[Ssh] Re: WG Review: Secure Shell Maintenance (sshm)

Stephen Farrell <stephen.farrell@cs.tcd.ie> Sun, 08 September 2024 12:15 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: ssh@ietfa.amsl.com
Delivered-To: ssh@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 982F9C151093; Sun, 8 Sep 2024 05:15:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.009
X-Spam-Level:
X-Spam-Status: No, score=-2.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rhzb-wiXJdBC; Sun, 8 Sep 2024 05:15:19 -0700 (PDT)
Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazon11022073.outbound.protection.outlook.com [52.101.66.73]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC9F4C14F749; Sun, 8 Sep 2024 05:15:17 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=wVAyCu/KrJgw+/3WwPzYHzWi35cZYhGQXqR6sy2Uxz6qjUiFbufaNE/NZ8+z0pL51LfZ53efSEqOhJ3P9hFkOrawIeuF0i6h23ZIGrMPZMq5c6nTYmZWIedMox26YTYUc+0yjqsit5y2LNDF3EXDEk+t97b+cm9t93dmkKl7YU3KD3mMvQSiK/qT4J/CERhvIDz+Ko6KFdTlAUDJIbPWp/tWQJhNSPVTQWwDAcxc5WhIqe8woQu80wwceny9PgnsPA7wuNdwXly6lK6KFvQ2PI0n5S2t1pwaVcRRFJRdj90JjWKwr+RedPc8RtfjnNux0lKKQh8dDVsBnbnQo9LhQg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=pEx7hrdpGiTpdyKaDPaDSfoCTDfPzjiYdD7WzKEQUlU=; b=ve/5n4FBglAEfPP9HMvAbbC4rZjixy/aVooLovNnEUFXJeLmgmJayuBqoF75ECnZwrAKH2qCo4yKK8JLPR5FyJnt2oxPrCVKuXiPkJImZF4LWmpHHaKQ3vgf4lIOozWK8YppTCF+HfWFJaH3BXK+qTgKbBAMZiFTs3lV9YRNMwpVoo3dMbV9cdGWkPPQPPuRFQQhi8FBbR6XWPABj7ovUz4CXn3KONuJ5jLE9h1IvSMayw3b6fd86n5St6M9ehvq15/h4/j4lhuwNDdKdMSFka8ATSJB4Wnl7NJzYguWXpDlNBzlyFi5t1GI7oRFAHWPgv+xK+EimVVm/xbbsFBklg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pEx7hrdpGiTpdyKaDPaDSfoCTDfPzjiYdD7WzKEQUlU=; b=oJLf/ueYTSiIG55EGoZKInIjkFJvd3EG4/o9LpYAooQ+TW394Xq6WvTTsu6gEIedoyv3Zf0wUzZUZHkocWoGT9a4rLsOL/BjKu3ziAW+MXan3xQRmRCOmbwwwIwAUAkv8tvM9tE1WRZKplK1thG+J0kkVnp8lt5NV7WYAZF1aigpzAuSNUTnKYeFgfJUs4gq0LATlgnOl8HupF/XV3BdRZAamf3w3cYn239iMkuZaSgjmKcf9fR3sRyPDQgppTooB1VsWqpyAL8ODwXARjXKS4b6rlWXFW8WWoTUKzltTshz34Jd71rHL1pxcLOmwh4Vlv5K9dJH2uuZhDz/XiNhMQ==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from DB8PR02MB5946.eurprd02.prod.outlook.com (2603:10a6:10:11c::16) by DB5PR02MB10118.eurprd02.prod.outlook.com (2603:10a6:10:48f::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7918.28; Sun, 8 Sep 2024 12:15:13 +0000
Received: from DB8PR02MB5946.eurprd02.prod.outlook.com ([fe80::e0d3:772e:a68d:d54a]) by DB8PR02MB5946.eurprd02.prod.outlook.com ([fe80::e0d3:772e:a68d:d54a%6]) with mapi id 15.20.7939.017; Sun, 8 Sep 2024 12:15:13 +0000
Message-ID: <151a42fb-8d0d-4547-9cce-c5106e32ab1f@cs.tcd.ie>
Date: Sun, 08 Sep 2024 13:15:12 +0100
User-Agent: Mozilla Thunderbird
To: ssh@ietf.org, iesg@ietf.org
References: <20240908055937.289946.qmail@cr.yp.to>
Content-Language: en-US
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
In-Reply-To: <20240908055937.289946.qmail@cr.yp.to>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------fg2O2nET0aDrQWr4nUZlhqz7"
X-ClientProxiedBy: LO4P123CA0673.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:351::8) To DB8PR02MB5946.eurprd02.prod.outlook.com (2603:10a6:10:11c::16)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DB8PR02MB5946:EE_|DB5PR02MB10118:EE_
X-MS-Office365-Filtering-Correlation-Id: 57fe2ac2-fb1b-4971-fc17-08dccfffe454
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|366016|376014|4022899009;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DB8PR02MB5946.eurprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(4022899009);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: 57fe2ac2-fb1b-4971-fc17-08dccfffe454
X-MS-Exchange-CrossTenant-AuthSource: DB8PR02MB5946.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Sep 2024 12:15:13.5137 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: SiA5M/fIUteBA6NJPDtNlZ3UpHFaJ2nU7iYFnHAxzqQCTIsC/XXkaG8GUytD5Bj1
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR02MB10118
Message-ID-Hash: K3IQKDRYI35HICXMMU3G74SCBAQ3KMU2
X-Message-ID-Hash: K3IQKDRYI35HICXMMU3G74SCBAQ3KMU2
X-MailFrom: stephen.farrell@cs.tcd.ie
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [Ssh] Re: WG Review: Secure Shell Maintenance (sshm)
List-Id: "The SSH mail list will allow discussions on improving aspects of the Secure Shell (SSH) protocol." <ssh.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ssh/TMSKRx7mTWDGA5__-gKO2Y7_ZBI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ssh>
List-Help: <mailto:ssh-request@ietf.org?subject=help>
List-Owner: <mailto:ssh-owner@ietf.org>
List-Post: <mailto:ssh@ietf.org>
List-Subscribe: <mailto:ssh-join@ietf.org>
List-Unsubscribe: <mailto:ssh-leave@ietf.org>

Hiya,

Yep, as I said, I'm not getting into the mega-quoting game.
I did respond to the lack of substance in your "unanswered
concerns" claim. I see nothing below that wasn't discussed
sufficiently in developing the charter.

Thanks,
S.

On 9/8/24 06:59, D. J. Bernstein wrote:
> Stephen Farrell writes:
>> Your claim that these are unanswered concerns is just plain wrong.
> 
> Then it should be very easy to reply to my quotes of the concerns by
> interleaving _quotes_ that supposedly answered those concerns. Any other
> form of response simply convinces readers that I was correct in saying
> that concerns about the WG were expressed and not answered.
> 
>>> There are many more examples.
>> I don't see what you think you'll gain from such exaggeration.
> 
> Another three examples are quoted below. How many do you need to see
> before you withdraw this "exaggeration" claim?
> 
> ---D. J. Bernstein
> 
> 
> Theo de Raadt writes:
>> One thing occured after this: The release of NIST Kyber, and there is an
>> unresolved patent claim, and my gut says that is the real drive behind
>> reaching out to SSH, because SSH stewardship made non-NIST choices, and
>> that is a needle that requires movement...
> 
> Watson Ladd writes:
>> I believe Paul Wouters (and please correct me if I'm wrong) wants
>> proposed text to exclude SSH doing something here that isn't using the
>> algorithms blessed by a different IETF process. I think leave this to
>> the WG is better than prejudging it.
> 
> D. J. Bernstein writes:
>> The problem I see comes from ADs imposing controversial limitations on
>> the WG scope: e.g., "ciphers that are not being considered IETF-wide"
>> won't be allowed; "limit the influx of new ciphers"; the WG has to
>> delegate "cryptographic algorithm selection" to SAAG.
> 
> _______________________________________________
> Ssh mailing list -- ssh@ietf.org
> To unsubscribe send an email to ssh-leave@ietf.org