IETF Logo Mail Archive

Re: [Secdispatch] [EXTERNAL] Please help dispatch "Dangerous Labels"

Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 26 July 2022 18:26 UTC

Return-Path: <dkg@fifthhorseman.net>
X-Original-To: secdispatch@ietfa.amsl.com
Delivered-To: secdispatch@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA966C16ECAA for <secdispatch@ietfa.amsl.com>; Tue, 26 Jul 2022 11:26:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.314
X-Spam-Level:
X-Spam-Status: No, score=-1.314 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, RDNS_NONE=0.793, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=fifthhorseman.net header.b=0mFmVyoj; dkim=pass (2048-bit key) header.d=fifthhorseman.net header.b=wykJwzjz
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pbKdHg3qifNX for <secdispatch@ietfa.amsl.com>; Tue, 26 Jul 2022 11:26:02 -0700 (PDT)
Received: from che.mayfirst.org (unknown [162.247.75.117]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E17AC138FB3 for <secdispatch@ietf.org>; Tue, 26 Jul 2022 11:26:02 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019; t=1658859960; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=ZqLV6oNx5IGrXSgM4jZSk9DTxu1/SnB5c3ZQ2U6eAdw=; b=0mFmVyojYWIxokDVt1qg5U7lmdic24cugBfEHWBeBJGVudq+h3IE5ela9Le7RYMP1rTZe dQ2hpUt+Kb9l3COAA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1658859960; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=ZqLV6oNx5IGrXSgM4jZSk9DTxu1/SnB5c3ZQ2U6eAdw=; b=wykJwzjzPaRS8mygIW8mFyv1yH9X6hoxD3z53H/Afg73/SCN0nMReZxbDa0bmybWK1AmY 4RIE5zQRWquTfstndvBUDmSNcw+StYcTZnfVswRDNyw0dwRi+BIrF7zlITuk+jerTZjMJtX 8ITaq98bwWw8r72JM/EY/fQVMmc5Sxm+EHYxlHEatP+viRdU9DkPHBjqPQZWzZ0r7TWSuLx IeN7+PvZ5hV0KEJOFjbWAZhmguIjfGCoHD4llnNlXs2PIY3j+PXVD4gEkZqTs4I9sQVh6Ts 8BkweAhCsEVbtX64YYrXUr3e2G+/TdgVij+W8kztBpO+7nByvHzk6TM2Cl3w==
Received: from fifthhorseman.net (unknown [IPv6:2001:67c:370:128:133a:446a:4e9d:ada6]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by che.mayfirst.org (Postfix) with ESMTPSA id 50591F9AD; Tue, 26 Jul 2022 14:26:00 -0400 (EDT)
Received: by fifthhorseman.net (Postfix, from userid 1000) id 641EE2056D; Tue, 26 Jul 2022 14:25:40 -0400 (EDT)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: Mike Ounsworth <Mike.Ounsworth@entrust.com>, "secdispatch@ietf.org" <secdispatch@ietf.org>
In-Reply-To: <CH0PR11MB573918750DE36371FCA6AF759F949@CH0PR11MB5739.namprd11.prod.outlook.com>
References: <87tu73q5c6.fsf@fifthhorseman.net> <CH0PR11MB573918750DE36371FCA6AF759F949@CH0PR11MB5739.namprd11.prod.outlook.com>
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata= mDMEX+i03xYJKwYBBAHaRw8BAQdACA4xvL/xI5dHedcnkfViyq84doe8zFRid9jW7CC9XBiI0QQf FgoAgwWCX+i03wWJBZ+mAAMLCQcJEOCS6zpcoQ26RxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNl cXVvaWEtcGdwLm9yZ/tr8E9NA10HvcAVlSxnox6z62KXCInWjZaiBIlgX6O5AxUKCAKbAQIeARYh BMKfigwB81402BaqXOCS6zpcoQ26AADZHQD/Zx9nc3N2kj13AUsKMr/7zekBtgfSIGB3hRCU74Su G44A/34Yp6IAkndewLxb1WdRSokycnaCVyrk0nb4imeAYyoPtBc8ZGtnQGZpZnRoaG9yc2VtYW4u