[Ace] Shepherd review of draft-ietf-ace-revoked-token-notification

Göran Selander <goran.selander@ericsson.com> Fri, 02 June 2023 11:59 UTC

Return-Path: <goran.selander@ericsson.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3E24C151067; Fri, 2 Jun 2023 04:59:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HA0AUTk1h4Tw; Fri, 2 Jun 2023 04:59:11 -0700 (PDT)
Received: from EUR05-VI1-obe.outbound.protection.outlook.com (mail-vi1eur05on2060c.outbound.protection.outlook.com [IPv6:2a01:111:f400:7d00::60c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B59A1C14CE38; Fri, 2 Jun 2023 04:59:07 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=I69IJrDita1kOR4DD+VA13ohFlK4hC6FSk/wJeF/k6/GumbjPD7pGTaenL6NLWTcvQB3cQJnsg/Sp41i4kps0DE3R8kpRcXnhuSjYccEeSLZq5nBxpTtmfIGCdf2+8itWZAvr0vW3qpPOyyMzPZCbmbiMp4bkrVqxju8YFQYtq15IWwUP2Sr56jFprm3ioaO8B+hXo2jwxh9pPixMMbELS2LQXNEaB6D5QW/2LIQllU1/bmWXwP+WeMC5UchSdMurvCv1GFoV05WYlsmXB+LZl/LOGm+ksOTgMt9Q1iDBuwgQnzQbO2eHoRkwmqusNvjnSF+W2ij7hVEBs5b+XsNsw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ETuT6rd65FjUTDlrY41SjB6GtoM1I2PKCsMro16rct0=; b=O5BMUdUHo1Wm7pawdK9SCkR41SPE09yziFPDYIpkERC86vAd99nGrNjBJx44nKiO3+tlhWEpu6bjEXNBraMAj2O26TM2K+O3xxhJTcs9GH+e3NSS9VXPiiNkN/G9OEf17LBHAAN7UGNHUpTNIoA4VG1T1l5rnPMX3Yr6S6o6CSkT8I+b5pzOdF6Q4vCTsRHILyyb9VuBd51UWfEMVp2FOHCvg6AdvoxNwI7b3WiSCbs3T1mox9XVtyjfxpDbupQoYwdJAXE+8RuqifnEq+uuniTi7b9rHw5P7a1wKJV16jA8BkYRKUlYsotnAqD9DtE7I0AWZ/DVml5bwz8UMfjqGw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ETuT6rd65FjUTDlrY41SjB6GtoM1I2PKCsMro16rct0=; b=Lk3t88POBMBIQlZKn+ZuvVCMRzXhzTr1K6kDDGm0PkUwdaH1rABiXwEm/M2ioPkxaJ9sw7ulDoqDFPCsV1C/DX4BYMBRUqPRy0a6ccPMScMfo3ozOnfskdUpgWvS6J6YDGVedgtxG1XPdwDFI2FCH76xObd+nOu+RGbe7QWJk5A=
Received: from PAXPR07MB8844.eurprd07.prod.outlook.com (2603:10a6:102:24a::19) by AS2PR07MB9550.eurprd07.prod.outlook.com (2603:10a6:20b:64c::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6433.26; Fri, 2 Jun 2023 11:58:57 +0000
Received: from PAXPR07MB8844.eurprd07.prod.outlook.com ([fe80::8988:c72f:b40c:734b]) by PAXPR07MB8844.eurprd07.prod.outlook.com ([fe80::8988:c72f:b40c:734b%3]) with mapi id 15.20.6433.024; Fri, 2 Jun 2023 11:58:57 +0000
From: Göran Selander <goran.selander@ericsson.com>
To: Ace Wg <ace@ietf.org>, "ace-chairs@ietf.org" <ace-chairs@ietf.org>, "draft-ietf-ace-revoked-token-notification@ietf.org" <draft-ietf-ace-revoked-token-notification@ietf.org>
Thread-Topic: Shepherd review of draft-ietf-ace-revoked-token-notification
Thread-Index: AQHZlUfqJkssJTrDCUqNbI2El8qtnA==
Date: Fri, 02 Jun 2023 11:58:57 +0000
Message-ID: <PAXPR07MB8844B457C1D07078E7A1A4A1F44EA@PAXPR07MB8844.eurprd07.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ericsson.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PAXPR07MB8844:EE_|AS2PR07MB9550:EE_
x-ms-office365-filtering-correlation-id: 0e85ea8c-171a-4e82-64c3-08db6360bee2
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PAXPR07MB8844.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230028)(4636009)(39860400002)(366004)(396003)(346002)(136003)(376002)(451199021)(6506007)(186003)(9686003)(26005)(966005)(7696005)(71200400001)(316002)(66574015)(83380400001)(41300700001)(2906002)(52536014)(5660300002)(8936002)(8676002)(15650500001)(478600001)(450100002)(66446008)(66946007)(66556008)(76116006)(64756008)(66476007)(91956017)(110136005)(55016003)(86362001)(33656002)(38070700005)(166002)(82960400001)(122000001)(38100700002); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_PAXPR07MB8844B457C1D07078E7A1A4A1F44EAPAXPR07MB8844eurp_"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PAXPR07MB8844.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 0e85ea8c-171a-4e82-64c3-08db6360bee2
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jun 2023 11:58:57.3073 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: vdl9FPFnGGrjBzT+qB8nzK0tqY5xpRJSjNY912Lmvb9INUGOFNbcmxTybtS+L5sPLkKJq0dYJHK9ZF7FBKHfYOwGYiGHE1zaGX87BWb7e5w=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS2PR07MB9550
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/mHpTsE-lDvzfMSt0cd-j_B-VknM>
Subject: [Ace] Shepherd review of draft-ietf-ace-revoked-token-notification
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Jun 2023 11:59:16 -0000

