Re: [regext] "Considerations" Sections

"Gould, James" <jgould@verisign.com> Tue, 06 November 2018 17:19 UTC

Return-Path: <jgould@verisign.com>
X-Original-To: regext@ietfa.amsl.com
Delivered-To: regext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C7D6130DE7 for <regext@ietfa.amsl.com>; Tue, 6 Nov 2018 09:19:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QQajDqlBru6z for <regext@ietfa.amsl.com>; Tue, 6 Nov 2018 09:19:26 -0800 (PST)
Received: from mail5.verisign.com (mail5.verisign.com [69.58.187.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD2D112F1AB for <regext@ietf.org>; Tue, 6 Nov 2018 09:19:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=13224; q=dns/txt; s=VRSN; t=1541524765; h=from:to:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version:subject; bh=ghp4dYG0ZB4YNN1lA+Qb/ishI8KV3MtZy/VtPLdnEgo=; b=qJ+joNicC+bW4K7liiQxC/On7MhlMpClERzs2jKjBelVRrdQvV0a7DPn Snp+i4FuGX3O66PYriK0oFEVwu4VxR5vFGBsM5MlFmbUPFAr9YL8Khlx4 z4QD3wTeGWkqYo5/jndcz9164ZaqHcRNFzl4vizZBfk7cJ/lqdTS8w4o0 TzhHU81MfPSqa2I2x26g9s/1WR3ATvBO8kj7l1kN8Z720qpOYUic7llWe wQ9u0xz+gnUqmdO0HXsCa1D9I7fBwEo9VQsQVjz5Lg87wDtJH9D7vYioS qy4WQDpR2RMP0U9kBXM1bww2tmDqNvuCPvMeYeGMTh2OZPDEineDwvsa2 Q==;
X-IronPort-AV: E=Sophos;i="5.54,472,1534824000"; d="scan'208";a="6163495"
IronPort-PHdr: 9a23:XyaxGBI+UdZf0CAdbdmcpTZWNBhigK39O0sv0rFitYgfI/XxwZ3uMQTl6Ol3ixeRBMOHs60C07KempujcFRI2YyGvnEGfc4EfD4+ouJSoTYdBtWYA1bwNv/gYn9yNs1DUFh44yPzahANS47xaFLIv3K98yMZFAnhOgppPOT1HZPZg9iq2+yo9JDffwdFiCChbb9uMR67sRjfus4KjIV4N60/0AHJonxGe+RXwWNnO1eelAvi68mz4ZBu7T1et+ou+MBcX6r6eb84TaFDAzQ9L281/szrugLdQgaJ+3ART38ZkhtMAwjC8RH6QpL8uTb0u+ZhxCWXO9D9QLYpUjqg8qhrUgflhicZOTAk7GHZhM9+jKxZrx2vphxw34Hab46OOfpiZazdeM8WSXZbU8tTUSFKH4Oyb5EID+oEJetUoYjzp1wTrRu6GAagHP7kxDtSiX/zw6I6yOotGhzB0QwiENIOt2nUrNHoO6oJT+C60rPIzTTYb/NX1jf97pLEfQwmofGJRL99d9fax0coFwPAlFqQqIrlMiuL1usTqWib7vFgVeOgi24hqgFxpCSgyt0whYnOg4IYzE3P+yZhwIstONG0VFR3bcOmHZZerS2WKot7T804T2xnuys20qAKtYKhcCQXypkr2wTTZ+GIfoWL+B7vSeWcLS92hH17e7+zmxO//E26xeD/UsS7y1NHoyRbntbRt30A0gfc58yGR/Z/+0qs1ziC2gLO5exCPEs6j7DUK4Q7zb41jpcTtEPDETLol0jul6+Wc1kk+vCv6+T6frXqvp+cOJFwigH5Kqkjh9CxD/wlPgcOR2aV9uWz2KH+8UHjXrVFkvo2krPBsJzAP8sUu7S1AxFP0oY47RazFSup0NMdnXUfLVJFfgyIj5TxNl3TPPz0F+qzjlainTtx2vzLPrPsDo/CI3XAiLvheKxy609YyAo919Bf4JdUB6kDIPL8XU/xqdjYAQIiPgyq3ennEtR91pgfWWKABK+VKr/dsViN5u43OemDeJcVuCrhK/gi//PuiX45mUQBfamyxpYYdXG4HvtnI0WFe3XshsoOEWYRvgolTezllUONUThPZ3apRa484Ss7CI2+B4fZWo+tmKCB3Du8HpBOfGBJFF+MHmnndoWYQPoMaTydItNvkjAeUrihUYAhhlmSs1qwz7t8MvH89iwXtI7q0NR0/PbSmRw06ScyCN6SmSnZS2BvgnggSz453bx2pUB80UyC3aV+n+ceEsZcsbcBGB03OpPM08R7Bsz8HAXbcZ3BHEyrTdi2HRkwQ84/hdgUbBAuNc+li0WJ8C23B7NR356CAZEvuOqI3Xf2OsJx42jLzqg6jlYgBMBIMDv11eZE6wHPCtuRwA2inKGwePFE0Q==
X-IPAS-Result: A2EDAACzzOFb/zCZrQphAxoBAQEBAQIBAQEBBwIBAQEBgVIEAQEBAQsBgmmBKQqDbJYYJZcwgT8XHQcMARgLC4N4RgIXg2Q1DA0BAwEBAQEBAQIBAQKBBQyCNiISLxwvCQEFAQEBAQEBJwEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQgCCAc1EgEBGAEBAQECAQEBIRE6FwQCAQgRBAEBAQICJgICAiUBChUICAIEARIUgw0BgXkXqEmBLoQxAoV8gQuLBIFCPoERJwwTgkyDGwEBA4F1CiaCPTGCJgKJN5YAAwYChm2GDYQugiKOQo0HBYoYAgQCBAUCFIFFAYILcBU7KgGCQQmCHheDSoUUhT5yDSSMI4EfAQE
Received: from BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) by BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1531.3; Tue, 6 Nov 2018 12:19:21 -0500
Received: from BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d]) by BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d%5]) with mapi id 15.01.1531.003; Tue, 6 Nov 2018 12:19:21 -0500
From: "Gould, James" <jgould@verisign.com>
To: "lists@digitaldissidents.org" <lists@digitaldissidents.org>, "regext@ietf.org" <regext@ietf.org>
Thread-Topic: [EXTERNAL] Re: [regext] "Considerations" Sections
Thread-Index: AdR1pJYa381rKIFaRxukr3d3vLHxXAALQKKAAAoEWED//7fXAIAAT2wA///AdoD//9WYVoAAlJaAgAAKxQCAAHq/gP//jgoAAA9C0AA=
Date: Tue, 06 Nov 2018 17:19:21 +0000
Message-ID: <384B783C-6DF7-4FCC-8159-D45FCC605F0D@verisign.com>
References: <d250d4aa2e284ab1bc4fdc770770d2d1@verisign.com> <3feaffd7-902a-d9f3-5ff6-58313ef412a8@digitaldissidents.org> <d99249ab1a8a450996d936272e90ebcb@verisign.com> <05858420-677d-4569-82c5-f2fdcccd2eef@digitaldissidents.org> <89c3df7d69844e51aa156210d90052a6@verisign.com> <290edd26-2f7e-35ee-47d6-5708bcabcdd1@digitaldissidents.org> <5B212B3C-45B0-47BD-8BBB-91C6C0E0F0A6@verisign.com> <3f5815ca-e3cb-e696-12cf-c9bd7e4f120f@digitaldissidents.org> <1a4d3364-e138-a2ca-ed8b-5fd30ac0bbe1@feherfamily.org> <BB87EF5B-86B0-4203-9D60-AA466B0D4B84@verisign.com> <236de218-13cb-d1c3-e831-0a6a24e10d8e@digitaldissidents.org>
In-Reply-To: <236de218-13cb-d1c3-e831-0a6a24e10d8e@digitaldissidents.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.f.0.180709
x-originating-ip: [10.170.148.18]
Content-Type: text/plain; charset="utf-8"
Content-ID: <27089120D577FB41832644BE45937AA3@verisign.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/vw5PPCBHfXOZBe9TncyRJiFVZLc>
Subject: Re: [regext] "Considerations" Sections
X-BeenThere: regext@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Registration Protocols Extensions <regext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/regext>, <mailto:regext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext/>
List-Post: <mailto:regext@ietf.org>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/regext>, <mailto:regext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Nov 2018 17:19:29 -0000

Niels,

I belief inclusion of an HRPC section pulls policy into the draft that will add confusion.  We should attempt to pull policy out of the drafts and not go in the other direction.  Do you have an example of another draft or RFC that has included such a section for reference?  
  
—
 
JG



James Gould
Distinguished Engineer
jgould@Verisign.com

703-948-3271
12061 Bluemont Way
Reston, VA 20190

Verisign.com <http://verisigninc.com/> 

On 11/7/18, 12:02 AM, "regext on behalf of Niels ten Oever" <regext-bounces@ietf.org on behalf of lists@digitaldissidents.org> wrote:

    On 11/6/18 5:50 PM, Gould, James wrote:
    > KF I wonder if this is a useful observation. I havent heard anyone
    > 
    > suggest that a HRPC section is required, only that it seems very
    > 
    > appropriate for this draft. So it might be appropriate to focus on why
    > 
    > the section should be or should not be present in the context of how an
    > 
    > implementer might consume the document.
    > 
    >  
    > 
    > I don’t believe adding an HRPC section to draft-ietf-regext-verificationcode will assist the implementer in consuming the draft, but instead will add confusion.  
    
    Why would a well formulated paragraph, as laid out in RFC6973 and expanded in RFC8280, add confusing?
    
    > What makes it appropriate for this draft over other drafts? 
    
    I think it would also be appropriate for other drafts, as we've for instance seen today in the discussion of the reverse search.
    
    >  My recommendation is to focus on addressing any applicable technical elements raised, and as Scott recommended, raise the inclusion of an HRPC section in any draft up to the IETF. 
    
    That was not the way forward was summarized by Jim. 
    
    The WG can decide what we add to the draft or not, so I think we should discuss it in the WG and seek for consensus. 
    
    Next to that we can also discuss in other parts of the IETF whether this should be applicable to drafts in general, or how to further and structurally integrate such reviews in our processes. 
    
    Best,
    
    Niels
    
    
    > 
    >   
    > 
    > —
    > 
    > JG
    > 
    >  
    > 
    >  
    > 
    >  
    > 
    > James Gould
    > 
    > Distinguished Engineer
    > 
    > jgould@Verisign.com
    > 
    >  
    > 
    > 703-948-3271
    > 
    > 12061 Bluemont Way
    > 
    > Reston, VA 20190
    > 
    >  
    > 
    > Verisign.com <http://verisigninc.com/>
    > 
    >  
    > 
    > On 11/6/18, 11:31 PM, "regext on behalf of Kal Feher" <regext-bounces@ietf.org on behalf of ietf@feherfamily.org> wrote:
    > 
    >  
    > 
    >    
    > 
    >     On 6/11/18 10:52 pm, Niels ten Oever wrote:
    > 
    >     > On 11/6/18 1:00 PM, Hollenbeck, Scott wrote:
    > 
    >     >>> On Nov 6, 2018, at 4:32 PM, Niels ten Oever <lists@digitaldissidents.org> wrote:
    > 
    >     >>>
    > 
    >     >>>
    > 
    >     >>>
    > 
    >     >>> On 11/6/18 9:59 AM, Hollenbeck, Scott wrote:
    > 
    >     >>>>> -----Original Message-----
    > 
    >     >>>>> From: Niels ten Oever <lists@digitaldissidents.org>
    > 
    >     >>>>> Sent: Tuesday, November 06, 2018 3:36 AM
    > 
    >     >>>>> To: Hollenbeck, Scott <shollenbeck@verisign.com>; 'regext@ietf.org'
    > 
    >     >>>>> <regext@ietf.org>
    > 
    >     >>>>> Subject: [EXTERNAL] Re: [regext] "Considerations" Sections
    > 
    >     >>>>>
    > 
    >     >>>>>
    > 
    >     >>>>>
    > 
    >     >>>>> On 11/6/18 9:22 AM, Hollenbeck, Scott wrote:
    > 
    >     >>>>>>> -----Original Message-----
    > 
    >     >>>>>>> From: regext <regext-bounces@ietf.org> On Behalf Of Niels ten Oever
    > 
    >     >>>>>>> Sent: Tuesday, November 06, 2018 3:07 AM
    > 
    >     >>>>>>> To: regext@ietf.org
    > 
    >     >>>>>>> Subject: [EXTERNAL] Re: [regext] "Considerations" Sections
    > 
    >     >>>>>>>
    > 
    >     >>>>>>>> On 11/06/2018 09:01 AM, Hollenbeck, Scott wrote:
    > 
    >     >>>>>>>> Following up on the in-room discussion regarding Human Rights
    > 
    >     >>>>>>>> Protocol
    > 
    >     >>>>>>> Considerations as compared to Security Considerations and other types
    > 
    >     >>>>>>> of considerations that appear in IETF documents:
    > 
    >     >>>>>>>> I mentioned at the mic that we don't have any documents representing
    > 
    >     >>>>>>> IETF consensus that provide guidance for writing human rights
    > 
    >     >>>>>>> protocol considerations. It was mentioned that RFC 8280 describes such
    > 
    >     >>>>> guidelines.
    > 
    >     >>>>>>> True, it does, but it's an Informational document that "represents
    > 
    >     >>>>>>> the consensus of the Human Rights Protocol Considerations Research
    > 
    >     >>>>>>> Group of the Internet Research Task Force". RFCs 3552 (Security
    > 
    >     >>>>>>> Considerations) and
    > 
    >     >>>>>>> 8126 (IANA Considerations) are, in comparison, IETF BCPs. So, I'll
    > 
    >     >>>>>>> stand by my comment regarding the lack of _IETF_ consensus on the
    > 
    >     >>>>> topic.
    > 
    >     >>>>>>> Thanks Scott, as you know there are also Privacy Considerations, as
    > 
    >     >>>>>>> outlined in RFC6973, which also do not constitute community consensus
    > 
    >     >>>>>>> but are widely used.
    > 
    >     >>>>>>>
    > 
    >     >>>>>>> Furthermore, if something is not a community consensus, it doesn't
    > 
    >     >>>>>>> mean we MAY/SHOULD/MUST NOT do it.
    > 
    >     >>>>>> True. It also does not mean that we MUST do it. As Jim Galvin noted,
    > 
    >     KF I wonder if this is a useful observation. I havent heard anyone
    > 
    >     suggest that a HRPC section is required, only that it seems very
    > 
    >     appropriate for this draft. So it might be appropriate to focus on why
    > 
    >     the section should be or should not be present in the context of how an
    > 
    >     implementer might consume the document.
    > 
    >     >>>>> it's up to the editor and WG to decide how to address the topic.
    > 
    >     >>>>> My understanding is that at the point of WG adoption, change control is
    > 
    >     >>>>> handed over to the WG, right? So in that case it means that it is up to
    > 
    >     >>>>> the WG.
    > 
    >     >>>> The editor controls the pen. It's the responsibility of the editor to ensure that the text that appears in the document ultimately represents WG consensus.
    > 
    >     >>>>
    > 
    >     >>> I thought that it is up to the WG chair to establish what does or does not constitute consensus.
    > 
    >     >> See Section 6.3 of RFC 2418.
    > 
    >     >>
    > 
    >     >>> Am also a bit confused about the interchangeable use of editor and author here. James is the author, right?
    > 
    >     >> He is the author of the pre-WG version. He is the editor of the WG version that is the subject of WG discussion.
    > 
    >     >>
    > 
    >     > Are you saying that all people who are listed on RFCs that previously have been adopted by WGs are actually editors, and not RFC authors? I think this is not standing practice across the IETF.
    > 
    >     >
    > 
    >     > For instance in the QUIC WG, there are some documents where it is clearly indicated that there is an editor, and and in other cases someone is an author. Compare for instance:
    > 
    >     >
    > 
    >     > https://tools.ietf.org/html/draft-ietf-quic-http-16
    > 
    >     > https://tools.ietf.org/html/draft-ietf-quic-manageability-03
    > 
    >     >
    > 
    >     > Or has there been an agreement in this WG that James is an editor and not an author? Then I think that it should be made clear on the Internet Draft as well.
    > 
    >     
    > 
    >     KF I have no opinion on the author vs editor debate, but I do wonder if
    > 
    >     there is any utility to continue the discussion on that point.
    > 
    >    
    > 
    >     There are those who object to including the HRPC section on the basis
    > 
    >     that the technology is agnostic and shouldnt be saddled with moral
    > 
    >     judgement.
    > 
    >    
    > 
    >     There are those who think the section is a good idea based on the impact
    > 
    >     to those whose data is being shared.
    > 
    >    
    > 
    >     I'd much prefer a debate on the relevant topics than document pedantry,
    > 
    >     which probably has its place on another list.
    > 
    >    
    > 
    >     > Best,
    > 
    >     >
    > 
    >     > Niels
    > 
    >     >
    > 
    >     --
    > 
    >     Kal Feher
    > 
    >     Melbourne, Australia
    > 
    >    
    > 
    >     
    > 
    >     
    > 
    > 
    > _______________________________________________
    > regext mailing list
    > regext@ietf.org
    > https://www.ietf.org/mailman/listinfo/regext
    > 
    
    -- 
    Niels ten Oever
    Researcher and PhD Candidate
    Datactive Research Group
    University of Amsterdam
    
    PGP fingerprint	   2458 0B70 5C4A FD8A 9488  
                       643A 0ED8 3F3A 468A C8B3
    
    _______________________________________________
    regext mailing list
    regext@ietf.org
    https://www.ietf.org/mailman/listinfo/regext