IETF Logo Mail Archive

Re: [saag] SSH & Ntruprime

"Salz, Rich" <rsalz@akamai.com> Mon, 25 March 2024 18:17 UTC

Return-Path: <rsalz@akamai.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88E42C151095 for <saag@ietfa.amsl.com>; Mon, 25 Mar 2024 11:17:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.104
X-Spam-Level:
X-Spam-Status: No, score=-2.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7GKywm_r9OVd for <saag@ietfa.amsl.com>; Mon, 25 Mar 2024 11:17:15 -0700 (PDT)
Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A494C14F5F7 for <saag@ietf.org>; Mon, 25 Mar 2024 11:17:15 -0700 (PDT)
Received: from pps.filterd (m0050093.ppops.net [127.0.0.1]) by m0050093.ppops.net-00190b01. (8.17.1.24/8.17.1.24) with ESMTP id 42PHuZAu008858; Mon, 25 Mar 2024 18:17:15 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h= from:to:cc:subject:date:message-id:references:in-reply-to :content-type:mime-version; s=jan2016.eng; bh=k5wEwKVSthzv1ItvT5 h/UjEZ2XNdVDj7Rgx39pq5E28=; b=hjJ++kgXfkuoC4PtMnwPkJAwRFlYfIxcYP SKrm107N6vCl5OPfZHnvZLacu1Mej15bUBUzS35fs/clGZLz9AieRiVbgoRIt1wD UrfDqqZe7JSVW1+BJRkXJs1i8FmAW8vumpCxCtoZCQARexmpW832rRnfVyRP5p/p N5XbVNXtGZY1M8yk5razCC70mLI/kQn7mnEhrGzOaDYnIh7Dz0aJTYqSOqozsRw/ oqN0vInUz2BwWKb5sNvm2osSkJusj7syppLvoM8DQDQCq+a7xEe8GzhaR2/oy4wj CA/Q/7QNxuL/2QTkA8laP8NxDfYVRAEVi6bCmfbsimH1+vMW6lzw==
Received: from prod-mail-ppoint7 (a72-247-45-33.deploy.static.akamaitechnologies.com [72.247.45.33] (may be forged)) by m0050093.ppops.net-00190b01. (PPS) with ESMTPS id 3x1q7xjmvy-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 25 Mar 2024 18:17:14 +0000 (GMT)
Received: from pps.filterd (prod-mail-ppoint7.akamai.com [127.0.0.1]) by prod-mail-ppoint7.akamai.com (8.17.1.19/8.17.1.19) with ESMTP id 42PFFcDk018765; Mon, 25 Mar 2024 14:17:13 -0400
Received: from email.msg.corp.akamai.com ([172.27.50.204]) by prod-mail-ppoint7.akamai.com (PPS) with ESMTPS id 3x1tdyashr-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 25 Mar 2024 14:17:13 -0400
Received: from ustx2ex-dag4mb4.msg.corp.akamai.com (172.27.50.203) by ustx2ex-dag4mb5.msg.corp.akamai.com (172.27.50.204) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.28; Mon, 25 Mar 2024 11:17:13 -0700
Received: from ustx2ex-dag4mb4.msg.corp.akamai.com ([172.27.50.203]) by ustx2ex-dag4mb4.msg.corp.akamai.com ([172.27.50.203]) with mapi id 15.02.1258.028; Mon, 25 Mar 2024 11:17:13 -0700
From: "Salz, Rich" <rsalz@akamai.com>
To: Michael StJohns <msj@nthpermutation.com>, Orie Steele <orie@transmute.industries>, Eric Rescorla <ekr@rtfm.com>
CC: "saag@ietf.org" <saag@ietf.org>
Thread-Topic: [saag] SSH & Ntruprime
Thread-Index: AQHafEytzfICQedvJ0iuZh0hh4HscrFEOcqAgAADCYCAAIeagIACcif0gABrCTSAAOTuAIAAa+IAgAAB/gCAAANqgIAAA5cAgAABaoCAAACRgIAAAnqAgAAO6ACAAArPgIAABFEAgAABD4CAAAdSgIAADXKA///HRQA=
Date: Mon, 25 Mar 2024 18:17:13 +0000
Message-ID: <49C35FC4-17C2-48BD-86D4-5D18FD9CF860@akamai.com>
