Re: [saag] SSH & Ntruprime

Eric Rescorla <ekr@rtfm.com> Mon, 25 March 2024 16:26 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C30D8C151991 for <saag@ietfa.amsl.com>; Mon, 25 Mar 2024 09:26:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level:
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20230601.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7jyI5b6sgWqd for <saag@ietfa.amsl.com>; Mon, 25 Mar 2024 09:26:34 -0700 (PDT)
Received: from mail-yw1-x112d.google.com (mail-yw1-x112d.google.com [IPv6:2607:f8b0:4864:20::112d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06E3FC151990 for <saag@ietf.org>; Mon, 25 Mar 2024 09:26:34 -0700 (PDT)
Received: by mail-yw1-x112d.google.com with SMTP id 00721157ae682-60a434ea806so49313287b3.3 for <saag@ietf.org>; Mon, 25 Mar 2024 09:26:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20230601.gappssmtp.com; s=20230601; t=1711383992; x=1711988792; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=UxCwuL2IqXTw8QVn8/1lTOhD/aavcrhYcm46L6fo2aY=; b=F36ghKsep/ZV01gdwD4WeMBL/OnPMPqE2nWN7mPu1AL3wHPxp7zbTP0fjWFgQzP5xd fl1E5T3tl4QB09jQiMtDHhrlZFx3nkagtvjAngT+97bkUNkuycmeBCYDrf+Zex9ne43K hDYk+7vr8XKn3FzI+gt3gjR8DiFLyuv/wGkBTNFIPILeHJfBHKvErRAPZqaOmHol2ugm DMgFeB6GCmxtGtIe6MP/6ZYnrCx5mWFoBwwOwwj/ePeEzOBzFANt242sVm2ZlEpj2mdS UQdIuA1ZDECUvZZ9iG00t85CvsMgQIMWsvayAGW9ObegGY6NNxmSKVQl9l7kxFTXro/q CS4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1711383992; x=1711988792; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=UxCwuL2IqXTw8QVn8/1lTOhD/aavcrhYcm46L6fo2aY=; b=Z+WiLFtDzMUFa0SqBFPdqe+3wE1x4Ym2RGmHu7llm5CJn/xM2/IE7YCojJRVGV84td B0PG3SamPsEs27Ujt6WjJERe1R1wTkhaim9hE21xQzQ7Xu64p0klHXjYVBJ6cr2QZV9c UTIy4EnxscUGckfZ1Vhuu29TVQgTlOTc8Cz15JJtNLvVGU3Hiq/XdLriWIRkVkdFBvmr BBn7Ju+1jqM5S17pMbW43p5mKHAEDJCcUye49gEOUD4WRGpNtjRrWYqBeiVIYfLUOAOC 3ENXjvFUtYdOsc9e9mu5WIU3Nvj35bQbwIO03D1JLwERS3fG/4VX+90pe8+4UBJct3EU ieww==
X-Gm-Message-State: AOJu0YyHokoWnkGO56xZEfTugNTKIePy/4IwL3UQvy6YFOYtoG3om6uJ ONhCDTFO2OqQ4okGuHGcJ4J1cgf7KDLqcJsY6lyH3LdtDj99cjj0RaH1I6JbkN/j3d2qZTqx+Wm nGm8jCDjIBTWmsm3rS/1TURwshSwUwFLtH8dInnfHlS35YT7Qtxw=
X-Google-Smtp-Source: AGHT+IHmxTKv3kgfxXy/zXjLniTkBZj4NjV3g/FncaosHzkphlaVJR33RbvxOrZ2suPe8RXbZA8WeK1CH+vz10X5Ec8=
X-Received: by 2002:a81:4f47:0:b0:608:cda9:b735 with SMTP id d68-20020a814f47000000b00608cda9b735mr7006729ywb.39.1711383991614; Mon, 25 Mar 2024 09:26:31 -0700 (PDT)
MIME-Version: 1.0
References: <CABcZeBPWjXvLh06-DBO3Z0sfeb2hgzqzaSZ-J2-TZ7qesrSraA@mail.gmail.com> <D0CD341B-523B-48A0-8954-EE7F89113241@aiven.io> <AF7B6F32-9EE6-4810-A99A-833DEA917FA9@sonic.net> <CABcZeBPfXQckpZageogUxTYgX2j_Nr_O3bvf-a-x0S_82BHMxg@mail.gmail.com> <079A0AA3-FA02-440F-ABA0-6AF897570E86@sonic.net> <CABcZeBOxfYR+=61DV1XN0F9nrmbzLR2zq_ZvADw4UUy1uFafzw@mail.gmail.com> <8caa2d4d-bc80-4fcf-b8bc-839052371730@lear.ch> <CABcZeBMABJ89T0qY0-9C3xxd=mFfGyCh7_9GKbEUBm6JtR+_ng@mail.gmail.com> <6c491f5c-92da-4fb3-a8b1-da1de27b36a6@lear.ch> <CABcZeBN1w0QU6ug3LcMwC+hTMA_-iOs32FkZe+gpPuFrp1y+JA@mail.gmail.com> <64e81f68-5169-4469-b5a0-2851da912091@lear.ch> <CABcZeBOLKMJb5pw59J072FsfeMFcoz1eZYxa1qpXDLW0nAU0cg@mail.gmail.com> <7b4d38b8-b4c1-412b-8287-bd44d0c512a3@lear.ch> <CABcZeBOQYp49i_JjE7vdg6AjxwyvktW7LFTJ4Mh3jt0bmxxxDQ@mail.gmail.com> <CAN8C-_+QUpU2bTeSFmLB7v1qLirTXtypR2U7D54JeEaeKfSp+Q@mail.gmail.com> <CABcZeBNtE6PtEdmh-2rTC5y9U7yEL8JVNo1HMjZtOQw-DHjXQQ@mail.gmail.com> <88a1bb16-b0ef-49b3-a661-c343b4faa7a9@nthpermutation.com>
In-Reply-To: <88a1bb16-b0ef-49b3-a661-c343b4faa7a9@nthpermutation.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Mon, 25 Mar 2024 09:25:55 -0700
Message-ID: <CABcZeBOo7e=jgrkMa4iXYy-x_2o6eZjTpEyezQiu7AKHk4ZhFQ@mail.gmail.com>
To: Michael StJohns <msj@nthpermutation.com>
Cc: saag@ietf.org
Content-Type: multipart/alternative; boundary="000000000000e5189a06147ea2b2"
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/dXsboR_rOVJzDf5PhZcguQahmRk>
Subject: Re: [saag] SSH & Ntruprime
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Mar 2024 16:26:37 -0000

