John,
Let me restate my concern. Implementations of PEM with alternate
suites of algorithms will exist. My question is how will be document
these? We don't want to add these to the standard without the
maturity and vetting you cite. But it is nonetheless requisite to
provide a channel for documenting proposals and implementations. We
can use an Experimental or Prototype RFC for that purpose.
If we're in agreement on this much, the only other detail is whether
RFC1115bis needs any adjustment. Suppose someone writes a Prototype
RFC that documents the use of the SPA-suite. Will it read properly in
conjunction with RFC1115bis, or does it make sense to adjust the
wording of RFC1115bis slightly?
Steve