Re: [lamps] WG Last Call for draft-ietf-lamps-header-protection-14

Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 26 April 2023 22:47 UTC

Return-Path: <dkg@fifthhorseman.net>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EB04C151B03 for <spasm@ietfa.amsl.com>; Wed, 26 Apr 2023 15:47:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=fifthhorseman.net header.b="ig28Mw4q"; dkim=pass (2048-bit key) header.d=fifthhorseman.net header.b="aOdBNaTG"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u--oY-XQ3Iog for <spasm@ietfa.amsl.com>; Wed, 26 Apr 2023 15:47:49 -0700 (PDT)
Received: from che.mayfirst.org (che.mayfirst.org [IPv6:2001:470:1:116::7]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AEC3BC15155C for <spasm@ietf.org>; Wed, 26 Apr 2023 15:47:49 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019; t=1682549267; h=from : to : cc : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=9W71WPBPol1Ece34LaV3Uee9mMMIb09wPtteZ1365jM=; b=ig28Mw4quQehwiPvcb14HlwbiAntoZI2pwLQaKQd7bHE6aItPFkYEJKVpuz+RpLk+HRW7 Kmtx0M2D01Qm6irBA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1682549267; h=from : to : cc : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=9W71WPBPol1Ece34LaV3Uee9mMMIb09wPtteZ1365jM=; b=aOdBNaTGHkI4KBWXCN+sQpHeEeXNNuygb2xdYQgJtFs1w1xi9/cQcJugBFTk0lM0Bvp+Y 4LIlYj+G3WEIgDZXZbze8k4AUT97YC5/sWF58v0ffTAw2hPZu4qiIa9yq5+fetrEYs5Hu5W 7J3Bg7vgIaf1jV2VLGKM/rLL/Du0WtVDBnGaE7nP+Igyof8Wd7Ya4lefnd3T7+uCbCPEcSL KfA6a9DqtjPW4lTl+m2YHb62BVEcolnsM9RyI0Upey/5qz3AjU8yg3Ik2hzK8+EvUAGDRsV UVJhvV42FJiOui1l3kxzFg3ajh7mrq2Y9KNNlAsJvefvvpoWM5qyyfDdGhWA==
Received: from fifthhorseman.net (unknown [38.109.115.130]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by che.mayfirst.org (Postfix) with ESMTPSA id BE7FCF9AD; Wed, 26 Apr 2023 18:47:47 -0400 (EDT)
Received: by fifthhorseman.net (Postfix, from userid 1000) id 94FCC20830; Wed, 26 Apr 2023 18:47:43 -0400 (EDT)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: Russ Housley <housley@vigilsec.com>
Cc: LAMPS <spasm@ietf.org>
In-Reply-To: <6C53AEEB-5BB5-4413-95F5-B77063DDF074@vigilsec.com>
References: <50AEFA36-6AEC-47BA-B0A7-3EDC6C88FCED@vigilsec.com> <0F66C79F-9056-4AFD-B69B-3988C8B1E530@vigilsec.com> <87wn27qo7o.fsf@fifthhorseman.net> <6C53AEEB-5BB5-4413-95F5-B77063DDF074@vigilsec.com>
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata= mDMEX+i03xYJKwYBBAHaRw8BAQdACA4xvL/xI5dHedcnkfViyq84doe8zFRid9jW7CC9XBiI0QQf FgoAgwWCX+i03wWJBZ+mAAMLCQcJEOCS6zpcoQ26RxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNl cXVvaWEtcGdwLm9yZ/tr8E9NA10HvcAVlSxnox6z62KXCInWjZaiBIlgX6O5AxUKCAKbAQIeARYh BMKfigwB81402BaqXOCS6zpcoQ26AADZHQD/Zx9nc3N2kj13AUsKMr/7zekBtgfSIGB3hRCU74Su G44A/34Yp6IAkndewLxb1WdRSokycnaCVyrk0nb4imeAYyoPtBc8ZGtnQGZpZnRoaG9yc2VtYW4u bmV0PojRBBMWCgCDBYJf6LTfBYkFn6YAAwsJBwkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3Rh dGlvbnMuc2VxdW9pYS1wZ3Aub3JnL0Gwxvypz2tu1IPG+yu1zPjkiZwpscsitwrVvzN3bbADFQoI ApsBAh4BFiEEwp+KDAHzXjTYFqpc4JLrOlyhDboAAPkXAP0Z29z7jW+YzLzPTQML4EQLMbkHOfU4 +s+ki81Czt0WqgD/SJ8RyrqDCtEP8+E4ZSR01ysKqh+MUAsTaJlzZjehiQ24MwRf6LTfFgkrBgEE AdpHDwEBB0DkKHOW2kmqfAK461+acQ49gc2Z6VoXMChRqobGP0ubb4kBiAQYFgoBOgWCX+i03wWJ BZ+mAAkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3Jnfvo+ nHoxDwaLaJD8XZuXiaqBNZtIGXIypF1udBBRoc0CmwICHgG+oAQZFgoAbwWCX+i03wkQPp1xc3He VlxHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnaheiqE7Pfi3Atb3GGTw+ jFcBGOaobgzEJrhEuFpXREEWIQQttUkcnfDcj0MoY88+nXFzcd5WXAAAvrsBAIJ5sBg8Udocv25N stN/zWOiYpnjjvOjVMLH4fV3pWE1AP9T6hzHz7hRnAA8d01vqoxOlQ3O6cb/kFYAjqx3oMXSBhYh BMKfigwB81402BaqXOCS6zpcoQ26AADX7gD/b83VObe14xrNP8xcltRrBZF5OE1rQSPkMNy+eWpk eCwA/1hxiS8ZxL5/elNjXiWuHXEvUGnRoVj745Vl48sZPVYMuDgEX+i03xIKKwYBBAGXVQEFAQEH QIGex1WZbH6xhUBve5mblScGYU+Y8QJOomXH+rr5tMsMAwEICYjJBBgWCgB7BYJf6LTfBYkFn6YA CRDgkus6XKENukcUAAAAAAAeACBzYWx0QG5vdGF0aW9ucy5zZXF1b2lhLXBncC5vcmcEAx9vTD3b J0SXkhvcRcCr6uIDJwic3KFKxkH1m4QW0QKbDAIeARYhBMKfigwB81402BaqXOCS6zpcoQ26AAAX mwD8CWmukxwskU82RZLMk5fm1wCgMB5z8dA50KLw3rgsCykBAKg1w/Y7XpBS3SlXEegIg1K1e6dR fRxL7Z37WZXoH8AH
Date: Wed, 26 Apr 2023 18:47:42 -0400
Message-ID: <87bkjamfap.fsf@fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/wbLEW4Pwf9RwWCjwFTSBwP78K4s>
Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-header-protection-14
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Apr 2023 22:47:54 -0000

Hi Russ--

On Thu 2023-04-20 14:21:41 -0400, Russ Housley wrote:
> Maybe just pull the few definitions that you need into the document.
>
> Places where the references are informative can remain; informational references can be to an Internet-Draft.

Alexey and Bernie and I talked this over, and we think at the moment it
makes more sense to keep the drafts separate and risk a small delay on
header-protection as it waits for e2e-mail-guidance to come through.

If the e2e-mail-guidance document looks like it is going to be held up
significantly for whatever reason, we might decide to change tack and
extract some definitions, but the definitions and examples and
descriptions in e2e-mail-guidance are pretty useful, and we'd rather not
replicate everything.

I've just pushed draft-ietf-lamps-header-protection-15 to the
datatracker, which i think incorporates all the comments that we got
during the WGLC period.  There were several useful clarifications, typo
fixes, etc, but nothing substantive changed in terms of wire formats or
requirements.

Hopefully this is sufficient to advance the document to its next stage
in the process!

Regards,

        --dkg