Re: [Dime] Ben Campbell's No Objection on draft-ietf-dime-4over6-provisioning-04: (with COMMENT)

<mohamed.boucadair@orange.com> Thu, 06 August 2015 08:13 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: dime@ietfa.amsl.com
Delivered-To: dime@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9CDD21AD255; Thu, 6 Aug 2015 01:13:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JZhpMQamvQNE; Thu, 6 Aug 2015 01:12:50 -0700 (PDT)
Received: from relais-inet.francetelecom.com (relais-ias244.francetelecom.com [80.12.204.244]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B07111AD1A3; Thu, 6 Aug 2015 01:12:49 -0700 (PDT)
Received: from omfeda07.si.francetelecom.fr (unknown [xx.xx.xx.200]) by omfeda12.si.francetelecom.fr (ESMTP service) with ESMTP id 19BF03B466E; Thu, 6 Aug 2015 10:12:48 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.32]) by omfeda07.si.francetelecom.fr (ESMTP service) with ESMTP id D13A1158088; Thu, 6 Aug 2015 10:12:47 +0200 (CEST)
Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM32.corporate.adroot.infra.ftgroup ([fe80::8924:188:2124:a046%19]) with mapi id 14.03.0248.002; Thu, 6 Aug 2015 10:12:47 +0200
From: mohamed.boucadair@orange.com
To: "Zhouqian (Cathy)" <cathy.zhou@huawei.com>, Ben Campbell <ben@nostrum.com>, The IESG <iesg@ietf.org>
Thread-Topic: [Dime] Ben Campbell's No Objection on draft-ietf-dime-4over6-provisioning-04: (with COMMENT)
Thread-Index: AQHQz7kinh5e0uR0AUeXRZsNAhY8+J3+c6gAgAArowA=
Date: Thu, 06 Aug 2015 08:12:46 +0000
Message-ID: <787AE7BB302AE849A7480A190F8B933005373F2A@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
References: <20150805195831.24117.11508.idtracker@ietfa.amsl.com> <A6A061BEE5DDC94A9692D9D81AF776DF409EE785@SZXEMA512-MBX.china.huawei.com>
In-Reply-To: <A6A061BEE5DDC94A9692D9D81AF776DF409EE785@SZXEMA512-MBX.china.huawei.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.168.234.3]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.8.5.215416
Archived-At: <http://mailarchive.ietf.org/arch/msg/dime/0_CL_H0PBj3KM0R6psHg8M8MooQ>
Cc: "dime-chairs@ietf.org" <dime-chairs@ietf.org>, "draft-ietf-dime-4over6-provisioning@ietf.org" <draft-ietf-dime-4over6-provisioning@ietf.org>, "dime@ietf.org" <dime@ietf.org>, "draft-ietf-dime-4over6-provisioning.shepherd@ietf.org" <draft-ietf-dime-4over6-provisioning.shepherd@ietf.org>, "draft-ietf-dime-4over6-provisioning.ad@ietf.org" <draft-ietf-dime-4over6-provisioning.ad@ietf.org>
Subject: Re: [Dime] Ben Campbell's No Objection on draft-ietf-dime-4over6-provisioning-04: (with COMMENT)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dime/>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Aug 2015 08:13:00 -0000

Re-,

Please see inline.

