Re: [smime] [IANA #1303700] [Errata Verified] RFC2633 (5019)

Russ Housley <housley@vigilsec.com> Tue, 06 February 2024 14:08 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: smime@ietfa.amsl.com
Delivered-To: smime@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74462C14F714; Tue, 6 Feb 2024 06:08:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.908
X-Spam-Level:
X-Spam-Status: No, score=-1.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1EoxD_pxcARa; Tue, 6 Feb 2024 06:08:10 -0800 (PST)
Received: from mail3.g24.pair.com (mail3.g24.pair.com [66.39.134.11]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A108C14F6F2; Tue, 6 Feb 2024 06:08:10 -0800 (PST)
Received: from mail3.g24.pair.com (localhost [127.0.0.1]) by mail3.g24.pair.com (Postfix) with ESMTP id 426C61416EC; Tue, 6 Feb 2024 09:08:09 -0500 (EST)
Received: from smtpclient.apple (unknown [96.241.2.243]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail3.g24.pair.com (Postfix) with ESMTPSA id 28E5C141FFF; Tue, 6 Feb 2024 09:08:09 -0500 (EST)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.700.6\))
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <rt-5.0.3-481535-1707188819-1028.1303700-9-0@icann.org>
Date: Tue, 06 Feb 2024 09:07:58 -0500
Cc: Paul Wouters <paul.wouters@aiven.io>, jsoref@gmail.com, IESG <iesg@ietf.org>, IETF SMIME <smime@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <19EEF5F7-E9C7-4845-BCB8-1CDC882EDBE3@vigilsec.com>
References: <RT-Ticket-1303700@icann.org> <20240112200812.3D6F31A2161D@rfcpa.amsl.com> <D7CFA801-0335-407E-88B6-ACF2688CDE1A@vigilsec.com> <rt-5.0.3-481535-1707188819-1028.1303700-9-0@icann.org>
To: iana-matrix-comment@iana.org
X-Mailer: Apple Mail (2.3731.700.6)
X-Scanned-By: mailmunge 3.11 on 66.39.134.11
Archived-At: <https://mailarchive.ietf.org/arch/msg/smime/9Q0ai_6DpJG04zHcL5QNmbktsKc>
Subject: Re: [smime] [IANA #1303700] [Errata Verified] RFC2633 (5019)
X-BeenThere: smime@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: SMIME Working Group <smime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/smime>, <mailto:smime-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/smime/>
List-Post: <mailto:smime@ietf.org>
List-Help: <mailto:smime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/smime>, <mailto:smime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Feb 2024 14:08:14 -0000

I do not see any updates needed to the SMI Security for S/MIME Attributes (1.2.840.113549.1.9.16.2) registry.

Russ

> On Feb 5, 2024, at 10:06 PM, David Dong via RT <iana-matrix-comment@iana.org> wrote:
> 
> Hi Paul,
> 
> Following up for this errata; do we need to update the description for decimal 11, id-aa-encrypKeyPref, in SMI Security for S/MIME Attributes (1.2.840.113549.1.9.16.2)?
> 
> Thank you.
> 
> Best regards,
> 
> David Dong
> IANA Services Sr. Specialist
> 
> On Fri Jan 12 20:22:28 2024, housley@vigilsec.com wrote:
>> I think it would be better to put an ASC.1 comment after the line.
>> Otherwise, [sic] looks like an undefined ASN.1 tag.
>> 
>> Russ
>> 
>>> On Jan 12, 2024, at 3:08 PM, RFC Errata System <rfc-editor@rfc-
>>> editor.org> wrote:
>>> 
>>> The following errata report has been verified for RFC2633,
>>> "S/MIME Version 3 Message Specification".
>>> 
>>> --------------------------------------
>>> You may review the report below and at:
>>> https://www.rfc-editor.org/errata/eid5019
>>> 
>>> --------------------------------------
>>> Status: Verified
>>> Type: Editorial
>>> 
>>> Reported by: Josh Soref <jsoref@gmail.com>
>>> Date Reported: 2017-05-14
>>> Verified by: Paul Wouters (IESG)
>>> 
>>> Section: 5
>>> 
>>> Original Text
>>> -------------
>>> id-aa-encrypKeyPref OBJECT IDENTIFIER ::= {id-aa 11}
>>> 
>>> 
>>> Corrected Text
>>> --------------
>>> id-aa-encrypKeyPref [sic] OBJECT IDENTIFIER ::= {id-aa 11}
>>> 
>>> Notes
>>> -----
>>> encryp isn't a word, it's a typo. Unfortunately, like http's
>>> (rfc1945) referer [sic] before it, this is now part of the API.
>>> 
>>> This error should be highlighted (as rfc2068 does for referer [sic])
>>> so that people are aware that the natural spelling doesn't apply.
>>> 
>>> If it's possible for a revised RFC to be published suggesting the
>>> correct spelling w/ a way for clients/servers to handle the old
>>> spelling, that would be nice, but based on precedent, that seems
>>> unlikely.
>>> 
>>> ---
>>> Kathleen Moriarty: As AD, this discussion needs to be continued and
>>> possibly with a different draft.  As such, I am marking this as hold
>>> for document update and listing it as editorial so that there are no
>>> n the wire changes at this time with this errata.
>>> ----
>>> There was quite a bit of on list discussion that should be reviewed
>>> for any future changes.
>>> 
>>> One summary from the discussion:
>>> he mailing list participants are copied on these errata to get their
>>> opinion in order to inform the AD how to dispose of the errata.  Most
>>> folks are just making their opinions known.
>>> 
>>> 1) The next thing that folks look at is whether it’s technical or
>>> not.  Debate ensues, but generally technical errata are those that
>>> affect interoperability.  This one I don’t think does because there
>>> are no changes to the bits on the wire.
>>> 
>>> 2) And, well folks want to get lots of changes, but the change has to
>>> run through the consensus process (back to mailing list input).
>>> 
>>> So to the import bit:
>>> 
>>> As I see it, there are two ways to get the note incorporated:
>>> 
>>> 1. Write a draft that adds the note; this seems a bit heavy weight
>>> for what you are trying to do.
>>> 
>>> 2. Apply the note to the latest RFC/draft that obsoletes RFC 2633; I
>>> guess you went for upstream, but generally the IETF applies changes
>>> to the latest/greatest RFC/draft.  That obsoletes chain is: RFC 3851
>>> obsoleted RFC 2633, RFC 3851 was obsoleted by RFC 5751, and draft-
>>> ietf-lamps-rfc5751-bis is about to obsolete RFC 5751.  Luckily,
>>> draft-ietf-lamps-rfc5751-bis isn’t yet an RFC so there’s an option to
>>> have the note added there.
>>> 
>>> Any objections to adding a note in draft-ietf-lamps-rfc5751-bis along
>>> the same lines as the note for receipentKeyId?
>>> 
>>> Paul Wouters (AD): This note made it into RFC 8551, so marking this
>>> errata Verified to close it
>>> 
>>> --------------------------------------
>>> RFC2633 (draft-ietf-smime-msg-08)
>>> --------------------------------------
>>> Title               : S/MIME Version 3 Message Specification
>>> Publication Date    : June 1999
>>> Author(s)           : B. Ramsdell, Ed.
>>> Category            : PROPOSED STANDARD
>>> Source              : S/MIME Mail Security
>>> Area                : Security
>>> Stream              : IETF
>>> Verifying Party     : IESG
>>> 
>>> _______________________________________________
>>> smime mailing list
>>> smime@ietf.org
>>> https://www.ietf.org/mailman/listinfo/smime
>