[saag] Re: New Version Notification for draft-rsalz-crypto-registries-00.txt

[Peter Gutmann <[e-mail]>]

Watson Ladd <[e-mail]> writes:
>On Thu, Nov 28, 2024, 3:37 PM Michael Richardson <[e-mail]<mailto:[e-mail]>> wrote:
>>Maybe, but Peter's complaint is that OpenSSH sets defacto "standards"
>
>As opposed to? If you want running code out there that's what happens

So if I'm reading this right you're saying that the way to get running code
out there is to completely bypass the organisation whose (unofficial) motto
ends "and running code"?

The reason I mentioned ISO for comparison earlier was that that used to be the
poster child for glacial standards processes, but that's now the IETF.  That's
something I'd never have predicted 10-20 years ago.  As... someone earlier in
the thread quoted, "we have met the enemy and he is us": it's simply too hard
to do anything through the IETF unless you're a large organisation who can pay
a troop of people to fly to each and every meeting and push their case.  For
people who just want to deploy code, it's too hard.  The result is things like
the OpenSSH de facto standards (not picking on them specifically since others
do it too, they're just a well-known example).

Maybe the IETF could come up with an alternative track for publication, a sort
of FYI track, for things that don't go through the full-blown standardisation
process.  It could be in the form of a request for comments rather than an
international standard.

Yeah, "Request for Comments", that sounds like a good name for informal IETF
publication that isn't an international standard.

Peter.