[anonsec] AD review comments on draft-ietf-btns-core

Sam Hartman <hartmans-ietf@mit.edu> Thu, 20 December 2007 20:31 UTC

Return-path: <anonsec-bounces@postel.org>
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1J5S3H-0002IO-PR for btns-archive-waDah9Oh@lists.ietf.org; Thu, 20 Dec 2007 15:31:31 -0500
Received: from boreas.isi.edu ([128.9.160.161]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1J5S3H-0001kF-AU for btns-archive-waDah9Oh@lists.ietf.org; Thu, 20 Dec 2007 15:31:31 -0500
Received: from boreas.isi.edu (localhost [127.0.0.1]) by boreas.isi.edu (8.13.8/8.13.8) with ESMTP id lBKKPSTp025362; Thu, 20 Dec 2007 12:25:29 -0800 (PST)
Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by boreas.isi.edu (8.13.8/8.13.8) with ESMTP id lBKKPB0F025294 for <anonsec@postel.org>; Thu, 20 Dec 2007 12:25:12 -0800 (PST)
Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 017174815; Thu, 20 Dec 2007 15:25:07 -0500 (EST)
From: Sam Hartman <hartmans-ietf@mit.edu>
To: anonsec@postel.org
Date: Thu, 20 Dec 2007 15:25:07 -0500
Message-ID: <tsl4pedf718.fsf@mit.edu>
User-Agent: Gnus/5.110006 (No Gnus v0.6) Emacs/21.4 (gnu/linux)
MIME-Version: 1.0
X-ISI-4-43-8-MailScanner: Found to be clean
X-MailScanner-From: hartmans@mit.edu
Subject: [anonsec] AD review comments on draft-ietf-btns-core
X-BeenThere: anonsec@postel.org
X-Mailman-Version: 2.1.6
Precedence: list
List-Id: "Discussions of anonymous Internet security." <anonsec.postel.org>
List-Unsubscribe: <http://mailman.postel.org/mailman/listinfo/anonsec>, <mailto:anonsec-request@postel.org?subject=unsubscribe>
List-Archive: <http://mailman.postel.org/pipermail/anonsec>
List-Post: <mailto:anonsec@postel.org>
List-Help: <mailto:anonsec-request@postel.org?subject=help>
List-Subscribe: <http://mailman.postel.org/mailman/listinfo/anonsec>, <mailto:anonsec-request@postel.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: anonsec-bounces@postel.org
Errors-To: anonsec-bounces@postel.org
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 798b2e660f1819ae38035ac1d8d5e3ab


Hi.  I've sent the core document to last call.  It was not as readable
as I would like.  If you get a bunch of comments back from people who
do not understand you probably should take a style and readability
pass.

I have two changes I'd like te request as last call comments myself.

First, when you require bare RSA cert payloads, please reference a
specific section of the IKE V2 spec for a definition of this.  Also,
how can BTNS work with DSA if nodes are required to include RSA
payloads?




Please replace the statement in section 4.2 that leap of faith is
being handled by BTNS with a statement that it is an item for future
work.

_______________________________________________