Re: Why have we gotten away from running code?

2005-08-10 Thread wayne
In [EMAIL PROTECTED] Brian Rosen [EMAIL PROTECTED] writes: I notice that we have stopped being interested in running code. I think that is to our community's detriment. I confess that while I've watched the IETF from afar for about a decade, I am relatively new to actually doing anything in

Re: Myths of the IESG: Reading documents is the problem

2005-08-10 Thread Harald Tveit Alvestrand
--On tirsdag, august 09, 2005 16:33:46 -0400 John C Klensin [EMAIL PROTECTED] wrote: And the notion of an AD who has contributed technically to a WG in some significant way then pushing back during IESG review if the WG reaches some other conclusion is pretty close to intolerable. Changing

Re: Why have we gotten away from running code?

2005-08-10 Thread Iljitsch van Beijnum
On 7-aug-2005, at 1:07, Brian Rosen wrote: I notice that we have stopped being interested in running code. I think that is to our community's detriment. [...] Probably more importantly, I think we should be VERY suspicious of new, complex specifications before we have running code.

Re: Why have we gotten away from running code?

2005-08-10 Thread Love Hörnquist Åstrand
Iljitsch van Beijnum [EMAIL PROTECTED] writes: Sure, trying to implement something brings out bugs in the specification, but those are usually relatively minor things that don't go to the design of the protocol. And wide deployment generally shows that a protocol could have been better in

Re: Why have we gotten away from running code?

2005-08-10 Thread Bruce Lilly
Date: 2005-08-09 09:16 From: Brian E Carpenter [EMAIL PROTECTED] The question on the table since RFC 3774 is: why don't we execute the transition to Draft Standard more often, otherwise known as: why are there so few implementation reports at http://www.ietf.org/IESG/implementation.html

Autoreply: Re: Why have we gotten away from running code?

2005-08-10 Thread hverma
I am away on vacation until Aug 8 and will get back to you after that. Thanks Your message reads: Received: from megatron.ietf.org (unverified [132.151.6.71]) by hdflem01.fl.hostdepot.net (Vircom SMTPRS 4.1.361.21) with ESMTP id [EMAIL PROTECTED] for [EMAIL PROTECTED]; Wed, 10 Aug 2005

Re: Why have we gotten away from running code?

2005-08-10 Thread Harald Tveit Alvestrand
--On onsdag, august 10, 2005 02:46:57 -0500 wayne [EMAIL PROTECTED] wrote: The working group was shut down because no consensus could be reached. I think the lack of working code was one of the core causes of the lack of consensus. Don't be shy about naming names The MARID WG had one

Re: Myths of the IESG: Reading documents is the problem

2005-08-10 Thread Brian E Carpenter
Dave Crocker wrote: ... What is especially problematic is when the working group has late-stage process and project management difficulties, leading to the obvious question of what happened in the earlier stage? Having a non-cognizant AD press late-stage issues leads to the question of why

Re: Why have we gotten away from running code?

2005-08-10 Thread Brian E Carpenter
Bruce Lilly wrote: Date: 2005-08-09 09:16 From: Brian E Carpenter [EMAIL PROTECTED] The question on the table since RFC 3774 is: why don't we execute the transition to Draft Standard more often, otherwise known as: why are there so few implementation reports at

Re: Myths of the IESG: Reading documents is the problem

2005-08-10 Thread Sam Hartman
Harald == Harald Tveit Alvestrand [EMAIL PROTECTED] writes: Harald --On tirsdag, august 09, 2005 16:33:46 -0400 John C Harald Klensin Harald [EMAIL PROTECTED] wrote: And the notion of an AD who has contributed technically to a WG in some significant way then pushing back

Re: Why have we gotten away from running code?

2005-08-10 Thread Iljitsch van Beijnum
On 10-aug-2005, at 11:14, Love Hörnquist Åstrand wrote: I don't agree, several IETF protocols that I've implemented while still drafts have had major design changes done them because of an implementation exposed serious flaws in them (secsh-gss, pk-init). Hm, I'm not familiar with those.

Re: Myths of the IESG: Reading documents is the problem

2005-08-10 Thread Dave Crocker
It seems to me that the *primary* responsibility for ensuring that the WG considers everything it should consider, at an early enough stage, lies with the WG Chair(s). Certainly, the AD has an oversight and mentoring role here, especially for first-time WG Chairs, but your obvious question

Re: Why have we gotten away from running code?

2005-08-10 Thread Marc Manthey
morning experts, (Note that I haven't implemented any IETF protocols myself, but I did once do an implementation of a badly designed protocol.) a, is this why you think that there is no need for any new or old protocol at all ? have a great day marcM. -- Reality is what, when

Re: Why have we gotten away from running code?

