Re: [Medup] Issues draft-birk-pep-trustwords (was: New Version Notification for draft-birk-pep-trustwords-03.txt)

Christian Grothoff <christian.grothoff@bfh.ch> Sat, 23 March 2019 05:14 UTC

Return-Path: <christian.grothoff@bfh.ch>
X-Original-To: medup@ietfa.amsl.com
Delivered-To: medup@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C086212AF84 for <medup@ietfa.amsl.com>; Fri, 22 Mar 2019 22:14:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NL_E_PX081EC for <medup@ietfa.amsl.com>; Fri, 22 Mar 2019 22:14:18 -0700 (PDT)
Received: from mx2.bfh.ch (mx2.bfh.ch [147.87.250.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B879124D68 for <medup@ietf.org>; Fri, 22 Mar 2019 22:14:17 -0700 (PDT)
Received: from MAIL24.bfh.ch (mail24.bfh.ch [147.87.245.164]) by mx2.bfh.ch (8.14.4/8.14.4/Debian-4) with ESMTP id x2N5EEDY014091 (version=TLSv1/SSLv3 cipher=AES256-GCM-SHA384 bits=256 verify=OK) for <medup@ietf.org>; Sat, 23 Mar 2019 06:14:14 +0100
Received: from [192.168.43.244] (147.87.245.142) by MAIL24.bfh.ch (147.87.245.164) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1466.3; Sat, 23 Mar 2019 06:14:13 +0100
To: medup@ietf.org
References: <155234487151.23050.3654986147342430959.idtracker@ietfa.amsl.com> <c3e504db-695d-dd2a-5e6f-8d4cbb60c540@pep.foundation> <alpine.DEB.2.20.1903222318030.28768@softronics.hoeneisen.ch>
From: Christian Grothoff <christian.grothoff@bfh.ch>
Openpgp: preference=signencrypt
Autocrypt: addr=christian.grothoff@bfh.ch; keydata= xsFNBFSG/g0BEADfUtc2WA8+OWiNVuNuaU5CIFB/6Netaem0tXAc5VF8c/Dr/BbteSG4ZAWg CGioO/sqQ08XbYSdot1/zybFqAaD2Tlz99+GFLDYSMSDv6SkaAww0cGbobjkAO3h1ojeR8gw j2+V2DuM9VLsmB0ITH3zXlLg1wbDUeIpOtk12DWqOTFN0v6xhV3JVdFsMmiM21iyo14FIxZm RTJulrwQFi/LcrUR7kDSjuwv3GzmVy6KSArri6fSZec4os6WJM69+N3kV3SwoWxjikfUodaF +kOMXRyfEDX2ebyvveIvMl2BxNu7JUnFY0AHXnxeNbfkpLCuFnH4cVvK14I+hHOa/JTnF77f 7sWb+E0588YLL7geWucJfw94OzM1z4l/BLSyYiY3PJWRUHwkY7FV3cQGgTfrvbX3afa9Vi2b KHbgsgnOpe55FFJTRhZlGJMrgeNsoRKeivFaSa3HLhkV56VG268IM7iao+soVfeWKTOOSQGV eG6VrY7MUjhNfBbYfuSOW9CdF3p3XbI8DF68id0OQRUIihS42+kSGCZVY31Mx8+bZj+7+Qhs hZrARdrdmDg5IvJykEpn7aKpfyhf1sCfu/gwrpZ90IcaYoeafk6qWcf8JL+5VYHewWjfZ7pF tlurt+hlrdNbqDQ9oHtIsevbgsPlh40BZ0kv2vLK5b+hQ5gd3QARAQABzS5DaHJpc3RpYW4g R3JvdGhvZmYgPGNocmlzdGlhbi5ncm90aG9mZkBiZmguY2g+wsGOBBMBCAA4FiEE2EI7yzJs eQcDOSnHk55r4eKfw8wFAlmlS3QCGwMFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQk55r 4eKfw8y3QRAAp2yO1Emq/5+RhyFVbvpwPK8OX7N6h4UlVL+80IgpApMGUuchmAuP8KNAeiHR F5xBZoo5y4Qs3C5cFj6qKsyO2S264cYPXbj0/p7QSCLmB//ja/QyGbm+TLCrsEghXEqKXIfV RaI2rgTzp12H8Wa9FCPm2NA6S1LvbYKwOp5iXsfTK3uUWEtKcSDL92ZR17Fvj5CdXVSYrKie 7K+V35AA0wZvkPeC9ReCat9H7ZGp/Qts44/Ix7q8Jymj/vP2xw0Ex8Rh6QFHO3JcP3Ut4rha O/a0Xq5S3RHS55s4gbtWC1cFPQkUuR/RpBmwuF1q6GwR2i7tdhl2UC4CxYjuCRE8ZIeNvMgM lznD1fGA1TkVO+PcYMfoFkiBgHb+KsIx/8aL+iTGBmnJs38VlB5jZVuQgSez+UXOpLSql33w nYkkcDV9Bdei3ohcRTXkhRVyt40H6yA3YdqpnL92xC5oCbTEqKwQTHnMeF2SDV4sS0/jTkIf Af6SlF20vfo754EDkSLg3GcbXPNQyT9Ve4zlPl/csKUqF/GyaBQwAN+mZ+e/2ME8aPvupDOI tVl+FxfTQh+R1ZVhw3MELgDpKRCBleadHDW5te1Uj6zKK69FuCB3ljlKBcjpQRlkplwUcCNI hfpxNV1I/Iioq0N02lGa1k2T4LeP/pnQlDaqqKI+Y8rUdsDOwU0EVIb+DQEQAKItErzFJ3eV 