Re: [smime] [Technical Errata Reported] RFC2633 (5019)

Eric Rescorla <ekr@rtfm.com> Sun, 14 May 2017 21:26 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: smime@ietfa.amsl.com
Delivered-To: smime@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E7FE129B8B for <smime@ietfa.amsl.com>; Sun, 14 May 2017 14:26:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level:
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9dNVTSIxMwSm for <smime@ietfa.amsl.com>; Sun, 14 May 2017 14:26:15 -0700 (PDT)
Received: from mail-yw0-x235.google.com (mail-yw0-x235.google.com [IPv6:2607:f8b0:4002:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78DBF129465 for <smime@ietf.org>; Sun, 14 May 2017 14:22:28 -0700 (PDT)
Received: by mail-yw0-x235.google.com with SMTP id b68so29748783ywe.3 for <smime@ietf.org>; Sun, 14 May 2017 14:22:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=4sBoc9jZ3XxVDDHnIW95VOnHbjT7EMQ1LQ+2XrljRYQ=; b=f+cLJ5bI9XbKEtj6PJ/s+iGTM7NLW2eLg68Ec4UKWdCGcuDR4ar29OmEJgFK43NUXH TDvEfGzrQZ+CuTAgP1VEnUZ6xVdVcfB3ivhbCq7dpKpS2cHw9l+2Vsg+tg80kZFxHZPh Pni1+39knnPkidx+fhWHAbKUVfNRflbBqSboXFLctj+hXedSdcd51I4H6qX3Nkvkohc4 n0IM2StpRIZ9Xr1OM/VR6hEoslVrkK7oankt4VGF7WX33A7r2FByx1Z9BuFTzdZcaQjE q3sfK0lfew8SBRdxDcIMq5CqLeF+YeV4BRKf0JlRuJkdcicPpUvAyiC336qZZNya/60i 8A0g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=4sBoc9jZ3XxVDDHnIW95VOnHbjT7EMQ1LQ+2XrljRYQ=; b=tjRvlhUxzHO6ytTwrlE+Zx4knO28naWQScZ21/thkAYjzfALu94bjyBL/hrv10WlLX PDJmkx25W6A5jUoCj5yHVciokg/avLUjRRAz4zKZ8w5RlOpskxIp9Ztp0zrRyjSM2lYy 6gD+u2QyO31pSZa6VnSZU948wV9GuocEJEo8yy3VgvqoyAMPiLpsgMYj3AXYLy3MkdDM hGjjitQYGoIKX0SMoF+CEUzs5Hw6wTxK9BnJx5hdeiiMgMcCv+Dd8IjH92guKKHri09O xXYsoKFGOO/dIkzQTibfAsThM2w2lFIGoJKvYLgQ17TwyQhVK0iyEzzuWAX2EBu1EhZi zyLw==
X-Gm-Message-State: AODbwcDqsMbg6fcFVZWyTjAFDSL2lNVBXoWFpMFliGxeKdl2cq9rrA1e M28rXOp1DkNpunEWIaYdRhJsNl3Yxg==
X-Received: by 10.13.212.1 with SMTP id w1mr2353004ywd.24.1494796947666; Sun, 14 May 2017 14:22:27 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.129.131.150 with HTTP; Sun, 14 May 2017 14:21:47 -0700 (PDT)
In-Reply-To: <CACZqfqC+Px3Hb3ZepMfY2Ci4iCOi85ydEaJ8jsZwziZBTsz6Vw@mail.gmail.com>
References: <20170514163550.3ECC2B80A6E@rfc-editor.org> <13A0972A-2D00-4DF8-BFA9-C022D914BCEF@vigilsec.com> <CACZqfqCek=p0y00mAWGs5Sw6xbNJWDJOFk_N8kWa+uwk2JWa4Q@mail.gmail.com> <B4CB5D68-ABFA-4055-986B-75AA747CE66E@vigilsec.com> <000a01d2ccf0$1dc9fdc0$595df940$@augustcellars.com> <CACZqfqC+Px3Hb3ZepMfY2Ci4iCOi85ydEaJ8jsZwziZBTsz6Vw@mail.gmail.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Sun, 14 May 2017 14:21:47 -0700
Message-ID: <CABcZeBMQs8MZ5Qai6SVmrF8+DfM+8N4mM1bG2Mr4OSFz9W2v=A@mail.gmail.com>
To: Josh Soref <jsoref@gmail.com>
Cc: Jim Schaad <ietf@augustcellars.com>, Paul Hoffman <paul.hoffman@vpnc.org>, IETF SMIME <smime@ietf.org>, Russ Housley <housley@vigilsec.com>, Kathleen Moriarty <Kathleen.Moriarty.ietf@gmail.com>
Content-Type: multipart/alternative; boundary="001a114fb0f613de30054f8289c8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/smime/Bh-rOHsr45I127B_L19HdFXQiS8>
Subject: Re: [smime] [Technical Errata Reported] RFC2633 (5019)
X-BeenThere: smime@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: SMIME Working Group <smime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/smime>, <mailto:smime-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/smime/>
List-Post: <mailto:smime@ietf.org>
List-Help: <mailto:smime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/smime>, <mailto:smime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 14 May 2017 21:26:18 -0000

Hi Josh,

AD for the successor group here (and hence one of the two ADs
jointly responsible for processing this errata).

1. I don't actually think that the responses to you have been offensive.

2. I agree that "encryp" is an odd abbreviation, but then so is "pref",
which
I think you'll agree is an abbreviation, not a typo. So, I don't think this
is
a clear error, and the argument Russ offers that it isn't seems persuasive.

