[saag] Re: [rfc-i] RFCs vs Standards
Eric Rescorla <ekr@rtfm.com> Wed, 11 December 2024 14:05 UTC
Return-Path: <ekr@rtfm.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3FBDC23A82C for <saag@ietfa.amsl.com>; Wed, 11 Dec 2024 06:05:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.905
X-Spam-Level:
X-Spam-Status: No, score=-1.905 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20230601.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7TfMum6A0kfq for <saag@ietfa.amsl.com>; Wed, 11 Dec 2024 06:05:19 -0800 (PST)
Received: from mail-yb1-xb30.google.com (mail-yb1-xb30.google.com [IPv6:2607:f8b0:4864:20::b30]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A557C23A858 for <saag@ietf.org>; Wed, 11 Dec 2024 06:04:42 -0800 (PST)
Received: by mail-yb1-xb30.google.com with SMTP id 3f1490d57ef6-e2bd7d8aaf8so5139376276.3 for <saag@ietf.org>; Wed, 11 Dec 2024 06:04:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20230601.gappssmtp.com; s=20230601; t=1733925881; x=1734530681; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=ugdbp9jcZxdHr+SYfWGP2bmm+b58HyEXRPWdQiIAkPQ=; b=Arx40Q+iLN4u440M6WA9DR+iRh3BR4lbRr+n0IN0n55RQteRMPDBiCCA9wI3hPV3E9 3+BankzLu2PSivy9DfTtNU9S6WfG56zAK9MzjiYP/lqiXofI7zW//TWt0xMIWDeyd/xb 9NfiPLOZX6CL6KSDny+U9EfHkvr20IQBdnDQZGutGUTkAE8nISJfuCaJQH+wkSgxQEer n/leZlSlWmyt8q8BwL/pVyhYRVxTT3/7ltWFRgiDoUIofPhp1qzpXdeDkWm9aeczr6Gp cp4vlikC5FzXiz1qe0OUuTxVNNn/A3DlFgiG5V+tPWItBOf9vDxXwx76ARkQWuPCTlod S2iA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1733925881; x=1734530681; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=ugdbp9jcZxdHr+SYfWGP2bmm+b58HyEXRPWdQiIAkPQ=; b=hABkaMSVtwFXUjyQW6fp9obL6HSxqVxkm9GpUhl0nPsOVsDnFjnEIs9eRS0Y88Gwd8 cCEVsCR1S8y5UW0lL4IqYSVuW6NeLQuqD2CvTWdHSRCk7SYTz7Dm/GB7TqvdQArwkLVH Ug6/fxmGQEp50uNTsWc3BT+bUcuh8juA5dBVvaMvoYHU+hlksR68OCDh1bg3puM1il1r jgAz9ZPI6qseQ1LUk2s3uX76CwNL6sKNf828zExoo0rjuekB4DRRISsi6OgXGgByKR1f blKNXTJJkEC9MMw42wXue85dBGJH2vs6DUJph0WeJC1Ts4t8drturia9ab5SNcmKggqj GmTA==
X-Forwarded-Encrypted: i=1; AJvYcCWJs7zbtfWeqjF3kpY20hBTk8JnxSWXkcX9lghN+fmrUoYUypH/+Z1egSEzq4InkGYCOHkN@ietf.org
X-Gm-Message-State: AOJu0YzwS2/s8skt1tzOXkxvXVw0yRntj895geMOIUeuVVDCVwZp5gjz ToqJ4nes1FqwHLkxnmvhAQkjuOJrHmFqR2OBomILW+S8NxPwKuxqzVU1MQcXl3mV9JKJX2LNzty XKaD99yLHlS1DjiiePs4Libp79cDeuvVgqaZFwA==
X-Gm-Gg: ASbGncu/qjzksim11gUMTLP282ViUN67FcE5BAWVO77w5HM2sukdlnX5/0n1DbIkgWa FUhEZa77A+AzpFlb0m0usC1B5x1Oz/kpL/+rIXA==
X-Google-Smtp-Source: AGHT+IHcBUH4GN1UnSbdKRTtpJaJHHvGhTj3+nPjUdaqdYSw2I7KkTs+PABNJDzzbSVw+BWITrQ3KjjpVCE6SQsrYnM=
X-Received: by 2002:a05:6902:2382:b0:e2e:440e:d29f with SMTP id 3f1490d57ef6-e3c8e47d633mr2993917276.20.1733925881610; Wed, 11 Dec 2024 06:04:41 -0800 (PST)
MIME-Version: 1.0
References: <BE95E617-C929-43BA-BB40-41E189A8158B@akamai.com> <3029EB03-6E7A-47CB-9682-F511CB51EE17@akamai.com> <10065.1732826193@obiwan.sandelman.ca> <CACsn0cmWVeFdJ3dzMj5SV4XpJF4rssULtfQ1moeefoq-Evhk=g@mail.gmail.com> <CAGL5yWb=tLvMOYFKT3ffVbcy7BAD=i4B0VHEUdkvwRvZ3X3Bsw@mail.gmail.com> <m2mshh4v8l.wl-randy@psg.com> <CABcZeBMjxNbBMYU2p3_a8-5VCExgmY-7XLof7die05YOEX-38A@mail.gmail.com> <70419651-6443-4393-9ca1-8a1c98a68db0@cs.tcd.ie> <CABcZeBNtBRxi5zSf9OvUip2AtyVD6Wt9+kQESuUzo-=Kur9+ZQ@mail.gmail.com> <fac981d9-2fe9-4a84-8af1-845acd72af58@cs.tcd.ie> <14124.1733073164@obiwan.sandelman.ca> <d52ee080-814b-46fd-9e0f-41349941eeac@cs.tcd.ie> <GVXPR07MB9678DF2C14EA44B28C3DA372893D2@GVXPR07MB9678.eurprd07.prod.outlook.com> <F304B6BA-6969-4C62-A217-88E76F82CDC2@tzi.org> <C74E3E9D-E892-48B4-87BE-CD634081AA23@akamai.com> <030FD3D1-8BC9-4C92-84EE-9CD18F451E73@tzi.org> <5249aa71-52c2-4f20-b2ae-62eaf75c82b7@lear.ch> <CABcZeBPB=9+zT4HM+NnakNDsC_6wZkw25CZTWBD2kqZcW+98qA@mail.gmail.com> <0970f0e4-cc87-41a6-8c5d-82da8c77eb28@lear.ch>
In-Reply-To: <0970f0e4-cc87-41a6-8c5d-82da8c77eb28@lear.ch>
From: Eric Rescorla <ekr@rtfm.com>
Date: Wed, 11 Dec 2024 06:04:05 -0800
