Re: [kitten] I-D: Best practices for password hashing and storage

A tiny bit of background:

https://xmpp.org/extensions/inbox/password-storage.html was submitted to
the XMPP Standards Foundation [think somewhere between an I-D publication
and a WG adoption request], and while the Council [WG chair/IESG] is happy
to accept it, pretty much everyone seems to agree that if this can go
through IETF/KITTEN instead, it'll be a better document for it.

But everything else that's taken this route has sunk without trace, so
we're likely to publish the XEP (as Experimental - akin to WG I-D) anyway,
and then we can retract it if it actually does take root here. At least on
my part, this is an intentional policy change to ensure that the document
is reviewed and published *somewhere*. Previously I have tended to block
these kinds of documents and force them to the IETF (and KITTEN). As a
result we have (for example) multiple SASL mechanism proposals
effectively dead in the water, and so expediency somewhat forces this
dual-publication approach.

There are a number of people interested in this document in the XSF, but
previous attempts having failed, we will have to spend some effort to
encourage people from the XSF to come here and participate. I personally
think that would be effort well-spent.

Thanks,

Dave.

On Thu, 30 Apr 2020 at 04:14, Benjamin Kaduk <kaduk@mit.edu> wrote:

> On Wed, Apr 29, 2020 at 05:37:06PM -0400, Sam Whited wrote:
> > On Wed, Apr 29, 2020, at 12:15, Robbie Harwood wrote:
> > > In order for adoption to occur, I'd like to see expressed interest
> > > from multiple folks in the WG (and a formal call for adoption).
> >
> > That sounds good; how does that normally happen? Should I start hounding
> > people, or is this email sufficient? (/cc Dave Cridland who I think is
> > involved and who encouraged me to submit this I-D).
>
> I would probably give the original mail a week or so bake time and see what
> response it elicits before going out of your way to get further review.
> That said, if you know of people who would be interested but are not on
> this list, by all means invite them to comment here.
>
> -Ben
>
> _______________________________________________
> Kitten mailing list
> Kitten@ietf.org
> https://www.ietf.org/mailman/listinfo/kitten
>