Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document

Gunnar Engelbach <gunnar.engelbach@threatguard.com> Fri, 10 June 2016 00:44 UTC

Return-Path: <gunnar.engelbach@threatguard.com>
X-Original-To: sacm@ietfa.amsl.com
Delivered-To: sacm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17FA312DA5D for <sacm@ietfa.amsl.com>; Thu, 9 Jun 2016 17:44:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=threatguard-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bDttfu-sDzMZ for <sacm@ietfa.amsl.com>; Thu, 9 Jun 2016 17:44:49 -0700 (PDT)
Received: from mail-pa0-x233.google.com (mail-pa0-x233.google.com [IPv6:2607:f8b0:400e:c03::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEA2E12D842 for <sacm@ietf.org>; Thu, 9 Jun 2016 17:44:49 -0700 (PDT)
Received: by mail-pa0-x233.google.com with SMTP id ec8so18085445pac.0 for <sacm@ietf.org>; Thu, 09 Jun 2016 17:44:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=threatguard-com.20150623.gappssmtp.com; s=20150623; h=from:subject:to:references:message-id:date:user-agent:mime-version :in-reply-to; bh=JLHmA5I9u1gczfoGhfhB3VPglFpX6H+UEd6K+GaU2PY=; b=mMpDZzLlLohom8lntrNRdr2y0quxlM9bxDiB+Qx09ra9rER14AuaH4w9E6Qh1Hp26F 0Qe6ZBhTY6AJty2aO5hxP09gm+ZFo9GVZkjTORdky1rCDoOfytwpN9xXLTVf49qbfXiU O25I9vKj3dWwT4aQjnrcIIPHgBvukEGzG5Du5VBdCVcgVC+kLpHPXk+KU7mWm9bjIdED XBOlCu8gCQKPdNdzTOgvKk4sO/ZpK9IuZr9UCo/2KOsKQpQDzB4+RpDYewuEp/rn6Q3I j+hCPG/42bJKLKaa/iTKdjN0SbUlLLCPG2ELs9c0OfOJx2KTMcha+JK+LSIGZRz0Cn9l LHwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:to:references:message-id:date :user-agent:mime-version:in-reply-to; bh=JLHmA5I9u1gczfoGhfhB3VPglFpX6H+UEd6K+GaU2PY=; b=gxSLknAJeJ/VBSyRNlOyi2BU7150PLOf8+KOUOeygJx8LzPJZt6H4GK+v1sLSH7uyB 0xItTezNvQGQipLeREvfQwNbjakmCPZ2HqnOH79x8xzd7vLzowG25eIb5Vd5iq3wBTPN 8DG6AZ6O5uzCysQEgoiAIVBitVHu+55BouDJpnf6Qs/2UF3Lt6bp3mQQ/qBLbVFysZ4A ou32vHBJXtJG6XB6H1/y2MmmcHg9xxVG59VzerCZbpbdBJlN4H5N8ZHDnYwKqHpAE/Ai sC9VxwikjLsWY8Y4DAJePDQ/OZOeFT3vl3DJBAw4fZ7Nn/eIm8Lr0WGA2OteVgVyx14I TPBw==
X-Gm-Message-State: ALyK8tLNkfDRIs2bpTG9vGY6zfQO0Ti6DlqS1ptumga89nhr+KReZ6FZPd2lasftaQHcfQ==
X-Received: by 10.66.168.109 with SMTP id zv13mr15322356pab.10.1465519489272; Thu, 09 Jun 2016 17:44:49 -0700 (PDT)
Received: from [172.16.1.122] (75-142-12-171.dhcp.mdfd.or.charter.com. [75.142.12.171]) by smtp.gmail.com with ESMTPSA id eh9sm12663864pad.47.2016.06.09.17.44.47 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 09 Jun 2016 17:44:48 -0700 (PDT)
From: Gunnar Engelbach <gunnar.engelbach@threatguard.com>
X-Google-Original-From: Gunnar Engelbach <Gunnar.Engelbach@ThreatGuard.com>
To: tony@yaanatech.com, Adam Montville <adam.w.montville@gmail.com>, "<sacm@ietf.org>" <sacm@ietf.org>
References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <EC234EFE-95AB-444B-8A5D-782ADBD60559@gmail.com> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com>
Message-ID: <db612b00-c11a-88c1-45da-35e0693305e9@ThreatGuard.com>
Date: Thu, 09 Jun 2016 17:44:52 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1
MIME-Version: 1.0
In-Reply-To: <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com>
Content-Type: multipart/alternative; boundary="------------6E3DC71E7B158C78D99C17C9"
Archived-At: <https://mailarchive.ietf.org/arch/msg/sacm/VBxrkOuoUVHbHkL9iIfA0DyP9Bw>
Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document
X-BeenThere: sacm@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: SACM WG mail list <sacm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sacm>, <mailto:sacm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sacm/>
List-Post: <mailto:sacm@ietf.org>
List-Help: <mailto:sacm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sacm>, <mailto:sacm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Jun 2016 00:44:52 -0000