0mVUpm8H4HtqfSnhlVXGs/fX4K1E4AsH6L1XdTBF4fBQrcY2uMWYrsEhlAEbjwF6c4XCtS/b 2otuRlfsuEgC6d8INfxq7B7RLJvsJuwHiKtLrV54351M35YiCCsLdGhlv8xqf/KxzSoeyVVK NJj0jEH3vurRNlzp7hgx49WcmWpZgY1SyWDMLCNLXwM1NX2tDDkp4b8j+UxRY+j1ikmoxDrB biEf83HmRbSWzduJW12MKIQQwWNgI29MvLmAYv4d+dFGNpsIyh2DN5sSQ9wKIFiAc+Rw/rnl hlEwaSsC2Jje81cQzHS+xahqJ0sPTVdV8SdyDdQ2Dz3RSkrUSFIkjM8o/6aeuNdJrPjdTLT1 wyA3XDnJjR6nJ5FqgWB1xovrGMhaXvvNuTe+XaLaRIqQpyHEwgY590XahTs0+Pmoq7S+3jpM 5qKKrT8LzTvuFM2vPltTy4m16l1qg9LsotVp9vWrBfrjhHzQOE6U10+g3+QdV/PHqB3HAqT1 IYjarO3V9cnu/JvaInA/SKF49z2dJXtrR17hXJV47n36Tlulrfq26jKxaeCwOB+FF2n2ovQe RdSTKfsXSvldGFE9GkEmcHR8rzbBkXkZ7rmSh23tMaJKVTPp3a2thKbFdAt3LKAzlsru8o1M hXk3wJWAW/K5/Fri50/Mc0iRABEBAAHCwV8EGAECAAkFAlSG/g0CGwwACgkQk55r4eKfw8yh kA/8C4Tu9CBCNOjKmj+NYpuF+7LpOMxjgHAVwHLGTjauOdAgP1h76DChaAjx36AuHtY7KInx vPnpn00IVisFt2uRvx/dGvJWPKR/bapFVD3bOZun21n9esZFlEKR/EEMi8IQSBfKJ3Jaw1gB z35aZ1qfsLKNb8TflkYeby9ZPHaUC1JDgZhNaL5e/f89c8zmA5DlnUNXK1NhGzl2pQpjgEpo hYVomJNmqLAcW8xl9CSl+TciFM8+eovbw2Ko5AxWHDDMdWfWF7L044JTMJyH8D5rwQYEJcKo PizrbO1xdGaAWdzQS6SBEtMIXlY17Rv0+5GXsu1wAVW8StgeJiERSL15x20xBs0smO4SwrIc gjEEwwqBwziojWZrXqoR1OM11YMoa8ZGBvYiA4/cm+jwo2hcIKeNq89JS6k4JqQxCK89TGgo JYUwevME7B2Md0h/gpTRpoFk2vHUvpf7NIYBPlpJ1Rp+koTJHcmC590MU0YWUpkb9oRuwGEn prS8YuJS6Cd5AxyzGAKaJ4c8S2DrXPCMja60VOE4+JHhtrLB0pAvZAyDKs1+dzmxpFVjekb7 vqZmfYrpqzaiP+D8qz4t5jhO6KCJIdS/zBLtnCzVmkxuUJjitFbWDftxtqs3IyhKUDyA4EXW eou3zuo4G9IstVCVGwKC0IFE2l/fSlCnsgrohlA=
Message-ID: <df9bd4d6-5c5a-eab1-f130-c681eba4e614@bfh.ch>
Date: Sat, 23 Mar 2019 06:14:12 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.5.1
MIME-Version: 1.0
In-Reply-To: <alpine.DEB.2.20.1903222318030.28768@softronics.hoeneisen.ch>
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="jl7P51hy88mYbY5lk5mtGwtjqJxo57MTm"
X-Originating-IP: [147.87.245.142]
X-ClientProxiedBy: MAIL24.bfh.ch (147.87.245.164) To MAIL24.bfh.ch (147.87.245.164)
X-Bayes-Prob: 0.0001 (Score 0, tokens from: outbound, bfh:default, base:default, @@RPTN)
X-CanIt-Geo: ip=147.87.245.164; country=CH; region=Lucerne; city=Kastanienbaum; latitude=47.0082; longitude=8.3400; http://maps.google.com/maps?q=47.0082,8.3400&z=6
X-CanItPRO-Stream: bfh:outbound (inherits from bfh:default,base:default)
X-Canit-Stats-ID: 03XPheejc - da78764102ce - 20190323
X-CanIt-Archive-Cluster: gbKgvJ3SmUdnfmr4CnDUWvXR30M
X-Scanned-By: CanIt (www . roaringpenguin . com) on 147.87.250.53
Archived-At: <https://mailarchive.ietf.org/arch/msg/medup/ihDo-MD9ftkzWZW5n1hGAbCRHoI>
Subject: Re: [Medup] Issues draft-birk-pep-trustwords (was: New Version Notification for draft-birk-pep-trustwords-03.txt)
X-BeenThere: medup@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Missing Elements for Decentralized and Usable Privacy <medup.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/medup>, <mailto:medup-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/medup/>
List-Post: <mailto:medup@ietf.org>
List-Help: <mailto:medup-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/medup>, <mailto:medup-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Mar 2019 05:14:22 -0000

