Re: [yam] Russ Housley's Discuss on draft-ietf-yam-rfc4409bis-02: (with DISCUSS)

Pete Resnick <presnick@qualcomm.com> Wed, 24 August 2011 19:08 UTC

Return-Path: <presnick@qualcomm.com>
X-Original-To: yam@ietfa.amsl.com
Delivered-To: yam@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DC8721F8BB6; Wed, 24 Aug 2011 12:08:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.515
X-Spam-Level:
X-Spam-Status: No, score=-106.515 tagged_above=-999 required=5 tests=[AWL=0.084, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UYorNJxjmtz0; Wed, 24 Aug 2011 12:08:28 -0700 (PDT)
Received: from wolverine01.qualcomm.com (wolverine01.qualcomm.com [199.106.114.254]) by ietfa.amsl.com (Postfix) with ESMTP id E94CF21F8432; Wed, 24 Aug 2011 12:08:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qualcomm.com; i=presnick@qualcomm.com; q=dns/txt; s=qcdkim; t=1314212979; x=1345748979; h=message-id:date:from:user-agent:mime-version:to:cc: subject:references:in-reply-to:content-type: content-transfer-encoding:x-originating-ip; z=Message-ID:=20<4E554A83.6050903@qualcomm.com>|Date:=20We d,=2024=20Aug=202011=2014:01:23=20-0500|From:=20Pete=20Re snick=20<presnick@qualcomm.com>|User-Agent:=20Mozilla/5.0 =20(Macintosh=3B=20U=3B=20Intel=20Mac=20OS=20X=2010.6=3B =20en-US=3B=20rv:1.9.1.9)=20Gecko/20100630=20Eudora/3.0.4 |MIME-Version:=201.0|To:=20S=20Moonesamy=20<sm+ietf@eland sys.com>|CC:=20Russ=20Housley=20<housley@vigilsec.com>, =20richard=20Barnes=20<rbarnes@bbn.com>,=0D=0A=09<draft-i etf-yam-rfc4409bis@tools.ietf.org>,=20The=20IESG=20<iesg@ ietf.org>,=0D=0A=09<yam-chairs@tools.ietf.org>,=20<yam@ie tf.org>|Subject:=20Re:=20Russ=20Housley's=20Discuss=20on =20draft-ietf-yam-rfc4409bis-02:=09(with=0D=0A=20DISCUSS) |References:=20<20110822174540.26398.33846.idtracker@ietf a.amsl.com>=09<6.2.5.6.2.20110823123557.0d863778@elandnew s.com>=09<D41B604F-9452-4F9F-80BA-1FE5B74B171E@vigilsec.c om>=20<6.2.5.6.2.20110824111447.076ffd08@elandnews.com> |In-Reply-To:=20<6.2.5.6.2.20110824111447.076ffd08@elandn ews.com>|Content-Type:=20text/plain=3B=20charset=3D"ISO-8 859-1"=3B=20format=3Dflowed|Content-Transfer-Encoding:=20 7bit|X-Originating-IP:=20[172.30.39.5]; bh=9R98IGDdiBuBJpaxrGGATaJQ0ah3o79Rbl7tkZpk1hQ=; b=MXZinb0zhnerNKk9bDRsTs2U7R0+icTqWrsAxVTi7JPX5W6rAeIuAota XfU9oxGvYFgBWfzhue2iBRWXS6uR0Y7NsyZzrZqsraFzD2KD3vP2IZPt2 cZKoqGkjo3wQ5ZbVHeeVNChmWTI9fYFFPkW3by3V+blILrOxcTvn9lDeD 8=;
X-IronPort-AV: E=McAfee;i="5400,1158,6448"; a="112667922"
Received: from ironmsg03-r.qualcomm.com ([172.30.46.17]) by wolverine01.qualcomm.com with ESMTP; 24 Aug 2011 12:09:38 -0700
X-IronPort-AV: E=Sophos;i="4.68,275,1312182000"; d="scan'208";a="102751287"
Received: from nasanexhc08.na.qualcomm.com ([172.30.39.7]) by Ironmsg03-R.qualcomm.com with ESMTP/TLS/AES128-SHA; 24 Aug 2011 12:09:38 -0700
Received: from Macintosh-4.local (172.30.39.5) by qcmail1.qualcomm.com (172.30.39.7) with Microsoft SMTP Server (TLS) id 14.1.323.3; Wed, 24 Aug 2011 12:01:26 -0700
Message-ID: <4E554A83.6050903@qualcomm.com>
Date: Wed, 24 Aug 2011 14:01:23 -0500
From: Pete Resnick <presnick@qualcomm.com>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.1.9) Gecko/20100630 Eudora/3.0.4
MIME-Version: 1.0
To: S Moonesamy <sm+ietf@elandsys.com>
References: <20110822174540.26398.33846.idtracker@ietfa.amsl.com> <6.2.5.6.2.20110823123557.0d863778@elandnews.com> <D41B604F-9452-4F9F-80BA-1FE5B74B171E@vigilsec.com> <6.2.5.6.2.20110824111447.076ffd08@elandnews.com>
In-Reply-To: <6.2.5.6.2.20110824111447.076ffd08@elandnews.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Originating-IP: [172.30.39.5]
Cc: yam@ietf.org, richard Barnes <rbarnes@bbn.com>, Russ Housley <housley@vigilsec.com>, draft-ietf-yam-rfc4409bis@tools.ietf.org, The IESG <iesg@ietf.org>, yam-chairs@tools.ietf.org
Subject: Re: [yam] Russ Housley's Discuss on draft-ietf-yam-rfc4409bis-02: (with DISCUSS)
X-BeenThere: yam@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Yet Another Mail working group discussion list <yam.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/yam>, <mailto:yam-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/yam>
List-Post: <mailto:yam@ietf.org>
List-Help: <mailto:yam-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/yam>, <mailto:yam-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Aug 2011 19:08:28 -0000

Were other comments getting fixed and therefore a new draft will be 
produced (today preferably) that will address this DISCUSS, or is this 
the only thing and I should put in an RFC Editor note?

pr

On 8/24/11 1:46 PM, S Moonesamy wrote:
> Hi Russ,
> At 07:06 24-08-2011, Russ Housley wrote:
>> As Dave well knows, the presence of an invalid signature is different 
>> than no signature at all.  The technical community keeps telling 
>> implementors that they are not really different, but folks that writ 
>> code seem to think otherwise.  The proposed text does not say 
>> anything about the signature validity,  At a minimum, is should say 
>> "...of a valid signature."
>
> Dave suggested the following (new) text as a replacement:
>
>   "Message modification can affect the validity of an existing message
>    signature, such as by DKIM [DKIM], PGP [RFC4880], and can render the
>    signature invalid.  This, in turn, can affect message handling by 
> later
>    receivers, such as filtering engines that consider the presence or 
> absence
>    of a valid signature."
>
> The only change from the previous text is the last line.
>
> The only comment received from the YAM WG has been from Dave.  Based 
> on both comments, I think we have replacement text that all parties 
> can live with.  I'll consider this DISCUSS as addressed.
>
> Thanks,
> S. Moonesamy

-- 
Pete Resnick<http://www.qualcomm.com/~presnick/>
Qualcomm Incorporated - Direct phone: (858)651-4478, Fax: (858)651-1102