From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: Tero Kivinen <kivinen@iki.fi>, Damien Miller <djm@mindrot.org>
Thread-Topic: [saag] Re: New Version Notification for
 draft-rsalz-crypto-registries-00.txt
Thread-Index: AQHbNqmf2XdRrMWI7k2A32UPzDPO97K3Odb+gAKvZYCAEYTsgIAAPNGAgABJUGE=
Date: Thu, 28 Nov 2024 01:00:51 +0000
Message-ID: 
 <SY8P300MB0711C796AB6095C788556516EE292@SY8P300MB0711.AUSP300.PROD.OUTLOOK.COM>
References: <BE95E617-C929-43BA-BB40-41E189A8158B@akamai.com>
	<87ldxl5zp9.fsf@kaka.sjd.se>	<26424.40383.605711.370013@fireball.acr.fi>
	<71bcb4f8-e147-a6cb-3c67-b6daef61f309@mindrot.org>
 <26439.33533.129915.244853@fireball.acr.fi>
In-Reply-To: <26439.33533.129915.244853@fireball.acr.fi>
Accept-Language: en-NZ, en-US
Content-Language: en-NZ
msip_labels: 
authentication-results: dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=cs.auckland.ac.nz;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SY8P300MB0711:EE_|SY7P300MB1420:EE_
x-ms-office365-filtering-correlation-id: afbceb62-810b-43dd-2cbc-08dd0f481ac3
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|366016|38070700018;
x-microsoft-antispam-message-info: 
 =?iso-8859-1?Q?M0UKOaFq51h4ciHMxxiEdJ9DX7n2Y9v3axglUPavWsL+ZykOvyqmyiOhDY?=
 =?iso-8859-1?Q?W/stsE1CoSPGeyPZtHeT65d/5/O7S803OnOugXaBCFf5bH4u5+Wt40aghZ?=
 =?iso-8859-1?Q?+ej04T1lLDkMzxuQmHnLpJRQyIOWVJirsYb7kCG2nQWSSi8wA/+2fE+vLS?=
 =?iso-8859-1?Q?4yJIRROsuOsn3JiebWR9bVyfrKnSdHpCCyHGoWPtKyp1nFQna2S27TVqn6?=
 =?iso-8859-1?Q?gvzlljn57A6A3lnLFckUAalgTbeu/vPV0QV1nb51ZJjsFDTNil933XOKac?=
 =?iso-8859-1?Q?1tJk96G+nh1xgaK+pFHuQ6u8R3ZTaJ9SaxnBYTnY/1mgWaeT6aTHtXWf7u?=
 =?iso-8859-1?Q?ziwecUVB5XqcBfNF1TosE+BxULEtGKR5D+leuhHKyAqHIMng/P+HSxB6DI?=
 =?iso-8859-1?Q?rCOTjSHLpj5LvWl3zUlNCOdrOUUYInr1GEvBQlTzYsxWrJaJ5SxzGv1Pzs?=
 =?iso-8859-1?Q?MCHdVUpFqeWUid6CqDi9TEiCM9okYrfsQ5VRMfimjOkqllsIIQnCtbEDNg?=
 =?iso-8859-1?Q?ogZ/TTHFUXKRf+1x6sQwxT69uyVptIbyT0FUSQDtTOfAogXETvQbVex+CB?=
 =?iso-8859-1?Q?UkrcoXUQAn6ZimELeX9SeGJJyFhkJcUuoepnuh/eaM+NxGu37aoxqnNigL?=
 =?iso-8859-1?Q?fCWjbpxxyrvbzgJxYEMq9PlwDTw3GQ8ZLDsT/0ApndlOZ7x4eFfdSHhpN0?=
 =?iso-8859-1?Q?dpmhY021MlJToqt1sj+JAu+RizB+76NtezYhMU55IKYR+eTmxzfgYKaMCK?=
 =?iso-8859-1?Q?MZGY4ex2C/jR+3jk1IGgHxEmwTJSzF6PdIPutlB1u6rEpIsqs57lXSgC0t?=
 =?iso-8859-1?Q?Tgb8/4NfXdO2322vwcZqLi15KLkAxsG2Y535H8nR8AOYDwWA18V/jzaR1a?=
 =?iso-8859-1?Q?k0LFNP/WNyf9MZDTE2jnkVet+c6yqFBeVMO/kRjz6p21x2HUO6/LSmNbRg?=
 =?iso-8859-1?Q?i29pm2nxYZm9c5CKSXnZPh1D8P7ha3OjRj0WDY5qfLJpHuBQtzTUd092Im?=
 =?iso-8859-1?Q?QaDSOcnQVa3tDorG7Ncq3mIAr/rvQUWzVkNxV6SNzXx8NMFSavKImGNlnQ?=
 =?iso-8859-1?Q?NGCoP7MnH5vIJTZPdrunDgtJopv96PUWEYCbTK9h4Lbe3eLz/HhicxaneV?=
 =?iso-8859-1?Q?pu+u+hXD0V/67xKywdD2CWCN239F5aad5+/wgvUbJGGO3qRNSdlOFq/QMv?=
 =?iso-8859-1?Q?HlEmOVl7u4JKdxlcwPkHwGZ9c5/FUJFSR/5OV04GFKfAEwWOP/mf9GNhkt?=
 =?iso-8859-1?Q?UK4PYpSp6ZhyuWEbEJKwEXLHmqL35pXzjXVmz/LrMWwvdHZOQYGGSNBIef?=