3. As Jim says, this has no impact on the protocol, and the specific
change you are suggesting would actually break the ASN.1 module.
No doubt we could use a comment, but given the opinions expressed
here, I don't believe that that's necessary.

Finally, I would note that even if I agreed with you that this in fact was
an error, the correct processing would be "hold for document update",
as indicated in point 5 of the processing guidelines
https://www.ietf.org/iesg/statement/errata-processing.html

-Ekr






On Sun, May 14, 2017 at 1:42 PM, Josh Soref <jsoref@gmail.com> wrote:

> Ok. Let's say that I'm new to IETF process. The feedback provided so far
> is offensive.
>
> Please suggest the proper way to annotate that there is an error in a
> number of the documents hosted by IETF.
>
> Clearly someone successfully ridiculed IETF once such that future
> standards appropriately included "[sic]" wherever "referer" is used. It
> shouldn't be hard to suggest to a submitter the correct way to do that
> today, decades later.
>
> On May 14, 2017 4:35 PM, "Jim Schaad" <ietf@augustcellars.com> wrote:
>
>> The name chosen has absolutely no change of what is one the wire.   That
>> means that this is at best editorial and is definitely not technical.
>>
>>
>>
>> This is only going to affect those people who decide to use autogenerated
>> constant names from the ASN.1 file.  The suggested change would make for an
>> invalid ASN.1 file so it not correct.  Changing this name at this point
>> would be a hassle for any one doing auto generation and highlighting that
>> this is not, in some sense, a word does not affect the standard in any way.
>>
>>
>>
>> This should be rejected.
>>
>>
>>
>> Jim
>>
>>
>>
>>
>>
>> *From:* smime [mailto:smime-bounces@ietf.org] *On Behalf Of *Russ Housley
>> *Sent:* Sunday, May 14, 2017 10:55 AM
>> *To:* Josh Soref <jsoref@gmail.com>
>> *Cc:* Kathleen Moriarty <Kathleen.Moriarty.ietf@gmail.com>; Paul Hoffman
>> <paul.hoffman@vpnc.org>; Eric Rescorla <ekr@rtfm.com>; IETF SMIME <
>> smime@ietf.org>
>> *Subject:* Re: [smime] [Technical Errata Reported] RFC2633 (5019)
>>
>>
>>
>> It is the name that the author chose to use in the ASN.1.  If it was a
>> typo, then it would have been changed in the subsequent update to the RFC.
>>
>>
>>
>> Russ
>>
>>
>>
>>
>>
>> On May 14, 2017, at 1:44 PM, Josh Soref <jsoref@gmail.com> wrote:
>>
>>
>>
>> It isn't an abbreviation, other tokens are clearly longer such as
>> signingCertificate and smimeEncryptCerts. It's likely that the errata
>> applies to multiple RFCs.
>>
>>
>>
>> On May 14, 2017 1:15 PM, "Russ Housley" <housley@vigilsec.com> wrote:
>>
>> I believe that this errata should be rejected.  The author used an
>> abbreviation, and the same spelling is used in RFC 3851.
>>
>> Russ
>>
>>
>> > On May 14, 2017, at 12:35 PM, RFC Errata System <
>> rfc-editor@rfc-editor.org> wrote:
>> >
>> > The following errata report has been submitted for RFC2633,
>> > "S/MIME Version 3 Message Specification".
>> >
>> > --------------------------------------
>> > You may review the report below and at:
>> > http://www.rfc-editor.org/errata/eid5019
>> >
>> > --------------------------------------
>> > Type: Technical
>> > Reported by: Josh Soref <jsoref@gmail.com>
>> >
>> > Section: 5
>> >
>> > Original Text
>> > -------------
>> > id-aa-encrypKeyPref OBJECT IDENTIFIER ::= {id-aa 11}
>> >
>> >
>> > Corrected Text
>> > --------------
>> > id-aa-encrypKeyPref [sic] OBJECT IDENTIFIER ::= {id-aa 11}
>> >
>> > Notes
>> > -----
>> > encryp isn't a word, it's a typo. Unfortunately, like http's (rfc1945)
>> referer [sic] before it, this is now part of the API.
>> >
>> > This error should be highlighted (as rfc2068 does for referer [sic]) so
>> that people are aware that the natural spelling doesn't apply.
>> >
>> > If it's possible for a revised RFC to be published suggesting the
>> correct spelling w/ a way for clients/servers to handle the old spelling,
>> that would be nice, but based on precedent, that seems unlikely.
>> >
>> > Instructions:
>> > -------------
>> > This erratum is currently posted as "Reported". If necessary, please
>> > use "Reply All" to discuss whether it should be verified or
>> > rejected. When a decision is reached, the verifying party
>> > can log in to change the status and edit the report, if necessary.
>> >
>> > --------------------------------------
>> > RFC2633 (draft-ietf-smime-msg-08)
>> > --------------------------------------
>> > Title               : S/MIME Version 3 Message Specification
>> > Publication Date    : June 1999
>> > Author(s)           : B. Ramsdell, Ed.
>> > Category            : PROPOSED STANDARD
>> > Source              : S/MIME Mail Security
>> > Area                : Security
>> > Stream              : IETF
>> > Verifying Party     : IESG
>> >
>> > _______________________________________________
>> > smime mailing list
>> > smime@ietf.org
>> > https://www.ietf.org/mailman/listinfo/smime
>>
>>
>>
>