Re: [secdir] Secdir review of draft-ietf-sidr-res-certs

Stephen Kent <kent@bbn.com> Tue, 03 May 2011 09:46 UTC

Return-Path: <kent@bbn.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 445ACE06F2; Tue, 3 May 2011 02:46:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -104.481
X-Spam-Level:
X-Spam-Status: No, score=-104.481 tagged_above=-999 required=5 tests=[AWL=2.118, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tYgdnBaLcPwd; Tue, 3 May 2011 02:46:01 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id CBAB3E07B5; Tue, 3 May 2011 02:46:01 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:58447 helo=[193.0.26.186]) by smtp.bbn.com with esmtp (Exim 4.74 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1QHCB1-000K0y-2Q; Tue, 03 May 2011 05:45:56 -0400
Mime-Version: 1.0
Message-Id: <p06240806c9e4509ba146@[10.242.22.94]>
In-Reply-To: <1446DA6A65B664240D8AA4F9@PST.JCK.COM>
References: <tslhbbag9m1.fsf@mit.edu> <4D791B26.8020001@vpnc.org> <tsl4o7ag5fw.fsf@mit.edu> <4D79271E.6080707@vpnc.org> <tslzkp2elyf.fsf@mit.edu> <p06240801c9ce424e70b1@[128.89.89.62]> <1446DA6A65B664240D8AA4F9@PST.JCK.COM>
Date: Tue, 03 May 2011 05:05:58 -0400
To: John C Klensin <john-ietf@jck.com>
From: Stephen Kent <kent@bbn.com>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Cc: draft-ietf-sidr-res-certs@tools.ietf.org, Sam Hartman <hartmans-ietf@mit.edu>, ietf@ietf.org, secdir@ietf.org
Subject: Re: [secdir] Secdir review of draft-ietf-sidr-res-certs
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 May 2011 09:46:02 -0000

At 9:27 AM -0400 4/17/11, John C Klensin wrote:
>Steve,
>Two things:
>
>
>(1) Given the variable amount of time it takes to get RFCs
>issued/ published after IESG signoff, are you and the WG sure
>that you want to tie the phases of the phase-in procedure to RFC
>publication?

It probably would help if the IESG coordinated with the RFC Editor to 
try to avoid having any problems here. But, we anticipate that the 
durations for the phases will be long enough so that a few months in 
the RFC editor's queue can be managed.

>
>(2) There is an incomplete sentence at the end of (2): "This
>allows CAs to issue certificates under" (more context below).
>
>    john

Whoops.  The final sentence should be:

This allows CAs to issue certificates under the new format before all 
relying parties are prepared to process that format.


Steve