IETF Logo Mail Archive

[regext] Re: WGLC: draft-ietf-regext-epp-eai (was: WGLC: draft-ietf-regext-rdap-rir-search-09)

"Hollenbeck, Scott" <shollenbeck@verisign.com> Fri, 22 November 2024 20:39 UTC

Return-Path: <shollenbeck@verisign.com>
X-Original-To: regext@ietfa.amsl.com
Delivered-To: regext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72613C151062 for <regext@ietfa.amsl.com>; Fri, 22 Nov 2024 12:39:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.103
X-Spam-Level:
X-Spam-Status: No, score=-2.103 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xrb_xkyPNmly for <regext@ietfa.amsl.com>; Fri, 22 Nov 2024 12:39:48 -0800 (PST)
Received: from mail6.verisign.com (mail6.verisign.com [69.58.187.32]) by ietfa.amsl.com (Postfix) with ESMTP id 6C380C14F707 for <regext@ietf.org>; Fri, 22 Nov 2024 12:39:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=2756; q=dns/txt; s=VRSN; t=1732307988; h=from:to:cc:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version:subject; bh=SYuuXDunyarsI61YvyEsvHuWq4tVDYHgXB1CamNRF6s=; b=JhZ5LDbpne/qpj1OPFWCZDJR+F3wMgqFuJbG3iOG7LvpKiY3Tza5q7Up R/R8VOZaVuGOUwC/7jnWqDTYnVLLN/EMVifjffbSYpUuJ7SVX0VC9Gg98 Qjr9fgI9T1RgVck5PKZWaS/Xbyon+xMDrNhfg4Suq8Omxy74fhzl72A7F BWmq54fg6kKDpngwe1BmXD8fhpyfIgElx0LKZD7TRmFdcaUYTRIe/k1LT N+g7T3dPWFakykX5UJ/Jr33YZQz2XvvFxnc9XC3JuCmLcAPZC5HYhR8j/ aKZAA4C9duVynFgFu0MCxXH0OYPrP25HFm+D8mJPMC5ZLixRFaXMQKsao A==;
X-CSE-ConnectionGUID: fBMPD40nQNGvni/OGb9Ovw==
X-CSE-MsgGUID: iT2lwJr0SzGca64UajMAqw==
X-ThreatScanner-Verdict: Negative
IronPort-Data: A9a23:iU09uawJ/MGa+B0GnJR6t+dJxyrEfRIJ4+MujC+fZmUNrF6WrkVUx mcYXm3UPPfcZzH8L4oiOdm18h4HuZGAx4NhGgdoqy00HyNBpPSeCIXCJC8cHc8wwu7rFxs7s ppEOrEsCOhuExcwcz/0auCJQUFUjPzOG/ymTradakidfCc8IA85kxVvhuUltYBhhNm9Emult Mj7yyHlEAbNNwVcbCRNscpvlDs15K6u4WpC5ARkDRx2lAS2e0c9Xcp3yZ6ZciOQrrl8RoaSW +vFxbelyWLVlz9FIs+liLvybnoRSbfUOwWU4lIOM0R1qkEfzsCa+v9T2Ms0MS+7uR3Q9zxC4 IwlWaiLdOscFvakdNI1CEAETn4kbcWqz5ecSZS3mZT7I0TuLSOwk602ZK08FdVwFu1fWQmi+ RGEQdykg9/qa++emdqGpudQassLIuPOBK9D4ndZ6x7HC/dhZr/JEoLU+ooNtNswrpgm8ff2T fA/MAVJQSSYOltRMVANENQ3kKG2nGL5NTZfrTp5p4Juuy6Kk1c3ieW2doaFEjCJbZw9ckKwv WLB+2D0BBsXP9+31zef82mtiemJliT+MG4XPObkqqY33wTOroAVIBwqD1+kg+PhsVyRUNsBd 3Ed+A8HtLdnoSRHSfG4BXVUukWstxgQSvJQA/d89Rrl4rDZ7AuJGkAFQyJPLts8u6cLqScC3 EWPxszvCCw36fiOV2jb87aP6Dm1fyIPKzZEezUfS00O5NyLTJwPsy8jh+1LSMad5uAZ0xmpq 9xWhEDSX4kusPM=
IronPort-HdrOrdr: A9a23:ohtzrKrF45FSm0CsTyV/+10aV5r2eYIsimQD101hICG9Ffbo8v xG/c5rtyMc5wxwZJhNo7690cq7Lk80nKQdibX5Vo3SPzUO1lHIEKhSqaXvxDH6EzDz+6p3xc 5bH5RWOZnVAUJhhcj3pCu1A78bquWvweSNif3Fx3lgCTt2bbpthj0VNi+AHlZoSBJ9CZ01KZ qZ6qN8zAadRQ==
X-Talos-CUID: 9a23:vD85u2u9+JLClFIimnJeNVGG6IsrWFjl4CuIJXaeJnhvSfqyZlXB3717xp8=
X-Talos-MUID: 9a23:b54znAbXwRFNkeBTtgO2gC5ALp9T8YulAR5RrJwEnuCdKnkl
X-IronPort-AV: E=Sophos;i="6.12,176,1728950400"; d="scan'208";a="34405715"
Received: from BRN1WNEX02.vcorp.ad.vrsn.com (10.173.153.49) by BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.37; Fri, 22 Nov 2024 15:39:46 -0500
Received: from BRN1WNEX02.vcorp.ad.vrsn.com ([10.173.153.49]) by BRN1WNEX02.vcorp.ad.vrsn.com ([10.173.153.49]) with mapi id 15.01.2507.037; Fri, 22 Nov 2024 15:39:46 -0500
From: "Hollenbeck, Scott" <shollenbeck@verisign.com>
To: "andy@hxr.us" <andy@hxr.us>
Thread-Topic: [EXTERNAL] Re: [regext] Re: WGLC: draft-ietf-regext-epp-eai (was: WGLC: draft-ietf-regext-rdap-rir-search-09)
Thread-Index: AQHbPRK3RlhQqaIIgkG5OI/zNCBMc7LDworQ
Date: Fri, 22 Nov 2024 20:39:46 +0000
Message-ID: <b8de7c466dcd4063957da0576628ba79@verisign.com>
References: <73182D47-F3BB-4765-8795-180BAEE4A73D@elistx.com> <dba8d9ed-6e14-4e87-93c4-f5c614c346e4@denic.de> <10EF311E-6DEE-4400-AF22-A65EFBF54875@elistx.com> <CAAQiQRcqKy1h7-Udwd+KpaHTHMiNnZQciLyODxAT9nY7MPpJMQ@mail.gmail.com> <6937738e254b4edb8b75a756c44bb20d@verisign.com> <CAAQiQRdX56hAwiT3unVY3=TGGYB+_i03DLgeqKWms9VrNCgK7w@mail.gmail.com>
In-Reply-To: <CAAQiQRdX56hAwiT3unVY3=TGGYB+_i03DLgeqKWms9VrNCgK7w@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.170.148.18]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Message-ID-Hash: YG5MDDTA5FHASVP5WYF4U74NWW7B7TWM
X-Message-ID-Hash: YG5MDDTA5FHASVP5WYF4U74NWW7B7TWM
X-MailFrom: shollenbeck@verisign.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-regext.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "regext@ietf.org" <regext@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [regext] Re: WGLC: draft-ietf-regext-epp-eai (was: WGLC: draft-ietf-regext-rdap-rir-search-09)
List-Id: Registration Protocols Extensions Working Group <regext.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/Dq29RhhXed-RVgB8V5u8N5TaPmA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Owner: <mailto:regext-owner@ietf.org>
List-Post: <mailto:regext@ietf.org>
List-Subscribe: <mailto:regext-join@ietf.org>
List-Unsubscribe: <mailto:regext-leave@ietf.org>

