Re: [Lwip] Magnus Westerlund's Discuss on draft-ietf-lwig-curve-representations-19: (with DISCUSS)

[Mohit Sethi M <[e-mail]>]

Argh, the IESG writeup is a replica of my shepherd writeup (https://datatracker.ietf.org/doc/draft-ietf-lwig-curve-representations/shepherdwriteup/). I had noted that:

Since this draft is crypto-heavy only a few working group members were able to provide detailed reviews.

I had also noted the discrepancy between the requested values and the stream way before IETF last call was issued and before the current COSE experts objected:

The values requested require "Standards Action With Expert Review" however the requested RFC type is Informational.

When the draft was adopted to the working group, it did not have any registration requests (https://tools.ietf.org/html/draft-ietf-lwig-curve-representations-00#section-5). The question of whether LWIG is the right venue or not is something that many of us have struggled with over time. This was noted by me, Suresh (AD at the time of adoption) and Ben (when he saw the IoT directorate review in 2019: https://datatracker.ietf.org/doc/review-ietf-lwig-curve-representations-08-iotdir-early-migault-2019-10-25/).

In hindsight, another IETF last call after the change to standards track would have been nice regardless of whether it would have resulted in more review. But I think I have been following all the processes diligently and doing everything I can (and perhaps am supposed to) as a co-chair/document shepherd. If you have some feedback for improving things, I'm all ears.

--Mohit

On 2/17/21 1:43 PM, John Mattsson wrote:

Argh,



2020-11-18 14 Mohit Sethi Changing to proposed standard as requested by the COSE experts.



I think this might have been triggered by my comment on the COSE list. If that is the case, I would like to clarify that I am not a designated IANA COSE expert and I did not "request" this. I just pointed out that the requested numbers could not be assigned by an informational draft.

This is a curve that could benefit from a 1-2 byte COSE identifier, but it will probably also work very well with a 3 byte identifier. In some use cases like EDHOC it does not matter at all as the identifier is not sent on the wire.



At a minimum, since this has been changed from Informational to Standards Track I think we >should have another IETF Last Call.



Making this LWIG document standards track seems strange. The IESG writeup "only a few working group members were able to provide detailed reviews" seems to contradict the "has received significant community review" requirement for standards track.

I personally see no need to change the status of this document to standards track. If a 3 byte COSE identifiers are unacceptable it seems better to write a short standards track COSE draft for that part and publish the rest as informational.

Cheers,
John

_______________________________________________
Lwip mailing list
[e-mail]<mailto:[e-mail]>
https://www.ietf.org/mailman/listinfo/lwip