Re: [secdir] Secdir review of draft-ietf-6man-uri-zoneid-05

Brian E Carpenter <brian.e.carpenter@gmail.com> Fri, 23 November 2012 14:50 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5387A21F849E; Fri, 23 Nov 2012 06:50:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.584
X-Spam-Level:
X-Spam-Status: No, score=-101.584 tagged_above=-999 required=5 tests=[AWL=0.107, BAYES_00=-2.599, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p8GRBOie9hDh; Fri, 23 Nov 2012 06:50:32 -0800 (PST)
Received: from mail-ee0-f44.google.com (mail-ee0-f44.google.com [74.125.83.44]) by ietfa.amsl.com (Postfix) with ESMTP id 71B1721F8446; Fri, 23 Nov 2012 06:50:30 -0800 (PST)
Received: by mail-ee0-f44.google.com with SMTP id b47so5862089eek.31 for <multiple recipients>; Fri, 23 Nov 2012 06:50:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=lGW9QXEg3l9WbnVronU3KPoJ9/l3+xY6oxdcRpFui2I=; b=XhL/tMCwLBOqWiYmn6t39P8NoIc4tiENDkxlemi3rKfDujO23caba7JnmTAxZW/RR3 GIHzYu0+JlybXlP65M1/sw50MWmWIssaEOo+/ScmXCkY1yUQD8ceiUB0EtHH6gEvrwKV GTbv+Q+UPaWuTFrjR4QeGE9d8jfEBwRBmmWWmOre+IidiUADjPU8sVc2QX9DL5cUVfVk brsH28YCUhyKVPou7Q52nFrxuzmZ5DhmjV2bAMLJnnixpK7J6Drdpj0n7bM51Nd32umb u9qHyDOB8YfdEcwjvpBXyL8/OEYHFA8ktypb7IARwxg3QksAUPOtjF8cpLZEIvJKCT1Z eHPA==
Received: by 10.14.194.72 with SMTP id l48mr14486838een.9.1353682229488; Fri, 23 Nov 2012 06:50:29 -0800 (PST)
Received: from [192.168.1.65] (host-2-102-219-114.as13285.net. [2.102.219.114]) by mx.google.com with ESMTPS id a44sm14050901eeo.7.2012.11.23.06.50.27 (version=SSLv3 cipher=OTHER); Fri, 23 Nov 2012 06:50:28 -0800 (PST)
Message-ID: <50AF8D42.50106@gmail.com>
Date: Fri, 23 Nov 2012 14:50:42 +0000
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To: Barry Leiba <barryleiba@computer.org>
References: <CAFOuuo5SbxQL-mFx9MOmpFgRybTV0qcu7pXZTnvRE=3NVSh7xQ@mail.gmail.com> <50AF2ABE.4020901@gmail.com> <CALaySJKLXxYrr5hP2RGzGXa3wHPWykdmwH66Zy5vzVqE-UnX9w@mail.gmail.com>
In-Reply-To: <CALaySJKLXxYrr5hP2RGzGXa3wHPWykdmwH66Zy5vzVqE-UnX9w@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Cc: "draft-ietf-6man-uri-zoneid.all@tools.ietf.org" <draft-ietf-6man-uri-zoneid.all@tools.ietf.org>, "secdir@ietf.org" <secdir@ietf.org>, The IESG <iesg@ietf.org>
Subject: Re: [secdir] Secdir review of draft-ietf-6man-uri-zoneid-05
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 23 Nov 2012 14:50:34 -0000

On 23/11/2012 14:26, Barry Leiba wrote:
>> The WG reached consensus on a SHOULD-based version. The whole issue
>> of browser behaviour is contentious, so changing to MUST would be
>> a WG issue, above my pay grade as a document editor. I will wait
>> for instructions.
>>
> 
> Could you
> 
> 1: give us some background on the discussion that resulted in SHOULD
> instead of MUST, and

I don't recall it being explicitly discussed - what I meant is that
this is the text that got through WG last call and post-last-call
discussion, without dissent.

> 2: consider adding explanations of when it would be appropriate to not do a
> SHOULD?

Yes, this is one of the things I look for when reviewing documents, too ;-)

> For 2, above, there's a great difference between "SHOULD do x unless
> there's some reason that it's impossible in this implementation" and
> "SHOULD do x unless you don't happen to agree with it."  I'd like to try to
> tease those apart.

I'm not a browser implementor, but as far as I can tell, there is a strong
tendency in that community to respect the law of least user astonishment,
so my very personal interpretation is "you SHOULD do this unless experience
shows that it will confuse the user." However, I think the real interpretation
in this case is closer to your first one - do this, because it helps the
user, unless your implementation makes this unreasonable.

Very much IMHO.

    Brian