IETF Logo Mail Archive

Re: [saag] [art] Date formats: RFC3339 vs. RFC 5322

Stian Soiland-Reyes <soiland-reyes@manchester.ac.uk> Wed, 14 April 2021 09:01 UTC

Return-Path: <soiland-reyes@manchester.ac.uk>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E9123A1690; Wed, 14 Apr 2021 02:01:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nEQWNgJtrmhf; Wed, 14 Apr 2021 02:00:59 -0700 (PDT)
Received: from GBR01-LO2-obe.outbound.protection.outlook.com (mail-eopbgr100074.outbound.protection.outlook.com [40.107.10.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D40283A1693; Wed, 14 Apr 2021 02:00:57 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jSug1EE4lIwLp7oB0m9O69DFN3azjrzhIiXOuxEA1amzNSHAEte4wirWFs+PtWkpo3RULaj1tM2yx5pCweZ7IVW9ppcXMdHXPdnfOuZl23NkfRMrJfwg7++wnkXCKpB5fEOYwDCAK8/u2qCwJRiBiscCdPfVbKr/Rn0onCzWCsojk3JVegqp+Fm4nLfD9t314HQUHVgQZpUE42LbX7SO0lxPZfsYkbfHiR2Wb4T4QrtymPX5kaQzLIx0ldsUEyzBsm7Xynjm6H4sr1CHG+sEUt61eeT/QXOtBdFlxd53OtKQ95frpqRfF7BHRC3zYd18j1hAgSU6mK8uRX2T5Ql7HA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wOxhUJfiHILFD+LwRGiWsiYoKkl7o5+frWh5vQZ5CYY=; b=OHgIMP2kK3KjPkTWGfWI+BFQSWXbcS97KszG4OT6F4w1Pkct2p9A7lnx7I7235jrJ4hPEhGdnVI0Oj1Q+jzYh2sv8DiExl504PyRGLnRyHV84IqcWNeoj42ncbghMaj0epXhzQ7M+mb8IEW8lHLRJLAX7KRptG494f9Kdbb6mM5EUjTLS/bz9kWstbUmX9PTwrVUAqIiXQj3hV9BZ98V4UDc/V7CFOyO/rSsu7xpjRPuDemtD/MGsgQKLQpGX9NTLXd1HFCUPuim8fgDGaWjyKXvUmh1nF1KjAw02fXPxLAzhg+xIvzqtNC4W8Ca37vI71RbsGMiBXM3O8b8SZH2Cw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=manchester.ac.uk; dmarc=pass action=none header.from=manchester.ac.uk; dkim=pass header.d=manchester.ac.uk; arc=none
Received: from LO0P265MB2986.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:184::9) by LOYP265MB2173.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:110::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4020.22; Wed, 14 Apr 2021 09:00:55 +0000
Received: from LO0P265MB2986.GBRP265.PROD.OUTLOOK.COM ([fe80::8088:4602:d179:2e9e]) by LO0P265MB2986.GBRP265.PROD.OUTLOOK.COM ([fe80::8088:4602:d179:2e9e%7]) with mapi id 15.20.4020.023; Wed, 14 Apr 2021 09:00:55 +0000
From: Stian Soiland-Reyes <soiland-reyes@manchester.ac.uk>
To: "dcrocker@bbiw.net" <dcrocker@bbiw.net>, Nico Williams <nico@cryptonector.com>, "Eliot Lear (elear)" <elear=40cisco.com@dmarc.ietf.org>
CC: "art@ietf.org" <art@ietf.org>, "saag@ietf.org" <saag@ietf.org>, Yakov Shafranovich <yakov@nightwatchcybersecurity.com>
Thread-Topic: [art] [saag] Date formats: RFC3339 vs. RFC 5322
Thread-Index: AQHXMJe3QFo8O+lXyEKs6qsGiriCoaqy0rQAgACXsYCAAF6JgA==
Date: Wed, 14 Apr 2021 09:00:55 +0000
Message-ID: <5F841FEF-7985-424B-A925-336AC3265D8F@manchester.ac.uk>
References: <CAAyEnSMBdXCA0EvgR79P_1gi15pAPfeyu_HgGqgMjWxRP8sxKg@mail.gmail.com> <C7B5DB45-F0A1-491C-AD4E-91F67C8C182E@cisco.com> <20210413191937.GK9612@localhost> <adf764ae-cb85-5063-0071-cc1461b11f1f@dcrocker.net>
In-Reply-To: <adf764ae-cb85-5063-0071-cc1461b11f1f@dcrocker.net>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.43.20110804
authentication-results: bbiw.net; dkim=none (message not signed) header.d=none;bbiw.net; dmarc=none action=none header.from=manchester.ac.uk;
x-originating-ip: [2001:8b0:a657:68e3:d08c:7f95:a3d:f697]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 63adc707-0728-4c11-7867-08d8ff23d032
x-ms-traffictypediagnostic: LOYP265MB2173:
x-microsoft-antispam-prvs: <LOYP265MB21739225276717394C7D16C9DD4E9@LOYP265MB2173.GBRP265.PROD.OUTLOOK.COM>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:LO0P265MB2986.GBRP265.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(4636009)(396003)(39860400002)(346002)(376002)(366004)(136003)(33656002)(38100700002)(36756003)(2616005)(53546011)(316002)(122000001)(76116006)(4326008)(6506007)(54906003)(6512007)(86362001)(786003)(966005)(71200400001)(478600001)(186003)(66446008)(8676002)(6486002)(66556008)(66476007)(83380400001)(64756008)(66946007)(2906002)(110136005)(5660300002)(8936002)(45980500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 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
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-ID: <9A2AAE08ACCC4F4EA1A9DEF3F80AAD7A@GBRP265.PROD.OUTLOOK.COM>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: manchester.ac.uk
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: LO0P265MB2986.GBRP265.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 63adc707-0728-4c11-7867-08d8ff23d032
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Apr 2021 09:00:55.4194 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: c152cb07-614e-4abb-818a-f035cfa91a77
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: BqMMEBoGvZEOYYJ0s7W6dDW7Rlw6psTKqKLEu9pc/XXhxJrJCTCuJHNHFYVqtrqSlAF7T5vEci2AchxS2ENd21HFqasDCRn8JaRuXixLUWM=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: LOYP265MB2173
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/ulHfBvpUvbJ_5ESF4PEUE0YPm5M>
Subject: Re: [saag] [art] Date formats: RFC3339 vs. RFC 5322
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Apr 2021 09:01:05 -0000

I would say for this particular example of security logs you should use ISO8601 (aka RFC3339), as it is more important when it happened/expires internationally rather than what timezone it happened in. 

In that case it should also be UTC-based or have an explicit timezone, e.g. considering "Zero day" - which day?

As a side effect  dates are also nicely sortable!

-- 
Stian Soiland-Reyes, The University of Manchester
https://www.esciencelab.org.uk/
https://orcid.org/0000-0001-9842-9718
    Please note that I may work flexibly – whilst it suits me to email now, 
    I do not expect a response or action outside of your own working hours.
 

On 2021-04-14, 05:23, "art on behalf of Dave Crocker" <art-bounces@ietf.org on behalf of dhc@dcrocker.net> wrote:

    On 4/13/2021 12:19 PM, Nico Williams wrote:
    > English-centric much?:)

    The RFC5322 date format was not designed for use as extensive as venues 
    speaking English.  It's original target for use was restricted only to 
    North America (cf, RFC733).

    I thought it quite exciting to even include Atlantic Standard Time, as 
    well as the zones for Hawaii and Alaska, although getting the latter 
    turned into a bit of an exercise.

    I was working at The Rand Corporation at the time and had been told that 
    the Librarian there had magical research skills.  The timezone topic 
    finally prompted my contacting her and asking for help.  She said she'd 
    see what she could find.

    I don't think it was as much as a half-hour before she called back with 
    the answer.  I was duly impressed.  (Astonished would be the more apt 
    word.)  So I asked her how she found the answer that quickly.

    She told me she call the phone company's information operator for Juneau 
    and asked her what they called their timezone. She then repeated the 
    exercise for Oahu...

    d/

    -- 
    Dave Crocker
    Brandenburg InternetWorking
    bbiw.net

    _______________________________________________
    art mailing list
    art@ietf.org
    https://www.ietf.org/mailman/listinfo/art

v2.23.0 | Report a Bug | By Email