 =?iso-8859-1?Q?8udlcgiJPeYBVPiNuVYFYp64gUyoWWj57NF0ZJvM+uLHWTNFpw1Zlpbg7I?=
 =?iso-8859-1?Q?UkzxYKflSwMQBvWZu+oALAZVvhS0BI5j637srAdGnKOsJhjj6YpF1bgQ9T?=
 =?iso-8859-1?Q?vDIQNjpwxLo9cF8PNzf7S8X0ox6LDTroWyituA=3D=3D?=
x-forefront-antispam-report: 
 CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SY8P300MB0711.AUSP300.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(38070700018);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?iso-8859-1?Q?JKXwL7uos5eX5zdpHRX0Qkwx0OamoweInkmQBzTxEOCyFy2R+dyHS7z7nj?=
 =?iso-8859-1?Q?roiC7ImEo19hWh3Sx8YnRjm573uB+pFhoPKoLHoXq7kFt/WHg8vNS2tRBy?=
 =?iso-8859-1?Q?sP5Ak6ko37IBuE1K82PYG80Ycbcw0N4qOp0UWuD3cMCfweOokCJMg6AG7m?=
 =?iso-8859-1?Q?IlHEymIT8wQLxF85lYPoeg+15ZygYzWYgCRVlzOuX6bRRNpsplbMy9pFCc?=
 =?iso-8859-1?Q?03QJN6F6EAmYbNd7JJP7ABrpdLQhgo9fuymiO3xfZN4us+EGX+7wn0KLh1?=
 =?iso-8859-1?Q?bK3Z4rhnCxF6YDrBqDEN3Kn+LD6XGLGmZI8T1D5LWBa/udnUGhteX6r7m+?=
 =?iso-8859-1?Q?6pTlLEdFJ4Udcu6X6em6mMFTa0j22D3x0C+n+WPmgR+P34llYtSrHtR4PG?=
 =?iso-8859-1?Q?sNknNsQcfZzSOZF+OvMZlCH6A+gQMQnkLDvcri++CE/epdlV4TL/qu3kH1?=
 =?iso-8859-1?Q?YscxycsbN4347nvNReAbFH/743I0vjkthJPbY5hcQK9NBfPqTBZU8DdWEo?=
 =?iso-8859-1?Q?3TlxHB8w9OnpY886bLR5tWuVQrSII2PWL7CPb+EcAaGjRJIrrAKu+K/MPs?=
 =?iso-8859-1?Q?fjWA61WU24YRKKOrJGYI0mvLfhm/e7dlXOKYEXlOozCpW3g6HJmSksdoSl?=
 =?iso-8859-1?Q?N3Ji8gEOSKNIeRb0AR+fzoZeD7SR1lEmT8h2fHIyfjWPDHtpLggrXRNWmO?=
 =?iso-8859-1?Q?ZxVAIyoOCzdmk4R9WRBA51RzHCYTWn9DoAVfa9G6EgzuOizb8HtsrsyBdp?=
 =?iso-8859-1?Q?xgnqNUA2+BOnAGiItocrQH9XdNond387VAmocr9okXnodb4g9ioV4A6a8e?=
 =?iso-8859-1?Q?VlVFGl0kAY+jW69ni8oBeZ+Va4Qm9kp71KzHyPKncBI4c3Hepui1SUEbej?=
 =?iso-8859-1?Q?pe1DBxdwSkFUdT1EZwvgFnx0TCyU/Kqm2s52RemjJ5nApPJ9dcXUeIInVs?=
 =?iso-8859-1?Q?YBRHuTqJMbZnE312HQZy5qnUDipUlMq6rdV7SGQbs15M1Q6mI9hRaFLz51?=
 =?iso-8859-1?Q?uazgiYH1TxTrPnR7rhjK+MQSyo02Th9c1HXwtRLjbObq77AxyDOPpWH1OF?=
 =?iso-8859-1?Q?RkVgtUN1l60dhUCtlZH/MLWiIs+aSWBl4McC12kYHF/RDF7KURgqxxZZQq?=
 =?iso-8859-1?Q?Vytcg7qrMpZi8Wa+nj/XBHKsW+1ne7gBkdl6TlBkp2O2KjL2xbA491EImq?=
 =?iso-8859-1?Q?deyILQOWUJgGn7v+fMdhL3YCD7QRL8Vqd8ovM908uvwD72igM6TEvVl7LX?=
 =?iso-8859-1?Q?8A+mJl7DBXzqpniNq0IPWq2ZrQ3oAV8Ytz4YPmG/U1K4h5omNwmYqpX8lq?=
 =?iso-8859-1?Q?RoABPXvrQTJmRp+1KRrccVi3wuqOgarB1++7OlEOdEIb+gkSPs3fazzBhE?=
 =?iso-8859-1?Q?qJC2dgsjW/VCxFfkv5H6zirlL5/YLeBzb3a3TghMYPbgdIGIvKjXwMgtFY?=
 =?iso-8859-1?Q?Mx3/U7RCDhhEFJ18qMuU1sWI9/KeYWbiTwn8QaZzoc1DiH4Gk0yLZRtWxO?=
 =?iso-8859-1?Q?pgL1fmTmA+Ae61+OWiwW3aFjUsC6iHd1uZNmQIfGyyWmrbek0V3hoDRuQ8?=
 =?iso-8859-1?Q?k61ch6LjOFLHICfIh6s8Ttwu/dKXAvzlm7h6smw6xPgZg5pW2LjgA45BXG?=
 =?iso-8859-1?Q?VSYMDdoPzGvy1ZQXoKDrtay3CUNXzH4PdUELEkgUDLmGzX0KNEw+fKBg?=
 =?iso-8859-1?Q?=3D=3D?=
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: cs.auckland.ac.nz
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SY8P300MB0711.AUSP300.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 afbceb62-810b-43dd-2cbc-08dd0f481ac3