On Mon, Mar 25, 2024 at 9:22 AM Michael StJohns <msj@nthpermutation.com>
wrote:

> Trimmed.
>
> On 3/25/2024 12:06 PM, Eric Rescorla wrote:
>
>
>
> On Mon, Mar 25, 2024 at 8:28 AM Orie Steele <orie@transmute.industries>
> <orie@transmute.industries> wrote:
>
>> > Internet-Drafts (often referred to simply as "drafts") have no formal
>> status, and are subject to change or removal at any time; therefore they
>> should not be cited or quoted in any formal document.
>> we are the ones hosting their drafts.
>>
>
> Yeah, this seems pretty speculative.
>
> Fortunately, we have a natural experiment here, because RFC 8446
> explicitly allows the registration of TLS code points based on I-Ds, so in
> five years I guess we can see how that worked.
>
> -Ekr
>
> Hi -
>
> I just took a look at RFC8446 and I can't find support for that claim.
>
My mistake, it's 8447. Muscle memory took over there.

See https://www.rfc-editor.org/rfc/rfc8447#section-7

-Ekr


The IANA considerations section refers to RFC8126 and only "Specification
> Required" or "Standards Action" as the path to registration.   Searching
> for "ID", "I-D", "internet draft" and "Internet-Draft" doesn't get me
> anything.
>
> AFAIK, "Specification Required" as defined in 8126 does not include
> Internet Drafts, even under the heading of "informal documentation" .
> Maybe time to ask the IANA?
>
> Later, Mike
> _______________________________________________
> saag mailing list
> saag@ietf.org
> https://www.ietf.org/mailman/listinfo/saag
>