Re: [Hipsec] draft-ietf-hip-cert-01

Varjonen Samu <samu.varjonen@hiit.fi> Thu, 30 July 2009 13:19 UTC

Return-Path: <samu.varjonen@hiit.fi>
X-Original-To: hipsec@core3.amsl.com
Delivered-To: hipsec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E712A28C177 for <hipsec@core3.amsl.com>; Thu, 30 Jul 2009 06:19:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.449
X-Spam-Level:
X-Spam-Status: No, score=-1.449 tagged_above=-999 required=5 tests=[AWL=1.150, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vBaXZk2W-iGG for <hipsec@core3.amsl.com>; Thu, 30 Jul 2009 06:19:26 -0700 (PDT)
Received: from argo.otaverkko.fi (argo.otaverkko.fi [212.68.0.2]) by core3.amsl.com (Postfix) with ESMTP id 120663A6818 for <hipsec@ietf.org>; Thu, 30 Jul 2009 06:19:26 -0700 (PDT)
Received: from [130.129.20.233] (dhcp-14e9.meeting.ietf.org [130.129.20.233]) by argo.otaverkko.fi (Postfix) with ESMTP id C7DCE25ED1A for <hipsec@ietf.org>; Thu, 30 Jul 2009 16:19:26 +0300 (EEST)
Message-ID: <4A719DDD.6040705@hiit.fi>
Date: Thu, 30 Jul 2009 15:19:25 +0200
From: Varjonen Samu <samu.varjonen@hiit.fi>
User-Agent: Thunderbird 2.0.0.22 (X11/20090608)
MIME-Version: 1.0
To: HIP <hipsec@ietf.org>
References: <4A51A346.2030807@hiit.fi>
In-Reply-To: <4A51A346.2030807@hiit.fi>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: Re: [Hipsec] draft-ietf-hip-cert-01
X-BeenThere: hipsec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "This is the official IETF Mailing List for the HIP Working Group." <hipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hipsec>
List-Post: <mailto:hipsec@ietf.org>
List-Help: <mailto:hipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2009 13:19:27 -0000

Hi,

This is a resend for the mail concerning the new version of the hip-cert 
draft. We got only answer to the mail earlier. We would appreciate if 
people could read the draft and give us comments.

Thans, Samu

Varjonen Samu wrote:
> Hi,
> 
> http://www.ietf.org/internet-drafts/draft-ietf-hip-cert-01.txt
> 
> This new version of the draft brings editorial changes to the group 
> handling and clarifications to the usage of x.509 distinguished name 
> (DN) section.
> 
> We would appreciate if people would read the draft and comment it.
> 
> We have some additional discussion topics that we would like open. Main 
> point in these questions is to determine the direction where we should 
> take the draft.
> 
> - Is the draft sufficient? Do we need to specify something more? Is 
> something important missing?
> 
> -Is SPKI the right choice for the default format? X.509 is more widely 
> deployed and has better support vs. SPKI is simpler but has less support.
> 
> -Are the hash and URL encodings needed? At least with on-path 
> middleboxes they are problematic.
> 
> -Are the examples in the appendixes sufficient?
> 
> One discussion topic that is a bit out of scope of hip-cert but is 
> relevant for HIP in general is fragmentation. I have brought this issue 
> up in several of the last meetings. Is there any interest in the group 
> to tackle this issue or should be just left for the IP and its 
> fragmentation to handle?
> 
> BR,
> Samu
> _______________________________________________
> Hipsec mailing list
> Hipsec@ietf.org
> https://www.ietf.org/mailman/listinfo/hipsec