Re: [Ace] [EXTERNAL] Zaheduzzaman Sarker's No Objection on draft-ietf-ace-oauth-params-13: (with COMMENT)

Seitz Ludwig <ludwig.seitz@combitech.se> Fri, 26 March 2021 14:08 UTC

Return-Path: <ludwig.seitz@combitech.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D525F3A1F5E; Fri, 26 Mar 2021 07:08:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3dQVIP7iHhxS; Fri, 26 Mar 2021 07:08:08 -0700 (PDT)
Received: from weald.air.saab.se (weald.air.saab.se [136.163.212.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDC693A1F5B; Fri, 26 Mar 2021 07:08:07 -0700 (PDT)
Received: from mailhub2.air.saab.se ([136.163.213.5]) by weald.air.saab.se (8.14.7/8.14.7) with ESMTP id 12QE83hr098860 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Fri, 26 Mar 2021 15:08:03 +0100
Received: from corpappl17772.corp.saab.se (corpappl17772.corp.saab.se [10.12.196.79]) by mailhub2.air.saab.se (8.13.8/8.13.8) with ESMTP id 12QE7qO1020913 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=OK); Fri, 26 Mar 2021 15:07:52 +0100
Received: from corpappl17773.corp.saab.se (10.12.196.80) by corpappl17772.corp.saab.se (10.12.196.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.3; Fri, 26 Mar 2021 15:07:52 +0100
Received: from corpappl17773.corp.saab.se ([fe80::20a9:e9fa:54a3:2afd]) by corpappl17773.corp.saab.se ([fe80::20a9:e9fa:54a3:2afd%17]) with mapi id 15.02.0792.010; Fri, 26 Mar 2021 15:07:52 +0100
From: Seitz Ludwig <ludwig.seitz@combitech.se>
To: Zaheduzzaman Sarker <zaheduzzaman.sarker@ericsson.com>, The IESG <iesg@ietf.org>
CC: "ace-chairs@ietf.org" <ace-chairs@ietf.org>, "ace@ietf.org" <ace@ietf.org>, "draft-ietf-ace-oauth-params@ietf.org" <draft-ietf-ace-oauth-params@ietf.org>
Thread-Topic: [EXTERNAL] Zaheduzzaman Sarker's No Objection on draft-ietf-ace-oauth-params-13: (with COMMENT)
Thread-Index: AQHXIJBrCSTX2slKU0mXiiH8kOjHUqqV3Z8QgABiHwCAABFzwA==
Date: Fri, 26 Mar 2021 14:07:52 +0000
Message-ID: <0a5381eeca5f43b291b2f729d903c4a9@combitech.se>
References: <161657823601.23005.5029211862521342366@ietfa.amsl.com> <276f72855baf42f4a64dbdecd86c3fe9@combitech.se> <FC159D9F-D336-43F0-B4CA-CF32F7433B20@ericsson.com>
In-Reply-To: <FC159D9F-D336-43F0-B4CA-CF32F7433B20@ericsson.com>
Accept-Language: en-SE, sv-SE, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [136.163.101.122]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Saab-MailScanner-Information: Please contact the ISP for more information
X-Saab-MailScanner-ID: 12QE7qO1020913
X-Saab-MailScanner: Found to be clean
X-Saab-MailScanner-SpamCheck: not spam, SpamAssassin (not cached, score=1.595, required 5, HELO_NO_DOMAIN 0.00, KAM_ASCII_DIVIDERS 0.80, RDNS_NONE 0.79, URIBL_BLOCKED 0.00)
X-Saab-MailScanner-SpamScore: s
X-Saab-MailScanner-From: ludwig.seitz@combitech.se
X-Saab-MailScanner-Watermark: 1617372473.32134@XD+MtuqxQvx13tdtn+J1Ew
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/kQoQTCU9n3mojg1Z1MGWFs1Rfvw>
Subject: Re: [Ace] [EXTERNAL] Zaheduzzaman Sarker's No Objection on draft-ietf-ace-oauth-params-13: (with COMMENT)
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Mar 2021 14:08:13 -0000

Hello Zahed,

If it's ok with you I'll fix that in conjunction with the IETF-editor review (they will probably find a few more like this).

/Ludwig

> -----Original Message-----
> From: Zaheduzzaman Sarker <zaheduzzaman.sarker@ericsson.com>
> Sent: den 26 mars 2021 15:04
> To: Seitz Ludwig <ludwig.seitz@combitech.se>; The IESG <iesg@ietf.org>
> Cc: ace-chairs@ietf.org; ace@ietf.org; draft-ietf-ace-oauth-params@ietf.org
> Subject: Re: [EXTERNAL] Zaheduzzaman Sarker's No Objection on draft-ietf-
> ace-oauth-params-13: (with COMMENT)
> 
> Thanks for the update. My comments are addressed now.
> 
> Found a nit : It is RECOMMENDED that an AS reject a request
>       containing a symmetric key value in the 'req_cnf' field
>       (kty=Symmetric), since the AS is expected to be able to generate
>       better symmetric keys than a constrained client. client (Note: this does
>       not apply to key identifiers referencing a symmetric key).
> 
> s/reject/rejects
> 
> BR
> Zahed
> 
> 
> On 2021-03-26, 08:17, "iesg on behalf of Seitz Ludwig" <iesg-
> bounces@ietf.org on behalf of ludwig.seitz@combitech.se> wrote:
> 
>     Hello Zaheduzzaman,
> 
>     Thank you for your review. The issues you found are now fixed in version -
> 14.
> 
>     Note that there seems to be an problem with xml2rfc, since the outdated
> reference to draft-ietf-ace-oauth-authz-33 should have been taken care of
> by the tooling.
>     I have notified the maintainer of xml2rfc and fixed the draft manually.
> 
>     /Ludwig
> 
>     > -----Original Message-----
>     > From: Zaheduzzaman Sarker via Datatracker <noreply@ietf.org>
>     > Sent: den 24 mars 2021 10:31
>     > To: The IESG <iesg@ietf.org>
>     > Cc: draft-ietf-ace-oauth-params@ietf.org; ace-chairs@ietf.org;
> ace@ietf.org
>     > Subject: [EXTERNAL] Zaheduzzaman Sarker's No Objection on draft-ietf-
> ace-
>     > oauth-params-13: (with COMMENT)
>     >
>     > Zaheduzzaman Sarker has entered the following ballot position for
>     > draft-ietf-ace-oauth-params-13: No Objection
>     >
>     > When responding, please keep the subject line intact and reply to all
> email
>     > addresses included in the To and CC lines. (Feel free to cut this
> introductory
>     > paragraph, however.)
>     >
>     >
>     > Please refer to https://www.ietf.org/iesg/statement/discuss-
> criteria.html
>     > for more information about IESG DISCUSS and COMMENT positions.
>     >
>     >
>     > The document, along with other ballot positions, can be found here:
>     > https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-params/
>     >
>     >
>     >
>     > ----------------------------------------------------------------------
>     > COMMENT:
>     > ----------------------------------------------------------------------
>     >
>     > * Section 1:
>     >    Nit : s/Respresentation/Representation
>     >
>     > * Section 3.1:
>     >   I have similar observation as Martin Duke, and the resolution suggested
> by
>     >   author looks fine with me as long as the cases are distinguishable.
>     >
>     > * Section 12:
>     >    Refers to draft-ietf-ace-oauth-authz-33, -38 version is available now.
>     >
>     >
>