[saag] Re: [rfc-i] Re: Re: RFCs vs Standards

Joel Halpern <jmh@joelhalpern.com> Wed, 11 December 2024 15:00 UTC

Return-Path: <jmh@joelhalpern.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16911C14F747 for <saag@ietfa.amsl.com>; Wed, 11 Dec 2024 07:00:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.102
X-Spam-Level:
X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=joelhalpern.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WisQ--l-q6PM for <saag@ietfa.amsl.com>; Wed, 11 Dec 2024 07:00:23 -0800 (PST)
Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3998DC14F6FE for <saag@ietf.org>; Wed, 11 Dec 2024 07:00:22 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joelhalpern.com; s=2.tigertech; t=1733929222; bh=W8Q4Ml4z792LqZtN+6493T/kz6JIhSJtNkSzJzI9saI=; h=Date:Subject:To:Cc:References:From:In-Reply-To:From; b=LtBp1y9f/MfOPAWZylIOnLhWbYEvxuv3yaaQa1XbSB5KM5ATUV8kwXiz9o6eRIT0y JU9zuqYOYRm/rUgg8m0hE47VC511omI+DtBW/l2epdQ0OtirQST1iCEEpvWzrSF/k8 RstY7vgnuuPKnf+l7x+5+p/dSv+PaHFCN3uyZAbg=
Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 4Y7f0k5C5Nz1ns0y; Wed, 11 Dec 2024 07:00:22 -0800 (PST)
X-Quarantine-ID: <gl1yOczKyHK0>
X-Virus-Scanned: Debian amavis at b2.tigertech.net
Received: from [192.168.21.83] (unknown [50.233.136.230]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 4Y7f0h58Kcz1ntR5; Wed, 11 Dec 2024 07:00:19 -0800 (PST)
Content-Type: multipart/alternative; boundary="------------3yUhP1oA5PpaUJL7PBlJfPtR"
Message-ID: <d465f75c-fa59-4012-936d-84381627cf46@joelhalpern.com>
Date: Wed, 11 Dec 2024 10:00:18 -0500
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: Eric Rescorla <ekr@rtfm.com>, Eliot Lear <lear@lear.ch>
References: <BE95E617-C929-43BA-BB40-41E189A8158B@akamai.com> <CAGL5yWb=tLvMOYFKT3ffVbcy7BAD=i4B0VHEUdkvwRvZ3X3Bsw@mail.gmail.com> <m2mshh4v8l.wl-randy@psg.com> <CABcZeBMjxNbBMYU2p3_a8-5VCExgmY-7XLof7die05YOEX-38A@mail.gmail.com> <70419651-6443-4393-9ca1-8a1c98a68db0@cs.tcd.ie> <CABcZeBNtBRxi5zSf9OvUip2AtyVD6Wt9+kQESuUzo-=Kur9+ZQ@mail.gmail.com> <fac981d9-2fe9-4a84-8af1-845acd72af58@cs.tcd.ie> <14124.1733073164@obiwan.sandelman.ca> <d52ee080-814b-46fd-9e0f-41349941eeac@cs.tcd.ie> <GVXPR07MB9678DF2C14EA44B28C3DA372893D2@GVXPR07MB9678.eurprd07.prod.outlook.com> <F304B6BA-6969-4C62-A217-88E76F82CDC2@tzi.org> <C74E3E9D-E892-48B4-87BE-CD634081AA23@akamai.com> <030FD3D1-8BC9-4C92-84EE-9CD18F451E73@tzi.org> <5249aa71-52c2-4f20-b2ae-62eaf75c82b7@lear.ch> <CABcZeBPB=9+zT4HM+NnakNDsC_6wZkw25CZTWBD2kqZcW+98qA@mail.gmail.com> <0970f0e4-cc87-41a6-8c5d-82da8c77eb28@lear.ch> <CABcZeBORxgaQ42Fzi7HfFhRbM=-QANfkwOatSDiiG3JY1KNvnA@mail.gmail.com>
Content-Language: en-US
From: Joel Halpern <jmh@joelhalpern.com>
In-Reply-To: <CABcZeBORxgaQ42Fzi7HfFhRbM=-QANfkwOatSDiiG3JY1KNvnA@mail.gmail.com>
Message-ID-Hash: R6RFC4KGF4WUUOXB3OQKBYAJBB4OR4VJ
X-Message-ID-Hash: R6RFC4KGF4WUUOXB3OQKBYAJBB4OR4VJ
X-MailFrom: jmh@joelhalpern.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-saag.ietf.org-0; header-match-saag.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>, "rfc-interest@rfc-editor.org" <rfc-interest@rfc-editor.org>, Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org>, IETF SAAG <saag@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [saag] Re: [rfc-i] Re: Re: RFCs vs Standards
List-Id: Security Area Advisory Group <saag.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/ZiG3tCGmvjE85D1yR9z6W-p9qao>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Owner: <mailto:saag-owner@ietf.org>
List-Post: <mailto:saag@ietf.org>
List-Subscribe: <mailto:saag-join@ietf.org>
List-Unsubscribe: <mailto:saag-leave@ietf.org>

I think there are a couple of aspects in EKR's note.   It seems likely 
that there can be WGs with approaches and clarity enough to know when a 
code point is sufficiently well-defined by the then-current I-D.  But 
that is by no means universal.  There also may be protocols that are 
sufficiently insensitive to expected drift that it is effective.

This is actually formally recognized in much of the routing work with 
two different techniques.  On the one hand, we normally define 
experimental code points to enable folks to perform experiments among 
consenting adults with no registration. Conversely, when we have IETF 
I-Ds that are close enough to done that the definition is actually 
stable, we have provision for early allocation when supported by the WG 
chairs.

A blanket rule allowing "specification required" based on I-Ds seems 
likely to mislead and confirm implementors outside of the IETF process.

Yours,

Joel

On 12/11/2024 9:04 AM, Eric Rescorla wrote:
>
>
> On Wed, Dec 11, 2024 at 4:56 AM Eliot Lear <lear@lear.ch> wrote:
>
>     Eric,
>
>     On 11.12.2024 13:26, Eric Rescorla wrote:
>>
>>     On Tue, Dec 10, 2024 at 12:47 PM Eliot Lear <lear@lear.ch> wrote:
>>
>>         And this is where we run into problems, because the moment
>>         you change that boiler plate, you will devalue the RFC series
>>         and create support and interoperability problems as people
>>         end up implementing different versions of a specification.
>>         And to be clear, IANA is the LEAST of our problems. The IETF
>>         needs a way to have not-ready-for-prime-time DRAFT work
>>         without fear ofcreating a mess.
>>
>>     I think this assumes facts not in evidence.
>
>     If you are asking for evidence that we have trained the industry
>     to believe that drafts are temporary, you should work in or near a
>     commercial organization who answers RFPs.  I've seen my share, and
>     they rarely include internet-drafts.  If you are asking for
>     evidence that this sort of training would break down, that would
>     be asking for evidence of an event that has not yet occurred
>     because the boiler plate has largely stated the draft nature of
>     drafts from the beginning.
>
> Indeed. So we are just left with our respective opinions.
>
>     I reiterate: a draft can be stable where a specification is not.
>
> You can reiterate it, but it's only true for a specific meaning of 
> "draft". Draft *versions* are in fact stable, which is why we have 
> been able to do Internet scale deployments based on them.
>
> -Ekr
>
>
> _______________________________________________
> rfc-interest mailing list --rfc-interest@rfc-editor.org
> To unsubscribe send an email torfc-interest-leave@rfc-editor.org