Re: WG Last Call: draft-ietf-sasl-scram-02

[Simon Josefsson <simon@xxxxxxxxxxxxx>]

The IANA section says:

   IANA is requested to prevent future registrations of SASL mechanisms
   starting with SCRAM- without consulting the SASL mailing list
   <ietf-sasl@xxxxxxx> first.

I'm not sure how the IANA would parse this request.  Who on this list
has authority to say yes or no to IANA?  For clarity, I think we should
use one of the terms defined by RFC 2434.  Is this IETF Consensus?  Or
Expert Review?  Or Standards Action?

My preference is to explicitly state that the process to register
further SCRAM-* mechanisms is IETF Consensus, defined like this:

      IETF Consensus - New values are assigned through the IETF
           consensus process. Specifically, new assignments are made via
           RFCs approved by the IESG. Typically, the IESG will seek
           input on prospective assignments from appropriate persons
           (e.g., a relevant Working Group if one exists).

This appears to match the intention based on my reading.

If there are strong preferences for anything else, I don't feel strongly
about it as long as it uses some term defined in RFC 2434.

/Simon