Re: [TLS] TLS Flags and IANA registration policy

[Eric Rescorla <[e-mail]>]

On Fri, Oct 29, 2021 at 4:01 PM Ira McDonald <[e-mail]>
wrote:

> Hi Eric,
>
> I agree.  Let's get the semantics right.  You mentioned a 3-tuple w/
> "Discouraged".
> Should that be "Deprecated" (for clarity)?
>

The implied semantics are are:

Recommended: The IETF has consensus this is good  (e.g., AES)
Not Recommended: We're not expression an opinion on this, it's just being
registered , so caveat emptor (e.g., Brainpool).
Discouraged: The IETF thinks this is bad and you shouldn't use it (e.g.,
MD5)

But I think the point being that Deprecated might also be new stuff we
think is bad, not just old stuff.

-Ekr


>
> On Fri, Oct 29, 2021 at 5:17 PM Eric Rescorla <[e-mail]> wrote:
>
>> Well, we certainly can change it in 8446-bis.
>>
>> My put here would be: let's get consensus on the *semantics* we want for
>> the various categories without worrying about the names (call them A, B, C,
>> etc.) and then we can name them after.
>>
>> -Ekr
>>
>>
>> On Fri, Oct 29, 2021 at 2:14 PM Ira McDonald <[e-mail]>
>> wrote:
>>
>>> Hi Eric,
>>>
>>> Thanks for the background.  I still sympathize with Hannes' point that
>>> "Recommended" means "IETF Consensus".  I have to explain this
>>> too often in the insular automotive industry.
>>>
>>> But I certainly wouldn't write an RFC to change the title of a single
>>> column in an IANA registry.  I've been one of the Designated Experts
>>> for the IANA Internet Printing Protocol (IPP) registry for 20 years and
>>> we rename IANA fields as needed by a direct request to our IANA
>>> folks (after consensus in the IEEE-ISTO Printer Working Group IPP
>>> WG - successor to IETF IPP WG in the 1990s).
>>>
>>> Cheers,
>>> - Ira
>>>
>>>
>>> On Fri, Oct 29, 2021 at 3:18 PM Eric Rescorla <[e-mail]> wrote:
>>>
>>>> Previous discussion is on this issue:
>>>> https://github.com/tlswg/tls13-spec/issues/1214
>>>>
>>>> On Fri, Oct 29, 2021 at 12:13 PM Salz, Rich <[e-mail]> wrote:
>>>>
>>>>>
>>>>>    - I am actually not in favor of changing it to IETF Consensus. I
>>>>>    think these have different meanings.
>>>>>
>>>>>
>>>>>
>>>>> To be clear, I wasn’t expressing an opinion on whether or not to do
>>>>> this, I was just showing folks how to start the change process.
>>>>>
>>>>