IETF Logo Mail Archive

[Gen-art] Re: [Last-Call] draft-ietf-sidrops-rpki-ccr-08 ietf last call Genart review

Job Snijders <job@bsd.nl> Mon, 22 June 2026 19:34 UTC

Return-Path: <job@bsd.nl>
X-Original-To: gen-art@mail2.ietf.org
Delivered-To: gen-art@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 15F401054EF9F; Mon, 22 Jun 2026 12:34:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782156884; bh=NErzNtW2OdQ9c91X39Tvn+w0X9TCnX3XtLgNzqkCRHw=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=gQBFBzr5kuJnvG/VK4XwxBr73lv3AcNhOpgKe/5Wa1b2+21g/vy+RKF4o7QpS0TLN BrixG9wboGRN/yyWiQcFfCqwd0ve9V7dtBEI6Av3kKvW+EdxNFucXNP+yDQO9mLQOz V+xxHK4s9u14iu0jA8WJDi2GN9tkWlpdMpOl01c4=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.8
X-Spam-Level:
X-Spam-Status: No, score=-2.8 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=bsd.nl
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I0vP52NQG5ab; Mon, 22 Jun 2026 12:34:42 -0700 (PDT)
Received: from dane.soverin.net (dane.soverin.net [IPv6:2a10:de80:1:4091:b9e9:221f:0:1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 851201054EBB9; Mon, 22 Jun 2026 12:34:26 -0700 (PDT)
Received: from smtp.soverin.net (unknown [10.10.4.99]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by dane.soverin.net (Postfix) with ESMTPS id 4gkdgG74RlzSW; Mon, 22 Jun 2026 19:34:18 +0000 (UTC)
Received: from smtp.soverin.net (smtp.soverin.net [10.10.4.99]) by soverin.net (Postfix) with ESMTPSA id 4gkdgG4jd0z3q; Mon, 22 Jun 2026 19:34:18 +0000 (UTC)
Authentication-Results: smtp.soverin.net; dkim=pass (2048-bit key; unprotected) header.d=bsd.nl header.i=@bsd.nl header.a=rsa-sha256 header.s=soverin1 header.b=xCJuWl/e; dkim-atps=neutral
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bsd.nl; s=soverin1; t=1782156858; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=NErzNtW2OdQ9c91X39Tvn+w0X9TCnX3XtLgNzqkCRHw=; b=xCJuWl/eL7f5Enj9fCoGboHhMBFjr968Fi0R7k8/Rb0z40LXSr1i8mgAgR2Q6EdIQ+GbD5 UY7+HsBw0AS55ZvepvRu8UKdEjM6AIV49DeRgZ4ePD3ESdfKfxvsji2sxKFbAlRjNNAuaT nGCOb9t47Q/Ag5XA2AamuqZeT2/P7rZp1mywwJnT4Fc9wBaCHt25r+89XljOlwgyS2ctIj NKXFQvxHJpSP/lmjPg8nV3agjc71jrSNIP0CysFycKSnUqd52IwKS0Re4KhAmJEK85gKIr R5p0q0ZOyIdXwzoYAWMJK2oRncbQUkBPiCYYhCv2YYEtrE+MBFDS8qhA3vp2mg==
X-CM-Envelope: MS4xfJsDF+bAYqmxIo8+UVAlaG5+xIAbbGlwW9088vRaaxOi8q+wQ7scsmWHmLruPr1GOzMJoW+GO522MO5vQRkQ++zdKXcOyLwXXI6Ebb+pRzA1CFx+diBn uTTrSkSAyGu/sQ9jkI+gDemuyFHlayyQA63yfBs69MuQH1rp+SkmP3Jl+HBfvb7bMDAFBQYbfOEejd7sLGzWye2S7CJmyU9Ur4N2jY8daBAn6pXwaUVsxKel Wt4ZMrsn2LfiMitQ5dEvhp+Rxp9q+nlE1hq6rb33GDhJPH+fxhZ5gSsKWICgyz+hF2Wr0OKx9AzJxum9nexKFijg5I0TStTj6yyh4wVgy0s=
X-Soverin-Id: 019ef0d3-9290-7d15-afc4-bd63b0583eba
Date: Mon, 22 Jun 2026 19:34:17 +0000
From: Job Snijders <job@bsd.nl>
To: sarikaya@ieee.org
Message-ID: <ajmOOScCCj_DL6RZ@feather.sobornost.net>
References: <178179497275.808195.2816289551228232887@dt-datatracker-f9b87776f-8pmmg> <ajRPmE_ta5ViZv0H@feather.sobornost.net> <CAC8QAccGbJkT6SbSri2BVxg5hgfFm5AF6fdtYYR=TY_hW_Nojw@mail.gmail.com> <ajbFK5C7_1JTIrZ0@feather.sobornost.net> <CAC8QAcfrGcZgr__fMRezPppsMq+yWk4N7jvOdZr0ZZF8Q+6Ugg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CAC8QAcfrGcZgr__fMRezPppsMq+yWk4N7jvOdZr0ZZF8Q+6Ugg@mail.gmail.com>
X-Clacks-Overhead: GNU Erik Bais
X-Spampanel-Class: ham
Message-ID-Hash: MJMJVA5PXR35JEFVU6L2TOTTHNYBHKYN
X-Message-ID-Hash: MJMJVA5PXR35JEFVU6L2TOTTHNYBHKYN
X-MailFrom: job@bsd.nl
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-gen-art.ietf.org-0; header-match-gen-art.ietf.org-1; header-match-gen-art.ietf.org-2; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: gen-art@ietf.org, draft-ietf-sidrops-rpki-ccr.all@ietf.org, last-call@ietf.org, sidrops@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Gen-art] Re: [Last-Call] draft-ietf-sidrops-rpki-ccr-08 ietf last call Genart review
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/gen-art/GP74hZjV_c4QaRrSF3StGnev7OQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Owner: <mailto:gen-art-owner@ietf.org>
List-Post: <mailto:gen-art@ietf.org>
List-Subscribe: <mailto:gen-art-join@ietf.org>
List-Unsubscribe: <mailto:gen-art-leave@ietf.org>

On Mon, Jun 22, 2026 at 02:15:21PM -0500, Behcet Sarikaya wrote:
> I read all of the above.
> Given so much concern on SHA-1 (remember the security review also was
> concerned on this)
> I suggest that you include some text from above, especially the first
> paragraph in the most appropriate place in the draft.

It almost seems as if when people read the phrase "SHA-1", they make
assumptions, jump to conclusions, and overlook the fact that the CCR
format derives its robustness from SHA-256, or that SHA-1 just an aspect
of the RPKI certificate profile. These points are mentioned in the CCR
draft, so I'm somewhat skeptical that adding more text will help...

Kind regards,

Job

v2.46.0 | Report a Bug | By Email | System Status