Re: [xmpp] [Technical Errata Reported] RFC7622 (5769)

Peter Saint-Andre <stpeter@mozilla.com> Mon, 01 July 2019 23:08 UTC

Return-Path: <stpeter@mozilla.com>
X-Original-To: xmpp@ietfa.amsl.com
Delivered-To: xmpp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8531120186 for <xmpp@ietfa.amsl.com>; Mon, 1 Jul 2019 16:08:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mozilla.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q_B4gwhJw1mg for <xmpp@ietfa.amsl.com>; Mon, 1 Jul 2019 16:08:19 -0700 (PDT)
Received: from mail-io1-xd43.google.com (mail-io1-xd43.google.com [IPv6:2607:f8b0:4864:20::d43]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 98A1D1200CE for <xmpp@ietf.org>; Mon, 1 Jul 2019 16:08:19 -0700 (PDT)
Received: by mail-io1-xd43.google.com with SMTP id k20so6334256ios.10 for <xmpp@ietf.org>; Mon, 01 Jul 2019 16:08:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mozilla.com; s=google; h=subject:to:cc:references:from:openpgp:autocrypt:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=LqqdGwo6ak+aSwwAyHQDyishVfSEB6MDj8VMzYfnsHk=; b=Evp/pxuwE3DxOi03TVP8CJ1bfq3Uj3073SMXUIIOErqP9NzzpXyFglWB8Qwis1Mzm7 jC188a7Zioju2Htzz7wfPVO7raKr3oLxvYEiL0I4Vx7gIduVq1wJXSXvsY0vPnaCxwXQ 3aFfF+1nOwnOpHG3LOYB1PF6V7DK9tUdBA6OU=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:openpgp:autocrypt :message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=LqqdGwo6ak+aSwwAyHQDyishVfSEB6MDj8VMzYfnsHk=; b=d/cl+3Jwab3tuFzX+zW5wS/NQCtK/geGVN40RltWEPtbOa3hkVHCpBk+qXS6mTtG5k DxAFSz3rlI9l/mZbGqcvjMquStlmBhO4TweVlHWf0XaMk7iWXfIX8kGncFxC64bWF+/Z 030TBdWJiwVjgrpxX0VMSRWblFFUQaarRXLWQkobuitWq4+sCzEtSarQZt6DUwbH30pL yat+Aem79wUqZPW4rRXsWeB6OrCi7IPudnjOwlKCDjL64yCt2BRA76Mg55UQMK7diCyl XCT7CZ6AV3bm7OuAQnLf54s5fGHqGmm/0i6n/aopwTQT8fl7zyLTDvq/WciS/P9jPDB0 Pa9w==
X-Gm-Message-State: APjAAAWZRNYN5yEur/E7QPMENpbN61AsyZoQJojszjOpvd/quLFEhOpd aHESdH8TvQnjH+fZutvpclBXDA==
X-Google-Smtp-Source: APXvYqxX2k4rYFL8ivxi/Q+hINluuNhrp7Xliswy7DHXXwOM+X3OMrHi+zfM6Nyv4AH7gx2GEmlpwA==
X-Received: by 2002:a6b:901:: with SMTP id t1mr23421989ioi.42.1562022498491; Mon, 01 Jul 2019 16:08:18 -0700 (PDT)
Received: from dragon.local ([76.25.3.152]) by smtp.gmail.com with ESMTPSA id f4sm28923711iok.56.2019.07.01.16.08.17 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 01 Jul 2019 16:08:17 -0700 (PDT)
To: Matthias Wimmer <m=40tthias.eu@dmarc.ietf.org>, xmpp@ietf.org, Barry Leiba <barryleiba@computer.org>, Dave Cridland <dave@cridland.net>