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Nov 2024 01:00:51.7376
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d1b36e95-0d50-42e9-958f-b63fa906beaa
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 
 0NI7QvxvBFWtvKXGf2uFkddIbevipYvhcYuYlqCeiEdKFrP5jtmsrPDQPT4MK+7JZtONb2zVfR5j6wUpkWssr5FiAzJ5LAYlE689qRyZpnY=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SY7P300MB1420
Message-ID-Hash: ZH3PBF6KBBYH7W25MAKFU5JOVU4CGATE
X-Message-ID-Hash: ZH3PBF6KBBYH7W25MAKFU5JOVU4CGATE
X-MailFrom: pgut001@cs.auckland.ac.nz
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-saag.ietf.org-0;
 header-match-saag.ietf.org-1; nonmember-moderation; administrivia;
 implicit-dest; max-recipients; max-size; news-moderation; no-subject;
 digests; suspicious-header
CC: Simon Josefsson <simon=40josefsson.org@dmarc.ietf.org>, "Salz,
 Rich" <rsalz=40akamai.com@dmarc.ietf.org>, "saag@ietf.org" <saag@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5Bsaag=5D_Re=3A_New_Version_Notification_for_draft-rsalz-crypto-r?=
 =?utf-8?q?egistries-00=2Etxt?=
List-Id: Security Area Advisory Group <saag.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/saag/WcHkxdABlolLXgWe5-omY1cK8uI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Owner: <mailto:saag-owner@ietf.org>
List-Post: <mailto:saag@ietf.org>
List-Subscribe: <mailto:saag-join@ietf.org>
List-Unsubscribe: <mailto:saag-leave@ietf.org>

Tero Kivinen <kivinen@iki.fi> writes:=0A=
=0A=
>When someone (like openssh) creates a new thing with foo@openssh.org, they=
=0A=
>should include the documentation of that either on their web page, or insi=
de=0A=
>the source distribution etc. Not everything needs to be an RFC, and most o=
f=0A=
>those things that are defined that way are quite simple to document.=0A=
=0A=
Ahh, no, this leads to the current mess where one of the OpenSSH folks inve=
nts=0A=
something, posts it (without any public review) to the bottom of a locked=
=0A=
filing cabinet stuck in a disused lavatory with a sign on the door saying =
=0A=
"Beware of the Leopard", it gets added to the de-facto standard SSH=0A=
implementation that everyone has to be compatible with leading to a scrambl=
e=0A=
to find out where it's specified and how you're supposed to implement it, a=
nd=0A=
then a later scramble to patch it when the security vulns from the lack of=
=0A=
public review are discovered.=0A=
=0A=
Looking at it from the other side of the fence, given the incredibly labori=
ous=0A=
and painful process of getting anything through the IETF (ISO standards are=
=0A=
often considerably quicker and easier to do than IETF, and that includes th=
e=0A=
time for translation into French) I have some sympathy for the folks who=0A=
choose to do it this way even if I don't really agree with what they're doi=
ng.=0A=
=0A=
Peter.=