2005-08-10 Thread C Wegrzyn
I think a big part of the issue is that the IETF has been taken over little by little by corporate interests. Before it used to be for the love of doing it. Today it is more for the benefit of one. Chuck Wegrzyn Marc Manthey wrote: morning experts, (Note that I haven't implemented any IETF

Re: Myths of the IESG: Reading documents is the problem

2005-08-10 Thread John C Klensin
--On Wednesday, 10 August, 2005 09:49 -0400 Sam Hartman [EMAIL PROTECTED] wrote: ... Another point. I think that John needs to do a bit more work explaining when this situation is intolerable. I have no doubt there are cases where it would be bad. However I'm also thinking of cases where

Re: Why have we gotten away from running code?

2005-08-10 Thread Jari Arkko
Iljitsch van Beijnum wrote: There are also specifications that would have been good to have implementations before leaving the WG, because they are not implemented-able as is (spkm). Is that because the designers did a bad job or because there was no way to anticipate the implementation

Re: Why have we gotten away from running code?

2005-08-10 Thread wayne
In [EMAIL PROTECTED] Harald Tveit Alvestrand [EMAIL PROTECTED] writes: --On onsdag, august 10, 2005 02:46:57 -0500 wayne [EMAIL PROTECTED] wrote: The working group was shut down because no consensus could be reached. I think the lack of working code was one of the core causes of the lack of

Re: Myths of the IESG: Reading documents is the problem

2005-08-10 Thread Theodore Ts'o
On Tue, Aug 09, 2005 at 02:00:04PM -0700, Dave Crocker wrote: So, Ted, please forgive me for using your posting to note a pattern, but I'm sufficiently tired of the very regular and usually hyperbole-filled pattern of misreading that happens in this realm, so that I feel the need to take

Re: Why have we gotten away from running code?

2005-08-10 Thread Simon Josefsson
I think that is a good point. A variation on that theme is that the IETF is no longer run by people who actually implement protocols. The relevance and impact of the IETF on what is actually used on the Internet is marginalized through that change of membership. The attitude of That is not how

Re: Myths of the IESG: Reading documents is the problem

2005-08-10 Thread Dave Crocker
HOWEVER, it does seem that you seem to believe that the _primary_ responsibility of an AD is as a project manager and a process manager/cop. Yes... RFC 2026, The Internet Standards Process -- Revision 3: 14. DEFINITIONS OF TERMS ... Area Director - The manager of an IETF Area. The

Re: Why have we gotten away from running code?

2005-08-10 Thread Dave Singer
I hear the opposite complaint enough to believe that the truth lies somewhere in between (the ietf is dominated by academics who have no idea what it takes to design, deploy, and maintain large complex networks). I only see a tiny portion of the ietf myself, agreed (I doubt many people see

Re: Why have we gotten away from running code?

2005-08-10 Thread Marc Manthey
On Aug 10, 2005, at 6:36 PM, Simon Josefsson wrote: I think that is a good point. A variation on that theme is that the IETF is no longer run by people who actually implement protocols. The relevance and impact of the IETF on what is actually used on the Internet is marginalized through that

Re: Why have we gotten away from running code?

2005-08-10 Thread Lakshminath Dondeti
My experience has been that implementations help improve the quality of the specifications, and formal security analyses help fix design errors. I implemented two recent SEC area protocols, but unfortunately in both cases, my implementations were partial (due to lack of time, interest etc.,),

Re: Myths of the IESG: Reading documents is the problem

2005-08-10 Thread Spencer Dawkins
Dear All, I don't mean to chime in here, but if we can agree that nobody is asking ADs to be only process mavens, and nobody is asking ADs to refrain from making technical contributions, we could probably make some progress. I've worked for plenty of managers with technical skills. Some were

Re: Why have we gotten away from running code?

2005-08-10 Thread C Wegrzyn
From my experience over the last 25 years I have seen the number go from almost all academics (and some truly impressive geeks) to more a mix like OSI The people that attend are there to represent the position of their management (or manager) and their companies not look for the best solution. The

Re: Why have we gotten away from running code?

2005-08-10 Thread Jari Arkko
C Wegrzyn wrote: Hey, we not only had code that ran we also had bake-offs to make sure all the stuff worked together. The idea was to work out the nuances (the 20% of the inaccuracies) and produce a damn good system. Today the idea is to slap something together - damn the interop - and get out

Re: Why have we gotten away from running code?

