Re: [Gen-art] [Last-Call] Genart telechat review of draft-ietf-anima-bootstrapping-keyinfra-28

tom petch <daedulus@btconnect.com> Tue, 29 October 2019 11:49 UTC

Return-Path: <daedulus@btconnect.com>
X-Original-To: gen-art@ietfa.amsl.com
Delivered-To: gen-art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC7BC120154; Tue, 29 Oct 2019 04:49:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.248
X-Spam-Level:
X-Spam-Status: No, score=0.248 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RATWARE_MS_HASH=2.148, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U-L4OwZkJbj3; Tue, 29 Oct 2019 04:49:42 -0700 (PDT)
Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40130.outbound.protection.outlook.com [40.107.4.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45E9A120041; Tue, 29 Oct 2019 04:49:42 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=k8u6TT+XLX5vvU31n6X1jmYdWWG/4Lmemg+4+ZaxcGFp9k5oXX3Evbn1Gl5Rj8uy6hHgB7sZ9dHalpF7hHcaoSz3CkNAxx8pRVw4l9+SGtWIg0Kke1zt7dg5X8vTdnwJvm9S9ngm+akrp5kFDDmFEXVnw4sZPcMeO9JAitbnpuOarWkLWibjhxfxZYVXdWSkQDXCTPXUcC2lyaMFNuoUXL0sMO0ls4KyMmOXPZ52wniq5K1sJvJFSzB3rXiyy40kKNhvoE6OvLoOHUCRfCTAM7HFqwRxVDJLo4MSV0kVQn6WUwge4xdrJAM0k1tUTcO1hJSpwBAUBYaI8tvsQy17HQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=KvUL2peRa5iy6lHUn595dmRBlZroxIaKtlCDOBvL3pM=; b=Jee8L3lzSrlJvBEuQ8KetSfbgfXOAIOvDK4zFv103tcxD3hh00v1QVZ2kpWTgEPytwxdllY77wNQWbcswlvlrzDfuFX6W36u2L3PvWzBIlEVGqU4jq2AnAm1lxs7HnjsjAomM5wA/5CFpQnGO6quOOeVkugYKP5EBK2jtdyF47zZmC0Afc7tFIlX1FIVl6sTzlOFHep5Osfymg2q1eYLSEghYFiGFxOSV7KRN2mDA2Upm3lkR1OLzLIduQfTrkGywgT/Yvee8HkPAnlVNwmgRaqaEPLdO35YEWiJgdWIIXU26cR4emUHyuA7ORi2TQ/gbf7ZVBrRC9r/ybROqljUyQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=KvUL2peRa5iy6lHUn595dmRBlZroxIaKtlCDOBvL3pM=; b=s816Gjg5ue2ediPmjZNwvH/Co7Eu3EIXL0Jc/Xptf/1hZCRO9b9nqzUTKT4AEToMElayeOJUiyTuinzFbrJ3Iz98bHFkzZcsEP5Su3JzTQLo0zF70dYKnl9yA1cqwgPdRs+jdGwi2/1LgwjmREyOOOJJY7XoFtVIcxBMJPzgKMI=
Received: from AM0PR07MB5716.eurprd07.prod.outlook.com (20.178.115.216) by AM0PR07MB4001.eurprd07.prod.outlook.com (52.134.82.161) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.17; Tue, 29 Oct 2019 11:49:39 +0000
Received: from AM0PR07MB5716.eurprd07.prod.outlook.com ([fe80::8d07:c426:c2d7:51f2]) by AM0PR07MB5716.eurprd07.prod.outlook.com ([fe80::8d07:c426:c2d7:51f2%3]) with mapi id 15.20.2387.016; Tue, 29 Oct 2019 11:49:39 +0000
From: tom petch <daedulus@btconnect.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>
CC: "draft-ietf-anima-bootstrapping-keyinfra.all@ietf.org" <draft-ietf-anima-bootstrapping-keyinfra.all@ietf.org>, "gen-art@ietf.org" <gen-art@ietf.org>, Alissa Cooper <alissa@cooperw.in>, Last Call <last-call@ietf.org>, Dan Romascanu <dromasca@gmail.com>, "anima@ietf.org" <anima@ietf.org>
Thread-Topic: [Last-Call] [Gen-art] Genart telechat review of draft-ietf-anima-bootstrapping-keyinfra-28
Thread-Index: AQHVgzylZL/55Dso/kSfI5QixLQChA==
Date: Tue, 29 Oct 2019 11:49:39 +0000
Message-ID: <065201d58e4e$912aeb40$4001a8c0@gateway.2wire.net>
References: <157095596011.20750.2703747454081790983@ietfa.amsl.com> <00f001d5833c$52aacf60$4001a8c0@gateway.2wire.net> <6CF1EF8F-EE0D-4BE6-B2C2-4C91883A881B@cooperw.in> <048901d585ad$25f8dac0$4001a8c0@gateway.2wire.net> <26165.1572300383@localhost> <00f101d58e3d$08cd01e0$4001a8c0@gateway.2wire.net>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-clientproxiedby: LO2P265CA0363.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:a3::15) To AM0PR07MB5716.eurprd07.prod.outlook.com (2603:10a6:208:11e::24)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=daedulus@btconnect.com;
x-ms-exchange-messagesentrepresentingtype: 1
x-mailer: Microsoft Outlook Express 6.00.2800.1106
x-originating-ip: [86.139.211.103]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 2e183fcc-a423-4057-005d-08d75c66147a
x-ms-traffictypediagnostic: AM0PR07MB4001:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <AM0PR07MB4001956DB51A14C1953351D1C6610@AM0PR07MB4001.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:3173;
x-forefront-prvs: 0205EDCD76
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(396003)(136003)(39860400002)(376002)(346002)(51444003)(13464003)(189003)(199004)(478600001)(2906002)(305945005)(44716002)(26005)(66556008)(7736002)(966005)(6116002)(61296003)(66476007)(86362001)(62236002)(9686003)(6512007)(66446008)(14444005)(256004)(3846002)(64756008)(66946007)(6306002)(14454004)(316002)(44736005)(1556002)(6486002)(71190400001)(54906003)(50226002)(25786009)(4326008)(81686011)(6436002)(14496001)(6246003)(8936002)(8676002)(81156014)(81166006)(486006)(76176011)(446003)(6506007)(386003)(476003)(5660300002)(102836004)(4720700003)(99286004)(52116002)(186003)(81816011)(66066001)(71200400001)(229853002)(74416001)(7726001); DIR:OUT; SFP:1102; SCL:1; SRVR:AM0PR07MB4001; H:AM0PR07MB5716.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:0;
received-spf: None (protection.outlook.com: btconnect.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: svAXfGNA2we6fd81rR8VTyHV0LnwzFoXvvZC2Vp8z9DYaLu2Dc9PQHUHfeIj5/1ReqEQrvkEahaRQYVK0e0smuVbnLdgQQtrGqa/LdNeT89IYMzhOFAxXvUI2bJSORO+pxnMuHN4zXYuDGTSMoghjtfhhaWkEIU8OYyIbYN+/3d2enzAe/HbPO374QutQA7puTxpqpF0gVOFSyIvPW5cSF21161sjQ9rHZQL7bc1hNAcBAGgtLVMufPXpkhz79D/SwbHrH3WWBaOfH1j2hmJtfFgEU7algVoo2uWD/Mwxxs0HfN85PSQHPGolCxNQooImdJ5StTvl6d4jmmAtE3ptTHOJSobbc0Otm68WTLGWWiqxphzsPreF/Z/wFCdjuyhFYSHNNZtDSzOQ/SIoSkBePuQmwhqJjFBOxz+vnAgf7dSy7cAWpsHCAOxybZJrUKUO/elZ2fG1UZuC94TaxmbhZpcYGu+0A3Q27Nxs+jvZfc=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="iso-8859-1"
Content-ID: <A49AA22C6F5FBF4CB69CC6BCD480EF04@eurprd07.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: btconnect.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2e183fcc-a423-4057-005d-08d75c66147a
X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Oct 2019 11:49:39.8292 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: RlrbH61YyEDIwsjmmFrjInUA+SMxU2dnjCOgx3BBXO52fRjGfpW+Qx2eUVqgkl+casV6rKyJhVzxc8Zpm4zRuA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR07MB4001
Archived-At: <https://mailarchive.ietf.org/arch/msg/gen-art/IQbKXP-gvoX-D0hcKy2hyJ5o6js>
Subject: Re: [Gen-art] [Last-Call] Genart telechat review of draft-ietf-anima-bootstrapping-keyinfra-28
X-BeenThere: gen-art@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gen-art>, <mailto:gen-art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art/>
List-Post: <mailto:gen-art@ietf.org>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gen-art>, <mailto:gen-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Oct 2019 11:49:45 -0000

Michael

I just saw -29 after my last message and it still needs work.

