Subject: [keyassure] NUDGE: Re: Where to discuss CAA

From: Paul Hoffman <[email-masked]>
Date: Thu, 9 Dec 2010 11:59:46 -0800

[[ A great deal of the recent traffic has nothing to do with client validation and everything to do with CA accountability assumptions. Having that discussion on this list seems quite inappropriate. ]]

At 2:39 PM -0500 12/7/10, Phillip Hallam-Baker wrote:
>When discussing the best approach to bringing security policy work
>into IETF process with the Security Area director, he suggested that
>the best approach would be to submit an Experimental proposal and see
>if we can demonstrate the viability of the proposal first.

You keep speaking for that AD, and he never speaks for himself. That's bad. (And, yes, I have asked him, more than once, to speak for himself on the list.)

There is no such thing as an "Experimental proposal" in the IETF. You might have misunderstood what he said.

There are Experimental RFCs. Those can be published in the IETF stream (after getting IETF consensus) or by the Independent Submissions Editor. (We will assume for the moment that this is not an IAB or IRTF document.)

Which of those two streams are intending with this document? If it is the former, then it is appropriate to ask that AD for a mailing list for this document. If it is the latter, you do not need to discuss this on any IETF mailing list, and it is up to the ISE whether or not whatever you hand him is ready to be published.

>We are currently following that advice, but the long term objective is
>clearly to make a consensus proposal when the ADs are willing to let
>me do so.

Is the short term objective to have an Experimental RFC coming through the ISE?

>Clearly any proposal that has far reaching effects across the industry
>will involve discussions that are outside the scope of IETF.

Indeed. The more of those discussions that can happen on open mailing lists, the better.

--Paul Hoffman, Director
--VPN Consortium
_______________________________________________
keyassure mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/keyassure

--Paul Hoffman, Director
--VPN Consortium