Message-ID: <CABcZeBORxgaQ42Fzi7HfFhRbM=-QANfkwOatSDiiG3JY1KNvnA@mail.gmail.com>
To: Eliot Lear <lear@lear.ch>
Content-Type: multipart/alternative; boundary="0000000000003dadde0628ff14f0"
Message-ID-Hash: 66YXNRX5ZDQBKIP35EAWNS5CWHL32VZA
X-Message-ID-Hash: 66YXNRX5ZDQBKIP35EAWNS5CWHL32VZA
X-MailFrom: ekr@rtfm.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-saag.ietf.org-0; header-match-saag.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>, "rfc-interest@rfc-editor.org" <rfc-interest@rfc-editor.org>, Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org>, IETF SAAG <saag@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [saag] Re: [rfc-i] RFCs vs Standards
List-Id: Security Area Advisory Group <saag.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/j_zbWjnDiNf-vQ998fTRfXrkx3E>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Owner: <mailto:saag-owner@ietf.org>
List-Post: <mailto:saag@ietf.org>
List-Subscribe: <mailto:saag-join@ietf.org>
List-Unsubscribe: <mailto:saag-leave@ietf.org>
On Wed, Dec 11, 2024 at 4:56 AM Eliot Lear <lear@lear.ch> wrote: > Eric, > On 11.12.2024 13:26, Eric Rescorla wrote: > > > On Tue, Dec 10, 2024 at 12:47 PM Eliot Lear <lear@lear.ch> wrote: > >> And this is where we run into problems, because the moment you change >> that boiler plate, you will devalue the RFC series and create support and >> interoperability problems as people end up implementing different versions >> of a specification. And to be clear, IANA is the LEAST of our problems. >> The IETF needs a way to have not-ready-for-prime-time DRAFT work without >> fear ofcreating a mess. >> > I think this assumes facts not in evidence. > > If you are asking for evidence that we have trained the industry to > believe that drafts are temporary, you should work in or near a commercial > organization who answers RFPs. I've seen my share, and they rarely include > internet-drafts. If you are asking for evidence that this sort of training > would break down, that would be asking for evidence of an event that has > not yet occurred because the boiler plate has largely stated the draft > nature of drafts from the beginning. > Indeed. So we are just left with our respective opinions. I reiterate: a draft can be stable where a specification is not. > You can reiterate it, but it's only true for a specific meaning of "draft". Draft *versions* are in fact stable, which is why we have been able to do Internet scale deployments based on them. -Ekr
- [saag] FW: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: FW: New Version Notification for draft… Simon Josefsson
- [saag] Re: New Version Notification for draft-rsa… Simon Josefsson
- [saag] Re: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: New Version Notification for draft-rsa… Tero Kivinen
- [saag] Re: New Version Notification for draft-rsa… Damien Miller
- [saag] Re: New Version Notification for draft-rsa… Simon Josefsson
- [saag] Re: New Version Notification for draft-rsa… Tero Kivinen
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Michael Richardson
- [saag] Re: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: New Version Notification for draft-rsa… Stephen Farrell
- [saag] Re: New Version Notification for draft-rsa… Peter Gutmann
- [saag] Re: New Version Notification for draft-rsa… Michael Richardson
- [saag] Re: New Version Notification for draft-rsa… Peter Gutmann
- [saag] Re: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Michael Richardson
- [saag] Re: New Version Notification for draft-rsa… Watson Ladd
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… D. J. Bernstein
- [saag] Re: New Version Notification for draft-rsa… Salz, Rich
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Watson Ladd
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Watson Ladd
- [saag] Re: New Version Notification for draft-rsa… D. J. Bernstein
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: New Version Notification for draft-rsa… Randy Bush
- [saag] Re: New Version Notification for draft-rsa… Michael Jones
- [saag] Re: New Version Notification for draft-rsa… Randy Bush
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Alan DeKok
- [saag] Re: New Version Notification for draft-rsa… D. J. Bernstein
- [saag] Re: New Version Notification for draft-rsa… Damien Miller
- [saag] Re: New Version Notification for draft-rsa… Eric Rescorla
- [saag] Re: New Version Notification for draft-rsa… Stephen Farrell
- [saag] Side-comment: SSH issues (was: New Version… Peter Gutmann
- [saag] Re: New Version Notification for draft-rsa… Eric Rescorla
- [saag] Re: New Version Notification for draft-rsa… Stephen Farrell
- [saag] Re: New Version Notification for draft-rsa… Simon Josefsson
- [saag] Re: New Version Notification for draft-rsa… Simon Josefsson
- [saag] RFCs vs Standards Michael Richardson
- [saag] Re: New Version Notification for draft-rsa… D. J. Bernstein
- [saag] Re: New Version Notification for draft-rsa… Eric Rescorla
- [saag] Re: RFCs vs Standards Stephen Farrell
- [saag] Re: RFCs vs Standards John Mattsson
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Peter Gutmann
- [saag] Re: RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] Re: RFCs vs Standards Salz, Rich
- [saag] Re: [rfc-i] RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] RFCs vs Standards Eliot Lear
- [saag] Re: [rfc-i] RFCs vs Standards Salz, Rich
- [saag] Re: [rfc-i] RFCs vs Standards Tim Bray
- [saag] Re: [rfc-i] RFCs vs Standards StJohns, Michael
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Brian E Carpenter
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: New Version Notification for draft-rsa… Paul Wouters
- [saag] Re: [rfc-i] RFCs vs Standards Eric Rescorla
- [saag] Re: [rfc-i] Re: RFCs vs Standards Brian E Carpenter
- [saag] Re: [rfc-i] RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] RFCs vs Standards Eric Rescorla
- [saag] Re: New Version Notification for draft-rsa… Peter Gutmann
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Joel Halpern
- [saag] Re: [rfc-i] RFCs vs Standards Behcet Sarikaya
- [saag] Re: New Version Notification for draft-rsa… Eric Rescorla
- [saag] Re: [rfc-i] Re: RFCs vs Standards Brian E Carpenter
- [saag] Re: New Version Notification for draft-rsa… Eliot Lear
- [saag] Re: [rfc-i] RFCs vs Standards Salz, Rich
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Salz, Rich
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Martin Thomson
- [saag] Re: [rfc-i] RFCs vs Standards Michael Richardson
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Alan DeKok
- [saag] Re: [rfc-i] RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] RFCs vs Standards Salz, Rich
- [saag] Re: [rfc-i] Re: RFCs vs Standards Watson Ladd
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Simon Josefsson
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards S Moonesamy
- [saag] Re: [rfc-i] RFCs vs Standards Eliot Lear
- [saag] Re: [rfc-i] RFCs vs Standards Eric Rescorla
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Eric Rescorla
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Joel Halpern
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards John Mattsson
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Randy Bush
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Randy Bush
- [saag] Re: [rfc-i] Re: Re: RFCs vs Standards Carsten Bormann
- [saag] Re: [rfc-i] Re: Re: Re: Re: RFCs vs Standa… Phillip Hallam-Baker
- [saag] Re: [rfc-i] Re: Re: Re: Re: RFCs vs Standa… Eric Rescorla
- [saag] Re: [rfc-i] Re: Re: Re: Re: RFCs vs Standa… Tero Kivinen
- [saag] Re: [rfc-i] Re: Re: Re: Re: Re: RFCs vs St… touch@strayalpha.com
- [saag] Re: [rfc-i] Re: Re: Re: Re: RFCs vs Standa… Phillip Hallam-Baker