Re: [Dime] Comments on draft-ietf-dime-ikev2-psk-diameter-02

"Cakulev, Violeta (Violeta)" <violeta.cakulev@alcatel-lucent.com> Tue, 24 August 2010 17:22 UTC

Return-Path: <violeta.cakulev@alcatel-lucent.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E752A3A6B8C for <dime@core3.amsl.com>; Tue, 24 Aug 2010 10:22:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LbwbzMljYJUF for <dime@core3.amsl.com>; Tue, 24 Aug 2010 10:22:02 -0700 (PDT)
Received: from ihemail1.lucent.com (ihemail1.lucent.com [135.245.0.33]) by core3.amsl.com (Postfix) with ESMTP id 61D1B3A6358 for <dime@ietf.org>; Tue, 24 Aug 2010 10:22:02 -0700 (PDT)
Received: from usnavsmail3.ndc.alcatel-lucent.com (usnavsmail3.ndc.alcatel-lucent.com [135.3.39.11]) by ihemail1.lucent.com (8.13.8/IER-o) with ESMTP id o7OHMYVi002956 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Tue, 24 Aug 2010 12:22:34 -0500 (CDT)
Received: from USNAVSXCHHUB03.ndc.alcatel-lucent.com (usnavsxchhub03.ndc.alcatel-lucent.com [135.3.39.112]) by usnavsmail3.ndc.alcatel-lucent.com (8.14.3/8.14.3/GMO) with ESMTP id o7OHMXCE010516 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT); Tue, 24 Aug 2010 12:22:34 -0500
Received: from USNAVSXCHMBSA3.ndc.alcatel-lucent.com ([135.3.39.125]) by USNAVSXCHHUB03.ndc.alcatel-lucent.com ([135.3.39.112]) with mapi; Tue, 24 Aug 2010 12:22:33 -0500
From: "Cakulev, Violeta (Violeta)" <violeta.cakulev@alcatel-lucent.com>
To: Sebastien Decugis <sdecugis@nict.go.jp>, "dime@ietf.org" <dime@ietf.org>
Date: Tue, 24 Aug 2010 12:22:31 -0500
Thread-Topic: [Dime] Comments on draft-ietf-dime-ikev2-psk-diameter-02
Thread-Index: Acs0dyvsOWlQegCATset/6nZotLIwgPOOWDA
Message-ID: <AAE76B481E7A0E4C96610790A852B9A624FC50A6A8@USNAVSXCHMBSA3.ndc.alcatel-lucent.com>
References: <4C5A7463.2080603@nict.go.jp>
In-Reply-To: <4C5A7463.2080603@nict.go.jp>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Scanned-By: MIMEDefang 2.57 on 135.245.2.33
X-Scanned-By: MIMEDefang 2.64 on 135.3.39.11
Subject: Re: [Dime] Comments on draft-ietf-dime-ikev2-psk-diameter-02
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Aug 2010 17:22:04 -0000

Sebastien,
Thanks for your comments.
Please see the responses inline.

-Violeta

-----Original Message-----
From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of Sebastien Decugis
Sent: Thursday, August 05, 2010 4:21 AM
To: dime@ietf.org
Subject: [Dime] Comments on draft-ietf-dime-ikev2-psk-diameter-02



Here are my comments on this document. They are only cosmetics. I think the document is ready to be moved forward.

1) What is the purpose of including the Auth-Request-Type AVP in the IKEv2-PSK-Request, since its value is constrained?
>>VC: I agree, today this value is constrained and probably not necessary, but it may change tomorrow. In addition, it is better to be explicit then implicit. So I propose to leave it as it is.

2) Security section: This section refers to Master-Security-Association AVP, which is not defined (I believe Key AVP is intended).
>>VC: Fixed.
I also believe the second paragraph does not belong to this specification, but rather to I-D.ietf-dime-local-keytran. However, it does not harm as a reminder.
>>VC: I agree with both of your points. It probably does not belong here, but it also does not harm, therefore I did not make any change.

3) The reference section points to I-D.ietf-dime-local-keytran in version -01 but the -06 is the latest, maybe an update would be useful.
>>VC: Yes, we need to upload a new version.

That's all I have.

Best regards,
Sebastien.

--
Sebastien Decugis
Research fellow
Network Architecture Group
NICT (nict.go.jp)

_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime