Re: [secdir] secdir review of draft-melnikov-imap-keywords-06

Arnt Gulbrandsen <> Mon, 30 November 2009 17:41 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 08CDF3A6A9C; Mon, 30 Nov 2009 09:41:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2.385
X-Spam-Status: No, score=-2.385 tagged_above=-999 required=5 tests=[AWL=0.213, BAYES_00=-2.599, UNPARSEABLE_RELAY=0.001]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id ppgv6qSb3ijV; Mon, 30 Nov 2009 09:41:02 -0800 (PST)
Received: from ( [IPv6:2001:4d88:100c::1]) by (Postfix) with ESMTP id 163483A6960; Mon, 30 Nov 2009 09:41:02 -0800 (PST)
Received: from ( []) by (Postfix) with ESMTP id 1B698FA012D; Mon, 30 Nov 2009 17:40:56 +0000 (UTC)
Received: from (HELO by (Archiveopteryx 3.1.2) with esmtp id 1259602679-44536-44535/5/3 (5 recipients); Mon, 30 Nov 2009 18:37:59 +0100
Message-Id: <>
Date: Mon, 30 Nov 2009 18:42:30 +0100
From: Arnt Gulbrandsen <>
References: <> <> <>
In-Reply-To: <>
Content-Type: text/plain; format=flowed
Mime-Version: 1.0
X-Mailman-Approved-At: Mon, 30 Nov 2009 10:23:07 -0800
Cc: Samuel Weiler <>,
Subject: Re: [secdir] secdir review of draft-melnikov-imap-keywords-06
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Directorate <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Mon, 30 Nov 2009 17:41:03 -0000

Samuel Weiler answers Alexey:
>>> Isn't it enough to have them in a consensus doc?")  And how do you 
>>> expect the expert to encourage/enforce the SHOULD, given the 
>>> "favour registering it over requiring perfect documentation" 
>>> guideline?  Again, the current text isn't as clear as I'd like.
>> This is intentional. This is a judgment call by the expert.
> This sounds inconsistent.  I'm hearing "it's within the scope of the 
> expert's judgement to require an IETF Consensus doc" and "In cases 
> when an IMAP Keyword being registered is already deployed, Expert 
> Reviewers should favour registering it over requiring perfect 
> documentation."  If I were an implementer who got told "you need a 
> consensus doc", I'd be more than a little tempted to go ahead and 
> deploy, then reapply for the registration.

That's now how it happens. The consensus issues mostly have been about 
naming (different names for the same thing), and IMO were caused by 
lack of knowledge/communication. Merely talking two the expert would 
likely fix most.

Also, I'd like to mention that Lisa asked two people whether they could 
serve; both of her nominees are people who would be likely to give 
helpful answers, not send implementers away with one-sentence answer 
such as "go write a consensus doc".