Re: [smime] [Technical Errata Reported] RFC5084 (4774)

Quan Nguyen <quannguyen@google.com> Mon, 15 August 2016 21:44 UTC

Return-Path: <quannguyen@google.com>
X-Original-To: smime@ietfa.amsl.com
Delivered-To: smime@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 862AD12B05E for <smime@ietfa.amsl.com>; Mon, 15 Aug 2016 14:44:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.247
X-Spam-Level:
X-Spam-Status: No, score=-3.247 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-1.247, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c_7-EugN5ACH for <smime@ietfa.amsl.com>; Mon, 15 Aug 2016 14:44:55 -0700 (PDT)
Received: from mail-ua0-x22c.google.com (mail-ua0-x22c.google.com [IPv6:2607:f8b0:400c:c08::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDC6212B020 for <smime@ietf.org>; Mon, 15 Aug 2016 14:44:54 -0700 (PDT)
Received: by mail-ua0-x22c.google.com with SMTP id 97so93175228uav.3 for <smime@ietf.org>; Mon, 15 Aug 2016 14:44:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=vtaRC9gEcinItqpDWKZXteMb/b7INe1banyoY4gE+Cs=; b=LKtoklyHA/AI1D3S777vrhU3QU3zzBpBd9jAeuvOxYtA0/tACtb5g68mSr54eiJ00/ WfvvNrpoAvpiouDopVD9S25Ic0nW0jNcxwGNPIEsx9vRiXppBa85hm5OhdVltgFbtqMe DdtlsWaVxFF4wAugOo6FlxtwME3Ctu5czIUypbSL4pGP8FO11Ylu+aimh1aN4R4YQX9h eRieFyZK2+aGvJQrg7qCykzMAFFQvzWwLioJk8gh1JkReVw7NGot3jkwc+QP6JyJ/EIl XcWPCajwkhgMPGrmu4hFYcRt3lf4HMS4fgi1FaJiwRbEZcvMkVHJVQhAF5LJF9Sg2P6C U46w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=vtaRC9gEcinItqpDWKZXteMb/b7INe1banyoY4gE+Cs=; b=YnsVw2f8k/iiyoaMPLfnfvvfAu/gFyOYnKtAlLD8jhSsV8uyU2MVnlhxpaTlmjtTUX Bp8op6WbHb+fHE6VjxVQeOqWM9mOzg8K1i5JxnWThW+1iNgMGKo/Vyd1ncj2iSAooXPV Di6EFqqPHJacKCh9qX5y4/RtMbc9ZvKzWOnE2+upozaSFSw/qH7ve2ZpKM3JvJo6oyHj 6BFwBWt914jv3LU7fGTS2vbgskJYt00PbpGH2kSSgJCN00G7TFzVKry161ifLth9IYKm ZmdOZ0lbIaN+t6wZTu62mfY/HJOJdtT22mM/N3BkNiOaZBO1Z5oOEO3dkMc/D+dZF3gF TFlw==
X-Gm-Message-State: AEkoouspJiQHyS5FSsJE+vKpQCAXl76Av+hSEPKUZihr75lot994sfPpkeMX5DGgt+apcUeIhDr8/CDa/KcNcC7m
X-Received: by 10.31.155.194 with SMTP id d185mr12169059vke.98.1471297493745; Mon, 15 Aug 2016 14:44:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.103.139.131 with HTTP; Mon, 15 Aug 2016 14:44:33 -0700 (PDT)
In-Reply-To: <5129C662-699A-447A-9767-1B6116B0B431@vigilsec.com>
References: <20160811184733.4444EB8111E@rfc-editor.org> <CAKkgqz0j3KwQi5ARRmOYf7+iw5W_6zo3qgLT0aoHiARYqUwjqA@mail.gmail.com> <EA5FD496-53AE-4902-A18F-556F954CD161@vigilsec.com> <CAKkgqz1sG_UyMiCEPgTgg9=gVMEpd7tCmEqL2qY0hN1HnOmMaw@mail.gmail.com> <5129C662-699A-447A-9767-1B6116B0B431@vigilsec.com>
From: Quan Nguyen <quannguyen@google.com>
Date: Mon, 15 Aug 2016 14:44:33 -0700
Message-ID: <CAKkgqz0uRVBYZOfW7OGvbDQHh4p4huHfTRNkByMcpw6kEFFokA@mail.gmail.com>
To: Russ Housley <housley@vigilsec.com>
Content-Type: multipart/alternative; boundary="001a1140f2d079a678053a232422"
Archived-At: <https://mailarchive.ietf.org/arch/msg/smime/OnZlAB9U3Gs54VNYG71RoKtK2Jk>
X-Mailman-Approved-At: Mon, 15 Aug 2016 14:47:09 -0700
Cc: IETF SMIME <smime@ietf.org>, Paul Hoffman <paul.hoffman@vpnc.org>, Kathleen Moriarty <Kathleen.Moriarty.ietf@gmail.com>, David McGrew <mcgrew@cisco.com>, RFC Editor <rfc-editor@rfc-editor.org>, Stephen Farrell <stephen.farrell@cs.tcd.ie>
Subject: Re: [smime] [Technical Errata Reported] RFC5084 (4774)
X-BeenThere: smime@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: SMIME Working Group <smime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/smime>, <mailto:smime-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/smime/>
List-Post: <mailto:smime@ietf.org>
List-Help: <mailto:smime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/smime>, <mailto:smime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Aug 2016 21:44:56 -0000

On Mon, Aug 15, 2016 at 2:27 PM, Russ Housley <housley@vigilsec.com> wrote:

> Quan:
>
> I do not think that we can change the DEFAULT value associated with these
>> OIDs.  Changing the meaning of an absent aes-ICVlen will result in too many
>> interoperability problems.
>>
>
> Yeah, I'm aware of it and I understand your concern.
>
>
>>  However, we could put out a very short RFC that updates RFC 5084 to
>> recommend the use of 16 octet authentication tags in all situations.
>>
>
> Thanks for doing this :) It's SGTM.
>
>
> Are you willing to help write?
>

If you need opinion or having (security-wised) questions, I'm here to
answer yours. I can't help with writing because English is not my native
language and I'm not good at writing English ( this is the skill that I'm
trying to improve).

>
> Russ
>