Re: Proposed Statement on "HTTPS everywhere for the IETF"

[John C Klensin <[e-mail]>]

--On Wednesday, June 03, 2015 21:18 +0100 Stephen Farrell
<[e-mail]> wrote:

>> Take a hum at next plenary and find out if people want the
>> IETF to actually use security or not.
>...
> Maybe a hum at a plenary is a bit too large a hammer to bring
> out for this fairly modest nail.

Stephen,

Independent of the substance of the statement itself -- for the
reasons Tony Hain and others have given and because, as you
point out, things have been available over HTTPS for years and
this is just a change in defaults, this still feels to me more
like theater than like something substantive.  Maybe that is ok
-- theater is sometimes useful.

However, if, in your view and that of the IESG this is a "fairly
modest nail", then I have to question whether the IESG might
have better ways to allocate and prioritize its time and that of
the community.  Put differently, this is either significant
enough (substantively or as theater) to justify whatever time
the IESG has spent on it and will spend in the future, plus the
time the community is spending reading, commenting, and reacting
to comments, or it is not.   If it is not, then the IESG has
made a bad decision about the use of its time and the time of
the community regardless of whether, in a perfect world, HTTPS
would be the default.

So how modest and minor do you really think it is?
  
   best,
    john