Re: [dane] Barry Leiba's No Objection on draft-ietf-dane-ops-14: (with COMMENT)

Barry Leiba <barryleiba@computer.org> Thu, 30 July 2015 07:17 UTC

Return-Path: <barryleiba@gmail.com>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40C2A1A8733 for <dane@ietfa.amsl.com>; Thu, 30 Jul 2015 00:17:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.278
X-Spam-Level:
X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1o-XjUNtXeQ0 for <dane@ietfa.amsl.com>; Thu, 30 Jul 2015 00:17:56 -0700 (PDT)
Received: from mail-wi0-x229.google.com (mail-wi0-x229.google.com [IPv6:2a00:1450:400c:c05::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F1A741A8731 for <dane@ietf.org>; Thu, 30 Jul 2015 00:17:55 -0700 (PDT)
Received: by wibud3 with SMTP id ud3so9019154wib.1 for <dane@ietf.org>; Thu, 30 Jul 2015 00:17:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:content-type; bh=72QB1mOBAsHPyPsl9IrjICEwqnc3S4dzgRr75AwE03Y=; b=KKWHo+Qeexniv3ZAlAeyaWnkBwXIY9gbYUOvcATblKdpIDWGOgeL8x5leRrFAF4DIN R/7qqIpR0ixbZsbpWEPfOPL8S6K/bPgLNfiDgi/uuXGwPHBduquH86E1tKrLCyLmwQKD gLsoUGn/tQIl+M5a2WdNSyG5o9uoD/E7eo5Rca6jofLTUxlZF/3NHoqKOeznCTAs9g/a 2vviu6lkiTTjR3uRdfFoAPm+yfmP2lgsXrTCeCMx+gU1y9HSs+rd66oe8AFlJFMpq2Bz Y/nzaTKi1irTT4obWDBM8DzzBKIdFG+oPmXxK+jR/PCPPr7j0hLXE+QVognoPWAXo09U D/xQ==
MIME-Version: 1.0
X-Received: by 10.194.60.226 with SMTP id k2mr81472013wjr.10.1438240674738; Thu, 30 Jul 2015 00:17:54 -0700 (PDT)
Sender: barryleiba@gmail.com
Received: by 10.28.1.79 with HTTP; Thu, 30 Jul 2015 00:17:54 -0700 (PDT)
In-Reply-To: <20150729170504.GN4347@mournblade.imrryr.org>
References: <20150729151728.549.85266.idtracker@ietfa.amsl.com> <20150729170504.GN4347@mournblade.imrryr.org>
Date: Thu, 30 Jul 2015 09:17:54 +0200
X-Google-Sender-Auth: 9OJb41_mJneADFnTZzz74ABgSRA
Message-ID: <CALaySJL0A+mnfvib4ji867zM_my+Ozj0upujLiTcKDc=sijN6g@mail.gmail.com>
From: Barry Leiba <barryleiba@computer.org>
To: dane@ietf.org
Content-Type: text/plain; charset="UTF-8"
Archived-At: <http://mailarchive.ietf.org/arch/msg/dane/5_wYqQZpVEQ4o_6Yc8F9gbuJ8Ns>
Subject: Re: [dane] Barry Leiba's No Objection on draft-ietf-dane-ops-14: (with COMMENT)
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2015 07:17:57 -0000

Hi, Viktor; thanks for the quick response, and thanks for making the changes.

>> -- Section 4 --
>>
>>    Protocol designers need to carefully consider which set of DANE
>>    certificate usages to support.
>>
>> I'm not sure why this (and the next sentence) is referring to "protocol
>> designers".  Is this not aimed at implementation/deployment choices?  If
>> that's not correct, who are the targets for this advice?
>
> This should likely say "application protocol designers".  The point
> being that the use of DANE TLSA RRs in a particular application
> (as with e.g. SMTP) can be defined (more specifically than in
> RFC6698 and this draft) by an application-specific standard.

Ahhhh, of course; I get it now.  Thanks for the explanation.  Yes,
maybe you can say "designers of DANE profiles", or "designers of DANE
applications", or some such.  Please pick the correct wording.

>> I also find this section to be rather hard to follow -- I can't clearly
>> figure out what the advice really is.  Can you do a little reorganization
>> here, separating the advice out from the explanation of why?  I don't
>> care whether you put the explanation first or the advice first, but it
>> would help to have one paragraph that says, clearly and without fuss,
>> what the recommendation is.  This applies to the subsections as well.
>
> Will try to clarify, this will take more time.

Of course, and many thanks for considering it.

> Should the two
> smaller changes above be pushed as -15, while section 4 is polished?

I would say yes (revisions are cheap), but you should check with your
responsible AD.

Barry