Re: [TLS] Document Action: 'TLS Elliptic Curve Cipher Suites with

["Steven M. Bellovin" <smb@xxxxxxxxxxxxxxx>]

On Thu, 03 Jul 2008 06:28:02 -0400
Richard M Stallman <rms@xxxxxxx> wrote:

>     It's worse than that. There's no "IETF police" to come after  
>     violators, or enforce section 7 of 3979. If some individual fails
> to disclose, she will not be barred from participating in IETF  
>     discussions, or from posting new drafts.  If a company fails to  
>     disclose, definitely no action will be taken against its
> employees.   
> 
> If this is true, does it indicate that the IETF needs to take a
> stronger stand in enforcing its own rules?

Based on the precedents in the Dell and Rambus cases, it was felt that
government enforcement (in the US) would suffice.  Besides, the IETF
has little recourse of its own on late discoveries; "destandardizing"
something that others are implementing isn't very practical in many
cases.


		--Steve Bellovin, http://www.cs.columbia.edu/~smb
_______________________________________________
TLS mailing list
TLS@xxxxxxxx
https://www.ietf.org/mailman/listinfo/tls