FYI: OpenPGP standardize process

[Werner Koch]

----- Forwarded message from "John  W. Noerenberg" <jwn2 at qualcomm.com> -----

Date: Thu, 8 Oct 1998 22:58:56 -0700
To: ietf-open-pgp at imc.org
From: "John  W. Noerenberg" <jwn2 at qualcomm.com>
Subject: IESG action on openpgp-format

-----BEGIN PGP SIGNED MESSAGE-----

The IESG reviewed  openpgp-formats today.  They are willing to advance
the draft to PROPOSED STANDARD, however there remains one issue to
resolve.  openpgp-formats does not specify a method to register new
identifiers such as tags for algorithms.  For now, the IESG will
advance the document by adding a note saying that such requests must
be submitted to the IESG Security Area Director(s) to be be considered
or forwarded to an appropriate WG for their consideration.  This note
will be added to a new draft revision (-08) that will posted and then
submitted to the RFC Editor to be promoted to PROPOSED.

However, to go beyond PROPOSED we need to agree on a procedure to
register tags, and to formalize it in the protocol.

<removing the chairman's hat>

I think the IESG's note is basically the right thing to do.  I suggest
a new subsection be added to Section 12 Notes on Algorithms.  This
subsection specifies that requests to assign new algorithm tags be
submitted to the IANA for registration.  When the IANA receives such a
request, they will request that the IESG Security Area Director(s)
review the request.  The Area Directors will assign the task of
reviewing the request to a knowledgable group. This group may be a
currently active WG of the IETF working on OpenPGP-related protocols,
members of the IAB knowledgeable about OpenPGP protocols, or other
individuals recognized as knowledgeable in this area.

Comments?


-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.5.3

iQCVAwUBNh2mCn0RF3HCK4zZAQE4ggP9FA6f34+HrCrhIIyVhh36PyCjhJwocF14
XtRlQWiJMhJVRShg3fQ/Y8wAwbZZVbY+KZA78yLriF2eGnTpQx9Xf60za7E9WyJ3
mbF1L+WPXNRR7soy0eVwx1UvmpOK3946gv30RrsZYUjtrppAnjF6PAzQrXKOfm8E
G83K7ZT8ldk=
=sZkl
-----END PGP SIGNATURE-----


----- End forwarded message -----

-- 
Koch Softwaresysteme  /  "The GNU Privacy Guard" is an OpenPGP system:
Remscheider Str. 22  /  http://www.d.shuttle.de/isil/gnupg/gnupg.html
D-40215 Düsseldorf  /
Germany            /  Fingerprint for <werner.koch at guug.de>:
+49 211 3180023   /  ecaf 7590 eb34 43b5 c7cf  3acb 6c7e e1b8 621c c013