[tao-discuss] Revising RFC6722? (was Re: Review Request for Possible Revision of the Tao of the IETF)

Lars Eggert <lars@eggert.org> Fri, 08 April 2022 08:21 UTC

Return-Path: <lars@eggert.org>
X-Original-To: tao-discuss@ietfa.amsl.com
Delivered-To: tao-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 248DE3A124F; Fri, 8 Apr 2022 01:21:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.108
X-Spam-Level:
X-Spam-Status: No, score=-2.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=eggert.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qrpenc0hYhVa; Fri, 8 Apr 2022 01:21:54 -0700 (PDT)
Received: from mail.eggert.org (mail.eggert.org [91.190.195.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CDBD3A1232; Fri, 8 Apr 2022 01:21:53 -0700 (PDT)
Received: from smtpclient.apple (unknown [IPv6:2a00:ac00:4000:400:28ff:791:c421:2ceb]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.eggert.org (Postfix) with ESMTPSA id DE55C1DB994; Fri, 8 Apr 2022 11:21:40 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=eggert.org; s=dkim; t=1649406101; bh=RXfUzM2A+Hdj3Y0zMQYjHEODh45yp/2JAqYZU2DXaeE=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=h6Aef6IQgmntUpKp8wcCG3P58V1i65l3Fq76AAM/8815w1FLqsxOBAdt1SEduccwm i5W9/FZ3PPlQM4AzhHebMJ0aKq9mKa1SpeNeBu3JW5l+pKZab7AHoHzo8XnE0f/EIW ar8eR9MOs9glQusIWXF48H/0SJ+GRHrc7wwE54S0=
Content-Type: multipart/signed; boundary="Apple-Mail=_CF8051A6-9166-4F69-A086-FE2A3EC39A33"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.80.82.1.1\))
From: Lars Eggert <lars@eggert.org>
In-Reply-To: <3cd4806d-cbf9-e78d-4709-d9fb98ce1ed2@gmail.com>
Date: Fri, 08 Apr 2022 11:21:39 +0300
Cc: "Salz, Rich" <rsalz=40akamai.com@dmarc.ietf.org>, "tao-discuss@ietf.org" <tao-discuss@ietf.org>, IESG <iesg@ietf.org>, Niels ten Oever <mail@nielstenoever.net>
Message-Id: <5097E7DA-82F7-4DCA-B24A-9815625E417E@eggert.org>
References: <905c834c-30d7-ede7-6ea1-a5b200a249d7@nielstenoever.net> <0192FFCD-2410-415B-90B2-248F2823CC97@eggert.org> <D6FFB194-FBC9-4AC1-B29F-B00A9A3C2E3E@akamai.com> <C41F2B92-1216-4A2F-99D8-611D0457AE97@eggert.org> <D91F9FE6-4641-4C7D-92A7-CE6F57AD00FC@akamai.com> <fb4d1b71-a13c-b98d-be48-cd2d4007a909@gmail.com> <3cd4806d-cbf9-e78d-4709-d9fb98ce1ed2@gmail.com>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
X-MailScanner-ID: DE55C1DB994.A4E69
X-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-MailScanner-From: lars@eggert.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/tao-discuss/63RUrUn4ewtOkprK6Yr7At--V2k>
Subject: [tao-discuss] Revising RFC6722? (was Re: Review Request for Possible Revision of the Tao of the IETF)
X-BeenThere: tao-discuss@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussion of the Tao of the IETF <tao-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tao-discuss>, <mailto:tao-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tao-discuss/>
List-Post: <mailto:tao-discuss@ietf.org>
List-Help: <mailto:tao-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tao-discuss>, <mailto:tao-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Apr 2022 08:21:59 -0000

Hi,

On 2022-4-7, at 23:50, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
> But I wasn't wrong. I think RFC6722 was very wrong not to require IETF
> review of updates to the Tao, especially for a massive update like this
> one. It's quite unreasonable to put that extra load on the IESG alone.
> RFC6722 being informational, it isn't a rule, so I urge the IESG to
> put this out for community review. That can only make it better.

if people think that RFC6722 should be revised, the other thing I find problematic about it is that Section 2 prescribes a certain detailed way in which proposed changes are supposed to be published, archived, etc. This might have made sense at publication time in 2012, but seems overly constraining now.

(I'll note that the current GitHub process for editing is more in line with one of the alternative approaches described in Section 3 than anything else.)

Given that RFC6722 is Informational, I'm not sure if it's worthwhile updating it. But someone who felt more strongly about it could prepare a bis document.

I think the main motivation behind RFC6722 was that Tao revisions were only very infrequently published, and a more lightweight process was desired. After ten years, we could certainly ask the question whether this process change was a success, and if not, what could be improved.

Thanks,
Lars