IETF Logo Mail Archive

Re: [lamps] Robert Wilton's No Objection on draft-ietf-lamps-samples-07: (with COMMENT)

Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 02 February 2022 20:57 UTC

Return-Path: <dkg@fifthhorseman.net>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1A633A201C; Wed, 2 Feb 2022 12:57:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=fifthhorseman.net header.b=t6EIyLQG; dkim=pass (2048-bit key) header.d=fifthhorseman.net header.b=X5WKg7UP
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KywCn3o_K5QE; Wed, 2 Feb 2022 12:57:44 -0800 (PST)
Received: from che.mayfirst.org (che.mayfirst.org [IPv6:2001:470:1:116::7]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD3B03A201B; Wed, 2 Feb 2022 12:57:43 -0800 (PST)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019; t=1643835459; h=from : to : cc : subject : in-reply-to : references : date : message-id : mime-version : content-type : content-transfer-encoding : from; bh=UuHhWSoPHWdOx9NMIeFnv/2twTcRUNXjs7xJD55Hou8=; b=t6EIyLQGMNXY6mnSppA6oS+JyfnBn65s/yt76SvQj1cTJKi9H0VvRqEuztCmqecefj1ob 6FpAqWDu/xT5S/pBA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1643835459; h=from : to : cc : subject : in-reply-to : references : date : message-id : mime-version : content-type : content-transfer-encoding : from; bh=UuHhWSoPHWdOx9NMIeFnv/2twTcRUNXjs7xJD55Hou8=; b=X5WKg7UPoI63DeSWcUREtX1u2dACMVbwlO23fKzBOd3J0RJNZykq8D1z/agHRaKks5wmw TPLb7cfcNnoEcR7fn/BwOFu5EZ/SIOOJgLUF84/aV71Ldhr3kriXti0WlOdp5HQuP2PGE35 kgqEcTOS4X55HE4jeSRnvKhJQ+i1cZgq7V6865WVHEuO7ly4eMAsvgG9l66ndvSXa+Uv8we 8ubmWK/qIRiPrSTDMR9zejZWS35rYeDhLbt84MqYcUxW+7Wge/NFbyFltUijVDUWggExzcG GgltNm6tSsYx46aNe7rrMIJiamYO6X/tXoMZPBqscDGWE2D72dZhdV0Gqy9A==
Received: from fifthhorseman.net (lair.fifthhorseman.net [108.58.6.98]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by che.mayfirst.org (Postfix) with ESMTPSA id A522FF9AC; Wed, 2 Feb 2022 15:57:39 -0500 (EST)
Received: by fifthhorseman.net (Postfix, from userid 1000) id EE301204CF; Wed, 2 Feb 2022 15:49:12 -0500 (EST)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: Robert Wilton <rwilton@cisco.com>, The IESG <iesg@ietf.org>
Cc: draft-ietf-lamps-samples@ietf.org, lamps-chairs@ietf.org, spasm@ietf.org, housley@vigilsec.com, tim.hollebeek@digicert.com, tim.hollebeek@digicert.com
In-Reply-To: <164139450269.31627.6735779123760215905@ietfa.amsl.com>
References: <164139450269.31627.6735779123760215905@ietfa.amsl.com>
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata= mDMEX+i03xYJKwYBBAHaRw8BAQdACA4xvL/xI5dHedcnkfViyq84doe8zFRid9jW7CC9XBiI0QQf FgoAgwWCX+i03wWJBZ+mAAMLCQcJEOCS6zpcoQ26RxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNl cXVvaWEtcGdwLm9yZ/tr8E9NA10HvcAVlSxnox6z62KXCInWjZaiBIlgX6O5AxUKCAKbAQIeARYh BMKfigwB81402BaqXOCS6zpcoQ26AADZHQD/Zx9nc3N2kj13AUsKMr/7zekBtgfSIGB3hRCU74Su G44A/34Yp6IAkndewLxb1WdRSokycnaCVyrk0nb4imeAYyoPtBc8ZGtnQGZpZnRoaG9yc2VtYW4u bmV0PojRBBMWCgCDBYJf6LTfBYkFn6YAAwsJBwkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3Rh dGlvbnMuc2VxdW9pYS1wZ3Aub3JnL0Gwxvypz2tu1IPG+yu1zPjkiZwpscsitwrVvzN3bbADFQoI ApsBAh4BFiEEwp+KDAHzXjTYFqpc4JLrOlyhDboAAPkXAP0Z29z7jW+YzLzPTQML4EQLMbkHOfU4 +s+ki81Czt0WqgD/SJ8RyrqDCtEP8+E4ZSR01ysKqh+MUAsTaJlzZjehiQ24MwRf6LTfFgkrBgEE AdpHDwEBB0DkKHOW2kmqfAK461+acQ49gc2Z6VoXMChRqobGP0ubb4kBiAQYFgoBOgWCX+i03wWJ BZ+mAAkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3Jnfvo+ nHoxDwaLaJD8XZuXiaqBNZtIGXIypF1udBBRoc0CmwICHgG+oAQZFgoAbwWCX+i03wkQPp1xc3He VlxHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnaheiqE7Pfi3Atb3GGTw+ jFcBGOaobgzEJrhEuFpXREEWIQQttUkcnfDcj0MoY88+nXFzcd5WXAAAvrsBAIJ5sBg8Udocv25N stN/zWOiYpnjjvOjVMLH4fV3pWE1AP9T6hzHz7hRnAA8d01vqoxOlQ3O6cb/kFYAjqx3oMXSBhYh BMKfigwB81402BaqXOCS6zpcoQ26AADX7gD/b83VObe14xrNP8xcltRrBZF5OE1rQSPkMNy+eWpk eCwA/1hxiS8ZxL5/elNjXiWuHXEvUGnRoVj745Vl48sZPVYMuDgEX+i03xIKKwYBBAGXVQEFAQEH QIGex1WZbH6xhUBve5mblScGYU+Y8QJOomXH+rr5tMsMAwEICYjJBBgWCgB7BYJf6LTfBYkFn6YA CRDgkus6XKENukcUAAAAAAAeACBzYWx0QG5vdGF0aW9ucy5zZXF1b2lhLXBncC5vcmcEAx9vTD3b J0SXkhvcRcCr6uIDJwic3KFKxkH1m4QW0QKbDAIeARYhBMKfigwB81402BaqXOCS6zpcoQ26AAAX mwD8CWmukxwskU82RZLMk5fm1wCgMB5z8dA50KLw3rgsCykBAKg1w/Y7XpBS3SlXEegIg1K1e6dR fRxL7Z37WZXoH8AH
Date: Wed, 02 Feb 2022 15:49:12 -0500
Message-ID: <87fsp1m1tj.fsf@fifthhorseman.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/URJy84MZJ7V0ZGF5Sc8BAfhpN9Y>
Subject: Re: [lamps] Robert Wilton's No Objection on draft-ietf-lamps-samples-07: (with COMMENT)
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Feb 2022 20:57:49 -0000

On Wed 2022-01-05 06:55:02 -0800, Robert Wilton via Datatracker wrote:
> Only one minor nit on the security considerations:
>
>    Any application which maintains a denylist of invalid key material
>    SHOULD include these keys in its list.
>
> Having this as a SHOULD seemed very broad to me, I would suggest "recommended to" instead.

I'm happy to move this from "SHOULD" to "should" (no need for the RFC
2119 keyword here), but "recommended to" doesn't parse for me -- either
we say "is recommended to" (but then we're using the passive voice with
no actor) or we rework the whole sentence to something like "This draft
recommends any application…" which also feels clunky.

Hopefully the move from "SHOULD" to "should" works for you, Robin!

Thanks for the review.

          --dkg

v2.23.0 | Report a Bug | By Email