Re: [websec] DISCUSS positions on draft-ietf-websec-key-pinning

Barry Leiba <barryleiba@computer.org> Thu, 14 August 2014 17:21 UTC

Return-Path: <barryleiba@gmail.com>
X-Original-To: websec@ietfa.amsl.com
Delivered-To: websec@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B54961A6F61; Thu, 14 Aug 2014 10:21:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.278
X-Spam-Level:
X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EG5mCC_jk1jD; Thu, 14 Aug 2014 10:21:43 -0700 (PDT)
Received: from mail-lb0-x22c.google.com (mail-lb0-x22c.google.com [IPv6:2a00:1450:4010:c04::22c]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 891C51A0920; Thu, 14 Aug 2014 10:21:42 -0700 (PDT)
Received: by mail-lb0-f172.google.com with SMTP id z11so1104537lbi.17 for <multiple recipients>; Thu, 14 Aug 2014 10:21:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=MwDRsmdpWrFGj3QbroAs5zwu94FN+qzfSXxLVeVcTZs=; b=o/EGE59SJi45HLpHZI6yxhtYeeTr4QVIbZ6TGDzIuqDaDDwy1TE1UMon31TFwE5rn/ 9XlHzkEE+Lr+QuaHoQHOqvhT0PCfPF54Hl5aXvvTBxkrVOb5702GNUfrHP4wHAUTpZGo ySZfmgzcm5iD61jvYvrXYyCg6XZyFy8LnvDBPCzA2esec91VfBBXSNSnMB7GGdrpVUU8 psGwAk6JcYg3MgRDWBnSarPvAw7r8IMLSP/RoGAJbZsFhotQN4i2JOHFQD7HqY6irSLk 8hBtoI3T+C8P0gLhsa6dKT4niDx5HJu1nvEKhhot1unEZ3v91kC3PKDVz28t6YL+mYNM l20A==
MIME-Version: 1.0
X-Received: by 10.112.155.226 with SMTP id vz2mr6341869lbb.23.1408036900885; Thu, 14 Aug 2014 10:21:40 -0700 (PDT)
Sender: barryleiba@gmail.com
Received: by 10.152.8.46 with HTTP; Thu, 14 Aug 2014 10:21:40 -0700 (PDT)
In-Reply-To: <CACvaWvb2HyhgHZJH4-DO0NX=zj2-Mk8r1Ua-we4HRwBp6twFeg@mail.gmail.com>
References: <CAC4RtVDiy-QbHNREsm07+iPzjDiZ1q5GjowZCBnP63nw1ezTAw@mail.gmail.com> <CACvaWvb2HyhgHZJH4-DO0NX=zj2-Mk8r1Ua-we4HRwBp6twFeg@mail.gmail.com>
Date: Thu, 14 Aug 2014 13:21:40 -0400
X-Google-Sender-Auth: G_rR-S7kBk1BSZ_1N9KYQOl2zi8
Message-ID: <CALaySJKHOBv=viCV88=S0a1f5JwZ9DOYGNgnJr2izYtG71vhQA@mail.gmail.com>
From: Barry Leiba <barryleiba@computer.org>
To: Ryan Sleevi <sleevi@google.com>
Content-Type: text/plain; charset="ISO-8859-1"
Archived-At: http://mailarchive.ietf.org/arch/msg/websec/irbm9Uh-gh5T7h9jnjr-eRHpImk
Cc: draft-ietf-websec-key-pinning.all@tools.ietf.org, "<websec@ietf.org>" <websec@ietf.org>, The IESG <iesg@ietf.org>
Subject: Re: [websec] DISCUSS positions on draft-ietf-websec-key-pinning
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec/>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Aug 2014 17:21:43 -0000

> It sounds like you're looking for an acknowledgement of the messages. Just
> to confirm, we have received this feedback, and are taking time to ensure
> the replies are as considered and thoughtful as the DISCUSS points,
> especially as many of these points were discussed early on and thought
> addressed by the draft already.

Great; thanks, Ryan.

Yes, it's always good to at least send a "we're working on it" message
in response, especially to DISCUSS positions (as those are
specifically asking for discussion).

So we'll take this as "we're working on it, and we'll get back to
y'all when we have a good response," and thanks for confirming that.

Barry