IETF Logo Mail Archive

Re: [websec] DISCUSS positions on draft-ietf-websec-key-pinning

Barry Leiba <barryleiba@computer.org> Sun, 17 August 2014 21:15 UTC

Return-Path: <barryleiba@gmail.com>
X-Original-To: websec@ietfa.amsl.com
Delivered-To: websec@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98E8B1A0022; Sun, 17 Aug 2014 14:15:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.278
X-Spam-Level:
X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FCA3pU_GcaVl; Sun, 17 Aug 2014 14:15:33 -0700 (PDT)
Received: from mail-lb0-x234.google.com (mail-lb0-x234.google.com [IPv6:2a00:1450:4010:c04::234]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 43C5E1A0021; Sun, 17 Aug 2014 14:15:33 -0700 (PDT)
Received: by mail-lb0-f180.google.com with SMTP id v6so3519825lbi.11 for <multiple recipients>; Sun, 17 Aug 2014 14:15:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=UkhEe0JrIkpxAIez/w8fPztYQKZG+7qGp2RBfdHwVow=; b=ofcp076dbLT38bwxoILgp0dJZPG917/9irD/NFzeIUYA8UinjK1d1V5/XfhjoeFOxS reoux6/Y2SS9ZM4vo/kXLGfJBnnhO91UJ7BdEYuPqprOmmUHeb8zroa4j0kOQXwyB/CQ Fc5/k83d7EEr6yseNCfobvSbhr7ThwHFQND0cETxgg5hDb8Di2cCa8f8yv/H90i/dC6z rf89dM1A7DmLRAKtX5G9OTO1dATsQVKd4lU+/LxP5gspZicwbbM2s59YoGpebq1v2PEr EYDcjlz1IFpIBsQ8ZEHfGqn43C8QhFFzs6cIPJDYck4fuNGL+UPg9dWSrI2uovgje+0j qXCA==
MIME-Version: 1.0
X-Received: by 10.112.253.165 with SMTP id ab5mr24304615lbd.1.1408310131622; Sun, 17 Aug 2014 14:15:31 -0700 (PDT)
Sender: barryleiba@gmail.com
Received: by 10.152.8.46 with HTTP; Sun, 17 Aug 2014 14:15:31 -0700 (PDT)
In-Reply-To: <53F10ACE.3090605@gondrom.org>
References: <CAC4RtVDiy-QbHNREsm07+iPzjDiZ1q5GjowZCBnP63nw1ezTAw@mail.gmail.com> <CACvaWvb2HyhgHZJH4-DO0NX=zj2-Mk8r1Ua-we4HRwBp6twFeg@mail.gmail.com> <CALaySJKHOBv=viCV88=S0a1f5JwZ9DOYGNgnJr2izYtG71vhQA@mail.gmail.com> <53F10ACE.3090605@gondrom.org>
Date: Sun, 17 Aug 2014 17:15:31 -0400
X-Google-Sender-Auth: XWZISx0KT-uCZqCANmDUDskU15w
Message-ID: <CALaySJ+0NF8aHeha9VkmX873MgyE2sqySgiQcYF9MTy7XmnkRw@mail.gmail.com>
From: Barry Leiba <barryleiba@computer.org>
To: Tobias Gondrom <tobias.gondrom@gondrom.org>
Content-Type: text/plain; charset="ISO-8859-1"
Archived-At: http://mailarchive.ietf.org/arch/msg/websec/ByFwrIp-Xjy2EaAb-UH4wEU30ko
Cc: draft-ietf-websec-key-pinning.all@tools.ietf.org, "websec@ietf.org" <websec@ietf.org>, Ryan Sleevi <sleevi@google.com>, IESG <iesg@ietf.org>
Subject: Re: [websec] DISCUSS positions on draft-ietf-websec-key-pinning
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec/>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 17 Aug 2014 21:15:34 -0000

> In general it would be good to answer questions in the current IESG review
> process phase timely and one by one as that will help the ADs to close the
> process on the draft in a timely manner. If we wait too long, some may need
> to read the draft again just to refresh their memory when casting their vote
> to publish.

This is a good point, and thanks for making it, Tobias.  Yes, it's
frequently the case that too much delay in having the discussion
causes the AD to have to regain context, which results in more delay
and disrupts the AD's other work more.

Barry

v2.14.0 | Report a Bug | By Email