Re: [nfsv4] [secdir] SECDIR Review of draft-ietf-nfsv4-umask-03

[Spencer Dawkins at IETF <[e-mail]>]

Hi, Phillip,

On Tue, Jun 13, 2017 at 9:57 PM, Phillip Hallam-Baker <[e-mail]
> wrote:

> On Wed, Jun 7, 2017 at 3:08 AM, Spencer Dawkins at IETF
> <[e-mail]> wrote:
>
> >  The document is approved. We now approve documents with no Discuss
> ballot
> > positions, but can still make changes to resolve comments that arise
> during
> > IESG Evaluation, if that's appropriate.
> >
> > I read Phillip's SECDIR review with interest. It does not seem to apply
> to
> > this draft, any more than to the rest of NFSv4, so I wouldn't hold up
> this
> > draft to pursue the issues Phillip raised.
> >
> > Those issues do seem to be a useful input to NFSv4, as the working group
> > considers a charter update (after finishing quite a lot of work, and
> thanks
> > to you all for that).
>
> That was the sense in which it was written. Its like when you take the
> car in to get the tires changed and they mention it has no brakes.
>

For your amusement, I was trying to install Lubuntu on an older desktop
system, and fell down the hall of mirrors of

   - "oh, it's too old to boot from USB",
   - "oh, the current 'CD images' won't fit on a 700-MB CD so you need to
   find an older release",
   - "oh, it can't create a bootable CD because XP Home didn't support
   that",
   - "oh, it has disk errors when installing from CD"

... and in the middle of all that, Mozilla popped up and said "your Mozilla
release is no longer supported on your operating system, and the oldest
release that would run on your operating system isn't supported either, so
you should upgrade your operating system".

So, I can relate to your analogy better today than I would have a week ago.


> Different things, yes. But something I am going to point out.
>

And thank you for that.

The NFSv4 working group has a recharter discussion on their agenda for
Prague, so your timing is perfect for them to consider their security
situation.

Spencer