Hi,

Here is my shepherd review of draft-ietf-ace-revoked-token-notification.

1. The working group consensus represents a strong concurrence of 7+ individuals with others being silent.

2-3. No controversy / discontent regarding particular points has been recorded.

4.  There is an existing implementation by Marco Rasori, CNR:

https://bitbucket.org/marco-rasori-iit/ace-java/src/ucs/

5. The contents relate to the constrained RESTful cluster of work which covers several working groups, but is essentially a "leaf-draft" which provides a feature for the ACE framework.

6. MIB and YANG seems not relevant. Media type and CoAP content-format review criteria are met.

7. The document does not contain YANG

8. No formal review tools have been used. Two simple examples of CDDL are included.

9. The draft is ready for AD review

10. No areas have identified any issues, area reviews still to come

11. The draft aims to be Proposed Standard, which is the proper type of RFC for this kind of protocol.
The datatracker state attributes correctly reflect this intent.

12. None of the authors of the current version (-05) are aware of any IPR that affects this draft. (Question asked by ACE chair earlier this year.)

13. All authors of the current version (-05) are willing to be listed as an author. (Question asked by ACE chair earlier this year.)

14. No remaining nits were found.

15. Normative and Informative References seems to be correctly attributed.

16. All normative references are freely available to anyone.

17. No normative downward references. All normative references are either BCP, Proposed Standard or Internet Standard.

18. No normative references to documents that are not ready to be submitted to the IESG for publication or otherwise in unclear state.

19. Publication of this document will not change the status of any existing RFCs.

20. IANA considerations

The required IANA assignments are complete and appropriate. The IANA considerations contain two registrations:
- media type for messages defined in this protocol and
- the associated CoAP content format.
and two new registries, listed in the next point.

The required IANA assignments are associated with the appropriate reservations in IANA registries. The referenced IANA registries have been clearly identified. Each newly created IANA registry specifies initial contents,
allocations procedures, and have a reasonable name .

21. The following new IANA registries are requested:

- ACE Token Revocation List Parameters
- ACE Token Revocation List Errors

The instructions to the Designated Expert are clear, but there are seem to be duplicate instructions in bullets 2 and 4:

- 'Specifications are needed for the "Expert Review" range if they are expected to be used outside of closed environments in an interoperable way.  When specifications are not provided, the description provided needs to have sufficient information to identify what the point is being used for.'

- ‘When specifications are not provided for a request where "Expert Review" is the assignment policy, the description provided needs to have sufficient information to verify the code points above.'

Some of the authors should be request to be designated experts.



In summary, with possible exception for the duplicate instructions mentioned in item 21, the document is ready to progress.

Göran