Cc: Joe Hildebrand <hildjj@cursive.net>, RFC Errata System <rfc-editor@rfc-editor.org>, Peter Saint-Andre <stpeter@stpeter.im>, Alexey Melnikov <aamelnikov@fastmail.fm>
References: <20190630214921.40238B81D6A@rfc-editor.org> <CALaySJJ0t58BgMYE6G9XLFc-ydskvV6CS48d9++8xBfNZ_cLDg@mail.gmail.com> <9c33c9d6-3bfb-78bb-f684-0a8fc078ac4a@geekplace.eu> <CALaySJKztZ40OLNL6Jsvt1wzFgjYzqxUNq3Xj60KwOkAvJGxZA@mail.gmail.com> <CAKHUCzwg6sPtN0Dp6zPfKT75+DbfE0xies3Wv7GujXes6jY0Ng@mail.gmail.com> <CALaySJKcozQ7sQJvQHMVq2m9mFT2=jXc5wVd=pqMWSZK_=Qr7A@mail.gmail.com> <A706356F-9902-4CF9-88E2-D96D1FDE5F67@tthias.eu>
From: Peter Saint-Andre <stpeter@mozilla.com>
Openpgp: preference=signencrypt
Autocrypt: addr=stpeter@mozilla.com; prefer-encrypt=mutual; keydata= mQINBFonEf4BEADvZ+RGsJoOyZaw2rKedB9pBb2nNXVGgymNS9+FAL/9SsfcrKaGYSiWEz7P Lvc97hWH3LACFAHvnzoktv+4IWHjItvhdi9kUQ3Gcbahe55OcdZuSXXH3w5cHF0rKz9aYRpN jENqXM5dA8x4zIymJraqYvHlFsuuPB8rcRIV9SKsvcy14w9iRqu770NjXfE/aIsyRwwmTPiU FQ0fOSDPA/x2DLjed/GYHem90C5vF4Er9InMqH5KAMLnjIYZ9DbPx5c5EME4zW/d648HOvPB bm+roZs4JTHBhjlrTtzDDpMcxHq1e8YPvSdDLPvgFXDcTD4+ztkdO5rvDkbc61QFcLlidU8H 3KBiOVMA/5Rgl4lcWZzGfJBnwvSrKVPsxzpuCYDg01Y/7TH4AuVkv5Na6jKymJegjxEuJUNw CBzAhxOb0H9dXROkvxnRdYS9f0slcNDBrq/9h9dIBOqLhoIvhu+Bhz6L/NP5VunQWsEleGaO 3gxGh9PP/LMyjweDjPz74+7pbyOW0b5VnIDFcvCTJKP0sBJjRU/uqmQ25ckozuYrml0kqVGp EfxhSKVqCFoAS4Q7ux99yT4re2X1kmlHh3xntzmOaRpcZsS8mJEnVyhJZBMOhqE280m80ZbS CYghd2K0EIuRbexd+lfdjZ+t8ROMMdW5L51CJVigF0anyYTcAwARAQABtCdQZXRlciBTYWlu dC1BbmRyZSA8c3RwZXRlckBtb3ppbGxhLmNvbT6JAlQEEwEIAD4WIQQ1VSPTuPTvyWCdvvRl YYwYf2gUqQUCWicR/gIbIwUJCWYBgAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRBlYYwY f2gUqdaREAChG8qU1853mP0sv2Mersns8TLG1ztgoKHvMXFlMUpNz6Oi6CjjaMNFhP7eUY4T D43+yQs7f4qCkOAPWuuqO8FbNWQ+yUoVkqF8NUrrVkZUlZ1VZBMQHNlaEwwu1CGoHsLoRohP SiZ0hpmGTWB3V6cDDK4KN6nl610WJbzE9LeKY1AxtePdJi2KM281U0Fz8ntij1jWu0gF2xU4 Sez46JDogHLWKgd0srauhcCVzZjAhiWrXp1+ryzSWYaZO8Kh8SnF1f4o6jtYikMqkxUaI5nX wvD3kNX4AMSkCAZfG7Jcfj/SLDojTcREgO87g7B9bcOOsHN4lj3lHoFV0aXpgPmjfIvAjJHu fHkXZAQAH8w0u9bgJqRn703+A4NPfLopnjegyhlNi7fQ3cMQV1H7Oj7WrB/pCcprx+1u/6Uq oTtDwWh1U5uVthVAI0QojpNWR08zABDX19TlGtVoeygaQV3CAEolxTiYQtCfVavUzUplCZ/t 3v4YiRov+NylflJd+1akyOs1IAgARf444BnoH1fotkpfXNOpp9wUXXwsQcFRdP7vpMkSCkc0 sxPNTVX3ei0QImp4NsrFdaep7LV3zEb3wkAp6KE5Qno4hVVEypULbvB0G6twNZbeRfcs2Rjp jnPb2fofvg2WhAKB20dnRfIfK8OKTD/P+JDcauJANjmekLkCDQRaJxH+ARAApPwkbOTChAQu