Re: stringprep mailing list

Erik van der Poel <[email protected]> writes:

> Even if Stringprep is not updated to address the PRI #29 problem, we 
> must at least let the other Stringprep profile authors know about the 
> situation, so that they can make their own decisions for their areas. 
> The IDN mailing list seems to be dedicated to IDNA issues (including 
> Nameprep). Is there a Stringprep mailing list?

There was one ("ietf-stringprep"), but I believe it has been closed.

I suspect none of this is news to any author of a StringPrep profile.
RFC 4013 acknowledge the PR29 issue in the security consideration.

> I am also Cc'ing the author of the expired Internet Draft of the 
> Kerberos profile of Stringprep (Jeffrey Altman). Kurt and Jeffrey may 
> wish to take a look at the various things I've included URIs for in this 
> email.
>
> http://josefsson.org/cgi-bin/rfcmarkup?url=http://josefsson.org/cgi-bin/viewcvs.cgi/*checkout*/libidn/doc/specifications/draft-ietf-krb-wg-utf8-profile-01.txt

The Kerberos WG is using SASLprep, IIUC.

Thanks,
Simon