Re: [dhcwg] [Add] 🔔 WG LC: RADIUS Extensions for Encrypted DNS [EXTENDED]

Bernie Volz <bevolz@gmail.com> Mon, 21 November 2022 11:35 UTC

Return-Path: <bevolz@gmail.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2BFB8C1524BC; Mon, 21 Nov 2022 03:35:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.093
X-Spam-Level:
X-Spam-Status: No, score=-2.093 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ap221Z4vsmjd; Mon, 21 Nov 2022 03:35:32 -0800 (PST)
Received: from mail-qv1-xf31.google.com (mail-qv1-xf31.google.com [IPv6:2607:f8b0:4864:20::f31]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99C0EC14F734; Mon, 21 Nov 2022 03:35:32 -0800 (PST)
Received: by mail-qv1-xf31.google.com with SMTP id d18so4277773qvs.6; Mon, 21 Nov 2022 03:35:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:in-reply-to:cc:references:message-id:date:subject:mime-version :from:content-transfer-encoding:from:to:cc:subject:date:message-id :reply-to; bh=fnMqoL7cXXODDWszwEux/4PlaoszSenH53nMdiH/OXA=; b=aDtu6zmF37G37CxizaEll2Adw8zFalEkYjNLKxhXpZQjtklLdCGpdWV6KNgguMEkyJ NSLekdYId3cYGameWwYMjkTOHB6qSgw8RAOpmcduvNzh8KMjtC2+E6giIo+yjCBYfMtV Eh3CJy9QX/bUmLVVtZGYjjbL5IZsxxSOaTiwy2xWVoESZslFkO3aXUgcjp7MYeGWL5bH B3zImeQi46xeiCf+j6JpOaJ75SQAVtshdK3ZLEC5e3AEek7ZwgBgV8K88nIW10ciECUX Y8rh6jsgPCRI/2SXNQgp+Avt89mDxE7hk1S/BsSVB+daq0lOTXQ+xBF3wLkf6K9THUot LZ9A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:in-reply-to:cc:references:message-id:date:subject:mime-version :from:content-transfer-encoding:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=fnMqoL7cXXODDWszwEux/4PlaoszSenH53nMdiH/OXA=; b=7oGrOY2wB2eHPk6Gp6LCrknIP7/hWrXB3BV5KhFGudfEl2ZSjCWQz2a1qvh7Z/YEep uilOpzgGhu0sg5JBItHOKIA9mYTXDUnms0Cjph0EagyYCwuujS2X3YAewBRaBVrAbTO3 oSdntIKV4sVGTrpIe+1fLzKiqk0w6F2WMfobTxoEznt/9YbJIGe3NnZPSbHsMZwomZ9q vX9zMBYNRWh0jAsfya4KlrW5mHGE3MtiaFNAE0tai7htUAtpz/GdpHPKm+oo87SBD1Je CggvibB9DWGWyzjaJwmgzXdNYSo830ScEQYv29HwTZ/9epcMWQEFAN6z0E7nGu+iBdT2 UBeQ==
X-Gm-Message-State: ANoB5pl8sgfY8fdaaezAVnfaaJmpgclDt0lKO2oBNM3jPelj2kdEkn9f jSVKh8+DteXnKMMLG2MX54O8IIYBlI92
X-Google-Smtp-Source: AA0mqf4CrAXLw+1VUEBshByhjjbJuFnzE871uc06ytLlvqEmD/OZs49f9jPJSa7nvFapYRIJqfbVkQ==
X-Received: by 2002:a0c:edab:0:b0:4c6:b483:dbb1 with SMTP id h11-20020a0cedab000000b004c6b483dbb1mr174210qvr.85.1669030531426; Mon, 21 Nov 2022 03:35:31 -0800 (PST)
Received: from smtpclient.apple (d-24-233-121-124.nh.cpe.atlanticbb.net. [24.233.121.124]) by smtp.gmail.com with ESMTPSA id y18-20020ac87092000000b0039a08c0a594sm6461908qto.82.2022.11.21.03.35.30 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 21 Nov 2022 03:35:30 -0800 (PST)
Content-Type: multipart/alternative; boundary="Apple-Mail-37CDACEC-DE40-4386-A830-2BB36228B007"
Content-Transfer-Encoding: 7bit
From: Bernie Volz <bevolz@gmail.com>
Mime-Version: 1.0 (1.0)
Date: Mon, 21 Nov 2022 06:35:30 -0500
Message-Id: <8941AECE-3BAB-46AE-B6CF-FB66CA328009@gmail.com>
References: <24346_1669014244_637B22E4_24346_302_17_4fc7436ea2e349d889c9d618ba473adc@orange.com>
Cc: "Joe Clarke (jclarke)" <jclarke=40cisco.com@dmarc.ietf.org>, opsawg@ietf.org, dhcwg@ietf.org, add@ietf.org
In-Reply-To: <24346_1669014244_637B22E4_24346_302_17_4fc7436ea2e349d889c9d618ba473adc@orange.com>
To: mohamed.boucadair@orange.com
X-Mailer: iPad Mail (19G82)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/dWEy53NqLMH_MBQWOMChAYA2rnY>
Subject: Re: [dhcwg] [Add] 🔔 WG LC: RADIUS Extensions for Encrypted DNS [EXTENDED]
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Dynamic Host Configuration <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Nov 2022 11:35:35 -0000

Ok.

- Bernie (from iPad)

> On Nov 21, 2022, at 2:04 AM, mohamed.boucadair@orange.com wrote:
> 
> 
> Hi Bernie,
>  
> Thanks for the comment.
>  
> I agree that reference may be confusing for some readers. I went with a less verbose text by simply replacing the OLD reference with “Section 8.3 of [This-Document]”. Please see https://tinyurl.com/opsawg-add-latest.  
>  
> [This-Document] will be replaced by the RFC Editor with the RFC number to be assigned to this draft.  
>  
> Cheers,
> Med
>  
> De : Add <add-bounces@ietf.org> De la part de Bernie Volz
> Envoyé : dimanche 20 novembre 2022 13:30
> À : Joe Clarke (jclarke) <jclarke=40cisco.com@dmarc.ietf.org>
> Cc : opsawg@ietf.org; dhcwg@ietf.org; add@ietf.org
> Objet : Re: [Add] [dhcwg] 🔔 WG LC: RADIUS Extensions for Encrypted DNS [EXTENDED]
>  
> The changes related to 4014 are really minor as just changes text to use IANA registry instead of list in original 4014. So not sure why this is really that significant.
>  
> My only concern is that the “new” text references section 8.3 of this new draft and so the replacement text is a bit “odd”? It is not referring to section 8.3 in 4014.
>  
>    NEW:
>       To avoid dependencies between the address allocation and other
>       state information between the RADIUS server and the DHCP server,
>       the DHCP relay agent SHOULD include only the attributes in the
>       IANA-maintained registry (Section 8.3) in an instance of the
>       RADIUS Attributes suboption.
>  
> I wonder if using the following might be better instead of referencing section 8.3 from the new document? (In both “new” sections.)
>  
>    NEW:
>       To avoid dependencies between the address allocation and other
>       state information between the RADIUS server and the DHCP server,
>       the DHCP relay agent SHOULD include only the attributes in the
>       IANA-maintained sub-registry entitled "RADIUS Attributes Permitted
>        in RADIUS Attributes Sub-option" in the "Dynamic Host Configuration
>        Protocol (DHCP) and Bootstrap Protocol (BOOTP) Parameters" registry [BOOTP]
>       IANA-maintained registry in an instance of the
>       RADIUS Attributes suboption.
>  
> But perhaps this is not a concern others have?
>  
> - Bernie (from iPad)
> 
> 
> On Nov 11, 2022, at 3:13 AM, Joe Clarke (jclarke) <jclarke=40cisco.com@dmarc.ietf.org> wrote:
> 
> 
> I am closing this WG LC.  While I am glad that this work received a number of reviews both in opsawg and from other WGs, I would have still like to see more comments around the incorporation of the 4014 changes.
>  
> We will now look to find a shepherd for this doc.  Authors, if you know of someone that may want to act in that role, let us know.
>  
> Joe
>  
> From: Joe Clarke (jclarke) <jclarke=40cisco.com@dmarc.ietf.org>
> Date: Wednesday, October 19, 2022 at 10:11
> To: Joe Clarke (jclarke) <jclarke@cisco.com>, opsawg@ietf.org <opsawg@ietf.org>
> Cc: dhcwg@ietf.org <dhcwg@ietf.org>, add@ietf.org <add@ietf.org>
> Subject: Re: 🔔 WG LC: RADIUS Extensions for Encrypted DNS [EXTENDED]
> 
> After discussion with dhcwg, this document has taken on work from another document that updates RFC 4014.  I want to make sure that opsawg has had a chance to review the extended scope and text.
>  
> The WG LC is extended to end on November 3, 2022.  To those in the WG that have already commented, please review revision -05 or later and share your thoughts on list.
>  
> Joe
>  
> From: OPSAWG <opsawg-bounces@ietf.org> on behalf of Joe Clarke (jclarke) <jclarke=40cisco.com@dmarc.ietf.org>
> Date: Wednesday, October 12, 2022 at 12:43
> To: opsawg@ietf.org <opsawg@ietf.org>
> Subject: [OPSAWG] 🔔 WG LC: RADIUS Extensions for Encrypted DNS
> 
> Hello, WG.  While this work was recently adopted, there was a considerable amount of discussion and work put in to address issues and stabilize the spec.  The authors feel it has reached a steady state and is ready for WG LC.  Based on my read of the discussion threads, it does appear the major issues have been addressed.
>  
> Therefore, this serves as the start of a two week WG LC for  https://datatracker.ietf.org/doc/draft-ietf-opsawg-add-encrypted-dns/.  Please provide your comments and/or support for the current spec on-list prior to October 27.
>  
> Thanks.
>  
> Joe
> _______________________________________________
> dhcwg mailing list
> dhcwg@ietf.org
> https://www.ietf.org/mailman/listinfo/dhcwg
> _________________________________________________________________________________________________________________________
> 
> Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
> Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
> 
> This message and its attachments may contain confidential or privileged information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and delete this message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
> Thank you.