Re: [xmpp] stringprep: full, partial, none

Joe Hildebrand <joe.hildebrand@webex.com> Tue, 23 November 2010 16:56 UTC

Return-Path: <Joe.Hildebrand@webex.com>
X-Original-To: xmpp@core3.amsl.com
Delivered-To: xmpp@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0167E3A6985 for <xmpp@core3.amsl.com>; Tue, 23 Nov 2010 08:56:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.865
X-Spam-Level:
X-Spam-Status: No, score=-102.865 tagged_above=-999 required=5 tests=[AWL=-0.969, BAYES_00=-2.599, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_MED=-4, RCVD_NUMERIC_HELO=2.067, SARE_LWSHORTT=1.24, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vlk5B61-yT7v for <xmpp@core3.amsl.com>; Tue, 23 Nov 2010 08:56:21 -0800 (PST)
Received: from gw1.webex.com (gw1.webex.com [64.68.122.208]) by core3.amsl.com (Postfix) with SMTP id 1F4363A693E for <xmpp@ietf.org>; Tue, 23 Nov 2010 08:56:21 -0800 (PST)
Received: from SRV-EXSC03.webex.local ([192.168.252.197]) by gw1.webex.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 23 Nov 2010 08:57:18 -0800
Received: from 66.114.169.7 ([66.114.169.7]) by SRV-EXSC03.webex.local ([192.168.252.200]) via Exchange Front-End Server mailus.webex.com ([66.114.175.12]) with Microsoft Exchange Server HTTP-DAV ; Tue, 23 Nov 2010 16:57:18 +0000
User-Agent: Microsoft-Entourage/12.24.0.100205
Date: Tue, 23 Nov 2010 09:57:21 -0700
From: Joe Hildebrand <joe.hildebrand@webex.com>
To: Peter Saint-Andre <stpeter@stpeter.im>, XMPP <xmpp@ietf.org>
Message-ID: <C9114081.4280B%joe.hildebrand@webex.com>
Thread-Topic: [xmpp] stringprep: full, partial, none
Thread-Index: AcuLL35dJpXtwEzqn0OnATBWHLg7iw==
In-Reply-To: <4CEAC40B.2090200@stpeter.im>
IM-ID: xmpp:jhildebr@cisco.com
Presence-ID: xmpp:jhildebr@cisco.com
Jabber-ID: jhildebr@cisco.com
Mime-version: 1.0
Content-type: text/plain; charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable
X-OriginalArrivalTime: 23 Nov 2010 16:57:18.0778 (UTC) FILETIME=[7D0AE1A0:01CB8B2F]
Subject: Re: [xmpp] stringprep: full, partial, none
X-BeenThere: xmpp@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: XMPP Working Group <xmpp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/xmpp>, <mailto:xmpp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/xmpp>
List-Post: <mailto:xmpp@ietf.org>
List-Help: <mailto:xmpp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/xmpp>, <mailto:xmpp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Nov 2010 16:56:22 -0000

As an individual, not chair:

The domainpart is often user-entered in our world, and has always been
written down on business cards and the like with the expectation that it
would be case-folded before comparison or DNS lookup.  Switching to the
dangerously incomplete IDNA2008, which does not specify any canonicalization
is not an option for us, in my opinion.  We would also have to specify
something nameprep-like, and I'd much rather wait on the output of the
Précis working group.

I also don't want to hold up 3920bis and 3921bis waiting for that uncertain
future.  If the IESG didn't want us to keep using nameprep, they should have
forced the IDNA2008 team to complete their work, coming up with a
replacement.

In the meantime, I think sticking with nodeprep/nameprep/resourceprep for
the short term is the best of what are all bad options.

On 11/22/10 12:27 PM, "Peter Saint-Andre" <stpeter@stpeter.im> wrote:

> Here is the main issue that concerns the XMPP WG.
> 
> IIRC the group did not consider "partial stringprep" (switch to IDNA2008
> but keep using nodeprep and resourceprep), only "full stringprep" (keep
> using IDNA2003 along with nodeprep and resourceprep) and "no stringprep"
> (wait until the PRECIS WG finishes its work, then switch to IDNA2008 and
> whatever replaces nodeprep and resourceprep).
> 
> /psa
> 
> #######################################################################
> 
> -------- Original Message --------
> Subject: Re: Alexey Melnikov's DISCUSS and COMMENT on
> draft-ietf-xmpp-address-07
> Date: Mon, 22 Nov 2010 09:25:30 -0700
> From: Peter Saint-Andre <stpeter@stpeter.im>
> To: Alexey Melnikov <alexey.melnikov@isode.com>
> CC: xmpp-chairs@tools.ietf.org, draft-ietf-xmpp-address@tools.ietf.org,
> The IESG <iesg@ietf.org>
> 
> On 11/22/10 8:39 AM, Alexey Melnikov wrote:
>> Hi Peter,
>> 
>> Peter Saint-Andre wrote:
>> 
>>> On 11/19/10 5:20 AM, Alexey Melnikov wrote:
>>>  
>>> 
>> [...]
>> 
>>>> 4). DISCUSS DISCUSS: Should domainpart be migrated to IDNA2008 now?
>>>> Apps Area is pretty much requiring use of IDNA2008 in all documents.
>>>>   
>>> This spec documents the legacy usage as a placeholder while the XMPP
>>> community contributes to the PRECIS WG in its work on a replacement for
>>> stringprep. I think the XMPP WG agreed that it would move away from
>>> stringprep for all parts of a JID at the same time -- not temporarily
>>> replace IDNA2003 with IDNA2008 for the domainpart but keep using
>>> stringprep for the localpart and resourcepart pending the output of the
>>> PRECIS WG, and then switch the localpart and resourcepart over to a
>>> non-stringprep approach once the PRECIS WG is done.
>>>  
>>> 
>> Firstly, I think a statement on this should be made in the document.
> 
> We tried to say that in the introduction.
> 
>> Secondly, there is no "temporary replace IDNA2003 with IDNA2008" ;-).
>> IDNA2003 is gone.
> 
> By temporary I meant:
> 
> 1. do IDNA2008 + nodeprep + resourceprep for a while (part-stringprep)
> 
> 2. then do IDNA2008 + precis-based solutions for nodeprep and
> resourceprep (no-stringprep)
> 
> vs.
> 
> 1a. do IDNA2003 + nodeprep + resourceprep for a while more (full
> stringprep), until we can do #2
> 
>> If IDNA2008 has issues, than it needs to be fixed.
> 
> I see no issues with IDNA2008.
> 
>> I am also concerned about the possibility of Precis WG failing to
>> deliver a Stringprep-bis, or doing it very slowly.
> 
> One solution is to push forward as fast as possible with PRECIS. :)
> 
>> I suspect soon
>> registries will start allowing registrations of domains with Unicode
>> characters that map differently under IDNA2008 and IDNA2003 and that
>> would cause an interop issue.
> 
> Yes, that is a concern.
> 
> I think we want to move to IDNA2008 with all due speed. The alternatives
> listed above (1=>2 vs. 1a=>2) were not explicitly presented to the XMPP
> WG, so that would need to happen. If I recall correctly, most people
> seemed to be thinking that the alternatives were all-stringprep or
> no-stringprep, not part-stringrep for a while and then no-stringprep.
> 
> #######################################################################
> 
> 
> _______________________________________________
> xmpp mailing list
> xmpp@ietf.org
> https://www.ietf.org/mailman/listinfo/xmpp

-- 
Joe Hildebrand