Re: [Gen-art] Gen-ART review of draft-ietf-dnsop-edns-key-tag-03

"Wessels, Duane" <dwessels@verisign.com> Thu, 05 January 2017 21:42 UTC

Return-Path: <dwessels@verisign.com>
X-Original-To: gen-art@ietfa.amsl.com
Delivered-To: gen-art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 607C512940F for <gen-art@ietfa.amsl.com>; Thu, 5 Jan 2017 13:42:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.101
X-Spam-Level:
X-Spam-Status: No, score=-5.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-3.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ILRMsIuhgJzL for <gen-art@ietfa.amsl.com>; Thu, 5 Jan 2017 13:41:59 -0800 (PST)
Received: from mail1.verisign.com (mail1.verisign.com [72.13.63.30]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76A56129428 for <gen-art@ietf.org>; Thu, 5 Jan 2017 13:41:59 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=4223; q=dns/txt; s=VRSN; t=1483652520; h=from:to:cc:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=SLb7flsJW3mCbuqUAiNPasBTvXjaILx2ze2y8Kq6Y+I=; b=VdPDKfyO6ePU4lX+lZdbM6b4/B600D0T3SpQ3gBfSRlQSGEzMsfe3aIS z1z7C08c9fvg26o+s9+k3wIzZNO7UhsI7RE6GK3Utrd5UyIHtGcfOt/8t Bjp5I7zFCtpcOQMaSEz00/drxzhsEF8lupPoekTHvud8U0Uogb+iIDUmX OR3lfyxfMTuW6dS1cwgV+ZYtJhIVgNfZ/AdnCGGNh6vdo5ddUsiPWKSJH 9txWKHRbN1eq12t/0XpKFYtkblsv1ejwCgzut3BQlsLh/42GJV/SHj/q8 lEzItrDFNbbys+ctvEzEWjKymBJdio46gZgeLquMhqwS3tLV+5pBNN5YR w==;
X-IronPort-AV: E=Sophos;i="5.33,322,1477958400"; d="scan'208";a="1222475"
IronPort-PHdr: 9a23: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
X-IPAS-Result: A2GLAQDNvG5Y//SZrQpdGwEBAQMBAQEJAQEBFwEBBAEBCgEBgw0BAQEBAX6BDAeNUJRGkxiCD4IJKoV4AoILFAEBAQEBAQEBAQEBAoEIgjMaAQw9PAEBAQEBASMCPiwBAQEBAgF5BQsCAQgNBwQuMiUBAQQOBYhoFrIoihoBAQEBAQEEAQEBAQEBIoZGggGCX4QwFoM1gjEFiHGGIj6FRYV0BgGGVYMTiVBRhDeDSoYSkkYfgXQVQgGEE4IAcwGGKiuBA4ENAQEB
Received: from brn1wnexcas02.vcorp.ad.vrsn.com (brn1wnexcas02 [10.173.152.206]) by brn1lxmailout01.verisign.com (8.13.8/8.13.8) with ESMTP id v05LfufD030826 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Thu, 5 Jan 2017 16:41:57 -0500
Received: from BRN1WNEXMBX01.vcorp.ad.vrsn.com ([::1]) by brn1wnexcas02.vcorp.ad.vrsn.com ([::1]) with mapi id 14.03.0301.000; Thu, 5 Jan 2017 16:41:54 -0500
From: "Wessels, Duane" <dwessels@verisign.com>
To: Christer Holmberg <christer.holmberg@ericsson.com>
Thread-Topic: [EXTERNAL] Gen-ART review of draft-ietf-dnsop-edns-key-tag-03
Thread-Index: AdJmtBrRcKGrJRV2SqOM8LzRCfS1UQBEl2uA
Date: Thu, 05 Jan 2017 21:41:54 +0000
Message-ID: <DCE5B83B-7B56-4C45-B9D5-14B4B46A6CB4@verisign.com>
References: <7594FB04B1934943A5C02806D1A2204B4BF576B3@ESESSMB209.ericsson.se>
In-Reply-To: <7594FB04B1934943A5C02806D1A2204B4BF576B3@ESESSMB209.ericsson.se>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.173.152.4]
Content-Type: text/plain; charset="iso-8859-1"
Content-ID: <38D26BA4F3A2984FBA60E503898C7A20@verisign.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/gen-art/nt7pni3fulSfh8wg9B9-DMZ_VP0>
Cc: "gen-art@ietf.org" <gen-art@ietf.org>, "draft-ietf-dnsop-edns-key-tag.all@tools.ietf.org" <draft-ietf-dnsop-edns-key-tag.all@tools.ietf.org>
Subject: Re: [Gen-art] Gen-ART review of draft-ietf-dnsop-edns-key-tag-03
X-BeenThere: gen-art@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gen-art>, <mailto:gen-art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art/>
List-Post: <mailto:gen-art@ietf.org>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gen-art>, <mailto:gen-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Jan 2017 21:42:01 -0000

