Re: [Uta] Robert Wilton's Discuss on draft-ietf-uta-rfc7525bis-09: (with DISCUSS and COMMENT)

Peter Saint-Andre <stpeter@stpeter.im> Tue, 19 July 2022 16:45 UTC

Return-Path: <stpeter@stpeter.im>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00320C14F74A; Tue, 19 Jul 2022 09:45:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.811
X-Spam-Level:
X-Spam-Status: No, score=-2.811 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=stpeter.im header.b=Q9MC+fm7; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=eSRPwlQ0
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kwtifcjdJb6O; Tue, 19 Jul 2022 09:45:03 -0700 (PDT)
Received: from wout3-smtp.messagingengine.com (wout3-smtp.messagingengine.com [64.147.123.19]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1839DC14F743; Tue, 19 Jul 2022 09:45:02 -0700 (PDT)
Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.west.internal (Postfix) with ESMTP id 834DF3200933; Tue, 19 Jul 2022 12:44:56 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163]) by compute5.internal (MEProxy); Tue, 19 Jul 2022 12:44:57 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=stpeter.im; h=cc :cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to; s=fm1; t=1658249096; x= 1658335496; bh=C3fjLOOupi6aFIYReLzwCTA7H8PRObWj8e9tVgS5mNc=; b=Q 9MC+fm7taPIcquWZRA33XgEDuoYmognmqudJ2HpjlKj01/7nmf1ltzfKKPK96WIJ eh7DZSj1SAdeQpqyAhtCul0DgneEUBITrd52iDPcSuIpwdWVJpUz3wo+fakEcTVQ F4aUrPa7lN34EUiiBfOpPfRdVr49VArNU+iygPgIBQir1DcfdUvFk6vC/VrDWLWj P1DSqB6T20z9la2c4e0k3+KR5pUrt5gTwO/5XW6ZPWbvlNRLLUZBXpWQgo1dhRAM nnAa1D+LEj0Vs5fUTYNgnNFRHqlRcSOarjhWAv2+i573XCUnMcwDM82JoSWMx9X+ 7tCsgYyv2+gyzh75vYz8g==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1658249096; x= 1658335496; bh=C3fjLOOupi6aFIYReLzwCTA7H8PRObWj8e9tVgS5mNc=; b=e SRPwlQ0D7BUibud9rXDW1M0LbAClo1oayx5w9UYsvleDM8MN57DLIF+A2ySI8j3a 3Cn/Xdw7CpO5eBTg6gx6hXITk4oEp/OwHwg7tmaCrfZb1ahMJSeD1c2iRqZo6lNZ ZgZD2AKEijxEwehToZqTzVEBqL+sb/KzXY5acHYP+VBwXSSEJYt0APQpV1AWK7CC qLLFbn7YCTU6zyf08EVTIuPiIkVj44swVbV19MyHNyJMNEKi8rvKYiIJeyfIohAd n047DnZCJXsp2sZM1i9JdQbYzB3NVE0R6iBiW0LB8tAsyGHabhd0/n4QZSWnyB6n TWPqlVtgUNTAVqh01N8cQ==
X-ME-Sender: <xms:h9_WYiFkoMlhaZi_HTLR4eEwd_G3UJ1afFbDVn0rFdSi60vTRoovcA> <xme:h9_WYjVkoidWs1asoOOTlBs_vb8moK5_ORLUV58Or0H7qGJGM9mjsTBE4z5oMo-KI dVBttDeTvT1BvEYSw>
X-ME-Received: <xmr:h9_WYsKgaBSGVHSspDJ18SILMc6f_XmoNK8343WQ8FNo0_0V0kstIdTIjftiEvTl>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvfedrudeltddguddtgecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpefkffggfgfuvfevfhfhjggtgfesthejredttdefjeenucfhrhhomheprfgv thgvrhcuufgrihhnthdqtehnughrvgcuoehsthhpvghtvghrsehsthhpvghtvghrrdhimh eqnecuggftrfgrthhtvghrnhepfeejieeutdehvdeifedutddvheehleffvdfhtdekudei ieeggfejleekgffftdeknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrg hilhhfrhhomhepshhtphgvthgvrhesshhtphgvthgvrhdrihhm
X-ME-Proxy: <xmx:h9_WYsEqtmSDgsFcLyOF2DItzaXYH2kumt-a0pjJec25NjvjNxEUxw> <xmx:h9_WYoVeKZDe7eAXc0Mf-J4ovGLCNA9K0qwJpgzvxMcJry0eHbjACQ> <xmx:h9_WYvNYC4ZnTaTO07yTDeIjLBH5eF3E2xz9eZXubjoAx5vNRmFfZw> <xmx:iN_WYidwatWvWp-BdKWW8ujsTD_OxQFiQduKg1JEbHXjNXa2HxZ4mw>
Feedback-ID: i24394279:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 19 Jul 2022 12:44:54 -0400 (EDT)
Message-ID: <6bda19c2-edf7-80ac-c0a1-964e892ee464@stpeter.im>
Date: Tue, 19 Jul 2022 10:44:54 -0600
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Thunderbird/91.11.0
Content-Language: en-US
To: "Rob Wilton (rwilton)" <rwilton@cisco.com>, The IESG <iesg@ietf.org>
Cc: "draft-ietf-uta-rfc7525bis@ietf.org" <draft-ietf-uta-rfc7525bis@ietf.org>, "uta-chairs@ietf.org" <uta-chairs@ietf.org>, "uta@ietf.org" <uta@ietf.org>, "leifj@sunet.se" <leifj@sunet.se>
References: <165779144446.10023.16857085823147739769@ietfa.amsl.com> <799e5773-9fa4-b06a-38d1-138c43c5cfd9@stpeter.im> <73b662b2-5aba-0b32-12cd-80ffa5cd1fd5@stpeter.im> <MN2PR11MB42073D7A0863D0C3B0100479B58F9@MN2PR11MB4207.namprd11.prod.outlook.com> <7209f5c7-c94b-90e8-c389-db541dce0513@stpeter.im> <BY5PR11MB419644778D6884C0B22F56CDB58F9@BY5PR11MB4196.namprd11.prod.outlook.com> <6c2da094-3f7b-bbbc-df4d-c21a8c2ad168@stpeter.im> <BY5PR11MB419659962F8E4630D709E00AB58F9@BY5PR11MB4196.namprd11.prod.outlook.com>
From: Peter Saint-Andre <stpeter@stpeter.im>
In-Reply-To: <BY5PR11MB419659962F8E4630D709E00AB58F9@BY5PR11MB4196.namprd11.prod.outlook.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/PwOfl2DspKcJ6KEFm5qUQKJzLOI>
Subject: Re: [Uta] Robert Wilton's Discuss on draft-ietf-uta-rfc7525bis-09: (with DISCUSS and COMMENT)
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Jul 2022 16:45:09 -0000

One more small note below...

On 7/19/22 10:30 AM, Rob Wilton (rwilton) wrote:

<snip/>

> You may want to consider whether it is worth making it clearer, either in the titles or the first intro paragraph, in section of 3.1.1/3.1.2 that the protocol version requirements are specifically about implementations, and deployments are allowed/encouraged to restrict deployments to later TLS versions where reasonable/appropriate.  Otherwise, I suspect that readers may well have both implementations and deployments in their head when they read this section.

Good point. I'll look at the entire document again from this perspective 
and see where we might add some clarifying text.

<snip/>

> Thank you for being patient with me and accommodating my concerns.

Thank you for the DISCUSSion; the result is a better spec.

Peter