Re: [Extra] [secdir] Secdir last call review of draft-ietf-extra-quota-06

Alexey Melnikov <alexey.melnikov@isode.com> Fri, 24 September 2021 17:19 UTC

Return-Path: <alexey.melnikov@isode.com>
X-Original-To: extra@ietfa.amsl.com
Delivered-To: extra@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9C9A3A1145; Fri, 24 Sep 2021 10:19:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isode.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UYtJ8EpzwSeH; Fri, 24 Sep 2021 10:19:30 -0700 (PDT)
Received: from waldorf.isode.com (waldorf.isode.com [62.232.206.188]) by ietfa.amsl.com (Postfix) with ESMTP id 7B2673A114F; Fri, 24 Sep 2021 10:19:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1632503966; d=isode.com; s=june2016; i=@isode.com; bh=izaKhl4UUyDiDR53VzHEpKn/lTQ/qzlw8QMbs6f/jpQ=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=NGe3II2cS0tFLzV5uF38njCLOqZH4fndujaohsLIz50SMOGpLGg6BdWrX2KY+7KGTPttzk qqNKZlaFutYIc6DvXOL3/7P5PyVvNMFCItf6FurFs2QiqYB8+iPQQQq2M2BHOEgDMxoyVo U9Vug6C57zhma2zROxrFTI99UZdctUI=;
Received: from [192.168.1.222] (host31-49-142-35.range31-49.btcentralplus.com [31.49.142.35]) by waldorf.isode.com (submission channel) via TCP with ESMTPSA id <YU4IngABRyCu@waldorf.isode.com>; Fri, 24 Sep 2021 18:19:26 +0100
To: Shawn Emery <shawn.emery@gmail.com>, secdir@ietf.org
Cc: extra@ietf.org, last-call@ietf.org, draft-ietf-extra-quota.all@ietf.org
References: <163098196206.10347.8674654620317888270@ietfa.amsl.com>
From: Alexey Melnikov <alexey.melnikov@isode.com>
Message-ID: <2bff77d0-35f3-c16e-913a-40eeb8497194@isode.com>
Date: Fri, 24 Sep 2021 18:19:09 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0
In-Reply-To: <163098196206.10347.8674654620317888270@ietfa.amsl.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Content-Language: en-GB
Archived-At: <https://mailarchive.ietf.org/arch/msg/extra/YQeHCWctR8DgGdyLBOux81-c7yM>
Subject: Re: [Extra] [secdir] Secdir last call review of draft-ietf-extra-quota-06
X-BeenThere: extra@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Email mailstore and eXtensions To Revise or Amend <extra.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/extra>, <mailto:extra-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/extra/>
List-Post: <mailto:extra@ietf.org>
List-Help: <mailto:extra-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/extra>, <mailto:extra-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Sep 2021 17:19:35 -0000

Hi Shawn,

Thank you for your review.

On 07/09/2021 03:32, Shawn Emery via Datatracker wrote:
> Reviewer: Shawn Emery
> Review result: Has Nits
>
> I have reviewed this document as part of the security directorate's ongoing
> effort to review all IETF documents being processed by the IESG.  These
> comments were written primarily for the benefit of the security area directors.
> Document editors and WG chairs should treat these comments just like any other
> last call comments.
>
> This draft specifies an extension to the IMAP protocol that allows querying and
> administrative functions related to resource limits and utilization.
>
> The security considerations section does exist and describes that the extension
> must adhere to the local security policies.   It continues to state that user's resource
> usage could also be considered sensitive information.  I don't believe that this draft
> adds additional security concerns from the proposed to be obsoleted RFC, 2087.
> These updates define two additional resource types (ANNOTATION-STORAGE and
> MAILBOX), a response code, and two data items.
>
> General comments:
>
> None.
>
> Editorial comments:
>
> s/a couple of extension/an extension/
> s/mupltiple/multiple/
> s/   Name of the quota resource type:\n/   Name of the quota resource type: ANNOTATION-STORAGE\n/
> s/registrations for 3/registrations for 4/
> s/clarify meaning/clarify the meaning/

I've fixed the editorial comments that you provided.

Best Regards,

Alexey