On 3/22/19 11:55 PM, Bernie Hoeneisen wrote:
> Dear MEDUP list
> 
> The IANA Registration for trustwords (a basic concept applied in pEp)
> https://www.ietf.org/internet-drafts/draft-birk-pep-trustwords-03.txt
> has several open issues, we'd need your feedback on, e.g.:
> 
> 
> 1) Localization:
>    How should non-ASCII-7bit letters or language symbols be represented
>    in the wordlists? UTF-8? HTML-like encoding? IDNA? Any better solution?
>

UTF-8. IDNA/HTML add unnecessary horrific complexity. Also, with IDNA
you are stuck on Unicode 6.0 "forever".

> 
> 2) Registration format:
>    The format for registrations of at IANA is normaly (peudo-)XML.
>    While XML is concise for registering wordlists, the files
>    for registration will contain lot of XML overhead and thus get rather
>    long. Is this an issue? Use another format, e.g. CSV?
>

I don't see it as a major issue, but it might be nice to offer
alternative formats as a convenience (or scripts to convert to CSV/SQL).

> 
> 4) Bitsize (how many bits can be mapped with a wordlist):
>    e.g. a bitsize of 16 allows for a list containing 2^16 = 655536 words.
> 
>    Should this be kept open or should only certain values for bitsize
>    be allowed to be registerd?
>    If latter applies, which values are useful (e.g. 8, 12 and 16)
> 

Any size is technically usable, and if I have a usable list with say
2^14 words it makes no sense to require me to restrict to 2^8 or expand
to 2^16.  So I would definitively not limit to any particular number of
bits. However, maybe a minimum makes sense, like at least 2^8, to ensure
that the generated trustword-sentences are somewhat sane (otherwise some
joker might define a 2-word list for a language...).

My 2 cents

Christian