Re: [Editorial Errata Reported] RFC4013 (1812)

Alexey Melnikov <alexey.melnikov@isode.com> Wed, 22 July 2009 20:52 UTC

Return-Path: <owner-ietf-sasl@mail.imc.org>
X-Original-To: ietfarch-sasl-archive-Zoh8yoh9@core3.amsl.com
Delivered-To: ietfarch-sasl-archive-Zoh8yoh9@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 84A083A6800 for <ietfarch-sasl-archive-Zoh8yoh9@core3.amsl.com>; Wed, 22 Jul 2009 13:52:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.299
X-Spam-Level:
X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_39=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yuz2o3+E4ypd for <ietfarch-sasl-archive-Zoh8yoh9@core3.amsl.com>; Wed, 22 Jul 2009 13:52:05 -0700 (PDT)
Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 711E83A67AF for <sasl-archive-Zoh8yoh9@ietf.org>; Wed, 22 Jul 2009 13:52:05 -0700 (PDT)
Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n6MKmdIa066602 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 22 Jul 2009 13:48:39 -0700 (MST) (envelope-from owner-ietf-sasl@mail.imc.org)
Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id n6MKmdxD066599; Wed, 22 Jul 2009 13:48:39 -0700 (MST) (envelope-from owner-ietf-sasl@mail.imc.org)
X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-sasl@mail.imc.org using -f
Received: from rufus.isode.com (rufus.isode.com [62.3.217.251]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n6MKmbZj066593 for <ietf-sasl@imc.org>; Wed, 22 Jul 2009 13:48:38 -0700 (MST) (envelope-from alexey.melnikov@isode.com)
Received: from [217.214.124.120] (host-n177-120.homerun.telia.com [217.214.124.120]) by rufus.isode.com (submission channel) via TCP with ESMTPA id <Smd7HgAiQywk@rufus.isode.com>; Wed, 22 Jul 2009 21:48:36 +0100
Message-ID: <4A677AFA.5020505@isode.com>
Date: Wed, 22 Jul 2009 22:47:54 +0200
From: Alexey Melnikov <alexey.melnikov@isode.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915
X-Accept-Language: en-us, en
To: Jeffrey Hutzelman <jhutz@cmu.edu>
CC: Simon Josefsson <simon@josefsson.org>, RFC Errata System <rfc-editor@rfc-editor.org>, Kurt@OpenLDAP.org, tim.polk@nist.gov, pasi.eronen@nokia.com, kurt.zeilenga@isode.com, tlyu@mit.edu, ietf-sasl@imc.org
Subject: Re: [Editorial Errata Reported] RFC4013 (1812)
References: <200907182012.n6IKCnhM012626@boreas.isi.edu> <8763dka8b1.fsf@mocca.josefsson.org> <4273FB5691FFB40568367C4E@atlantis.pc.cs.cmu.edu>
In-Reply-To: <4273FB5691FFB40568367C4E@atlantis.pc.cs.cmu.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Sender: owner-ietf-sasl@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-sasl/mail-archive/>
List-ID: <ietf-sasl.imc.org>
List-Unsubscribe: <mailto:ietf-sasl-request@imc.org?body=unsubscribe>

Jeffrey Hutzelman wrote:

> --On Wednesday, July 22, 2009 08:20:34 PM +0200 Simon Josefsson 
> <simon@josefsson.org> wrote:
>
>> RFC Errata System <rfc-editor@rfc-editor.org> writes:
>>
>>> Section: 2.3
>>>
>>> Original Text
>>> -------------
>>> Section title is "Prohibited Output"
>>>
>>> Corrected Text
>>> --------------
>>> Section title should be "Prohibited Input"
>>>
>>> Notes
>>> -----
>>> Section 2.3 is talking about prohibited input, not prohibited output.
>>
>> I'm not sure about this -- compare RFC 3454 section 5, the terminology
>> and design is about prohibiting code points in the _output_.
>>
>> Testing for code points in the _output_ may be semantically different
>> from testing in the _input_.  Some other IDNA operation may modify code
>> points into one of the prohibited _output_ code points.  See RFC 3454
>> section 2, the map&normalize steps are taken before the prohibit step.
>
> I agree with Simon here.  Prohibiting a code point in the output 
> usually has the effect of making any input containing that code point 
> result in a failure, but the point is that the _output_ will never 
> contain that code point, even as the result of mapping and 
> normalization -- the operation will fail instead.  This distinction 
> was a conscious decision made in stringprep.

Agreed.

> There is, however, an error -- the first sentence of this section does 
> in fact claim to be specifying prohibited input characters.  The 
> correct fix is to that text, not to the section title.

My understanding is that prohibited characters are never generated 
during mapping.