ytSAGZFM+xxsSlBX0s05EY+wldzOTNvI2hsaL/IjatXFKedtImPAhVHfui86u lKPBxtcOBXBhuynU9yJ0phM6t9VzKqWkNtaCM0SP/MsMN/p8tfL3WNxeo3x3usABinO0 9mkZUyDjquHA0RI/vcSnplPJdk0/cqfLI3DjKISuCB6+7S+Ji0w/ZVKYSOzaPDMSXV/O trOw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:references:from:openpgp:autocrypt:subject :message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=00K9eOa8pR5HwSpLJsEglWbONpUl6fZ6xQy2pw9aa9I=; b=REWQ1T7gqM2t08qbHO8Z1s0dNaj07IDdN0xCWyqnrni4MeGVdkSt7gAo+a7i0fFcY2 k04Rm0MZu+i93E9TGEOyr2iQvQk0wJSdHyPcKuzmAfZccS+Qyf95KaguWb5aTqYV8Jdo VpHhjpbsKZ19a1XsylUyIy85ZaZGwjfPe9KNs1iTuH39BCxme4ilGXuzTf4wevdWtiYx F3hTRrQLdo0mCDGMgyVwDSN7ZuEBnwEMihgSlqcblNCLh2sUJTcyO1X80z/UoOQ0aS1Y lE/1g6Eya8bCUMHtAxWAD2Z4J7swlXzOJKPgSJWjPYH7gwLgqN2B+Is8F7y7ZWMRtt8y 3fVg==
X-Gm-Message-State: APjAAAV4sDuTdNxozq2W1YtRWrqUn44VAUX0HsEMGDRUmozIWd7LgrB8 qZOxTOtDhpAZkdaoi3YACOlck3Qu8YE=
X-Google-Smtp-Source: APXvYqxJk6mp1ve4YnLnZO8QK/r80rUroTQnefswwvMCnxEVueEx5Sv114WRcdKNgrvN62B2XKc7cA==
X-Received: by 2002:ac2:5189:: with SMTP id u9mr264962lfi.189.1562275217703; Thu, 04 Jul 2019 14:20:17 -0700 (PDT)
Received: from [10.0.0.129] (h88-129-251-65.cust.a3fiber.se. [88.129.251.65]) by smtp.gmail.com with ESMTPSA id r20sm1354377ljr.20.2019.07.04.14.20.16 for <ietf@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 04 Jul 2019 14:20:17 -0700 (PDT)
To: ietf@ietf.org
References: <CAL02cgToQWmOrfOxS_dc4KRtT9e0PXNzmhWZHkRUyV_3V=E-mQ@mail.gmail.com> <0856af71-4d84-09d1-834d-12ac7252420c@network-heretics.com> <CAL02cgQ9qWVUTPW=Cpx=r32k3i1PLgfp5ax0pKMdH0nKObcKTg@mail.gmail.com> <e8d28a7f-128d-e8d0-17d3-146c6ff5b546@joelhalpern.com> <CAHw9_i+UBs85P+gjcF6BJd1_WD2qFrrYCnXb4rtcG9Hepqm37w@mail.gmail.com> <796c1f6c-cd67-2cd5-9a98-9059a0e516f8@network-heretics.com> <20190704013009.dlifopcbm2umnqo7@mx4.yitter.info> <b18809df-ee98-fb29-b6c4-04ed579e163a@network-heretics.com> <20190704052335.GF3508@localhost> <CABcZeBOw6w2tm4YYFdmLwC23ufPDupt2D1Vzwjn4Pi9bbf6R-w@mail.gmail.com> <20190704192057.GI3508@localhost> <CABcZeBMC-VRfea3YqLSs6yhtEq4VtfdO5L56v87KH=vMR4y=+A@mail.gmail.com>
From: Leif Johansson <leifj@mnt.se>
Openpgp: preference=signencrypt
Autocrypt: addr=leifj@mnt.se; prefer-encrypt=mutual; keydata= mQGiBD7DfnwRBADpIpOw6bXfx2Yo3vac/j5WzVcWNZKuiYc4uuFnBYxH8zTA5cdwytuOYNte cX1yrPgmObfPVU0EFktdBMFgLE5TNRUMeJZTmAl3QYDm8N32SeSUEb6GPFsUTGgxsCW3GVAo q6DBopKqhR9HT0+crQakbc7XkS4FjeBWiXjuNf/IqwCgyoa2Qfq8UdjbcH+DRGzPnRTeqzEE ALIEsCzDp4HQqXqqNLCoExbgmCrEHvnqFmilCHJVnyuY8LXmcpq2uwJaiIdsTqLeQ8WrMxWg mZc6F9QSdLP6MVZT3v+5OqOZMUDsu4nGom3HH+tG238vMSEF+klGdrI0wdscrY+28Oshjhqj 4FZxCwdNU9RTU8xQ9IoObiEo1yOHBADK9a5GhkLT+d2cb48orETGtG7i//HOnstouw/TmEUX reZPtT6wpIdN9Jf3W80GA6A34VEGA/I+/5e+9nFvINpLvEF2ghJBH+sWwQ8EXpo0M/yir9oG eJI7gpOHRj5Mq9uqFG0wcamInuWgbMP1cefjXusHbHyDFKr7ydWSsZHqXrQdTGVpZiBKb2hh bnNzb24gPGxlaWZqQG1udC5zZT6IYAQTEQIAIAUCSnC8wwIbIwYLCQgHAwIEFQIIAwQWAgMB Ah4BAheAAAoJEPCcfBbWzGZ3x8MAnimIMTFOH4LLfp8bQnSPWm6BQyA6AKCk4S46++PpqtTM 0wIZ+kuYaBtky7kCDQQ+w36FEAgAr1zK1qIIXmoeEqFulgFi17FRpSibNwwge9bkG2+IO7MO m4Ih+f4CRkqaP5U5diiWb4nyQc/Yqzf3TTSE+CH0ghvDCwfZHrzUsVl9t57S2RFKaQhDUUw3 lz0TgKN66z1IRnQEARuz9PFd96pIhLaJBOn0e55Cu5qqJVwGpst3+I3jqT/cxjymRxPz2O6R 9k/ZOOiOGROZYAjNHKcdoeBr7OaIHcPRCi1R8MBKE4HOK1SwaVvs26Fd2enixIOBmyFTkrue 3VgaAd3zrJauD0qa/u5y2kGEyFFJwNsKnoX0aCmNNIG+aKvnSCWfba8bmYOAsbxS2lo4MKmu DM0rrVyLhwADBQf/VzM77aviZ3Ir7qXj0uV/62wyrg8/5flXl8XjuATewD+hTaux1lg5LgPU 9cokMHYHrTsnp79nhEB9qOpsQLX+npae7a27x3zyqLP0V7neyKy1ycuBI9KU9B3ivgSMRlKR 91GcmUpRnKiSnxPYNtq018mY72YYHCpfAh0OOUA88bxbYIuF5cv9dYyOBhNEkI8xB1VOWev1 CPkPb0DwDABHdOBq9e0hT3OUOaat2JPwCEHU2NTGsYFuZRysq8xnxFgHd00+h2OJZ50UYVpB jDxaCj5gvHHFFnmfCLD5VqjEJGi4k2znZHg67i2pw0f5BSq8fsfdUML35LzL/aaZPMzlg4hG BBgRAgAGBQI+w36FAAoJEPCcfBbWzGZ3djcAnAxF3084vKlsRNGcyj/rn5lA4Q+nAKCnjZYX snFG51wbu8OI88aj3LJE5w==
Subject: Re: Things that used to be clear (was Re: Evolving Documents (nee "Living Documents") side meeting at IETF105.)
Message-ID: <5c9048ef-ba2b-a362-3941-82eacc664b64@mnt.se>
Date: Thu, 04 Jul 2019 23:20:15 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.7.1
MIME-Version: 1.0
In-Reply-To: <CABcZeBMC-VRfea3YqLSs6yhtEq4VtfdO5L56v87KH=vMR4y=+A@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/rXijfPIbSLBJ5AAY9__mMHL5nSk>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Jul 2019 21:20:23 -0000


