ietf
[Top] [All Lists]

Re: uncooperative DNSBLs, was several messages

2008-11-13 13:40:49


--On Thursday, 13 November, 2008 12:53 -0500 Chris Lewis
<clewis(_at_)nortel(_dot_)com> wrote:

2.  DNSBLs are in themselves bad, because there is no way to
guarantee that they won't contain false positives; they are
nevertheless possibly useful, but the trade-offs are
inadequeately described in the current document.

If all that's missing is a few sentences in the Security
Considerations section, I'm sure that we can get somewhere
with that, on the other hand, discussion of those types of
tradeoffs probably don't belong in this draft, but a BCP.

But there is no BCP.  There is a draft that has been cited a few
times, but no request for the IETF to review and publish it.  It
has never been the practice for the IETF to approve a
standards-track document that is known to be too weak without
some material with the promise that material will appear at some
point in the future and will be adequate.

Chris, I can't promise success, but let me at least suggest how
to have a very different, and potentially more constructive,
discussion.

(1) This document gets withdrawn, or at least suspended, in its
current form. 

(2) You and your colleagues ask for a WG.  If there is as much
consensus and work done already as we have been told, it could
have a very aggressive schedule.   However, the draft charter
should reflect the set of documents you think are needed, how
they connect to each other, and what topics they cover.  It
should also permit a clear discussion about the community's
expectations and conditions for approach of DNSBL documents,
independent of trying to pick apart (or advance) one particular
document.

(3) If you can get that charter approved, you submit documents
that are closely related either together or in some sequence
consistent with the charter and/or their relationships.  

If you cannot get the charter approved, then I think this is
hopeless unless you decide to simply publish a series of
Informational documents with clear statements about what they
represent.

Just my opinion of course, but it appears to me that the present
discussions are going nowhere that is likely to lead to
standardization of the current document in its present form.
The observation that both those who favor standards-track
publication of the document and those who dislike it (or RBLs
generally) for one reason or another are kicking the same dead
horse  (Lisa has already posting a note indicating that she
doesn't see sufficient consensus to support the document for
standardization in its current form, which makes it dead unless
another IESG member comes forward to sponsor it) moves neither
the document nor the discussion forward.

      john

_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf

<Prev in Thread] Current Thread [Next in Thread>