[saag] Re: New Version Notification for draft-rsalz-crypto-registries-00.txt
Watson Ladd <watsonbladd@gmail.com> Fri, 29 November 2024 03:50 UTC
Return-Path: <watsonbladd@gmail.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0EE75C14F736 for <saag@ietfa.amsl.com>; Thu, 28 Nov 2024 19:50:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.107
X-Spam-Level:
X-Spam-Status: No, score=-2.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OLxfaGjUZiFB for <saag@ietfa.amsl.com>; Thu, 28 Nov 2024 19:50:39 -0800 (PST)
Received: from mail-wr1-x42e.google.com (mail-wr1-x42e.google.com [IPv6:2a00:1450:4864:20::42e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7DFDC14F6FE for <saag@ietf.org>; Thu, 28 Nov 2024 19:50:34 -0800 (PST)
Received: by mail-wr1-x42e.google.com with SMTP id ffacd0b85a97d-385d7b4da2bso675046f8f.1 for <saag@ietf.org>; Thu, 28 Nov 2024 19:50:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1732852232; x=1733457032; darn=ietf.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=NahBuBZiq3PqDKpIWWiYs8vMoaSlD7bgveeVcb5t5Nk=; b=NkUnGjw/fDs4BViqXedjKHVI5U6P3MW9o+284CXt7y3nSwLfyIK4OFq10IsVArhHD5 OhUaKJl44ycYC4gJuGLhNNRxBj2hgiEjUAeerFoV5ZH5TiG5xX0w9SRwZnAju8OLK1UA PfBjdqXqkPHazWuRX6hhbVXC4ncR/k1pa3kc6nVmnWU4gMEP4kT4wRfOowzgxys1DV6C 4nw6Pht3lmC0tA65tdyJzI6lMN3STcXU/rTS87rQWkdSEwiQJZFEiq9S9pFGTfdZxzOs 3hS69obNwiZdZ3O43Kl7s/w4i18GyuFFLQGAq2ZqNhekzgs1PdTJ7c6a2qCoFkbEPB18 u9Mg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1732852232; x=1733457032; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=NahBuBZiq3PqDKpIWWiYs8vMoaSlD7bgveeVcb5t5Nk=; b=wCtCsMYbxttAYgWkd0o+pjzWkc4gmdyWVQTM3O4Fn39Ri0ff1ysHiIUgjK3aMn9Bwz q4/pDxKjoLXYHcJomPoD9wU2CH3pd/GWxgdcmleS8fFrbnM1BdhLSBjm8b4Q/D1YSIj/ 78Why3ydUwvgeGYdt1orD4PIrRHsxpy42Gvj5MQL5Sg/4BD+9g76UP9DQrTrKtG/7xVq +D9LrqTAAh+WEwNAlrrIjhQuAXpn9IlmK01L1DqTc45ryNa5u3KVWoMAI+QH7CruDP78 OIhVEqTA+1lbTIbfmy+jDYgqohugKimocvix8FGYovH/ITXw4BIkMfeQBJbM14WZWH/4 96GA==
X-Forwarded-Encrypted: i=1; AJvYcCVygfTRZfWn1G3TMdHXIlAn2HHZoFGlCQk2ac7XK8ZnW+l3h8XvcTN1tzuyvuN42D4yFA4a@ietf.org
X-Gm-Message-State: AOJu0Yx8IKft6888bpfTeuRhnM0eOJFPSDAbTGvcH6PP0llZbNxUnnlv G8cwKmrzeh4MuUlTdFlTAezYPg13bhnCm+my0C+v0QGjEwWbrT2m3tlF1COcF7NiTvw2kKvKwSr yx999/kYyUDXcSfKByb9qzVV5ehw=
X-Gm-Gg: ASbGncuo6r16NXWni1aQ+YrnW4W9oMeP2jacqSY5Cs4otJWDA1FZDrRyXpmSenEgK77 JqvK8frR4VGRjYwWHRndkys8KHBgEHQ==
X-Google-Smtp-Source: AGHT+IGFDsvIQzvqxvUXHSeoG66qAEesMwfC2ZfGH7l+hjSKP9lb7tjDcrAAVzQuv0Cp0u9lZr/SmyJzbtS4DLgRAyQ=
X-Received: by 2002:a05:6000:42c7:b0:382:1b40:46ec with SMTP id ffacd0b85a97d-385c6ee1bd0mr6807288f8f.59.1732852232257; Thu, 28 Nov 2024 19:50:32 -0800 (PST)
MIME-Version: 1.0
References: <SY8P300MB0711C796AB6095C788556516EE292@SY8P300MB0711.AUSP300.PROD.OUTLOOK.COM> <2A5A96D6-7F86-4B55-99D4-39A42B1CA869@aiven.io> <800b679d-8c67-4c27-8531-88de3dd9dada@lear.ch> <CAGL5yWbXxFnAR1zvp9-D4Ftd=6CZzVV=6n=icx3yx622QhYo=w@mail.gmail.com> <4fd41b6b-c687-4d9b-acc1-4f829538de9a@lear.ch>
In-Reply-To: <4fd41b6b-c687-4d9b-acc1-4f829538de9a@lear.ch>
From: Watson Ladd <watsonbladd@gmail.com>
Date: Thu, 28 Nov 2024 22:50:20 -0500
Message-ID: <CACsn0cnaVQEEyKm=9KAs8uKqCudpBtiLMV_GyuTVgTLbrcoXuQ@mail.gmail.com>
To: Eliot Lear <lear@lear.ch>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: 2KU6W6XDYIY73PNNADY5KODIO6FXUI4X
X-Message-ID-Hash: 2KU6W6XDYIY73PNNADY5KODIO6FXUI4X
X-MailFrom: watsonbladd@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-saag.ietf.org-0; header-match-saag.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: saag@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [saag] Re: New Version Notification for draft-rsalz-crypto-registries-00.txt