References: <CABcZeBPWjXvLh06-DBO3Z0sfeb2hgzqzaSZ-J2-TZ7qesrSraA@mail.gmail.com> <079A0AA3-FA02-440F-ABA0-6AF897570E86@sonic.net> <CABcZeBOxfYR+=61DV1XN0F9nrmbzLR2zq_ZvADw4UUy1uFafzw@mail.gmail.com> <8caa2d4d-bc80-4fcf-b8bc-839052371730@lear.ch> <CABcZeBMABJ89T0qY0-9C3xxd=mFfGyCh7_9GKbEUBm6JtR+_ng@mail.gmail.com> <6c491f5c-92da-4fb3-a8b1-da1de27b36a6@lear.ch> <CABcZeBN1w0QU6ug3LcMwC+hTMA_-iOs32FkZe+gpPuFrp1y+JA@mail.gmail.com> <64e81f68-5169-4469-b5a0-2851da912091@lear.ch> <CABcZeBOLKMJb5pw59J072FsfeMFcoz1eZYxa1qpXDLW0nAU0cg@mail.gmail.com> <7b4d38b8-b4c1-412b-8287-bd44d0c512a3@lear.ch> <CABcZeBOQYp49i_JjE7vdg6AjxwyvktW7LFTJ4Mh3jt0bmxxxDQ@mail.gmail.com> <CAN8C-_+QUpU2bTeSFmLB7v1qLirTXtypR2U7D54JeEaeKfSp+Q@mail.gmail.com> <CABcZeBNtE6PtEdmh-2rTC5y9U7yEL8JVNo1HMjZtOQw-DHjXQQ@mail.gmail.com> <88a1bb16-b0ef-49b3-a661-c343b4faa7a9@nthpermutation.com> <CABcZeBOo7e=jgrkMa4iXYy-x_2o6eZjTpEyezQiu7AKHk4ZhFQ@mail.gmail.com> <CAN8C-_JKbJLB6EU+8zUoeUgYVMkR4ErkSdpvuzr4LYoNcRKccA@mail.gmail.com> <180b6873-d917-4a6f-9fa7-b174e0afae66@nthpermutation.com>
In-Reply-To: <180b6873-d917-4a6f-9fa7-b174e0afae66@nthpermutation.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.81.24012814
x-originating-ip: [172.27.118.139]
Content-Type: multipart/alternative; boundary="_000_49C35FC417C248BD86D45D18FD9CF860akamaicom_"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-03-25_16,2024-03-21_02,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxlogscore=743 malwarescore=0 mlxscore=0 suspectscore=0 spamscore=0 adultscore=0 phishscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2403210000 definitions=main-2403250105
X-Proofpoint-ORIG-GUID: eWNnECmbSH99YH4Ug8jRrbL84Q1wD4ij
X-Proofpoint-GUID: eWNnECmbSH99YH4Ug8jRrbL84Q1wD4ij
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-03-25_15,2024-03-21_02,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 bulkscore=0 priorityscore=1501 mlxlogscore=646 lowpriorityscore=0 clxscore=1015 suspectscore=0 spamscore=0 mlxscore=0 phishscore=0 malwarescore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2403210001 definitions=main-2403250105
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/769a_7SMdky-8EeAwsu3H7wCt8Y>
Subject: Re: [saag] SSH & Ntruprime
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Mar 2024 18:17:19 -0000

Has the IETF committed itself - through an actual public discussion - of making the IDs archival? Keeping them online - yes.  Keeping them at a fixed URL, I think not and I think RFC8447 was a mistake.  Referencing RFC8477 as precedent for Murray's question seems problematic.

If you really want to know, perhaps ask tools-discuss email?  Or search the email archives.

Citing RFC 8447 as precedent is exactly the right thing to do, since it’s a standards-track IETF stream RFC.

I'd recommend revoking the notes on the existing registries that allow references to IDs. And, going forward, request the  IESG  refrain from approving any further notes similar to those on RFC8447 until there's an actual consensus and a plan to support "archivalness" of the ID series (e.g. with a fixed URL and with a firm requirement that closes the path of updating the ID).

It seems a bit premature to recommend actions on the basis of “I think not.”

v2.23.0 | Report a Bug | By Email