Re: [saag] My IESG Eval for draft-pechanec-pkcs11uri-19 (Was: PKCS#11 URI slot attributes & last call)

John C Klensin <john-ietf@jck.com> Wed, 04 February 2015 16:33 UTC

Return-Path: <john-ietf@jck.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE57F1A049A; Wed, 4 Feb 2015 08:33:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.61
X-Spam-Level:
X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YpIyBpXFmv1S; Wed, 4 Feb 2015 08:33:26 -0800 (PST)
Received: from bsa2.jck.com (ns.jck.com [70.88.254.51]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44BBA1A87DB; Wed, 4 Feb 2015 08:33:23 -0800 (PST)
Received: from [198.252.137.35] (helo=JcK-HP8200.jck.com) by bsa2.jck.com with esmtp (Exim 4.82 (FreeBSD)) (envelope-from <john-ietf@jck.com>) id 1YJ2t7-000LVy-5M; Wed, 04 Feb 2015 11:33:13 -0500
Date: Wed, 04 Feb 2015 11:33:08 -0500
From: John C Klensin <john-ietf@jck.com>
To: Pete Resnick <presnick@qti.qualcomm.com>, Nico Williams <nico@cryptonector.com>
Message-ID: <0BA0559819A5545DC09606CA@JcK-HP8200.jck.com>
In-Reply-To: <54D23FDE.3020401@qti.qualcomm.com>
References: <alpine.GSO.2.00.1412161359100.4549@keflavik> <CAB6OCMvGxT99cGGBSBbz=XU2+F1xRzBa97z6dY-qPSJk1GWXyQ@mail.gmail.com> <20141217230150.GB9443@localhost> <alpine.GSO.2.00.1412171513520.4549@keflavik> <CAK3OfOjnRCmiu-TKCJ-AFanpCsqnw1o2w_EC2AKMUnQ2A4DqVw@mail.gmail.com> <54D23FDE.3020401@qti.qualcomm.com>
X-Mailer: Mulberry/4.0.8 (Win32)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-SA-Exim-Connect-IP: 198.252.137.35
X-SA-Exim-Mail-From: john-ietf@jck.com
X-SA-Exim-Scanned: No (on bsa2.jck.com); SAEximRunCond expanded to false
Archived-At: <http://mailarchive.ietf.org/arch/msg/saag/Lof5lfwRlwSPFie0rGS8NACwBN4>
Cc: Darren J Moffat <Darren.Moffat@oracle.com>, Stef Walter <stef@thewalter.net>, ietf@ietf.org, saag@ietf.org, Jan Pechanec <jan.pechanec@oracle.com>, Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Subject: Re: [saag] My IESG Eval for draft-pechanec-pkcs11uri-19 (Was: PKCS#11 URI slot attributes & last call)
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Feb 2015 16:33:28 -0000

+1
Given what I believe has been referred to recently as "the
kerfluffle", it is not clear whether the advice about
normalization in 3986 is really adequate either, but it appears
to me that is close enough for this document and, as you
suggest, clearly better than making a new reference to 3987.

    john


--On Wednesday, February 04, 2015 09:50 -0600 Pete Resnick
<presnick@qti.qualcomm.com> wrote:

> Normally I would just put this in my ballot, but since a
> change was made due to a Last Call comment that was discussed
> here (a discussion I missed at the time) I want to comment on
> this here to make sure there is consensus for either the
> change you made, or for what I will propose:
> 
> On 12/19/14 6:06 PM, Nico Williams wrote:
>> One thing I just noticed is that you allow Unicode.  You
>> might want to reference RFC3987 (IRIs), for, e.g., advice as
>> to normalization.
>>    
> 
> This seems like an exceedingly bad idea to me, for a number of
> reasons:
> 
> 1. The use of IRIs as protocol elements is recipe for
> disaster. I think we came to the conclusion long ago that if
> you are using something as a protocol element, it had better
> be a URI, and you had better percent-encode anything that was
> non-US-ASCII.
> 
> 2. Normalization is discussed quite reasonably in 3986; 3987
> is unlikely to add anything useful.
> 
> 3. The 3987 is currently in a state of limbo. We're waiting to
> see what W3C ends up recommending for HTML5, and the IETF is
> likely to end up referencing that in the long run and not 3987.
> 
> Unless folks want to express a strong reason for this
> particular document to reference 3987, I really think you
> should remove any reference to it.
> 
> pr