> On Jan 4, 2017, at 10:24 AM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:
> 
> 
> I am the assigned Gen-ART reviewer for this draft. For background on Gen-ART, please see the FAQ at <http://wiki.tools.ietf.org/area/gen/trac/wiki/GenArtfaq>
> 
> Document:                       draft-ietf-dnsop-edns-key-tag-03.txt
> Reviewer:                         Christer Holmberg
> Review Date:                   4 January 2017
> IETF LC End Date:           10 January 2017
> IETF Telechat Date:        19 January 2017
> 
> Summary: The document is well written, and almost ready for publication. However, I have one issue, and a few minor editorial issues in the Abstract/Introduction that I ask the authors to address.
> 

Thank you for the review!


> Major Issues:
> 
> Q1_Abstract:
> ------------------
> 
> The text says:
> 
>   "The reason there are two methods instead of one is some people see significant problems with each method."
> 
> This text looks very strange to an outsider like myself. I can understand that people sometimes have different preferences, but when you say "people see significant problems" it makes me wonder why a publication request has been done in the first place. Don't we normally publish RFCs because we want to SOLVE problems - not because we want to (at least not intentionally) create new ones? :)
> 
> I think it would be good to talk about people having different preferences (and within the document the reasons can be described in more detail) instead of people seeing problems.
> 
> Also, I am not sure whether the Abstract needs to talk about the reason for having two methods. I think  a statement saying that the background and reason for two methods are described within the document would be enough within the Abstract.

Agreed.  I've removed that second paragraph and modified the first (now only) paragraph of the Abstract to read:

   This document specifies two different
   ways for validating resolvers to signal to a server which keys are
   referenced in their chain-of-trust (see Section 1.1 for the
   rationale).  The data from such signaling allow zone administrators
   to monitor the progress of rollovers in a DNSSEC-signed zone.



> 
> 
> Minor Issues: Note
> 
> 
> Editorial Issues:
> 
> Q2_Section_1:
> --------------------
> 
> In order to use consistent terminology, please replace "This draft" with "This document".


Done.


> 
> 
> Q3_Section_1:
> --------------------
> 
> The text says:
> 
> "This is done in two ways:"
> 
> I suggest to replace the text with the statement found in the Abstract:
> 
>   "This document describes two independent methods for validating
>   resolvers to publish their referenced keys:"

Edited so that paragraph now reads:

   This document specifies how validating resolvers can tell a server,
   in a DNS query, which DNSSEC key(s) they would use to validate the
   server's responses.  It describes two independent methods for
   conveying Key Tag information bewteen clients and servers: ...



> 
> Q4_Section_1-1:
> ----------------------
> 
> The text says:
> 
>   "Initially this document was named draft-edns-key-tag and proposed
>   including Key Tag values in a new EDNS(0) option code.  It was
>   modeled after [RFC6975], which provides DNSSEC algorithm signaling."
> 
> Why do you include the name of the initial draft? Initial drafts can be called anything. I think it is enough to instead talk about the initially suggested mechanism. Something like:
> 
>   "Initially, when the work on this document started, it proposed
>   including Key Tag values in a new EDNS(0) option code.  It was
>   modeled after [RFC6975], which provides DNSSEC algorithm signaling."

Done.


> 
> 
> Q5_Section_1-1:
> ----------------------
> 
> The text says:
> 
> "The authors received feedback from Working Group participants"
> 
> Please write the name of the Working Group. The name of the WG is currently only mentioned in the Acknowledgements.
> 

Done.


DW