Re: [kitten] Updating IANA krb5 GSSAPI token type registry

[Sam Hartman <[e-mail]>]

>>>>> "Benjamin" == Benjamin Kaduk <[e-mail]> writes:



    Benjamin> There actually is provision in RFC 2743 for tokens to be
    Benjamin> passed to gss_process_context_token which are not deletion
    Benjamin> tokens. (Last two paragraphs of 1.2.1.2.)  I do not
    Benjamin> remember any provisions in RFC 4121 to account for this
    Benjamin> case, though, so I guess it is under-specified.

Right, but no provisions to create such tokens.
If we start thinking about that, making sure  that RFC 4121 doesn't use
the token type used by CFX would be potentially desirable..

    >> In general, when you ship a draft, you take on responsibility for
    >> dealing if the IETF process doesn't go the way you anticipate.
    >> Doing that is part of doing business; it's definitely the case
    >> that there are times when you end up shipping based on drafts.

    Benjamin> I don't disagree with anything you say there.

    Benjamin> However, I think we should consider what the purpose of
    Benjamin> the central registry is: to document what values are in
    Benjamin> use and avoid conflicts. Given that there were already
    Benjamin> values in broad use when the registry was created, I think
    Benjamin> it is appropriate to document those values in the
    Benjamin> registry, even if it is just as "reserved to avoid
    Benjamin> conflicts", as Martin notes in the prior art.  There
    Benjamin> certainly does not seem to be a shortage of values in the
    Benjamin> token type space.

    >> IANA expert decisions can be appealed; you'd first file an appeal
    >> with me, and then I'm not sure whether it goes to the IESG as a
    >> whole or the security AD.

    Benjamin> Is there a magic phrase that invokes such an appeal?  (Or
    Benjamin> does it go through IANA?)  I am unfamiliar with the
    Benjamin> process, and not necessarily indicating intent to do so.


I'm not sure if there are more formal ways, but just drop me a note if
you decide it's important enough to appeal and say that.  INcluding
rationale would be good.