Re: [Uta] smtp-sts-04 JSON

Daniel Margolis <dmargolis@google.com> Sun, 23 April 2017 12:48 UTC

Return-Path: <dmargolis@google.com>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3B1C127978 for <uta@ietfa.amsl.com>; Sun, 23 Apr 2017 05:48:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xfI_pXvEkszK for <uta@ietfa.amsl.com>; Sun, 23 Apr 2017 05:48:43 -0700 (PDT)
Received: from mail-it0-x22a.google.com (mail-it0-x22a.google.com [IPv6:2607:f8b0:4001:c0b::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BDE612943C for <uta@ietf.org>; Sun, 23 Apr 2017 05:48:43 -0700 (PDT)
Received: by mail-it0-x22a.google.com with SMTP id g66so30014202ite.1 for <uta@ietf.org>; Sun, 23 Apr 2017 05:48:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=HFOvRND1+vaNvKIESk6+3564DkmwAWMjnEMKlB8W7E4=; b=gJqUGjFR7Ljm4XmZcMy9Vo/hH7oDP654Jp886ejBG7n7iPvMCRQoSI25PVRcoo7Jwu /nWpIfkJnvhxgbZWDb1n52t5D/1MnDVnRT2Fm0XVqBv9J05BfpMPvsH7GFfo75PD15eq IYdoISU1WwlURdxOUk79T8UMzFClxdfPmA+nod9vE+WT1XLMOztVrQHWQAJTF8MDs5tE 0uV1cBe7UNJNX1euH8dGrm/oLXf0V3qDfFEkXxr4WbmV74dUsF4zyTmLvjqVnBwJeBCh tukrSNaDg3Mu5KQ9HAOjzM9ThLwaBazd3+mk9V7fHvAiYXq0YSMvXArMYuwopp4Tjy/8 2L/g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=HFOvRND1+vaNvKIESk6+3564DkmwAWMjnEMKlB8W7E4=; b=EwyAAZ/jKrxU+P7Sf3e4nOhFFEUrx6lZkh+QbwUQLVjaYgKnVSciQI5HXjsHklv4H/ ONUtYxJ4yM1mh3jKLhBsPFWZDjpLXPQugfLVhXnkdTl8kpoW8eIxZ/EeCtDthTW0JQMj L+U/o06z0Ps0mxrJxRit4gG9FcQ3IaN6M+rGbGU/jxwJDazHzOdth0goCiOg48AeNhoh iGMBaiEutK0GqmjgiLzpKHQUvOixRYpmB2frgFFiSzEr8+eHsWfd3TKAWiSvyLJR1Qj3 TRZT0tRn28CO0mrJTBHNe1hkNMJVPMGlePo+Sx/7DTwDinjPdzAptuqZ901hCyzp+0Tt hf3Q==
X-Gm-Message-State: AN3rC/5pq+yZ2Awv4Vnla5HtgFL72icP4HNDtP0McnEizlifiMCj2F1E cJy6TJ/j6Dn7Xj3Oc6zMdKSDON4K/dx4vN9iVw==
X-Received: by 10.36.35.129 with SMTP id u123mr7630280itu.105.1492951721701; Sun, 23 Apr 2017 05:48:41 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.36.111.11 with HTTP; Sun, 23 Apr 2017 05:48:40 -0700 (PDT)
In-Reply-To: <DE3A2AC6-63C0-4C17-9D9E-BF9CB2B3A289@dukhovni.org>
References: <52dde16a-a3bb-5844-7daa-a349def85049@wizmail.org> <80676A32-78CB-4FFA-AEE4-94DA95102B98@dukhovni.org> <a2a6e5f5-ff3b-272b-abda-b49fe23a485d@wizmail.org> <605FE793-3D82-4C4F-9F93-D50DF4320DF5@dukhovni.org> <9402ac0a4990432f994656ddaf94b9e2@COPDCEX19.cable.comcast.com> <CE55E42E-9845-46A6-B0AA-F56CE56F2936@dukhovni.org> <CANtKdUevHbQaUga2=X0tFy4K=po=DL=pKUn-2KZQgRUPTtYAig@mail.gmail.com> <DE3A2AC6-63C0-4C17-9D9E-BF9CB2B3A289@dukhovni.org>
From: Daniel Margolis <dmargolis@google.com>
Date: Sun, 23 Apr 2017 14:48:40 +0200
Message-ID: <CANtKdUer3CSruZRf-mXp+yvMKY_kCTaQ1vyZGVenNgVf5a9T2g@mail.gmail.com>
To: uta@ietf.org
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="001a1146030a13deb4054dd4e9a4"
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/DHpA8S9GFcGRV1lD9y6SY2DMkjk>
Subject: Re: [Uta] smtp-sts-04 JSON
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 23 Apr 2017 12:48:45 -0000

In the interests of not looking like I'm ignoring your mail, just to
reiterate, I have no personal feeling about this. My read at the meeting in
Chicago was that consensus was not totally obvious, but I'm really happy to
defer to the chairs here on what the consensus seems to be or how to
unblock this.

As I have said before, while this is certainly an issue people have
legitimately strong feelings about, it's not really a *fundamental* issue,
and, speaking personally (and I think for the other authors), I would be
happy with any resolution in any direction--the main point here is to
provide some additional security to email-in-transit, not to provide
security to email-in-transit by leveraging JSON. ;)

Dan

On Sun, Apr 23, 2017 at 4:58 AM, Viktor Dukhovni <ietf-dane@dukhovni.org>
wrote:

>
> > On Apr 22, 2017, at 1:35 PM, Daniel Margolis <dmargolis@google.com>
> wrote:
> >
> > That does not jive with relatively easy to parse...
> >
> > JSON supports comments, elements that are integers, strings,
> > arrays or associative arrays (nested JSON objects).  JSON
> > strings are UTF-8 and allow embedded NUL octets.
> >
> > Your JSON reference is to the obsolete RFC4627, the non-obsolete
> > reference is RFC7159.
>
> So any compelling arguments for JSON from MTA implementors?
>
> A much simpler format would be a block of lines (CRLF terminated),
> with each line either a boolean propery name, or a name value pair.
>
>         version STSv1
>         mode report
>         max_age 8640000
>         mx mx1.example.com
>         mx mx2.example.com
>         ...
>
> Line length is limited to the usual 1000 bytes including the
> terminating CRLF.
>
> This simplifies parsing, because a simple line-orienter parser
> can now process the entire policy.  It is no longer possible
> to have multiple policies, as with JSON, because there is no
> way to express multiple objects.  The JSON format is much
> too general for the needs at hand.
>
> --
>         Viktor.
>
> _______________________________________________
> Uta mailing list
> Uta@ietf.org
> https://www.ietf.org/mailman/listinfo/uta
>