Re: [sidr] comments on draft-ietf-sidr-rfc6485bis

Geoff Huston <gih@apnic.net> Tue, 15 April 2014 22:00 UTC

Return-Path: <gih@apnic.net>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C6CA1A07CE for <sidr@ietfa.amsl.com>; Tue, 15 Apr 2014 15:00:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.063
X-Spam-Level:
X-Spam-Status: No, score=-102.063 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, RP_MATCHES_RCVD=-0.272, SPF_PASS=-0.001, T_DKIM_INVALID=0.01, USER_IN_WHITELIST=-100] autolearn=unavailable
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qREqbf7anNf0 for <sidr@ietfa.amsl.com>; Tue, 15 Apr 2014 15:00:20 -0700 (PDT)
Received: from so-mailgw.apnic.net (so-mailgw.apnic.net [IPv6:2001:dd8:a:3::230]) by ietfa.amsl.com (Postfix) with SMTP id 032041A07C6 for <sidr@ietf.org>; Tue, 15 Apr 2014 15:00:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apnic.net; s=c3po; h=received:received:content-type:mime-version:subject:from:in-reply-to:date:cc: content-transfer-encoding:message-id:references:to:x-mailer:return-path; bh=/wXl2Hnrbu5mDvpEiYd1zhY1t8CUcGOLigNI+gUrkwM=; b=J0Q58ggszdtx6jMnjiuSlXQqbt9I1qudGaQ55c2ncgN2lPxXU14e9TNQegI8/HFAbfAZuuqcW5SaF GvUGyRL9YSUCPr97FhGwrDCe1n4wIYmP4OGvrZTDAnxDv31OMBTIcFUgA0vVo4Nuxx4VxSSlFGGEzm DVXi+PM4tqCps/98=
Received: from NXMDA1.org.apnic.net (unknown [203.119.93.247]) by so-mailgw.apnic.net (Halon Mail Gateway) with ESMTP; Wed, 16 Apr 2014 17:08:11 +1000 (EST)
Received: from dhcp179.potaroo.net (203.119.101.249) by NXMDA1.org.apnic.net (203.119.107.11) with Microsoft SMTP Server (TLS) id 14.1.218.12; Wed, 16 Apr 2014 08:00:13 +1000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0 (Mac OS X Mail 7.2 \(1874\))
From: Geoff Huston <gih@apnic.net>
In-Reply-To: <60ECB09C-3502-48CD-A152-076AE5BF6E39@tislabs.com>
Date: Wed, 16 Apr 2014 08:00:12 +1000
Content-Transfer-Encoding: quoted-printable
Message-ID: <CA41B216-012F-40FF-BDF3-EA8AC66EEAC4@apnic.net>
References: <E293915D-2FA8-487C-AE8C-15A13263E559@tislabs.com> <60ECB09C-3502-48CD-A152-076AE5BF6E39@tislabs.com>
To: Sandra Murphy <sandy@tislabs.com>
X-Mailer: Apple Mail (2.1874)
Archived-At: http://mailarchive.ietf.org/arch/msg/sidr/7WjfCC7f0_79shrHjFwXmVjvFGI
Cc: "sidr@ietf.org" <sidr@ietf.org>
Subject: Re: [sidr] comments on draft-ietf-sidr-rfc6485bis
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Apr 2014 22:00:35 -0000

On 15 Apr 2014, at 12:43 am, Sandra Murphy <sandy@tislabs.com> wrote:

> And one "I forgot":
> 
>   CAs and RPs SHOULD be capable of supporting a transition to allow for
>   the phased introduction of additional encryption algorithms and key
>   specifications,
> 
> Is this any different than the algorithm agility in RFC6916?  If so, I'd think
> a reference would be good. If not, could you explain?
> 


Yes, I could explain. 

<explanation>
The RFC numbers should be a huge hint here.

So why didn't RFC6485 have a reference to what was a non-existent document at that
time? 

Do I really need to answer that question?
</explanation>

So why doesn't RFC6485bis fix all this, as you are suggesting here?

So should a reference to RFC6916 be included in this draft? Well on the
one hand I can't see why not, but...

All this started out as a potential erratum note to RFC6485,
and following advice from <random AD> that this constituted a technical change
that was beyond the scope of an erratum, a bis update to RFC6485 itself was
called for, with a narrow scope to address this particular issue. Section 8
of the draft describes the nature of the change, to allow the IESG and IETF LC
review of this bis document to concentrate on precisely that change, as advised
in the WG meeting at the time from <random AD>.

But it seems that you are advocating an expanded brief for this bis document
and when cleaning up the references to related work then we should also look 
at the rest of the document to see how it meshes with later published
RFCs as well. Right?

(Parenthetically, the expanding scope of this work is a worry, and I can't
help but wonder if all this is productive use of everyone's time. Maybe we
should also be reflecting on http://gigaom.com/2014/04/12/why-i-quit-writing-internet-standards/
and contemplate the nature of the difference between adequacy and a quest for
perfection.)

Thanks,

   Geoff