Appendix C confuses me.  The reference to it from IANA Considerations
suggests that it is Normative but there is nothing in it to say that it
is and my take is that by default it is Informational.

It contains a YANG module which
- lacks references on import statements
- lacks authors
- lacks copyright
- is not listed in IANA Considerations
- has http: not https:
- has a reference clause with a different title to that of the I-D
- mixes URI and URL
all in 35 lines :-)

The YANG module in s.3.4
- references RFC8040 which is not in the I-D References
- references
  Voucher Profile for Bootstrapping Protocols
whereas this I-D has a title of
  Bootstrapping Remote Secure Key Infrastructures (BRSKI)
- has
  // Grouping defined for future usage
whereas the grouping is used in the previous YANG statement which leaves
me puzzled
- lacks YANG reference statements for
          leaf proximity-registrar-cert {
i.e. RFC5280, X.690, RFC8446
- has [RFC8446] which looks like an XML/HTML anchor where a YANG module
must be plain text

- IANA Considerations does not register either module, 3.4 or Appendix
C, as per RFC6020 s.14

- Security Consideratrions does not include the required YANG
considerations which in turn generates further Normative References

- Appendix A
/The secification/The specification/

Tom Petch


----- Original Message -----
From: "tom petch" <daedulus@btconnect.com>
To: "Michael Richardson" <mcr+ietf@sandelman.ca>
Cc: <draft-ietf-anima-bootstrapping-keyinfra.all@ietf.org>;
<gen-art@ietf.org>; "Alissa Cooper" <alissa@cooperw.in>; "Last Call"
<last-call@ietf.org>; "Dan Romascanu" <dromasca@gmail.com>;
<anima@ietf.org>
Sent: Tuesday, October 29, 2019 9:44 AM

> seeing if I can switch from ietf to Last Call
> inline
>
> Tom Petch
>
> ----- Original Message -----
> From: "Michael Richardson" <mcr+ietf@sandelman.ca>
> Sent: Monday, October 28, 2019 10:06 PM
>
> > tom petch <daedulus@btconnect.com> wrote:
> >     > Looking some more at this I-D, I have more concerns about the
> YANG
> >     > module. My review is informal - I recommend that the WG Chair
> request a
> >     > formal review because I may be missing something particularly
in
> >     > connection with the 'refine' statements.
> >
> >     > The I-D has namespace
> >     > "urn:ietf:params:xml:ns:yang:ietf-voucher-request"; prefix
> "vch";
> >     > whereas RFC8366, which it augments, has namespace
> >     > "urn:ietf:params:xml:ns:yang:ietf-voucher"; prefix vch;
> Different
> >     > module, same prefix; this contradicts a SHOULD NOT in RFC8407.
> >
> > okay, so I shoudl change it to "vcr" for VouCher Request then?
> > I think that this will have affects on the constrained-voucher
> document, but
> > that is easily fixed.
>
> I would go for 'vchr' since voucher is 'vch' in RFC8366 and 'r' can
then
> mean request. but then the voucher extension is 'vcj'.  So, just a
> personal preference for 'vchr'; else ok for this e-mail
>
> Tom Petch
>
> >     > Further, this I-D defines import ietf-voucher { prefix v; i.e.
> does not
> >     > use the prefix defined in RFC8366.  This contradicts a MUST in
> RFC8407.
> >
> > okay, got it, fixed it.
> >
> >     > There is a discrepancy between the e-mail addresses of the
> authors of
> >     > the YANG module and of the I-D, for
> >     > Author: Kent Watsen Author:
> >
> > Fixed.
> >
> >     > Toerless Eckert I note that the e-mail addresses for the YANG
> module
> >     > are the same as those for the YANG module in RFC8366; I do not
> know
> >     > which are correct.
> >
> > People moved to different companies since publication :-)
> >
> >     >   contact "WG Web: <http://tools.ietf.org/wg/anima/> should be
> https:
> >     > and usually points to datatracker.ietf.org not tools
> >
> > Fixed.
> >
> > --
> > Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
> >  -= IPv6 IoT consulting =-
>
> --
> last-call mailing list
> last-call@ietf.org
> https://www.ietf.org/mailman/listinfo/last-call