Re: [Dime] Comments on draft-ietf-dime-local-keytran-03

The domain identifier would be needed if the receiving entity managed keys for 
multiple domains.

Glen Zorn wrote:
> Qin Wu [mailto:sunseawq@huawei.com] writes:
> 
>> Hi, Glen:
>> Could you take care of the comments from Tom below?
> 
> I have no idea what the purpose of the domain identifier might be;
> similarly, adding a table to section 5.2 would seem only to add verbiage,
> rather than utility, to the draft.
> 
>> Regards!
>> -Qin
>> ----- Original Message -----
>> From: "Tom Taylor" <tom111.taylor@bell.net>
>> To: <dime@ietf.org>; "wuqin" <sunseawq@huawei.com>; "Glen Zorn"
>> <gwz@net-zen.net>
>> Sent: Monday, May 10, 2010 7:55 AM
>> Subject: Comments on draft-ietf-dime-local-keytran-03
>>
>>
>>> I have a couple of comments on draft-ietf-dime-local-keytran-03.
>>>
>>> 1) As suggested in my previous E-mail, the attributes contained in the
>> Key AVP
>>> should probably include an applicable domain identifier (in the
>> absence of which
>>> the key is not domain-specific), and an enumeration indicating usage.
>> The two
>>> usages I see are reauthentication root key and master session root
>> key. In a bow
>>> to RFC 5295, I suppose DSRK should be added to and stand at the head
>> of this
>>> list. Obviously the usage list has to be extensible -- another IANA
>> registry.
>>> 2) Minor comment: I would think section 5.2 itself would contain a
>> table listing
>>> the values to be registered. Of course, if my suggestion is adopted
>> the details
>>> of this will be different.
>>>
>>> Tom taylor
>>>
>>>
> 
> 
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime
> 
> 