jMvteb/xcwuL5JZElmLxIqvJhqybV7JknM+3ATyN0CTYQFvPTgIrhpk4zSn0A6pEePdK8mKK 5/aHyd7pr7rLEi1sI/X3UE8ld/E83MExksKrYbs0UX1wSQwYXU6g64KicnuP2Abqg+8wrQ18 1nPcZci9jJI75XVPnTdUpZD5aaQWGp7IJ06NTbiOk30I50ORfulgKoe4m3UfsMALFxIx3pJk oy76xC2tjxYGf+4Uq1M0iK3Wy655GrcwXq/5ieODNUcAZzvK5hsUVRodBq0Lq3g1ivQF4ba7 RQayDzlW6XgoeU49xnCr9XdZYnTnj4iaPmr2NtY6AacBwRz+bJsyugeSyGgHsnVGyUSMk8YN wZHvUykMjH21LLzIUX5NFlcumLUXDOECELCJwewui4W81sI5Sq/WDJet+iJwwylUX22TSulG VwDS+j66TLZpk1hEwPanGLwFBSosafqSNBMDVWegKWvZZVyoNHIaaQbrTIoAwuAGvdVncSQz ttC6KkaFlAtlZt3+eUFWlMUOQ9jxQKTWymyliWKrx+S6O1cr4hwVRbg7RQkpfA8E2Loa13oO vRSQy/M2YBRZzRecTKY6nslJo6FWTftpGO7cNcvbmQ6I++5cBG1B1eNy2RFGJUzGh1vlYo51 pdfSg0U1oPHBPCHNvPYCJ7UAEQEAAYkCPAQYAQgAJhYhBDVVI9O49O/JYJ2+9GVhjBh/aBSp BQJaJxH+AhsMBQkJZgGAAAoJEGVhjBh/aBSpAw0P/1tEcEaZUO1uLenNtqysi3mQ6qAHYALR Df3p2z/RBKRVx0DJlzDfDvJ2R/GRwoo+vyCviecuG2RNKmJbf1vSm/QTtbQMUjwut9mx6KCY CyKwniqdhaMBmjCfV2DB2MxxZLYMtDfx/2mY7vzAci7AkjC+RkSUByMEOkyscUydKC/ETdf9 tvI8GhTY/8Q7JSylS3lQA5pMUHiIf+KpSmqKZeBPkGc7nSKM1w1UKUvFAsyyVsiG6A/hWrTr 7tTQAl7YfjtOGE8n4IKGktvrT99bbh9wdWKZ5FdHUN9hx2Q8VP8+0lR1CH2laVFbEwCOv1vM W4cgQDLxwwpo1iOTdHBVtQDxlQ9hPMKVlB1KP9KjchxuiLc24wLmCjP3pDMml4LQxOYB34Eq cgPZ3uHvJZG309sb2wTMTWaXobWNI++ZrsRD5GTmuzF3kkx3krtrq6HI5NSaemxK6MTDTjDN Rj/OwTl0yU35eJXuuryB20GFOSUsxiw00I2hMGQ1Cy9L/+IW6Dvotd8O3LmKh2tFArzXaKLx /rZyGNurS/Go5YjHp8wdJOs7Ka2p1U31js24PMWO6hf6hIiY2WRUsnE6xZNhvBTgKOY6u0KT V6hTevFqEw7OAZDCWUoE2Ob2/oHGZCCMW5SLAMgp7eihF0kGf2S2CmpIFYXGb61hAD8SqSY7 Fn7V
Message-ID: <18318620-a17c-2760-2586-c0e2ee9cd780@mozilla.com>
Date: Mon, 01 Jul 2019 17:08:16 -0600
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.7.2
MIME-Version: 1.0
In-Reply-To: <A706356F-9902-4CF9-88E2-D96D1FDE5F67@tthias.eu>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/xmpp/_SyXWTana6GXAMo6xdpZMvdk6r4>
Subject: Re: [xmpp] [Technical Errata Reported] RFC7622 (5769)
X-BeenThere: xmpp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: XMPP Working Group <xmpp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/xmpp>, <mailto:xmpp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/xmpp/>
List-Post: <mailto:xmpp@ietf.org>
List-Help: <mailto:xmpp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/xmpp>, <mailto:xmpp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 01 Jul 2019 23:08:23 -0000

>From Barry's perspective, the short answer is: Hold For Document Update.
