Re: [TLS] Publication has been requested for draft-ietf-tls-oldversions-deprecate-05

[Benjamin Kaduk <[e-mail]>]

On Fri, Oct 11, 2019 at 12:45:11AM +0700, Rob Sayre wrote:
> On Thu, Oct 10, 2019 at 11:17 PM Benjamin Kaduk <[e-mail]> wrote:
> 
> > The decision about
> > whether to make changes to the technical content thus lies with the
> > sponsoring AD for that document.
> >
> >
> I don't think that is true. Here is one comment from the document shepherd:
> https://mailarchive.ietf.org/arch/msg/tls/GfbxWMXoSufeAozlzs7i-Tv-MV0

I don't think the cited message supports your claim (instead, it's just
commenting on whether changing the text would have any value independently
of the mechanics for doing so).

> This one of those situations where the IETF rules are deliberately
> ambiguous (I know most of the rules...).

I'm the AD for the TLS WG, and am charged with enforcing the rules.  If you
tell me a rule that I'm not enforcing or am misinterpreting, I'm happy to
adjust accordingly, but in the absence of such concrete details, I'm going
to trust my knowledge of the rules more than yours.

> 
> > I disagree that draft-ietf-tls-oldversions-deprecate needs to update all
> > consumers of DTLS 1.0/1.2, at least for the reason you give.  Those
> > documents properly refer to RFC 6347 (or 4347), and it is that RFC that we
> > are updating now.  We do not directly change those consuming documents'
> > needs, but rather do so indirectly.
> >
> 
> That is not what the draft does. For example, it updates RFC 4823, "FTP
> Transport for Secure Peer-to-Peer Business Data Interchange over the
> Internet".

"for the reason you give" being the operative phrase.

> Have you read the draft?

Not recently; as noted upthread, it's in my queue of "publication
requested" documents accumulated backlog, but I have to do an AD evaluation
before it goes to IETF LC.

> 
> > from the IETF perspective
> > it's approved and done, and the barrier to making any further substantive
> > changes is extremely high.
> >
> 
> Nope, it can get changed. And it can get updated too. It's just a text
> file, and the rules are fluid. :)

I did not say it was impossible, just that there is a very high barrier and
in my assessment the value does not justify the cost of changing it.  But
as I've said repeatedly, I'm not the AD whose judgment matters, and I am
confused at why you're continuing to engage on the topic in this forum.

-Ben