[openpgp] Re: Fwd: I-D list for Open Specification for Pretty Good Privacy notification: Changes to draft-gallagher-openpgp-code-point-exhaustion

Heiko Schäfer <heiko.schaefer@posteo.de> Thu, 20 March 2025 10:34 UTC

Return-Path: <heiko.schaefer@posteo.de>
X-Original-To: openpgp@mail2.ietf.org
Delivered-To: openpgp@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 70F65F93F51 for <openpgp@mail2.ietf.org>; Thu, 20 Mar 2025 03:34:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.396
X-Spam-Level:
X-Spam-Status: No, score=-4.396 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=posteo.de
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xY8H1oe4NbYr for <openpgp@mail2.ietf.org>; Thu, 20 Mar 2025 03:34:57 -0700 (PDT)
Received: from mout01.posteo.de (mout01.posteo.de [185.67.36.65]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id AFBDAF93F28 for <openpgp@ietf.org>; Thu, 20 Mar 2025 03:34:48 -0700 (PDT)
Received: from submission (posteo.de [185.67.36.169]) by mout01.posteo.de (Postfix) with ESMTPS id A0034240027 for <openpgp@ietf.org>; Thu, 20 Mar 2025 11:34:45 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.de; s=2017; t=1742466885; bh=jGq7IHGPNI+Jw7kbuJiQVVTbnUynuXe2nj886kUUXIY=; h=Message-ID:Date:MIME-Version:Subject:To:From:Content-Type: Content-Transfer-Encoding:From; b=d+Cfbct7XihFpJd4Zb/I5uMFb6wm9kTfv01tZYFr3EjeqD+wlTAuXjhz3e1ag9YtN 7e37cX90KuvIZCMQu2zWkMRVapxRNTxz6BFj6DeNGTMrJvs1t3jc0Y/fNiMOZTpWCg wgog4ye3TcPfeZYGnSMw7wPvCQzhpCnJ8PHqGVj9aRGr4z0K6c9cda81gjXEggtkkm burGvp2C+rUdYzuwTWnjKIO71GQg7CIEMk1DBqhkWkq+IRSip2x9Qu+ZElDDHIXwYD YvhoU0HJsDanYTr/TvjfirTp6KbZA5YdFTyZ7NX9g0ltrsU3VUa3LCDoYa+ZGG89Gq GtaINcenDM87A==
Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4ZJMQY2gd5z9rxF for <openpgp@ietf.org>; Thu, 20 Mar 2025 11:34:45 +0100 (CET)
Received: from services.foundation.hs (services.foundation.hs [192.168.21.4]) by mail.foundation.hs (Postfix) with ESMTP id 0D5A9705C5 for <openpgp@ietf.org>; Thu, 20 Mar 2025 11:34:45 +0100 (CET)
Message-ID: <dc644134-e5f2-4c4a-9f31-6b1f087da4c9@posteo.de>
Date: Thu, 20 Mar 2025 10:34:44 +0000
MIME-Version: 1.0
To: openpgp@ietf.org
References: <174231559348.277.2581535826712330509@dt-celery-57d64c6895-fcmg2> <B321DC63-56E0-44C2-96AA-D60205C148B2@andrewg.com> <64a412e9-0062-486e-b70f-c7ede14cf4b2@posteo.de> <875xk481nn.fsf@europ.lan>
Content-Language: en-US
From: Heiko Schäfer <heiko.schaefer@posteo.de>
In-Reply-To: <875xk481nn.fsf@europ.lan>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Message-ID-Hash: 77DUJENEO67SZEV3DNY4XS2KI7PB4L6J
X-Message-ID-Hash: 77DUJENEO67SZEV3DNY4XS2KI7PB4L6J
X-MailFrom: heiko.schaefer@posteo.de
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-openpgp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [openpgp] Re: Fwd: I-D list for Open Specification for Pretty Good Privacy notification: Changes to draft-gallagher-openpgp-code-point-exhaustion
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/KcJx0AKCKZdmeEjUrKL6zQnWwoY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>

Hello Justus, list,

On 3/20/25 10:57 AM, Justus Winter wrote:
> Further, the proposed solution (for which reserving one bit now is the
> precondition, so I think it is fair to also consider it), seems to
> complicate parsing (and there is precedence on how OpenPGP very cleverly
> encodes things like packet body lengths, S2K hash counts, S2K mechanism
> type, AEAD block sizes), and I like parsing to become simpler, not more
> complicated.

I tried to be clear, but will try to be even clearer:

I didn't mean to say that I'm in favor of ratifying the specifics of the 
proposal.
I *am*, however, in favor of *just* reserving code points >= 128 (where 
applicable), until further notice.


Reserving a range of code points, by itself, certainly wouldn't 
complicate any parsing.
It would only clarify a policy for how the WG assigns code points, over 
the next few cycles of extensions.

Reserving the upper halves *for now* wouldn't in any way stop the WG 
from deciding (say, 5 years from now) that it is, after all, the lesser 
evil to just assign code points >=128 in one-byte representation.

(Fwiw, I currently lean towards agreeing with you - I expect to favor 
avoiding the complexity of Andrew's proposal, myself. But maybe in 5 
years my view will have changed.
I expect we will collectively gain new insights about the appropriate 
future evolution of the format, as OpenPGP hopefully flourishes.)

Either way, I don't anticipate any urgency (say, on a scale of less than 
5 years) to decide how to allocate the upper half of code point spaces, 
one way or the other.

If and when such urgency arises, the WG can deliberate based on all 
available information at that future point in time.

Heiko