This is a bigger can of worms than an erratum can address...

Peter

On 7/1/19 4:53 PM, Matthias Wimmer wrote:
> I'd also like to point to http://unicode.org/reports/tr46/#Notation
> 
> According to the definition there labels are not only separated by
> U+002E but also three other types of full stops as well.
> 
> This definition has also been in RFC3490 section 4 (IDNA2003) but I
> cannot find it explicitly in IDNA2008. Not even in the list of things
> that have changed.
> 
> For the given example of 商业.中国 I think a Chinese user would more
> likely enter 商业。中国 because while entering Chinese characters there
> is no key on the keyboard, that would enter a Western full stop. So to
> enter 商业.中国 he would have to change his keyboard layout at least twice.
> 
> 
> Regards,
> Matthias
> 
> Am 2. Juli 2019 00:16:00 MESZ schrieb Barry Leiba <barryleiba@computer.org>:
> 
>     More evidence that correcting this properly goes to “Held for
>     Document Update”.  There needs to be proper discussion and arrival
>     at consensus, beyond the scope of an errata report.
> 
>     Barry
> 
>     On Mon, Jul 1, 2019 at 6:11 PM Dave Cridland <dave@cridland.net
>     <mailto:dave@cridland.net>> wrote:
> 
> 
> 
>         On Mon, 1 Jul 2019 at 14:18, Barry Leiba
>         <barryleiba@computer.org <mailto:barryleiba@computer.org>> wrote:
> 
>             > > 1. Is this bit of text intended to say that "domainpart"
>             has to
>             > > *consist of* NR-LDH labels and U-labels, rather than to
>             contain
>             > > characters valid for those?
>             >
>             > XMPP domainparts may contain
>             > - IPv4/v6 addresses
>             > - DNS names
>             > - "Hostnames" (more or less arbitrary XMPP service
>             identifiers)
>             >   Those are potentially longer strings then DNS labels are
>             allowed to
>             >   be.
> 
>             OK, so there's more to it than that.
> 
> 
>         Hold your horses - I'm not sure that's actually true.
> 
>         In particular:
> 
>         a) I don't think that IPv4/IPv6 addresses actually belong there.
>         Some existing client libraries and servers can handle that, but
>         it's not clear it works outside a single server (ie, with S2S
>         links). At best, this would be a SHOULD NOT in my opinion. For a
>         start, most of the rest of the langauge makes no sense, since it
>         assumes these things can be the subject of a DNS request - see,
>         for example, https://tools.ietf.org/html/rfc6120#section-3.2
> 
>         b) Arbitrary labels are syntactically the same as U-Labels. If
>         anyone wants them to be different, I'm willing to mud-wrestle
>         them for it, and nobody should want that.
> 
>         c) I don't think we want A-Labels. It's just going to cause
>         confusion - is 商业.中国 the same as xn--vhqr8o.xn--fiqs8s? They
>         always look up the same in DNS, after all, by definition. I
>         can't see why we'd think allowing them wasn't going to cause
>         problems. So, again, a SHOULD NOT if not a MUST NOT.
>          
> 
>             > > Characters valid for those are also valid
>             > > for R-LDH labels and A-labels as well,
>             >
>             > Not every code point which is valid for U-labels is
>             allowed in A-labels.
> 
>             Of course; the point is the other way around: because A-label
>             characters are valid, A-labels could be put there.  Do we
>             want that?
