Re: [saag] SSH & Ntruprime

Orie Steele <orie@transmute.industries> Mon, 25 March 2024 14:03 UTC

Return-Path: <orie@transmute.industries>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CB29C14F6B4 for <saag@ietfa.amsl.com>; Mon, 25 Mar 2024 07:03:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=transmute.industries
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rUInQwBqdi1t for <saag@ietfa.amsl.com>; Mon, 25 Mar 2024 07:03:45 -0700 (PDT)
Received: from mail-pg1-x532.google.com (mail-pg1-x532.google.com [IPv6:2607:f8b0:4864:20::532]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08DA6C14F68D for <saag@ietf.org>; Mon, 25 Mar 2024 07:03:44 -0700 (PDT)
Received: by mail-pg1-x532.google.com with SMTP id 41be03b00d2f7-5ca29c131ebso2565052a12.0 for <saag@ietf.org>; Mon, 25 Mar 2024 07:03:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=transmute.industries; s=google; t=1711375424; x=1711980224; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=3nEgaoVzs7PA4km84XIgfpIbJT7bQFwSVUHFkrl4f0Y=; b=G5ThazUHmFslHrwYyFEzZ90YjwP0DqBHDXvnUaQ1LhfCMKB8ASCknK3u/04IECpZWl PGKuCT0KxGTpT+qryUx+G/99/8GK4GVy5ZWmoLmzKNlmjBrL7FJacu7p/Xtms2Zdu0L/ KHFVkr5c3+kKDeJi+Vs3XcHyMXD/Hk+7sg9C4wYzkZj2hAa46SW+s4U8q5UzOcltLBHt ybernBJA5+Xjf9/5LuIUt+6lBeHc2qqvxDa/Q4R0GUFRpkj7A3fijVFDh37U/6PfsjLM IYc8iPOImwH63hJCYeFaJ8nGC0ddE1efIFXMCAHQN11xq5EBEnCz9wUdOTfeefQv0Ppz B5Gg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1711375424; x=1711980224; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=3nEgaoVzs7PA4km84XIgfpIbJT7bQFwSVUHFkrl4f0Y=; b=s+vRo++YpFDRALoMxjerYB51pVG7vow8CjLLXDcdBC81k6Osd5knyy7vnsjvDwdf+l /fwQ6Tjvqgf/4SNi8KR/TTRIRlcg8wacab362VMvQgXkHv5SO+AHM+O6nwcQroQPRpJK bshTbN4sz5LUo0XrHbj1zmYjw8+hx8tLQVtufELMvjuifMrNvnWWplx3MumqqNO6S7SX XDUI9/IGz8S83cDb7QflNw3rPrZKxxoYEaqDU0os7DLopHCLW+USjrf2oFGYPC9LAE+C MjkVWipeUbY61q5X5oKRVr3DQ5p2yO5WUXR5Y4g+yw88dtt2YKpzMvyG4Ryiwr6G0+1o MoRw==
X-Forwarded-Encrypted: i=1; AJvYcCV8at+UJzFyVlZxg0WbAtrpM2AqshR3lYLRxqyVHsyWpiFYa8kSi2iEJ+JFLMR00F58UcdejhV5yj/THaJT
X-Gm-Message-State: AOJu0Ywkn1MJPAs56BcM6QDqQIF5ZTuwiNxS7BeIRhit6eU7GyMDd9RH 0Fe/VM3bGUimBH88kV3kCjTOPG2FCjMWR2ttQRL5sLgSuRpdycKqy/TaFy9rdh/qIn34sw04wM9 /FeLlKBmHfGZibetMnUIkLZiqV4QZfTmI3QkKd/E8jrWYjCIb
X-Google-Smtp-Source: AGHT+IHM+ICSWF93XvBsjjJcEjxP+9AnOQqfEfyhRcmEwrZslzj4dg/5awXFZu8VganpEeqozlPXkZIDpPyw8p7VBz4=
X-Received: by 2002:a17:90a:b381:b0:2a0:3d59:4632 with SMTP id e1-20020a17090ab38100b002a03d594632mr6300016pjr.15.1711375424230; Mon, 25 Mar 2024 07:03:44 -0700 (PDT)
MIME-Version: 1.0
References: <CABcZeBPWjXvLh06-DBO3Z0sfeb2hgzqzaSZ-J2-TZ7qesrSraA@mail.gmail.com> <D0CD341B-523B-48A0-8954-EE7F89113241@aiven.io> <AF7B6F32-9EE6-4810-A99A-833DEA917FA9@sonic.net> <CABcZeBPfXQckpZageogUxTYgX2j_Nr_O3bvf-a-x0S_82BHMxg@mail.gmail.com> <079A0AA3-FA02-440F-ABA0-6AF897570E86@sonic.net> <CABcZeBOxfYR+=61DV1XN0F9nrmbzLR2zq_ZvADw4UUy1uFafzw@mail.gmail.com> <8caa2d4d-bc80-4fcf-b8bc-839052371730@lear.ch> <CABcZeBMABJ89T0qY0-9C3xxd=mFfGyCh7_9GKbEUBm6JtR+_ng@mail.gmail.com> <6c491f5c-92da-4fb3-a8b1-da1de27b36a6@lear.ch>
In-Reply-To: <6c491f5c-92da-4fb3-a8b1-da1de27b36a6@lear.ch>
From: Orie Steele <orie@transmute.industries>
Date: Mon, 25 Mar 2024 09:03:31 -0500
Message-ID: <CAN8C-_+S44bv1DfmdDnQqp-9Y9y0Sx2T4nxM4f2jDUMNZvsccQ@mail.gmail.com>
To: Eliot Lear <lear@lear.ch>
Cc: Eric Rescorla <ekr@rtfm.com>, Mark D Baushke <mdb@sonic.net>, Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org>, saag <saag@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000003d3c0a06147ca426"
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/6l1QJt5ZDVFchGxaATnDz6VqLZc>
Subject: Re: [saag] SSH & Ntruprime
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Mar 2024 14:03:49 -0000

I think it's been a mistake to allow specification required to be met with
expired drafts.

If the code point is adopted and the draft can no longer change, it's a bit
of an end run on the process. (Citation as something other than work in
progress, because work can no longer progress).

I've started adding guidance to DEs directing them not to accept expired
internet drafts because of this, and to remove entries for expired
drafts... But that only works for new registries moving forward... And to
be clear, I think it's still up to DE to decide if an expired ID is allowed
in a specification required registry.

OS



On Mon, Mar 25, 2024, 8:54 AM Eliot Lear <lear@lear.ch> wrote:

>
> On 25.03.2024 14:46, Eric Rescorla wrote:
> > [Citation needed].
>
> No.  No citation needed because it happens during the development
> process of a draft all the time, and you should know this because you've
> written enough code to drafts.  The point is, you don't know when a
> draft is "finished".  The benefit of an RFC or something similar is that
> it is a signal that indeed the spec won't change.  We make an exception
> for early allocation for those drafts we know are going to become RFCs.
> Drafts are NOT the droids you're looking for.
>
> Eliot
>
> _______________________________________________
> saag mailing list
> saag@ietf.org
> https://www.ietf.org/mailman/listinfo/saag
>