Re: [Anima] Shepherd review draft-ietf-anima-bootstrapping-keyinfra-09

peter van der Stok <stokcons@xs4all.nl> Wed, 14 February 2018 10:27 UTC

Return-Path: <stokcons@xs4all.nl>
X-Original-To: anima@ietfa.amsl.com
Delivered-To: anima@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 82A8B12AF83; Wed, 14 Feb 2018 02:27:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level:
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0p68nj3rsksH; Wed, 14 Feb 2018 02:27:50 -0800 (PST)
Received: from lb3-smtp-cloud7.xs4all.net (lb3-smtp-cloud7.xs4all.net [194.109.24.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 749B8128954; Wed, 14 Feb 2018 02:27:50 -0800 (PST)
Received: from webmail.xs4all.nl ([IPv6:2001:888:0:22:194:109:20:200]) by smtp-cloud7.xs4all.net with ESMTPA id luHzey9293A62luHze4tbu; Wed, 14 Feb 2018 11:27:48 +0100
Received: from AMontpellier-654-1-197-156.w90-0.abo.wanadoo.fr ([90.0.224.156]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Wed, 14 Feb 2018 11:27:47 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Content-Transfer-Encoding: 7bit
Date: Wed, 14 Feb 2018 11:27:47 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: Toerless Eckert <tte@cs.fau.de>
Cc: draft-ietf-anima-bootstrapping-keyinfra@ietf.org, anima@ietf.org
Organization: vanderstok consultancy
Reply-To: consultancy@vanderstok.org
Mail-Reply-To: consultancy@vanderstok.org
In-Reply-To: <20180214010910.GA27823@faui40p.informatik.uni-erlangen.de>
References: <20180214010910.GA27823@faui40p.informatik.uni-erlangen.de>
Message-ID: <e9525b2e67c2ce77902073f74c553582@xs4all.nl>
X-Sender: stokcons@xs4all.nl
User-Agent: XS4ALL Webmail
X-CMAE-Envelope: MS4wfAsHWAmKXPFPjncVGlEx5ZEV6DJYxj/o7lbWm8Ddf7G/W2qSyvLV7wWhKPXngWe8URH8UpjZUd5HMcZlRwxWlcEgBnAL+Ir+daIYSbdyEjynhgDqndYd b9iEwxsre71pruQX6WUroPu3VjbEEzXErc3XcAm8MMyjc+nM3tXQcefpBLDchvsZCMdr/HfjDzeHUG4x8nJaeD2GPhve5RqCCGK2ICtpQ9O5NovjCNYsxaJ9 zyXKLkndpjGgyqV8uJCVtw==
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima/l2NOL1YVeVlokUKKO6yZL5854Xc>
Subject: Re: [Anima] Shepherd review draft-ietf-anima-bootstrapping-keyinfra-09
X-BeenThere: anima@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Autonomic Networking Integrated Model and Approach <anima.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima>, <mailto:anima-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima/>
List-Post: <mailto:anima@ietf.org>
List-Help: <mailto:anima-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima>, <mailto:anima-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Feb 2018 10:27:53 -0000

Hi Toerless,

thanks for this reminder about terminology in keyinfra.
I have made several attempts at explaining the authors the possible 
misunderstandings on terminology.
Let's hope your input helps.

I will look at your other comments later this week.

Peter
> 
> b)  Key infrastructure
> 
> There  is no definition/reference for this term.  Please describe on
> first use and in terminology.  Is there a difference
> between "key infrastructure" and  "keying material" ? If not, then
> maybe remove one term otherwise pls. describe difference.
> 
> c) (terminology) MASA definition: "A third-party Manufacturer...". Why
> "third-party" ?
> who are the first two parties ? If this is only slang and we can't
> explain who the
> first two parties are, delete "third-party" ?
> 
> d) "Domain Registrar" vs. "Join Registrar", JRC. Especially because
> the text mostly
> uses "Domain Registrar" and very seldom "Join Registar".
> 
> JRC is used in exactly three places in the draft. I also can not find
> on www.google.com
> or wikipedia any example of "The term JRC is used in common with other 
> bootstrap
> mechanisms" as the Terminology claims. Either provide a non-anima
> reference for the
>  use of that term or eliminate it in the document.
> 
> Suggest to use "(Domain Join) Registar (and Coordinator) in 1.2 and
> say for example
> that the text uses "Join Registrar" when referring to the mechanics of
> building the
> connection (Join Proxy and Join Registrar) and Domain Registrar when 
> discussing
> authentication and any other aspects of the registrar (where the
> domain is relevant).
> 
> e) Voucher
>    - misses ":" after term.
>    - please change "statement" to "artifact" so the terminology aligns
> with both voucher
>      draft and voucher-request text which also uses artifact. See also
> section 2.2
>       where you use "cryptographically protected" instead of "signed"
> and figure out
>      which term you want to use in all cases (hint: signed).
> 
> f) IMPORTANT: Please add/define the term "ANI"
> 
>   ANI - "Autonomic Network Infrastructure". Systems that support both 
> BRSKI and
>   Autonomic Control plane - ACP 
> ([I-D.ietf-anima-autonomic-control-plane]). ANI
>   systems (pledges, proxies, registrar) have specific requirements 
> detailled in
>   the document.
> 
>   Without this term we can not nail down the explicit requirements 
> against
>   ANI Pledges, Proxies, Registrars that we need from the document (and
> distinguish
>   from requirements against any non-ANI adaptation of BRSKI). I added 
> according
>   comments into other parts of the doc.
> 
> g) Please replace "MASA server" with "MASA service" everywhere.
>