Cheers,
Med

> -----Message d'origine-----
> De : Zhouqian (Cathy) [mailto:cathy.zhou@huawei.com]
> Envoyé : jeudi 6 août 2015 09:34
> À : Ben Campbell; The IESG
> Cc : draft-ietf-dime-4over6-provisioning@ietf.org; dime-chairs@ietf.org;
> dime@ietf.org; draft-ietf-dime-4over6-provisioning.shepherd@ietf.org;
> draft-ietf-dime-4over6-provisioning.ad@ietf.org
> Objet : RE: [Dime] Ben Campbell's No Objection on draft-ietf-dime-4over6-
> provisioning-04: (with COMMENT)
> 
> Hi Ben,
> Thanks for the comments. Please see my reply below:
> 
> Best Regards,
> Cathy
> 
> > -----Original Message-----
> > From: DiME [mailto:dime-bounces@ietf.org] On Behalf Of Ben Campbell
> > Sent: Thursday, August 06, 2015 3:59 AM
> > To: The IESG
> > Cc: draft-ietf-dime-4over6-provisioning@ietf.org; dime-chairs@ietf.org;
> > dime@ietf.org; draft-ietf-dime-4over6-provisioning.shepherd@ietf.org;
> > draft-ietf-dime-4over6-provisioning.ad@ietf.org
> > Subject: [Dime] Ben Campbell's No Objection on
> > draft-ietf-dime-4over6-provisioning-04: (with COMMENT)
> >
> > Ben Campbell has entered the following ballot position for
> > draft-ietf-dime-4over6-provisioning-04: No Objection
> >
> > When responding, please keep the subject line intact and reply to all
> email
> > addresses included in the To and CC lines. (Feel free to cut this
> introductory
> > paragraph, however.)
> >
> >
> > Please refer to https://www.ietf.org/iesg/statement/discuss-
> criteria.html
> > for more information about IESG DISCUSS and COMMENT positions.
> >
> >
> > The document, along with other ballot positions, can be found here:
> > https://datatracker.ietf.org/doc/draft-ietf-dime-4over6-provisioning/
> >
> >
> >
> > ----------------------------------------------------------------------
> > COMMENT:
> > ----------------------------------------------------------------------
> >
> > Thanks for an easy-to-read document. I have a few questions and
> comments,
> > that I hope can be resolve easily:
> >
> > -- 3.2:
> > Is it possible (or reasonable) for the FQDN to include an
> internationalized
> > domain name? That is, is there a need for a idn or precis dependency?
> (I'm not
> > saying there _is_ such a need; I'm just
> > asking.)
> I think it is possible for the FQDN to include an IDN. But this document
> does not define the FQDN encoding.
> It just follows the definition in RFC1035, RFC1123 and RFC2181.
> >
> > -- 6.1, 2nd paragraph:
> >
> > So you mean MiTM attacks _on_ peers, or _by_ peers? I assume the second,
> > since the first can be mitigated with TLS. (I’m not sure I would call
> this a MiTM
> > per se, it’s just an issue that compromised or malicious nodes already
> in the
> > path may do bad things.)
> The MiTM attacker may alter the information sent between the peers. So you
> are right, it should be changed to "by_peers". Thanks.

[Med] Fixed.

> 
> >
> > -- 6.2:
> > Thanks for including this--but I think it needs a bit more.  I assume
> from these
> > sections that some of these AVPs are "security-sensitive" as defined in
> the
> > referenced section of RFC 6733. That section invokes requirements to use
> > mutually authenticated TLS or IPSec, and to be sure that messages do not
> > traverse any nodes that are not explicitly trusted.
> > It would be good to explicitly list which AVPs from this draft qualify
> as such
> > (unless the answer is "all of them"), and to explicitly mention that the
> > additional requirements apply to their use.
> I think all the AVPs in this draft qualify the requirements defined in RFC
> 6733.

[Med] I made this change:

OLD:

   The AVPs defined in this document reveal privacy-related information
   (e.g., subscriber addresses) that can be used for tracking proposes.
   Considerations discussed in Section 13.3 of [RFC6733] MUST be
   followed.

NEW:

   The AVPs defined in this document reveal privacy-related information
    (e.g., subscriber addresses) that can be used for tracking proposes.
   All these AVPs are considered to be security-sensitive.
   Considerations discussed in Section 13.3 of [RFC6733] MUST be
   followed for Diameter messages containing these AVPs.

> >
> >
> > _______________________________________________
> > DiME mailing list
> > DiME@ietf.org
> > https://www.ietf.org/mailman/listinfo/dime