Agenda reimains unbashed.
Paul Hoffman: PQUIP: There is a message to saag, and there was a
presentation to PQUIP that is helpful if groups are interested in FIPS
approveable postquantum algorithms.
Justin Richer: wimse update
Paul Hoffman: IANA: they are rollovering the root DNS key soon It will
be in the root zone on 11 Jan, and the sole key in 16 months after that.
They plan to rollover on a regular basis (every three years). It should
be transparent ideally. He also pointed out that IANA wasn't listed as a
security area activity.
Stephen Farrell: Made a comment about alldispatch, and that he's not a
fan of dispatching in general.
EKR (and others): That ideas we allow into dispatch should be
prioritized. We should work on items that have a good chance of being
accepted. The area dispatchs would ensure that ideas had interest.
It is a Consortium of European non-profit organizations that give small
grants for open source development. It is not limited to Europeans.
Steve Farrell: (on the distinction between code points (should be easy
to get for testing) vs RFCs (should be hard, because of how they are
viewed)). He says it is more subtle than that. It's not clear whether
being free with issuing code points is the right thing. Sometimes an RFC
is required.
Deidre Connolly: The strategy to issue code points is putting more
pressure on a desiginated expert, a change. There is a description of
the CFRG role, which is accurate. The general population sees the CFRG
role differently.
PHB: Not all code points go through IANA. OIDs and URIs have the
property that people can create code points without any IETF process or
implicit endorsement at all. This should be borne in mind by future
'platform' proposals.
Looking back at some of our previous decisions that we now consider
'dated', some of the decisions we made relatively recently start to look
dated. e.g. insisting all encryption be AEAD mode which works for some
use cases but not necessarily when doing signed and encrypted documents.
Control should be given to the designer.
Unknown speaker: Why doesn't the IETF accept other SDOs? Like ISO SG27.
EKR: He agrees with Stephen Farrell on code points vs RFCs. Maybe we
should make a clearer distinction between experimental code points and
recommended ones.
Richard Barnes: write down in one place the policy and the columns that
designate the existing practice. Basically to write a policy that looks
like the TLS policy (8447bis), so it can be referenced.
Mike Ounesworth: Discuss the change control of algorithms.
Paul Hoffman: it would be helpful if working group chairs send existing
practice (e.g. IANA code points) to SAAG, as a survey of existing
practice (and how it changed over time)
Paul Wouters: requested people to review the draft and comment on the
saag list.
Peter Liu: wants to volunteer to be a secdir reviewer. And he gave a
short summary of the NASR side meeting (no BOF in Dublin).