List-Id: Security Area Advisory Group <saag.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/1ZoE5edCD0zAsAJZiW4mxSvbeR4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Owner: <mailto:saag-owner@ietf.org>
List-Post: <mailto:saag@ietf.org>
List-Subscribe: <mailto:saag-join@ietf.org>
List-Unsubscribe: <mailto:saag-leave@ietf.org>
On Thu, Nov 28, 2024 at 6:58 PM Eliot Lear <lear@lear.ch> wrote: > > Greetings Paul! > > On 29.11.2024 00:00, Paul Wouters wrote: > > > As long as the code points are references by versioned drafts, this is not an issue. We are looking at the few cases where this was done using an unversioned draft and working with IANA to resolve those. > > But it is also an issue if you are an implementer and not a protocol spec developer, and you are trying to economically and securely manage your coding and COGS investments. An RFC or similar vehicle is signal that This->spec will not change without going through a rather involved public development process. It gets particularly concerning when different RFPs have different specific draft version requirements. That's really where either interoperability begins to break down and/or code complexity goes up, even if different code points are used for different versions. If an implementor doesn't want to play the game, than they won't serve the market that requires that new feature. But the new feature/option has value, or it wouldn't be required. And if they can't deliver the value, someone else will. Not our problem. Schumptarian creative destruction is essential for progress. It would of course be better if that became part of an RFC, but that doesn't really change the calculus, nor should we be reluctant to try to do better. If there was no early deployment, we wouldn't have TLS 1.3. Sincerely, Watson Ladd > > Eliot > > _______________________________________________ > saag mailing list -- saag@ietf.org > To unsubscribe send an email to saag-leave@ietf.org -- Astra mortemque praestare gradatim
- [saag] FW: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: FW: New Version Notification for draft… Simon Josefsson
- [saag] Re: New Version Notification for draft-rsa… Simon Josefsson
- [saag] Re: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: New Version Notification for draft-rsa… Tero Kivinen
- [saag] Re: New Version Notification for draft-rsa… Damien Miller
- [saag] Re: New Version Notification for draft-rsa… Simon Josefsson
- [saag] Re: New Version Notification for draft-rsa… Tero Kivinen
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Michael Richardson
- [saag] Re: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: New Version Notification for draft-rsa… Stephen Farrell
- [saag] Re: New Version Notification for draft-rsa… Peter Gutmann
- [saag] Re: New Version Notification for draft-rsa… Michael Richardson
- [saag] Re: New Version Notification for draft-rsa… Peter Gutmann
- [saag] Re: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Michael Richardson
- [saag] Re: New Version Notification for draft-rsa… Watson Ladd
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… D. J. Bernstein
- [saag] Re: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Watson Ladd
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Watson Ladd
- [saag] Re: New Version Notification for draft-rsa… D. J. Bernstein
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Randy Bush
- [saag] Re: New Version Notification for draft-rsa… Michael Jones
