Re: [TLS] Interim notes and draft-ietf-tls-dnssec-chain-extension next steps

[Viktor Dukhovni <[e-mail]>]

On Wed, Oct 17, 2018 at 01:46:20AM -0400, Paul Wouters wrote:

> On Tue, 16 Oct 2018, Daniel Kahn Gillmor wrote:
> 
> > That said, it sounds like negotiating the details of how to do this
> > pinning is the main blocker, and i'm sick of this proposal being blocked
> > (because i want it for "greenfield" implementations last year).
> 
> Imagine how sick I will be when I try to do this later in a separate
> docment, where the WG might not even accept it as a WG item. I am not
> confident enough that pinning would be resolved in a later document at
> all, leaving me with my use case dead in the water forever.

Agreed, but at the same time in DKG's response, beyond the frustration
with the process, I see real signs of potential progress in the
form of broad agreement with the points we'ev made about the need
for and the nature of the proposed pinning approach.

So frankly, barring strong evidence to the contrary, I think we're
finally seeing an emerging consensus in support of the proposed
approach, be it so long as the deadlock is ultimately resolved.

Well, if rough consensus emerges for a non-deadlocked pinning design,
with no substantive unaddressed objections, then the deadlock goes
away, and we get to move forward to writing the consensus text,
with a bit of the usual bikeshedding, and will soon be done.

-- 
	Viktor.