> -----Original Message-----
> From: Andrew Newton (andy) <andy@hxr.us>
> Sent: Friday, November 22, 2024 2:14 PM
> To: Hollenbeck, Scott <shollenbeck@verisign.com>
> Cc: regext@ietf.org
> Subject: [EXTERNAL] Re: [regext] Re: WGLC: draft-ietf-regext-epp-eai (was:
> WGLC: draft-ietf-regext-rdap-rir-search-09)
>
> Caution: This email originated from outside the organization. Do not click links
> or open attachments unless you recognize the sender and know the content is
> safe.
>
> On Fri, Nov 22, 2024 at 10:25 AM Hollenbeck, Scott
> <shollenbeck@verisign.com> wrote:
> >
> > > 1. Section 2 discusses the migration to a newer version of the
> > > extension with a SHOULD but the text does not describe the migration
> > > process nor references one. Either the SHOULD should be lowercased,
> > > the migration process should be specified, or the migration process should
> be referenced.
> >
> > [SAH] Thanks for the feedback, Andy. There's another option: remove this
> section entirely. My preference would be to either lowercase the SHOULD or to
> remove the section. Do you prefer one of those over the other?
>
> IMHO, leaving the section in the draft will attract unwanted attention. :)

[SAH] OK, I can remove it unless someone thinks it really, really needs to be there.

> > > 2. The last paragraph of the security section does not specify the
> > > "who" in the warning. Is this for registrars, registries, end users?
> >
> > [SAH] Are you referring to the "either address may be forwarded to the
> other" text? If so, it applies to all of those involved parties equally. I can make
> that clear by saying "all users of these addresses should be aware". Does that
> work?
> >
>
> It is better, but I don't have a "gooder" suggestion. That said, how is this a
> security consideration? It is a usability issue, but what is the security threat?

[SAH] Good point. Maybe that whole paragraph can be moved to the Introduction to preserve awareness.

Scott

v2.46.0 | Report a Bug | By Email | System Status