>             Clearly, 商业.中国 is OK.  Is this text meant to allow
>             xn--vhqr8o.xn--fiqs8s ?  The text certainly says no,
>             explicitly, but
>             "this means that" doesn't follow from the list of characters
>             that are
>             allowed.  The text seems odd in that regard.
> 
>             > I think R-LDH labels should not be explicitly disallowed,
>             as this would
>             > mean that the PRECIS profile for XMPP addresses needs to
>             become aware of
>             > the semantic of the string, instead of simply checking and
>             performing on
>             > operations codepoints. But there is probably no use case
>             for R-LDH
>             > labels in domainparts.
> 
>             But that's already necessary because of what the text says
>             about A-labels.
> 
>             > > 2. Earlier, in Section 3.8, is this text that seems
>             rather odd to me:
>             > >
>             > >    If the domainpart includes a final character
>             considered to be a label
>             > >    separator (dot) by [RFC1034]
>             > >
>             > > When I look at RFC 1034, I see that there's no mention
>             of label
>             > > separator at all, and no set of characters that are
>             considered to be
>             > > so.  It simply says:
>             > >
>             > >    When a user needs to type a domain name, the length
>             of each label is
>             > >    omitted and the labels are separated by dots ("..").
>             > >
>             > > Is there a reason for that specific text in Section 3.2,
>             or are we
>             > > just looking for the 'DNS label separator "dot" (U+002E,
>             FULL STOP)'
>             > > as suggested in the errata report?
>             >
>             > I think so.
> 
>             That's an "Is it A or B" question, so "I think so" doesn't
>             answer it.
>             So I'll change the question and just ask if there's a reason
>             to use
>             that text in Section 3.2 that cites 1034.  I think Peter is
>             the best
>             person to answer that, as he wrote the text and might
>             remember why it
>             was said that way.
> 
>             > And yes, "label" and "Label separator" in RFC 7622 should
>             > probably be qualified with DNS and a reference to the relevant
>             > specifications should be inserted.
>             >
>             > > My sense is that the intended replacement *might* be
>             this, though I'm
>             > > not sure and need discussion/confirmation:
>             > >
>             > >    An entity that prepares a string for inclusion in an XMPP
>             > > domainpart slot MUST
>             > >    ensure that the string consists only of NR-LDH labels
>             and U-labels,
>             > > as defined
>             > >    in [RFC5890], separated by the DNS label separator
>             "dot" (U+002E, FULL STOP).
>             >
>             > I just occurred to me, after submitting the errata of
>             course, that this
>             > may not be enough. Since domainparts can also act as
>             holder for IPv6
>             > addresses, we also need to allow ':', '[' and ']', as they
>             are also not
>             > valid characters in NR-LDH labels and U-labels.
>             >
>             > Hence my refined replacement text would be:
>             >
>             >   An entity that prepares a string for inclusion in an
>             XMPP domainpart
>             >   slot MUST ensure that the string consists only of
>             >   - codepoints allowed in NR-LDH labels and U-labels, as
>             defined in
>             >     [RFC5890]
>             >   - . U+002E (FULL STOP, DNS label separator "dot")
>             >   - : U+003A (COLON)
>             >   - ] U+005B (LEFT SQUARE BRACKET)
>             >   - [ U+005D (RIGHT SQUARE BRACKET)
> 
>             And all that tells me that this is likely to be "Held for
>             Document
>             Update", if there's more discussion needed to sort out the
>             real intent
>             and correct fix.  But I'd very much like to hear from Peter
>             and/or Joe
>             before we settle this.
> 
>             And, Florian, thanks for making the errata report and for
>             the quick
>             response to discussion.
> 
>             Barry
> 
>             _______________________________________________
>             xmpp mailing list
>             xmpp@ietf.org <mailto:xmpp@ietf.org>
>             https://www.ietf.org/mailman/listinfo/xmpp
> 
> 
> -- 
> Sent from my Android device with K-9 Mail. Please excuse my brevity.
> 
> _______________________________________________
> xmpp mailing list
> xmpp@ietf.org
> https://www.ietf.org/mailman/listinfo/xmpp
>