Re: [openpgp] Virtual interim moved to early February 2023 (new poll)

[Falko Strenzke <[e-mail]>]

Hi Daniel,

regarding my own review of the crypto-refresh 07 I have made two merge 
requests for the remaining open major points I raised there. The idea is 
to provide concrete proposals as a basis for decision in order to close 
these issues. I am aware that it isn't necessarily the normal proceeding 
for an independent reviewer to propose concrete changes in that way, but 
I did not see that anyone else took over the task of tracking these 
issues or taking a decision on them. So I hope the MRs are facilitating 
the overall progress.

The MRs are

- https://gitlab.com/openpgp-wg/rfc4880bis/-/merge_requests/228 address 
the new key derivation in v2 SEIPD packets with two contributions:
   - proposes a correction of the non-normative section "## 
Confidentiality via Encryption" to take into account the new mechanism
   - also proposes a restriction to use the reply-to-all feature unless 
the implementer has a source that provides concrete guidance for the 
application context at hand how to apply the mechanism securely. I am 
not sure if this is intended by the authors / WG, but I couldn't find 
out so far in GitLab and on-list discussions. So the additional sentence 
is now a concrete proposal and can be decided upon.
- https://gitlab.com/openpgp-wg/rfc4880bis/-/merge_requests/227/diffs 
corrects a merely informative statement that is not true for all 
elliptic curve domain parameters regarding the number of octets needed 
to represent a scalar and thus could mislead developers.

For the agenda of the upcoming interim, I propose to decide upon the 
change of version numbers to v6 to avoid conflicts with GnuPG.

- Falko

Am 21.01.23 um 21:00 schrieb Daniel Kahn Gillmor:

> On Mon 2023-01-16 16:15:11 -0500, Daniel Kahn Gillmor wrote:
>> If we want a virtual interim, we should have a set date at least two
>> weeks in advance, so i am setting up another poll for the first full
>> week of February.  Stephen or I will report the conclusion of the poll
>> by the end of Friday, this week (Jan 20th), so please respond as soon as
>> possible.
>>
>>      https://framadate.org/8TXl8RWamaLeAWD6
> The best choice among those who responded is Thursday February 9th at
> 12:00 UTC.
>
> We will meet athttps://meet.jit.si/IETF-OpenPGP-WG-Interim-Feb-2023  (if
> anyone has a problem with using jitsi meet, feel free to propose an
> alternative to me and Stephen offlist, and we'll figure out how to
> accomodate.
>
> Please discussion the open issues on the list before then, so that we
> can all come to the interim prepared.
>
> Regards,
>
>          --dkg
>
> _______________________________________________
> openpgp mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/openpgp
-- 

*MTG AG*
Dr. Falko Strenzke
Executive System Architect

Phone: [phone]
E-Mail: [e-mail]
Web: mtg.de <https://www.mtg.de>


*MTG Exhibitions – See you in 2023*

------------------------------------------------------------------------
<https://community.e-world-essen.com/institutions/allExhibitors?query=true&keywords=mtg> 
<https://www.itsa365.de/de-de/companies/m/mtg-ag>

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
Commercial register: HRB 8901
Register Court: Amtsgericht Darmstadt
Management Board: Jürgen Ruf (CEO), Tamer Kemeröz
Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If 
you are not the correct recipient or have received this email in error,
please inform the sender immediately and delete this email. Unauthorised 
copying or distribution of this email is not permitted.

Data protection information: Privacy policy 
<https://www.mtg.de/en/privacy-policy>