[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Regarding Bill's draft



Bill,
	My interpretation of the wg requirements is that it is not
enough that it be possible for the protocol to support a required
functionality, but that a compliant implementation must support it.
Users or system administrators may decide not to use such a feature, but
they must have the option of _using_ it; ergo, a compliant
implementation must support it, in an interoperable fashion. 

	Hence, a compliant implementation of IPV6 must include support
for encryption.  It is not enough that there be an optional way of doing
encryption in IPV6; a compliant implementation must support encryption.

	Likewise, for SKIP to pass muster vis-a-vis the wg requirements,
it is not enough for there to be an optional way of supporting Perfect
Forward Secrecy.  If SKIP is to meet the wg requirements, all compliant
implementations of SKIP must support PFS.

	And finally, it is not enough that Photoris support certain wg
requirements by providing a way to support them in the protocol via an
optional Photoris extensions document, where the extensions are very
clearly not well-enough defined to create interoperable implementations.
In order to meet the wg requirements, all complaint implementations have
to support those features listed in the Photuris extensions draft.

	After all, you'd probably be first to cry foul if the SKIP folks
claimed that their protocol meet all of the working group requirements
if the PFS was only described in an optional part of the protocol spec,
which none of their implementations supported.  Likewise, if Photoris is
to be considered as meeting all of the wg requirements, then all of
these requirements must be met in the base protocol spec, or failing
that, in an annex of the protocol spec which is well-formed and which is
mandatory for implementors to implement.

	Hence, I believe that we really do need to address those items
found in the Photoris extensions draft, or else consider Photuris as not
meeting the wg requirements.  Fair's fair, after all....

							- Ted


References: