Re: [Gen-art] Genart review of draft-ietf-pkix-cmp-transport-protocols-18

"Peylo, Martin (NSN - FI/Espoo)" <> Tue, 15 May 2012 16:13 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id CAF3321F8740 for <>; Tue, 15 May 2012 09:13:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id PcnWTpWAF-yS for <>; Tue, 15 May 2012 09:12:59 -0700 (PDT)
Received: from ( []) by (Postfix) with ESMTP id 7BE8721F878B for <>; Tue, 15 May 2012 09:12:58 -0700 (PDT)
Received: from ([]) by ( with ESMTP id q4FGCrjG016268 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 15 May 2012 18:12:53 +0200
Received: from ([]) by ( with ESMTP id q4FGCoAt031008; Tue, 15 May 2012 18:12:50 +0200
Received: from ([]) by with Microsoft SMTPSVC(6.0.3790.4675); Tue, 15 May 2012 18:12:14 +0200
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01CD32B5.7BD9515E"
Date: Tue, 15 May 2012 19:12:10 +0300
Message-ID: <>
In-Reply-To: <>
Thread-Topic: Genart review of draft-ietf-pkix-cmp-transport-protocols-18
Thread-Index: Ac0xoqdXoxjsfzuuSE+UhyHHLVaitgBDSLxQ
References: <>
From: "Peylo, Martin (NSN - FI/Espoo)" <>
To: ext Christer Holmberg <>,,
X-OriginalArrivalTime: 15 May 2012 16:12:14.0550 (UTC) FILETIME=[7DD9AF60:01CD32B5]
X-purgate-type: clean
X-purgate-Ad: Categorized by eleven eXpurgate (R)
X-purgate: clean
X-purgate: This mail is considered clean (visit for further information)
X-purgate-size: 55911
X-purgate-ID: 151667::1337098376-00005945-90CFDA49/0-0/0-0
X-Mailman-Approved-At: Tue, 15 May 2012 09:24:48 -0700
Subject: Re: [Gen-art] Genart review of draft-ietf-pkix-cmp-transport-protocols-18
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "GEN-ART: General Area Review Team" <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Tue, 15 May 2012 16:13:07 -0000

Hi Christer,


thank you for your review and valuable nits. Please find my comments
inline, prefixed with an "MP".


Attached, the so far unpublished (pre-)19 version of the draft
implementing the changes described below.


Kind regards,



From: ext Christer Holmberg [] 
Sent: Monday, May 14, 2012 10:35 AM
Subject: Genart review of draft-ietf-pkix-cmp-transport-protocols-18


I am the assigned Gen-ART reviewer for this draft. For background on
Gen-ART, please see the FAQ at <>.


Please wait for direction from your document shepherd or AD before
posting a new version of the draft.


Document: draft-ietf-pkix-cmp-transport-protocols-18.txt

Reviewer: Christer Holmberg

Review Date: 14 May 2012

IETF LC End Date: 21 May 2012

IESG Telechat date: 24 May 2012


Summary: The draft is ready for publication, but with a number of
editorial nits.


Major issues: -


Minor issues: -


Nits/editorial comments:



Section 1:



Q1-1: In my opinion the following statement (1st paragraph) can be


   "This document defines the transport mechanism which was removed from
the main CMP specification
   with the second release and referred to be in a separate document."


Because, the following paragraphs describes very well the background,
and justification of the new transport. There is no need to say whether
the new transport was originally supposed to be part of the main spec or


MP: Removed.



Q1-2: In the 2nd paragraph, please add reference to HTTP on first


MP: although it's the first occurrence in 2nd paragraph, I would prefer
to add the references to RFC 1945 and RFC2616 to the 4th paragraph.
Reason is that 2nd paragraph contains only an historic reference - and
there (in RFC2510) it was not referenced what HTTP is either. See below
how the 4th paragraph will then look like when also fixing Q1-3.


Q1-3: The following statement is a little confusing:


   "During the long time it existed as draft, this RFC was undergoing
drastic changes."


There hasn't been any changes to the RFC, but to the draft. So, I would
say something like:


            "Before this document was published as an RFC, the draft
version underwent drastic changes during the work process."


MP: Changed, I inserted "long-lasting" to highlight the long time it
took from draft-1 (June 22, 2000) to now. So the paragraph is now:


   Before this document was published as an RFC, the draft version

   underwent drastic changes during the long-lasting work process.  The 

   "TCP-Based Management Protocol" was enhanced and a TCP-Messages-over-

   HTTP transport specification appeared.  As both proved to be needless

   and cumbersome, implementers preferred to use plain HTTP transport

   following [RFC1945] or [RFC2616].  This document now reflects that by

   exclusively describing HTTP as transport protocol for CMP.


Section 2:



Q2-1: The section only contains the RFC 2119 terminology, but that is
normally in a "Conventions" section.


Q2-2: As there are no requirements listed, I suggest to remove the


MP: This was totally missed so far. I will change this section to
"Conventions Used in This Document" as of course the RFC 2119
terminology is used throughout the document.


Section 3.2:



Q3_2-1: The text says:


"However, neither HTTP nor this protocol are designed to correlate
messages on the same

            connection in any meaningful way;"


It is a little unclear what "this protocol" refers to.


MP: changed to "... neither HTTP nor the protocol specified in this
document are designed..."


Section 4:



Q4-1: It is a little unclear what is meant by "legacy implementations".
Do you consider implementations based on earlier versions of the draft
as "legacy"? In my opinion a "legacy" implementation is based on a
previously published standard/RFC.


So, if the section is supposed to cover issues with earlier versions of
this draft, I think it should be called something else.


MP: I'm following a proposal from Sean Turner here and take his
excellent suggestion to replace the complete section.


> 4.  Implementation Considerations


>     Implementors should be aware that implementations might exist that

>     use a different approach for HTTP transport because this document

>     has been under development for more than a decade.  Further,

>     implementations based on earlier drafts of this

>     document might use an unregistered "application/pkixcmp-poll" MIME

>     type.