Re: [saag] AD review of draft-iab-crypto-alg-agility-06

Viktor Dukhovni <ietf-dane@dukhovni.org> Thu, 03 September 2015 22:27 UTC

Return-Path: <ietf-dane@dukhovni.org>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F07A1B35F3 for <saag@ietfa.amsl.com>; Thu, 3 Sep 2015 15:27:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FQEoL4x45-Zu for <saag@ietfa.amsl.com>; Thu, 3 Sep 2015 15:27:21 -0700 (PDT)
Received: from mournblade.imrryr.org (mournblade.imrryr.org [38.117.134.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 159821B339F for <saag@ietf.org>; Thu, 3 Sep 2015 15:27:21 -0700 (PDT)
Received: by mournblade.imrryr.org (Postfix, from userid 1034) id 6B647284B6C; Thu, 3 Sep 2015 22:27:20 +0000 (UTC)
Date: Thu, 03 Sep 2015 22:27:20 +0000
From: Viktor Dukhovni <ietf-dane@dukhovni.org>
To: saag@ietf.org
Message-ID: <20150903222720.GA9021@mournblade.imrryr.org>
References: <55A938F1.9090404@cs.tcd.ie> <20150720044849.GY28047@mournblade.imrryr.org> <B866063D-C1A8-4286-83E1-9EBAE7994297@vigilsec.com> <20150902212858.GM9021@mournblade.imrryr.org> <20150903221855.GF1541@localhost>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <20150903221855.GF1541@localhost>
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: <http://mailarchive.ietf.org/arch/msg/saag/bLvxCfDy-B3hOT16DFJGr8edI_w>
Subject: Re: [saag] AD review of draft-iab-crypto-alg-agility-06
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: saag@ietf.org
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Sep 2015 22:27:22 -0000

On Thu, Sep 03, 2015 at 05:18:56PM -0500, Nico Williams wrote:

> Viktor asks me what the take-away from section 2.5 should be.  IMO it is
> as follows.

Furthermore, Viktor, continuing to "play dumb" in the third person,
still does not see how mere mortals might reach conclusions similar
to Nico's from the current text.  So much so, that he can well
imagine that the text might be trying to say something entirely
different.

So, whether Nico's reading is right, or wrong, please make the text
more clearly carry its intended meaning, along with some tangible
best-practice for protocol, library or application designers.

-- 
	Viktor.