Re: [xmpp] [precis] WGLC Comments on 6122bis

"Ben Campbell" <ben@nostrum.com> Wed, 11 March 2015 00:51 UTC

Return-Path: <ben@nostrum.com>
X-Original-To: xmpp@ietfa.amsl.com
Delivered-To: xmpp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D95811A92B8; Tue, 10 Mar 2015 17:51:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id stsvpnN1nn9M; Tue, 10 Mar 2015 17:51:56 -0700 (PDT)
Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 071EF1A92B1; Tue, 10 Mar 2015 17:51:46 -0700 (PDT)
Received: from [10.0.1.23] (cpe-173-172-146-58.tx.res.rr.com [173.172.146.58]) (authenticated bits=0) by nostrum.com (8.15.1/8.14.9) with ESMTPSA id t2B0pVUh004427 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 10 Mar 2015 19:51:41 -0500 (CDT) (envelope-from ben@nostrum.com)
X-Authentication-Warning: raven.nostrum.com: Host cpe-173-172-146-58.tx.res.rr.com [173.172.146.58] claimed to be [10.0.1.23]
From: Ben Campbell <ben@nostrum.com>
To: Peter Saint-Andre - &yet <peter@andyet.net>
Date: Tue, 10 Mar 2015 19:51:31 -0500
Message-ID: <EDF95EC2-720E-47C2-AD02-4CB2DA083DA5@nostrum.com>
In-Reply-To: <54FF7A98.4090600@andyet.net>
References: <30D40A1D-09C3-4257-8DC1-A90AFE561571@nostrum.com> <F295A7BF-A037-4083-A8D2-FC0C55A03AE1@nostrum.com> <54FF7A98.4090600@andyet.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
X-Mailer: MailMate (1.9r5066)
Archived-At: <http://mailarchive.ietf.org/arch/msg/xmpp/qhgm6806ff_ORdTbl4BzbA44N4E>
Cc: precis@ietf.org, XMPP Working Group <xmpp@ietf.org>, draft-ietf-xmpp-6122bis.all@ietf.org
Subject: Re: [xmpp] [precis] WGLC Comments on 6122bis
X-BeenThere: xmpp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: XMPP Working Group <xmpp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/xmpp>, <mailto:xmpp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/xmpp/>
List-Post: <mailto:xmpp@ietf.org>
List-Help: <mailto:xmpp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/xmpp>, <mailto:xmpp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Mar 2015 00:51:58 -0000

On 10 Mar 2015, at 18:13, Peter Saint-Andre - &yet wrote:

> On 3/10/15 4:38 PM, Ben Campbell wrote:
>> BTW, I reviewed version 19, quite by accident :-)
>>
>> On 10 Mar 2015, at 17:30, Ben Campbell wrote:
>>
>>> (as individual)
>>>
>>> Hi,
>>>
>>> This is a very well written draft. It's easy to understand given the
>>> complexity of the material. I support it's publication.
>>>
>>> I have a few minor comments:
>>>
>>> -- section 3.2, paragraph 6:
>>>
>>> Is there a reason to avoid a reference for IDNA2008?
>
> Well, IDNA2008 is collectively RFCs 5890-5894 and we do point to 
> several of those specs in ยง3.2. :-)

I guess I should have said "... here", but needing 5 references probably 
argues against doing it again. :-) It just sort of looked strange that 
it was missing while the next phrase had a reference.

>
>>> -- 3.3, implementation note:
>>>
>>> Are there any practical consequences for the implementor? Are there
>>> potential conflicts where the XMPP implementation correctly forms a
>>> Localpart, but it contains an identifier that is interpreted
>>> incorrectly by some SASL mechanism?
>
> Re-using the UsernameCaseMapped profile from 
> draft-ietf-precis-saslprepbis should help in this regard. However, as 
> noted, some SASL mechanisms might not be upgraded quickly and thus 
> would still use SASLprep (RFC 4013). The differences are explained a 
> bit more in Appendix A of draft-ietf-precis-saslprepbis - as I see it, 
> the only semi-major issue is that certain characters that were "mapped 
> to nothing" in RFC 4013 are simply disallowed by the 
> UsernameCaseMapped profile that we re-use in 6122bis.

So an identifier created with UsernameCaseMapped should be fine, but an 
identifier created somewhere else in sasl might not be legal? That 
_seems_ unlikely to be a problem...

It might not hurt to mention the saslprepbis appendix in the note.

>
>>> -- 3.3.1, implementation note:
>>>
>>> I have mixed feelings about XEP-0106 being an informational 
>>> reference
>>> (using the standard of "need to read to understand/implement this
>>> document"). Even if an implementation chooses not to create JIDs 
>>> with
>>> escaped characters, it had to be prepared to receive them from
>>> somewhere else, doesn't it?
>
> Well, the alternative is to reject the JID - but since the escaping 
> mechanism in XEP-0106 is really a matter of presentation, it's 
> something that affects clients more than servers anyway (and the JID 
> escaping would be applied before PRECIS-related processing happens 
> anyway).

So a server would just operate on the escaped string without worrying 
about the fact. Got it. OTOH, this draft applies to clients, too. I 
suppose a client might display the raw string without unescaping, but 
that would be ugly.

OTOH, that goes beyond the point of _this_ draft, so I'm okay leaving it 
as informational.

[...]

>>> -- 8:
>>>
>>> While I don't object to the approach of the section, I think there's
>>> some risk of confusion about which text is authoritative from a 2119
>>> perspective. I think it might be worth noting that the authoritative
>>> text is in the referenced sections, and only summarized here for
>>> convenience.  (It only really matters if they conflict, but 
>>> redundant
>>> normative text makes life harder for future updates.)
>
> I see your point: it's never a great idea to say the same thing in two 
> places.
>
> We do say:
>
> This section describes a protocol feature set that summarizes the
> conformance requirements of this specification....
>
> We could add a sentence like:
>
> The summary is purely informational and does not override any of the
> more detailed descriptions in the body of this specification.


How about adding something more specific. For example, something to the 
effect of the following (to either the current text or with your 
proposed addition):

"[RFC2119] keywords in this section are intended to describe the 
referenced normative text."

(A careful reader will figure out the right thing without it. But I'm 
not worried about _careful_ readers ;-) )