bmV0PojRBBMWCgCDBYJf6LTfBYkFn6YAAwsJBwkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3Rh dGlvbnMuc2VxdW9pYS1wZ3Aub3JnL0Gwxvypz2tu1IPG+yu1zPjkiZwpscsitwrVvzN3bbADFQoI ApsBAh4BFiEEwp+KDAHzXjTYFqpc4JLrOlyhDboAAPkXAP0Z29z7jW+YzLzPTQML4EQLMbkHOfU4 +s+ki81Czt0WqgD/SJ8RyrqDCtEP8+E4ZSR01ysKqh+MUAsTaJlzZjehiQ24MwRf6LTfFgkrBgEE AdpHDwEBB0DkKHOW2kmqfAK461+acQ49gc2Z6VoXMChRqobGP0ubb4kBiAQYFgoBOgWCX+i03wWJ BZ+mAAkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3Jnfvo+ nHoxDwaLaJD8XZuXiaqBNZtIGXIypF1udBBRoc0CmwICHgG+oAQZFgoAbwWCX+i03wkQPp1xc3He VlxHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnaheiqE7Pfi3Atb3GGTw+ jFcBGOaobgzEJrhEuFpXREEWIQQttUkcnfDcj0MoY88+nXFzcd5WXAAAvrsBAIJ5sBg8Udocv25N stN/zWOiYpnjjvOjVMLH4fV3pWE1AP9T6hzHz7hRnAA8d01vqoxOlQ3O6cb/kFYAjqx3oMXSBhYh BMKfigwB81402BaqXOCS6zpcoQ26AADX7gD/b83VObe14xrNP8xcltRrBZF5OE1rQSPkMNy+eWpk eCwA/1hxiS8ZxL5/elNjXiWuHXEvUGnRoVj745Vl48sZPVYMuDgEX+i03xIKKwYBBAGXVQEFAQEH QIGex1WZbH6xhUBve5mblScGYU+Y8QJOomXH+rr5tMsMAwEICYjJBBgWCgB7BYJf6LTfBYkFn6YA CRDgkus6XKENukcUAAAAAAAeACBzYWx0QG5vdGF0aW9ucy5zZXF1b2lhLXBncC5vcmcEAx9vTD3b J0SXkhvcRcCr6uIDJwic3KFKxkH1m4QW0QKbDAIeARYhBMKfigwB81402BaqXOCS6zpcoQ26AAAX mwD8CWmukxwskU82RZLMk5fm1wCgMB5z8dA50KLw3rgsCykBAKg1w/Y7XpBS3SlXEegIg1K1e6dR fRxL7Z37WZXoH8AH
Date: Tue, 26 Jul 2022 14:25:39 -0400
Message-ID: <87lesfpw7w.fsf@fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdispatch/Mp544EOhVuRRIiM3pzbztzyxLfA>
Subject: Re: [Secdispatch] [EXTERNAL] Please help dispatch "Dangerous Labels"
X-BeenThere: secdispatch@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Dispatch <secdispatch.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdispatch>, <mailto:secdispatch-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdispatch/>
List-Post: <mailto:secdispatch@ietf.org>
List-Help: <mailto:secdispatch-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdispatch>, <mailto:secdispatch-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Jul 2022 18:26:07 -0000

On Tue 2022-07-26 18:17:25 +0000, Mike Ounsworth wrote:
> I love the concept of this draft, but I wonder of a draft is the right format? This list is likely to be ever-evolving.
>
> It was suggested during SECDISPATCH (I think) that maybe an IANA registry of Dangerous Labels would be more appropriate; thereby if a future draft introduces a new dangerous label, then that should be indicated in its IANA Considerations to be added to the registry.

Right, the document calls for two separate IANA registries: one for DNS
labels and one for e-mail local parts.  The draft aims to establish the
registries, to encouarge IANA to maintain it, and to document the
rationale for the registries (as a "wall of shame", at least in part).
Would IANA create any registry without an RFC?

I'd assume there would be some kind of designated expert per registry,
whose main job would be to discourage attempts at registration by
pointing applicants to better approaches.

         --dkg

v2.23.0 | Report a Bug | By Email