Re: [CDNi] I-D Action: draft-ietf-cdni-https-delegation-subcerts-06.txt

Kevin Ma <kevin.j.ma.ietf@gmail.com> Mon, 11 March 2024 04:07 UTC

Return-Path: <kevin.j.ma.ietf@gmail.com>
X-Original-To: cdni@ietfa.amsl.com
Delivered-To: cdni@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B6B0C14F695 for <cdni@ietfa.amsl.com>; Sun, 10 Mar 2024 21:07:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id crZlPPdh7eG4 for <cdni@ietfa.amsl.com>; Sun, 10 Mar 2024 21:06:57 -0700 (PDT)
Received: from mail-ej1-x636.google.com (mail-ej1-x636.google.com [IPv6:2a00:1450:4864:20::636]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F71CC14F68B for <cdni@ietf.org>; Sun, 10 Mar 2024 21:06:57 -0700 (PDT)
Received: by mail-ej1-x636.google.com with SMTP id a640c23a62f3a-a462b068416so35156166b.0 for <cdni@ietf.org>; Sun, 10 Mar 2024 21:06:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1710130015; x=1710734815; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=rFG6VNSl6qPt5JfiSXeyyr8JgVRgEplLNHYU96WYNMs=; b=ChHFy8dZ8BfPBgVaheq+lQ1G8HrWMu5jGcOdjVzHpEO+a8IP02yW2SJUjzwvwkkB+e VBpuTJO2N2uJJIVX17gSr6YXlcFXX7GiGAZRqaXYBYOeN1DZWq+fEgZ5vF4T6f07GBY0 kBJDgJS48Pi9Het7AKdLHaJSKF4uDfml6oc8or8gLY6zvdHEKAMnroD1IOKo4ItLjetX inu5334bGhu/j+A54L7vAXIE+zr6lBcwsjM9y8mr1zFIAKAYFZu8qqS2WSRzI7FVO0A/ SjTWF3N+mOmqH8sbuEdIGt9DN7GY4A6jpFOSzB5Bng2yzx8xT18bAYeT4MsmeA8YS/+E T58w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1710130015; x=1710734815; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=rFG6VNSl6qPt5JfiSXeyyr8JgVRgEplLNHYU96WYNMs=; b=HJB93D71MI9qAg1GqQzF+3Or+sDU3jyj5SbxqLyIPs77UNOmZNWmJdTWzkCom56MKT qN8m7aMfklmAP+M1A+k1nGuSSY3T5OwySlqEQw2/oTIHa8UtUbWQuGvqq292JvVwdaTX uSIJ09sUOUEGqOu9tRPMInj26bV0yAKZws1BJq3epAwK2X+FjoUim0ysVMuG2jk0G31x Gkt6KHF5Uys4OiyrSVsR7PopLuNIckWP3kxG5XPbTFaGkTHhKK8UqwhSPmmNn9p0m9ak 4RdB7s4JEjm3h/bS8Z9RQgg81BFxDR20VpGoZNmvRELZlKyQPf579ZX62QoPEBH/M890 JpCQ==
X-Gm-Message-State: AOJu0Ywtz2PHwsFAf6FT09rcMmKKjH6lNPBoaLPI4srWRycgc8S0d/hB 6nQtvswCMbu5svaur95dfH/0nE8thIjdBmjLwKiZJ580c91rDLa77zat+A0mlmM7qUpC/CTuJ2w 5Yao72IDgO0icGIR76tu8y0Isj15QwfoEW/I=
X-Google-Smtp-Source: AGHT+IE/2g6ABq854/58q0irT9+VXOjsD2UjYFiV5SDGx9MiJ44YKAj9NqKgi88MJH+to9RrrDYR3X8xzAMU23mAjqI=
X-Received: by 2002:a17:906:69b:b0:a44:51c1:733c with SMTP id u27-20020a170906069b00b00a4451c1733cmr3222806ejb.39.1710130014648; Sun, 10 Mar 2024 21:06:54 -0700 (PDT)
MIME-Version: 1.0
References: <170833955854.40232.9622175773350871531@ietfa.amsl.com> <AM9PR10MB415220410DB66CB6D8DD87CB8F512@AM9PR10MB4152.EURPRD10.PROD.OUTLOOK.COM>
In-Reply-To: <AM9PR10MB415220410DB66CB6D8DD87CB8F512@AM9PR10MB4152.EURPRD10.PROD.OUTLOOK.COM>
From: Kevin Ma <kevin.j.ma.ietf@gmail.com>
Date: Mon, 11 Mar 2024 00:06:43 -0400
Message-ID: <CAMrHYE27o5Bk+BE7AUFAiVbGdVMx8X4ca8KyYiigvZ+d04N1Lw@mail.gmail.com>
To: Christoph Neumann <Christoph.Neumann@broadpeak.tv>
Cc: "cdni@ietf.org" <cdni@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000000aff5a06135aacc5"
Archived-At: <https://mailarchive.ietf.org/arch/msg/cdni/zn-I8Htfjats3xH6d9rgj1e8FO8>
Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-https-delegation-subcerts-06.txt
X-BeenThere: cdni@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" <cdni.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cdni>, <mailto:cdni-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cdni/>
List-Post: <mailto:cdni@ietf.org>
List-Help: <mailto:cdni-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cdni>, <mailto:cdni-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Mar 2024 04:07:01 -0000

Hi Christoph,

  I think the update draft looks good.  Some nits noted below.  Otherwise,
I think we're good to go.

--  Kevin J. Ma

- section 3.2: "via the MI, uCDN" -> "via the MI, the uCDN"
- section 3.2: "that requires an delegated credential that is up to date" -
"that requires an up-to-date delegated credential"

- section 4: "an uCDN" -> "a uCDN"
- section 4: "JOSE/JWE" -> "JWE" ?

- section 5: "the Footprint & Capabilities Advertisement interface" -> "the
CDNI FCI"
- section 5: "the CDNI Metadata interface" - "the MI" ?
- section 5: "the CDNI MI" - "the MI" ?

- section 6: "IANA the registration" -> "IANA registration"

- section 7: "period is set to 7 days" -> "period set to 7 days"
- section 7: "JOSE / JWE" -> "JWE" ?
- section 7: "Note that," -> "Note that"
- section 7: "the imact" -> "the impact"


On Mon, Feb 19, 2024 at 5:49 AM Christoph Neumann <
Christoph.Neumann@broadpeak.tv> wrote:

> Hi all,
>
> I submitted a new version of the delegated credentials CDNI draft.
> I took into account all the nits, editorial comments.
> I also updated the description of the delegated credential structure in
> the MI object, such that the structure contains a certificate chain that
> embeds the delegated credential.
>
> Is this document ready for working group last call?
>
> Christoph
>
> -----Original Message-----
> From: CDNi <cdni-bounces@ietf.org> On Behalf Of internet-drafts@ietf.org
> Sent: Monday, February 19, 2024 11:46 AM
> To: i-d-announce@ietf.org
> Cc: cdni@ietf.org
> Subject: [CDNi] I-D Action:
> draft-ietf-cdni-https-delegation-subcerts-06.txt
>
> Internet-Draft draft-ietf-cdni-https-delegation-subcerts-06.txt is now
> available. It is a work item of the Content Delivery Networks
> Interconnection
> (CDNI) WG of the IETF.
>
>    Title:   CDNI Metadata for Delegated Credentials
>    Authors: Frederic Fieau
>             Emile Stephan
>             Guillaume Bichot
>             Christoph Neumann
>    Name:    draft-ietf-cdni-https-delegation-subcerts-06.txt
>    Pages:   12
>    Dates:   2024-02-19
>
> Abstract:
>
>    The delivery of content over HTTPS involving multiple CDNs raises
>    credential management issues.  This document defines metadata in the
>    CDNI Control and Metadata interface to setup HTTPS delegation using
>    delegated credentials from an Upstream CDN (uCDN) to a Downstream CDN
>    (dCDN).
>
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-cdni-https-delegation-subcerts/
>
> There is also an HTMLized version available at:
>
> https://datatracker.ietf.org/doc/html/draft-ietf-cdni-https-delegation-subcerts-06
>
> A diff from the previous version is available at:
>
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-cdni-https-delegation-subcerts-06
>
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
>
>
> _______________________________________________
> CDNi mailing list
> CDNi@ietf.org
> https://www.ietf.org/mailman/listinfo/cdni
> Broadpeak, S.A. Registered offices at 3771 Boulevard des Alliés, 35510
> Cesson-Sévigné, France
> Trade Register: 524 473 063
> This e-mail and its attachments contain confidential information from
> Broadpeak S.A. and/or its affiliates (Broadpeak), which is intended only
> for the person to whom it is addressed.
> If you are not the intended recipient of this email, please notify
> immediately the sender by phone or email and delete it. Any use of the
> information contained herein in any way, including, but not limited to,
> total or partial disclosure, reproduction, or dissemination, by persons
> other than the intended recipient(s) is prohibited, unless expressly
> authorized by Broadpeak. Broadpeak, S.A. and its affiliates respect privacy
> laws, and is committed to the protection of personal data. Emails and/or
> attachments thereof exchanged between us may include your personal data
> which may be processed by Broadpeak and/or its affiliates according to
> applicable privacy laws & regulations.
> In compliance with Regulation (EU) 2016/679 (GDPR) and applicable
> implementation in local legislations, you can exercise at any time your
> rights of access, rectification or erasure of your personal data, as well
> as your rights to restriction, portability or object to the processing.
> For such purpose, or to know more about how Broadpeak processes your
> personal data, you may contact Broadpeak by email privacy@broadpeak.tv.
> Local authority : Commission Nationale Informatique et Libertés (CNIL): 3
> Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 or
> http://www.cnil.fr/
> _______________________________________________
> CDNi mailing list
> CDNi@ietf.org
> https://www.ietf.org/mailman/listinfo/cdni
>