Re: [Anima] Adam Roach's Discuss on draft-ietf-anima-bootstrapping-keyinfra-22: (with DISCUSS and COMMENT)

"Joel M. Halpern" <jmh@joelhalpern.com> Thu, 18 July 2019 14:24 UTC

Return-Path: <jmh@joelhalpern.com>
X-Original-To: anima@ietfa.amsl.com
Delivered-To: anima@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25B33120305 for <anima@ietfa.amsl.com>; Thu, 18 Jul 2019 07:24:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=joelhalpern.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KsZ96TPxJq0g for <anima@ietfa.amsl.com>; Thu, 18 Jul 2019 07:24:57 -0700 (PDT)
Received: from maila2.tigertech.net (maila2.tigertech.net [208.80.4.152]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4705120363 for <anima@ietf.org>; Thu, 18 Jul 2019 07:24:57 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by maila2.tigertech.net (Postfix) with ESMTP id 45qGcR65h6zQj8C; Thu, 18 Jul 2019 07:24:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joelhalpern.com; s=2.tigertech; t=1563459895; bh=iOjNqNkZl9S6VUknLnGyWzf5olbr46ky2b60vVU+luo=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=B9xl7smoJuITuzty50qki2v2dc692kYYKmvDjEOEnltS5IR7I3nsP4F/fhSpPVaVl eJjl3rkIVjg8zkBAO6mNtG6lPHNZq4nWAB7MMbY7vtiPuPaBiudfBLSbPNi3YfCflE fbR3IGfVHHAAjo5poguoeLgmS3fKf80qwVd5/5ng=
X-Virus-Scanned: Debian amavisd-new at maila2.tigertech.net
Received: from [172.20.7.244] (209-255-163-147.ip.mcleodusa.net [209.255.163.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by maila2.tigertech.net (Postfix) with ESMTPSA id 45qGcQ5W4NzQj7v; Thu, 18 Jul 2019 07:24:54 -0700 (PDT)
To: Michael Richardson <mcr+ietf@sandelman.ca>
Cc: Adam Roach <adam@nostrum.com>, anima@ietf.org, Eliot Lear <lear@cisco.com>
References: <156282703648.15280.17739830959261983790.idtracker@ietfa.amsl.com> <17580.1562874933@localhost> <ACEB4033-707F-47AF-B58A-5227B444BEAB@cisco.com> <E2DA8D30-805E-478D-925D-534C04A0727F@cisco.com> <8869.1563140002@dooku.sandelman.ca> <cedc515e-22ab-94a9-e6ef-c55b345687ba@joelhalpern.com> <376eee31-0264-38a8-1d32-901bb1a0671b@gmail.com> <9e341730-dc47-8860-47d4-6421ab04d0dc@nostrum.com> <6ecdae7f-4fb7-d9fc-f19f-bf742c6fe83c@joelhalpern.com> <193EB8D1-3E58-4570-AC4D-55737E3D36CF@cisco.com> <a544c69a-38e2-4e6e-bc4f-752bbe524fa8@joelhalpern.com> <5240.1563306433@localhost> <c4ce950e-9588-a65f-4007-230479b088a3@joelhalpern.com> <15321.1563397993@localhost>
From: "Joel M. Halpern" <jmh@joelhalpern.com>
Message-ID: <92439d44-1a2c-5b5f-1d3f-8985c4727727@joelhalpern.com>
Date: Thu, 18 Jul 2019 10:24:53 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0
MIME-Version: 1.0
In-Reply-To: <15321.1563397993@localhost>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima/M_wtZp1vGoT9_VmPwb8QzZn2sSQ>
Subject: Re: [Anima] Adam Roach's Discuss on draft-ietf-anima-bootstrapping-keyinfra-22: (with DISCUSS and COMMENT)
X-BeenThere: anima@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Autonomic Networking Integrated Model and Approach <anima.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima>, <mailto:anima-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima/>
List-Post: <mailto:anima@ietf.org>
List-Help: <mailto:anima-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima>, <mailto:anima-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Jul 2019 14:24:59 -0000

All three of those sound like improvements.
WHichever one you and the working group pick would clearly help.

Thank you,
Joel

On 7/17/2019 5:13 PM, Michael Richardson wrote:
> 
> Joel M. Halpern <jmh@joelhalpern.com> wrote:
>      > Thank you Michael.  I saw the proposed change in section 9.  I wonder
>      > if that is hiding the MUST, since the mechanisms are in section 7...
>      > Having said that, I can live with it as you have proposed.
> 
> I take your point. Options I see are:
> 1) swap the sections so section 9 (applicability) comes before 7 (reduced security)
> 2) mention the ACP applicability in section 7.
> 3) move the 7.2 section to section 9.
> 
> The intention with section 7 is to provide a palette of things, and let
> their use be dictated by how the protocol is applied.
>