- [saag] Re: New Version Notification for draft-rsa… Randy Bush
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Alan DeKok
- [saag] Re: New Version Notification for draft-rsa… D. J. Bernstein
- [saag] Re: New Version Notification for draft-rsa… Damien Miller
- [saag] Re: New Version Notification for draft-rsa… Eric Rescorla
- [saag] Re: New Version Notification for draft-rsa… Stephen Farrell
- [saag] Side-comment: SSH issues (was: New Version… Peter Gutmann
- [saag] Re: New Version Notification for draft-rsa… Eric Rescorla
- [saag] Re: New Version Notification for draft-rsa… Stephen Farrell
- [saag] Re: New Version Notification for draft-rsa… Simon Josefsson
- [saag] Re: New Version Notification for draft-rsa… Simon Josefsson
- [saag] RFCs vs Standards Michael Richardson
- [saag] Re: New Version Notification for draft-rsa… D. J. Bernstein
- [saag] Re: New Version Notification for draft-rsa… Eric Rescorla
- [saag] Re: RFCs vs Standards Stephen Farrell
- [saag] Re: RFCs vs Standards John Mattsson
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Peter Gutmann
- [saag] Re: RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] Re: RFCs vs Standards Salz, Rich
- [saag] Re: [rfc-i] RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] RFCs vs Standards Eliot Lear
- [saag] Re: [rfc-i] RFCs vs Standards Salz, Rich
- [saag] Re: [rfc-i] RFCs vs Standards Tim Bray
- [saag] Re: [rfc-i] RFCs vs Standards StJohns, Michael
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Brian E Carpenter
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: [rfc-i] RFCs vs Standards Eric Rescorla
- [saag] Re: [rfc-i] Re: RFCs vs Standards Brian E Carpenter
- [saag] Re: [rfc-i] RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] RFCs vs Standards Eric Rescorla
- [saag] Re: New Version Notification for draft-rsa… Peter Gutmann
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Joel Halpern
- [saag] Re: [rfc-i] RFCs vs Standards Behcet Sarikaya
- [saag] Re: New Version Notification for draft-rsa… Eric Rescorla
- [saag] Re: [rfc-i] Re: RFCs vs Standards Brian E Carpenter
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: [rfc-i] RFCs vs Standards Salz, Rich
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Salz, Rich
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Martin Thomson
- [saag] Re: [rfc-i] RFCs vs Standards Michael Richardson
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Alan DeKok
- [saag] Re: [rfc-i] RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] RFCs vs Standards Salz, Rich
- [saag] Re: [rfc-i] Re: RFCs vs Standards Watson Ladd
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Simon Josefsson
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards S Moonesamy
- [saag] Re: [rfc-i] RFCs vs Standards Eliot Lear
- [saag] Re: [rfc-i] RFCs vs Standards Eric Rescorla
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Eric Rescorla
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Joel Halpern
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards John Mattsson
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Randy Bush
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Randy Bush
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] Re: Re: Re: Re: RFCs vs Standa… Phillip Hallam-Baker
- [saag] Re: [rfc-i] Re: Re: Re: Re: RFCs vs Standa… Eric Rescorla
- [saag] Re: [rfc-i] Re: Re: Re: Re: RFCs vs Standa… Tero Kivinen
- [saag] Re: [rfc-i] Re: Re: Re: Re: Re: RFCs vs St… touch@strayalpha.com
- [saag] Re: [rfc-i] Re: Re: Re: Re: RFCs vs Standa… Phillip Hallam-Baker