2005-08-10 Thread Dave Singer
Don't forget the organizations that adopt IETF specs. ISMA has a regular interop and conformance program for RTSP + RTP + the codecs used, both 'virtual' over the internet and face to face at most meetings. Likewise IMTC does testing of 3GPP SA4 multimedia specs, again using RTSP, RTP,

Re: Why have we gotten away from running code?

2005-08-10 Thread Henning Schulzrinne
The next SIPit event is in about a month; see http://www.sipit.net/ There was a GIMPS (now GIST) + NSIS NSLP interop event just before the IETF meeting (pre-RFC). I wish there were more, but there are some. C Wegrzyn wrote: Perhaps they are more regionalized. I know there are some labs like

Re: Last Call: 'Internet Code Point Assignments' to Proposed Standard

2005-08-10 Thread Pekka Savola
On Wed, 10 Aug 2005, The IESG wrote: The IESG has received a request from an individual submitter to consider the following document: - 'Internet Code Point Assignments ' draft-gray-rfc1888bis-01.txt as a Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits

Re: Cautionary tale: Paris pickpockets

2005-08-10 Thread Dave Crocker
he said I'd be crazy to have my wallet in the backpocket and urged me to put it somewhere inside my jacket because that would be much more difficult to get. when my wallet was lifted, 2 months ago in the Paris metro, it was in my front left pocket. much more difficult is simply not

Re: Cautionary tale: Paris pickpockets

2005-08-10 Thread Hadmut Danisch
On Wed, Aug 10, 2005 at 12:55:42PM -0700, Dave Crocker wrote: when my wallet was lifted, 2 months ago in the Paris metro, it was in my front left pocket. much more difficult is simply not correct. I am not that experienced in that kind of security business. Book reference: Bambi

what is a threat analysis?

2005-08-10 Thread Michael Thomas
Having a threat analysis was brought up at the plenary by Steve Bellovin as being a Good Thing(tm). At the MASS/DKIM BOF we are being required to produce such a thing as a prerequisite to even getting chartered as a working group. The problem that I have (and Dave Crocker at the plenary) is that

Re: Cautionary tale: Paris pickpockets

2005-08-10 Thread Dave Singer
At 12:55 -0700 10/08/05, Dave Crocker wrote: he said I'd be crazy to have my wallet in the backpocket and urged me to put it somewhere inside my jacket because that would be much more difficult to get. when my wallet was lifted, 2 months ago in the Paris metro, it was in my front left

Re: what is a threat analysis?

2005-08-10 Thread Bruce Lilly
Date: 2005-08-10 15:41 From: Michael Thomas [EMAIL PROTECTED] Having a threat analysis was brought up at the plenary by Steve Bellovin as being a Good Thing(tm). [...] So, if this is going to be yet another hoop that the IESG and IAB sends working groups through like problem statements,

Re: what is a threat analysis?

2005-08-10 Thread Stephen Kent
Dave Michael, In the DoD environment, a threat analysis for a system identifies the classes of adversaries that the author believes are of concern, and describes their capabilities and motivations. Russ's three questions are a concise way of stating this: - The bad actors are

Re: what is a threat analysis?

2005-08-10 Thread David Hopwood
Bruce Lilly wrote: Date: 2005-08-10 15:41 From: Michael Thomas [EMAIL PROTECTED] Having a threat analysis was brought up at the plenary by Steve Bellovin as being a Good Thing(tm). [...] So, if this is going to be yet another hoop that the IESG and IAB sends working groups through like

Re: what is a threat analysis?

2005-08-10 Thread Steven M. Bellovin
In message [EMAIL PROTECTED], Dave Crocker writes: Having a threat analysis was brought up at the plenary by Steve Bellovin as being a Good Thing(tm). At the MASS/DKIM BOF we are being required to produce such a thing as a prerequisite to even getting chartered as a working group. The problem

Last Call: 'Secure Shell (SSH) Session Channel Break Extension' to Proposed Standard

2005-08-10 Thread The IESG
The IESG has received a request from the Secure Shell WG to consider the following document: - 'Secure Shell (SSH) Session Channel Break Extension ' draft-ietf-secsh-break-04.txt as a Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on

RFC 4005 on Diameter Network Access Server Application

2005-08-10 Thread rfc-editor
A new Request for Comments is now available in online RFC libraries. RFC 4005 Title: Diameter Network Access Server Application Author(s): P. Calhoun, G. Zorn, D. Spence, D. Mitton Status: Standards Track Date: August 2005

RFC 4004 on Diameter Mobile IPv4 Application

2005-08-10 Thread rfc-editor
A new Request for Comments is now available in online RFC libraries. RFC 4004 Title: Diameter Mobile IPv4 Application Author(s): P. Calhoun, T. Johansson, C. Perkins, T. Hiller, Ed., P. McCann Status: Standards Track Date: