[urn] I want URNs for hashes and large random numbers

Sean Leonard <dev+ietf@seantek.com> Fri, 12 September 2014 06:27 UTC

Return-Path: <dev+ietf@seantek.com>
X-Original-To: urn@ietfa.amsl.com
Delivered-To: urn@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 331B41A0479 for <urn@ietfa.amsl.com>; Thu, 11 Sep 2014 23:27:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xr7ixlcFx7lg for <urn@ietfa.amsl.com>; Thu, 11 Sep 2014 23:27:28 -0700 (PDT)
Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF42D1A0005 for <urn@ietf.org>; Thu, 11 Sep 2014 23:27:28 -0700 (PDT)
Received: from [192.168.123.7] (unknown [23.240.242.6]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id AACF6509B5 for <urn@ietf.org>; Fri, 12 Sep 2014 02:27:27 -0400 (EDT)
Message-ID: <54129263.7080109@seantek.com>
Date: Thu, 11 Sep 2014 23:27:47 -0700
From: Sean Leonard <dev+ietf@seantek.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.1.1
MIME-Version: 1.0
To: urn@ietf.org
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: quoted-printable
Archived-At: http://mailarchive.ietf.org/arch/msg/urn/c8hupkCGklWGMsd2z1oEVEHgRs8
Subject: [urn] I want URNs for hashes and large random numbers
X-BeenThere: urn@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Revisions to URN RFCs <urn.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/urn>, <mailto:urn-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/urn/>
List-Post: <mailto:urn@ietf.org>
List-Help: <mailto:urn-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/urn>, <mailto:urn-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Sep 2014 06:27:30 -0000

IETF 90 was my first URNBIS meeting. It was an...interesting experience, 
so I decided to join this list.

Here is what I want: I want (unbroken) cryptographic hashes and large 
random numbers to be usable as URNs. Specifically, I want things like:
urn:sha1:da39a3ee5e6b4b0d3255bfef95601890afd80709 *
urn:uuid:f47ac10b-58cc-4372-a567-0e02b2c3d479 **

and I want identifiers that are valid in their respective namespace, 
that represent (unbroken) cryptographic hashes or large random numbers, 
to be valid URNs as well, without any complaints:

urn:oid:2.25.324969006592305634633390616021200786553 ***

* not an actual URN, yet
** actual URN
** actual URN -- this one is the aforementioned Version 4 Random UUID in 
decimal in the OID arc. It's an OID-y way of saying urn:oid:uuid:f47ac10b...

I reviewed some of the e-mails over the past year. Nobody has really 
said anything about this. However, some people tend to hem and haw when 
they see these kinds of things without some kind of "registration 
authority" that makes some sort of "promise" not to cause collisions.

I reviewed draft-ietf-urnbis-rfc3406bis-urn-ns-reg-09:
Section 3:

    2.  The "consistent assignment" constraint means that an identifier
        within the namespace is assigned by an organization or created in
        accordance with a process or algorithm that is always followed.


This tells me that an organization is not required; it is sufficient to 
define a process or algorithm (e.g., cryptographic hashing operation, or 
"pick a random large number") that guarantees uniqueness within certain 
constraints, and call it a day.

So are we okay with these kinds of URNs now? If not, what can we do to 
ensure that urnbis says that these types of things are okay?

Thanks,

Sean