On 2019-07-04 22:13, Eric Rescorla wrote:
> 
> 
> On Thu, Jul 4, 2019 at 12:21 PM Nico Williams <nico@cryptonector.com
> <mailto:nico@cryptonector.com>> wrote:
> 
>     On Thu, Jul 04, 2019 at 08:31:47AM -0700, Eric Rescorla wrote:
>     > Ignoring labelling for a moment, in a number of WGs (HTTP, TLS, and
>     > QUIC) we have found it necessary to have full implementations and
>     > large-scale deployments quite early in the design process, long before
>     > anyone thinks that the document is done.
> 
>     I had that experience in mind.
> 
>     Except for QUIC (whose implementors and deployers understood and
>     expected to have to make backwards-incompatible changes / move to HTTP/2
>     and /3), HTTP/2 and TLS 1.3 didn't get widespread deployment during this
>     process.  But they did get some, and that "some deployment" was
>     absolutely critical to their success.
> 
> 
> I don't want to nitpick about widespread, but we were seeing single
> digit fractions
> of Firefox connections with TLS 1.3 during this period. I would
> anticipate that
> QUIC will be similar.
> 
> -Ekr
> 

These are all success stories (TLS, QUIC...) that seem to follow the
pattern of a fairly tight knit community of comitted actors who are
willing to progress at roughly the same pace.

I was here when MSFT suddenly announced that a particular draft of
pkinit was going to get shipped in Active Directory krb and that was
that. Would we have gotten further down the road of practical interop
for asymmetric key authn in kerberos had we use the same pattern of
work as TLS 1.3 did? Maybe we're just better at this now? I doubt it.

I do know that for every success story there is a case of a WGs killed
by a big actor who decides it is no longer going to play ball... some
very recently.

You can lead the horse to water but you can't force it to drink
but to what extent is flexibility wrt the publication process enabling
this behaviour?

	Cheers Leif