Re: [openpgp] crypto-refresh finished? (again;-)
Vincent Breitmoser <look@my.amazin.horse> Wed, 21 June 2023 22:26 UTC
Return-Path: <look@my.amazin.horse>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64360C14CE42 for <openpgp@ietfa.amsl.com>; Wed, 21 Jun 2023 15:26:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.998
X-Spam-Level:
X-Spam-Status: No, score=-6.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=my.amazin.horse
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EmLej_7hcV7Z for <openpgp@ietfa.amsl.com>; Wed, 21 Jun 2023 15:26:54 -0700 (PDT)
Received: from my.amazin.horse (my.amazin.horse [IPv6:2a03:4000:3f:29c::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B446C14CF1D for <openpgp@ietf.org>; Wed, 21 Jun 2023 15:26:54 -0700 (PDT)
Received: from [IPV6:2003:d2:1f4d:ee00:ae5d:7bd0:7f5d:92b1] (p200300d21f4dee00ae5d7bd07f5d92b1.dip0.t-ipconnect.de [IPv6:2003:d2:1f4d:ee00:ae5d:7bd0:7f5d:92b1]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by my.amazin.horse (Postfix) with ESMTPSA id 778CD6A392 for <openpgp@ietf.org>; Thu, 22 Jun 2023 00:26:51 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=my.amazin.horse; s=2020; t=1687386411; bh=2PxHsBVhByF691JZZgnbf6EHlN+NbbFLB3gwasZJCEk=; h=Date:Subject:To:References:From:In-Reply-To; b=Eb/ifz2FUQMVAXhjdmUNxPGujn8KuPcNan4sXwi0iEJKLLvaGcmWoXiV37HjhMErF yq48M2mXQYVbVSAjqiQDsLuSAmxvQYh7y2AzpZ8xiYpgTqQQgPJDZG38bG25rb3Yr1 hCzhIllXMA/XiWSJcWxip04LKmn883SL/nxDj3Ic=
Message-ID: <ec5a9e23-0eff-6e6d-0d2f-ccf031a8f3f9@my.amazin.horse>
Date: Thu, 22 Jun 2023 00:26:50 +0200
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.10.1
Content-Language: en-US
To: openpgp@ietf.org
References: <7b9d62a6-8570-ca81-c0bd-0f31d6cd136c@cs.tcd.ie> <aea6b745-0e65-ac19-077e-8f389868b658@cs.tcd.ie> <87mt0sn3rz.fsf@wheatstone.g10code.de> <9d0b21de-f3b9-d2fe-2110-5386a27d0461@cs.tcd.ie>
From: Vincent Breitmoser <look@my.amazin.horse>
In-Reply-To: <9d0b21de-f3b9-d2fe-2110-5386a27d0461@cs.tcd.ie>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/0lLtJwIxLdLLapmsTJ8f-u-cjKw>
Subject: Re: [openpgp] crypto-refresh finished? (again;-)
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Jun 2023 22:26:58 -0000
Thanks, Stephen. From my perspective, you have said all there is to say here. I would like to encourage everyone to focus on the way forward for the spec, and let this part of the conversation rest. Cheers - V On 22.06.23 00:12, Stephen Farrell wrote: > > Hi Werner, > > On 21/06/2023 18:06, Werner Koch wrote: >> Hi! >> >> Given that question and suggestions from major implementors have not >> been properly discussed and taken in account, I doubt that there is >> sufficient consensus in the WG for a new RFC or even an IETF Last Call. > > Process-wise, our AD has picked chairs and it's we who call > consensus so it's not useful for WG participants to try to > usurp that role as you've done above. > >> In particular Kai Eggert's mail from 8 Oct 2022 "Re: [openpgp] a new >> draft overlapping the WG draft" [1] had well thought out suggestions >> which were never seriously discussed. Ronald Tse's reply and questions >> as a followup on the same day stated for example: >> >> 2. For those who have stayed long enough at the list, we remember that >> the current iteration of the "OpenPGP WG" resulted from some advocates >> trying to “shove out” the original 4880-bis. And 4880-bis did get >> thrown out. This was not appreciated. The original intent of >> reestablishing the WG was to “build on” 4880-bis, not throw it out. >> >> and thus challenged whether the new I-D is covered by charter of this >> WG. > > We had that discussion and called rough consensus back in > Oct/Nov 2022 and the WG were good with that. I'm sorry that > you're not part of that consensus but there is no need, and > no onus on us, to revisit that topic again now. > >> The multiple roles of dkg as 1) WG chair, 2) contributor and Debian >> maintainer of Sequoia-PGP, (3) main force behind reformatting the >> original markup of rfc4880bis, (4) actual author of large parts of the >> crypto refresh draft was probably not helpful for a purposeful work on >> an intended and chartered small OpenPGP update. > > As co-chair I'm entirely happy that all that was done well > and fairly. And I did explicitly consider that as we went. > >> Since the OpenPGP WG was established more than 25 years ago, the group >> has produced and maintained specifications to everyone's satisfaction >> without throwing over actual use cases of OpenPGP. We earned a well >> repudiation with this solid consensus based work. I wish we can keep >> this and get back to a friendly and fair interaction; beating a >> specification update in the current way is not the right way. > > Frankly Werner, I consider that your unwillingness to accept > that the WG consensus is not as you'd like has been the most > recent pressing problem in that space. Again, I think that's > a pity, but we did specifically discuss that situation and > resolve the issue to the satisfaction of the WG. I hope that > in time, you'll accept that you're in the rough (not an easy > thing especially for someone who's invested such effort in > this space over the years) and we can put that divergence > behind us all. But if not, as the WG have worked to ensure as > best we can that that divergence doesn't lead to interop > problems that could be avoided, things will pan out as they > will and the world won't end. > > Cheers, > S. > >> >> >> Shalom-Salam, >> >> Werner >> >> >> [1] >> https://mailarchive.ietf.org/arch/msg/openpgp/AJEE9_pmfV2SH9dd3EM6v2jEQpI >> [2] >> https://mailarchive.ietf.org/arch/msg/openpgp/EgILWBGqU_qvbRLLdbR3jxvMZyc >> >> >> >> _______________________________________________ >> openpgp mailing list >> openpgp@ietf.org >> https://www.ietf.org/mailman/listinfo/openpgp > > _______________________________________________ > openpgp mailing list > openpgp@ietf.org > https://www.ietf.org/mailman/listinfo/openpgp
- [openpgp] crypto-refresh finished? (again;-) Stephen Farrell
- Re: [openpgp] crypto-refresh finished? (again;-) Falko Strenzke
- Re: [openpgp] crypto-refresh finished? (again;-) Stephen Farrell
- Re: [openpgp] crypto-refresh finished? (again;-) Werner Koch
- Re: [openpgp] crypto-refresh finished? (again;-) Paul Schaub
- Re: [openpgp] crypto-refresh finished? (again;-) Vincent Breitmoser
- Re: [openpgp] crypto-refresh finished? (again;-) Paul Schaub
- Re: [openpgp] crypto-refresh finished? (again;-) holger krekel
- Re: [openpgp] crypto-refresh finished? (again;-) Stephen Farrell
- Re: [openpgp] crypto-refresh finished? (again;-) Vincent Breitmoser