[Ace] AD review and IETF LC for draft-ietf-ace-revoked-token-notification
Paul Wouters <paul.wouters@aiven.io> Fri, 15 March 2024 01:56 UTC
Return-Path: <paul.wouters@aiven.io>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3710FC14F684 for <ace@ietfa.amsl.com>; Thu, 14 Mar 2024 18:56:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=aiven.io
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gULpRfq3wjYr for <ace@ietfa.amsl.com>; Thu, 14 Mar 2024 18:56:43 -0700 (PDT)
Received: from mail-ed1-x52b.google.com (mail-ed1-x52b.google.com [IPv6:2a00:1450:4864:20::52b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B831C14F60A for <ace@ietf.org>; Thu, 14 Mar 2024 18:56:43 -0700 (PDT)
Received: by mail-ed1-x52b.google.com with SMTP id 4fb4d7f45d1cf-566e869f631so1790844a12.0 for <ace@ietf.org>; Thu, 14 Mar 2024 18:56:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aiven.io; s=google; t=1710467801; x=1711072601; darn=ietf.org; h=cc:to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=w5ZdhHs6ZcXCqHFu06FIdsBKGivSL7hvOMmlwS0r1WY=; b=VdPsQPGira7ClWek8a2jgBnhu9LlFT14tgZ3MSFAJWMIMWTS3xmw18M0w2puljH25T W5tqz+tPz0EZdkcectGrI4fgLn7jknad4SbWjAddSsTnC+MKKBe7ON9tw6NBQCRafSiL 9mtx+1g70aqro3BBQOx9siSispk68jEXYEApo=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1710467801; x=1711072601; h=cc:to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=w5ZdhHs6ZcXCqHFu06FIdsBKGivSL7hvOMmlwS0r1WY=; b=AVPua08tByD+02V/DLyzgkbRvfPgltTZYpXqM7lM1ELPJF3ClRSO/ApZ8TdfDzYs57 Zg0q5ruelSLYYtzTUhz7mVSfj/ohYlm0XXr0+kGATFb1M/A2H6djRBtXpgLFVMDJGqkM hVruFLk/xxly+w2jeEnD3P2TdmF9ugpIBhNEqOq92X9006OLdkcpn3YEAEdmQUWuQ9Mg hQ5f8PrMdHTc5b75MGPN/DFMh2Z+GzgcYJSsUQ8xryTXZxxtAqGc3wvb11KxaTpp96C0 JeqcKoJVyC8T/GLYGOjPJ6yusPC8d8y8n528XKFV6TaOWBIDI0voFCB/V+WVQdDV00sJ z0cw==
X-Gm-Message-State: AOJu0YxiRpMnGo31CuF7o4W1b10h1tDPm9w0Sr92Vb1F9Gu6GPTvOITC /I8Wx4FHxcJTZdAPE9z9hJFi8EuVU4dedsEerLGx0HQqbBlMD4yxQeUeNU4pvrCkYL1roDb7edV 19Db6O+pTTJwKF0o0iMbzMjp5hX2XGdboUmE7iAr6RF+9+Ynlg1SNBA==
X-Google-Smtp-Source: AGHT+IHxHDA97C+FNVbZ32yEaiQ1UGTNo5oT+bLXlUlDT97awZBZd9fPflbm8r90avL3/jpfE6NIZxJzGiR/r8HoP6o=
X-Received: by 2002:a05:6402:5d0:b0:568:b38c:3594 with SMTP id n16-20020a05640205d000b00568b38c3594mr21713edx.35.1710467801276; Thu, 14 Mar 2024 18:56:41 -0700 (PDT)
MIME-Version: 1.0
From: Paul Wouters <paul.wouters@aiven.io>
Date: Thu, 14 Mar 2024 21:56:30 -0400
Message-ID: <CAGL5yWY=OvYVJSOWf9i2oU+3tLXegZNiU5y-vje4qdzp33cd1g@mail.gmail.com>
To: ace@ietf.org
Cc: Francesca Palombini <francesca.palombini@ericsson.com>, glewis@sei.cmu.edu, Marco Tiloca <marco.tiloca@ri.se>, secheverria@sei.cmu.edu
Content-Type: multipart/alternative; boundary="000000000000b248db0613a95141"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/TvnxSbPuaf_2w59RYtAt-Wq3gEc>
Subject: [Ace] AD review and IETF LC for draft-ietf-ace-revoked-token-notification
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Mar 2024 01:56:47 -0000
Hi,
I've done my AD review of draft-ietf-ace-revoked-token-notification.
The document looks good, I only have a minor question, which can be
answered during the IETC LC process.
Section 13.2 states:
Issuing access tokens with not too long expiration time could
help reduce the size of the TRL, but an AS SHOULD take measures
to limit this size.
I don't really understand what this is trying to say. What "measures",
other than short expiry times, can an AS take ?
Paul
- [Ace] AD review and IETF LC for draft-ietf-ace-re… Paul Wouters