RE: Last Call: OpenPGP Message Format to Proposed Standard

["IANA" <iana@iana.org>]

IESG:

The IANA has reviewed the following Internet-Draft which is 
in Last Call: <draft-ietf-openpgp-rfc2440bis-06.txt>, and 
has the following comments with regards to the publication of 
this document:

It appears from the IESG note (copied below) that this document
"...does not define an extension procedures. Instead requests to 
define new tag values...".

   This document defines many tag values, yet it doesn't describe a
   mechanism for adding new tags (for new features). Traditionally the
   Internet Assigned Numbers Authority (IANA) handles the allocation of
   new values for future expansion and RFCs usually define the
   procedure to be used by the IANA.  However there are subtle (and not
   so subtle) interactions that may occur in this protocol between new
   features and existing features which result in a significant
   reduction in over all security. Therefore this document does not
   define an extension procedure. Instead requests to define new tag
   values (say for new encryption algorithms for example) should be
   forwarded to the IESG Security Area Directors for consideration or
   forwarding to the appropriate IETF Working Group for consideration.

There is no IANA Considerations section in this document that describes
these tag values.  Also, where should these be placed?  New registry?
Existing registry?   Where are the rules if not in this document?
etc. etc.  Did I misunderstand?

Please respond to the IANA about our concerns with regards to this
document.  Failing to do so may cause delay of the approval and
publication of your document.

Thank you.

Michelle S. Cotton
(on behalf of the IANA)