Downgrading Mechanism for Email Address Internationalization
RFC 5504
Yes
(Chris Newman)
No Objection
Lars Eggert
(Dan Romascanu)
(David Ward)
(Lisa Dusseault)
(Mark Townsley)
(Pasi Eronen)
(Ross Callon)
(Tim Polk)
Note: This ballot was opened for revision 12 and is now closed.
Lars Eggert
No Objection
Chris Newman Former IESG member
Yes
Yes
()
Unknown
Cullen Jennings Former IESG member
No Objection
No Objection
(2009-02-11)
Unknown
I was wondering why this was experimental - then I read Klensin's note from Jan 7. If that reflects general state of this document, it seems like it would be a good idea to add an IESG Note that adds a bit caution and highlights why this is experimental.
Dan Romascanu Former IESG member
No Objection
No Objection
()
Unknown
David Ward Former IESG member
No Objection
No Objection
()
Unknown
Jari Arkko Former IESG member
No Objection
No Objection
(2009-02-12)
Unknown
The two different fragments of ABNF have a different indentation, which leads to an error from some parsers, e.g., BAP.
Lisa Dusseault Former IESG member
No Objection
No Objection
()
Unknown
Mark Townsley Former IESG member
No Objection
No Objection
()
Unknown
Pasi Eronen Former IESG member
(was Discuss)
No Objection
No Objection
()
Unknown
Ross Callon Former IESG member
No Objection
No Objection
()
Unknown
Russ Housley Former IESG member
No Objection
No Objection
(2009-02-11)
Unknown
The Gen-ART Review by Vijay Gurbani posted on 2-Jan-2009 includes two comments: 1) The last statement in S3.3 ("Applying this procedure to "Received" header field is prohibited.") ought to be moved elsewhere. I think this is a fairly important statement and appearing as it does in a section for "unknown" header fields, I believe adequate attention may not be paid to it. A couple of places where it could be moved would be S1 or S5, when "RECEIVED downgrading" is discussed. 2) In S5, under "RECEIVED downgrading", does it make sense to say "will not contain non-ASCII values" or "should not contain non-ASCII values" instead of "don't contain non- ASCII values."
Tim Polk Former IESG member
No Objection
No Objection
(2009-02-12)
Unknown
The second and final bullets in the security considerations could be strengthened a bit, imho. Specifically, in bullet 2 the authors might wish to say what implementations that attempt to detect spoofing should do. Do they rely on the Downgraded-* fields and ignore the rewritten headers, or is some comparison between these fields in order? The last bullet closes with the sentence "Such gateways violate [RFC2979] and can be upgraded to correct the problem." Unless there is a downside to this upgrade, the authors should consider strengthening this to say the upgrade is recommended.