Hey Tony, funny thing that you should say that.  You seem to have a 
better awareness of the other efforts going on out there than I do, so I 
could use your help in identifying other good candidates and what will 
be necessary to support as many of them as possible.

What I'd really like to do is take a more formal approach -- gather some 
requirements and then see from among the existing efforts which is the 
best from among those that are good enough.  If any.

But first is a matter of setting the requirements.  Stated generally, I 
really only have three:

   1)  Is extensible -- as a fork outside of the current owner, if 
necessary, to be sure it continues to meet SACM needs without relying on 
the good graces of the current owner

   2)  Readily accessible (eg., spec is not cost prohibitive for any users)

   3)  The most complete (that is, closest to being able to represent 
the other tag types without loss of data or shoe-horning data into 
fields that weren't really meant for that type of data)


I'm sure Charles, et al, will have other requirements, so feel free to 
chime in.  However, I think the simpler and more informal we can keep 
this list the quicker we can grind through it.


--gun




On 6/9/2016 2:33 PM, Tony Rutkowski wrote:
> Hi Adam,
>
> A good solution.  Charles and Gunnar should also engage
> in some proactive outreach.  Simply stating that "no other
> solutions to the problem of software identification have
> been submitted" is preposterous when there are so many
> out there.  IMHO, one of the long-standing problems with
> SACM is its institutional and participatory insularity in an
> arena where so many almost identical activities are occurring
> in other venues where there is far greater industry participation.
> Ignoring them diminishes the value of whatever SACM
> accomplishes.
>
> --tony
>
> On 2016-06-09 3:47 PM, Adam Montville wrote:
>> All:
>>
>> After several on-list discussions, the last virtual interim, and the 
>> discussions surrounding this call for adoption, the chairs 
>> acknowledge that there are some key concerns with this draft, but 
>> also see that there is rough consensus for adoption.  We additionally 
>> note that no other solutions to the problem of software 
>> identification have been submitted to the working group [1].
>>
>> Because the topic of software identification, and SWID in particular, 
>> appears to be a contentious one, we are designating Charles Schmidt 
>> and Gunnar Engelbach as editors of the working group draft [2].  We 
>> believe that Charles and Gunnar will bring the necessary balance to 
>> this draft, so that the key concerns are sufficiently addressed.
>>
>> Kind regards,
>>
>> Adam & Karen
>>
>> [1] This draft adoption does not preclude future alternative submissions
>> [2] Note that original authors will remain authors, but Charles and 
>> Gunnar will hold the pen.
>>
>>
>>> On May 17, 2016, at 11:21 AM, Karen O'Donoghue <odonoghue@isoc.org 
>>> <mailto:odonoghue@isoc.org>> wrote:
>>>
>>> Folks,
>>>
>>> As discussed during our last couple of meetings, this is the 
>>> official call for adoption of 
>>> https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as 
>>> a SACM working group document.
>>>
>>> Please reply with any comments or concerns along your support of 
>>> this action to the mailing list.
>>>
>>> Thanks,
>>> Karen and Adam
>>> _______________________________________________
>>> sacm mailing list
>>> sacm@ietf.org <mailto:sacm@ietf.org>
>>> https://www.ietf.org/mailman/listinfo/sacm
>>
>>
>>
>> _______________________________________________
>> sacm mailing list
>> sacm@ietf.org
>> https://www.ietf.org/mailman/listinfo/sacm
>
>
>
> _______________________________________________
> sacm mailing list
> sacm@ietf.org
> https://www.ietf.org/mailman/listinfo/sacm