Re: [I2nsf] Lars Eggert's Discuss on draft-ietf-i2nsf-consumer-facing-interface-dm-27: (with DISCUSS and COMMENT)

Lars Eggert <lars@eggert.org> Mon, 15 May 2023 09:50 UTC

Return-Path: <lars@eggert.org>
X-Original-To: i2nsf@ietfa.amsl.com
Delivered-To: i2nsf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C93C3C1519AD; Mon, 15 May 2023 02:50:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.003
X-Spam-Level:
X-Spam-Status: No, score=-6.003 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1, MIME_HTML_ONLY_MULTI=0.001, MIME_QP_LONG_LINE=0.001, MPART_ALT_DIFF=0.79, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7DjeKSozgApu; Mon, 15 May 2023 02:50:46 -0700 (PDT)
Received: from mail.eggert.org (mail.eggert.org [91.190.195.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79B9CC1519A7; Mon, 15 May 2023 02:50:45 -0700 (PDT)
Received: from smtpclient.apple (pf.eggert.org [172.24.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.eggert.org (Postfix) with ESMTPSA id 4C7D120279; Mon, 15 May 2023 12:50:59 +0300 (EEST)
Content-Type: multipart/alternative; boundary="Apple-Mail-C761B286-466A-414C-91F1-01B3122DEA0C"
Content-Transfer-Encoding: 7bit
From: Lars Eggert <lars@eggert.org>
Mime-Version: 1.0 (1.0)
Date: Mon, 15 May 2023 12:50:36 +0300
Message-Id: <BBE9341A-1593-430C-B523-FA1D8A643D82@eggert.org>
References: <CAPK2DeysnMCpCOSbQZgKwoQJysVT4r_y8qVKFRo8RadGF6RvfA@mail.gmail.com>
Cc: The IESG <iesg@ietf.org>, Roman Danyliw <rdd@cert.org>, Linda Dunbar <linda.dunbar@futurewei.com>, Yoav Nir <ynir.ietf@gmail.com>, i2nsf@ietf.org, skku-iotlab-members <skku-iotlab-members@googlegroups.com>
In-Reply-To: <CAPK2DeysnMCpCOSbQZgKwoQJysVT4r_y8qVKFRo8RadGF6RvfA@mail.gmail.com>
To: "Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com>
X-MailScanner-ID: 4C7D120279.A8DC6
X-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-MailScanner-From: lars@eggert.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/i2nsf/NI6jJniofzZIqU-7kWS6x6tTCsU>
Subject: Re: [I2nsf] Lars Eggert's Discuss on draft-ietf-i2nsf-consumer-facing-interface-dm-27: (with DISCUSS and COMMENT)
X-BeenThere: i2nsf@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" <i2nsf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/i2nsf/>
List-Post: <mailto:i2nsf@ietf.org>
List-Help: <mailto:i2nsf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 May 2023 09:50:50 -0000

Hi,

the text in Section 4.4 still talks about hostnames.

The example in Section 7 still doesn't use an RFC5737 example address.

Thanks,
Lars

On 11. May 2023, at 16:30, Mr. Jaehoon Paul Jeong <jaehoon.paul@gmail.com> wrote:


Lars,
Even though you are very busy, please take a look at the revision and take action on our Consumer-Facing Interface Data Model draft:

This draft is the last I2NSF draft to be standardized.

Thanks in advance.

Best Regards,
Paul


On Tue, May 9, 2023 at 5:27 PM Mr. Jaehoon Paul Jeong <jaehoon.paul@gmail.com> wrote:
Hi Lars,
Let me remind you of your action on this draft:

We authors believe that we addressed your comments as much as possible.

I hope this draft will move forward through your review and lifting up your block.

Thanks.

Best Regards,
Paul


On Fri, Apr 21, 2023 at 9:45 PM Mr. Jaehoon Paul Jeong <jaehoon.paul@gmail.com> wrote:
Hi Lars,
I sincerely appreciate your comment to improve our Consumer-Facing Interface YANG Data Model.

I attach the revision letters.

If you have further questions and comments, please let me know.

Thanks.

Best Regards,
Paul


On Wed, Apr 12, 2023 at 6:43 PM Lars Eggert via Datatracker <noreply@ietf.org> wrote:
Lars Eggert has entered the following ballot position for
draft-ietf-i2nsf-consumer-facing-interface-dm-27: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/" rel="noreferrer nofollow" target="_blank">https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-i2nsf-consumer-facing-interface-dm/" rel="noreferrer nofollow" target="_blank">https://datatracker.ietf.org/doc/draft-ietf-i2nsf-consumer-facing-interface-dm/



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

# GEN AD review of draft-ietf-i2nsf-consumer-facing-interface-dm-27

CC @larseggert

Thanks to Roni Even for the General Area Review Team (Gen-ART) review
(https://mailarchive.ietf.org/arch/msg/gen-art/PrQuAtGM5yKx1cs4Upt2cRel9IA" rel="noreferrer nofollow" target="_blank">https://mailarchive.ietf.org/arch/msg/gen-art/PrQuAtGM5yKx1cs4Upt2cRel9IA).

## Discuss

### Section 4.4, paragraph 3
```
     URL:      This field represents the URL or hostname.
```
Not a YANG expert, but I thought an inet:uri had to be an actual URI and hence
cannot simply be a hostname string?

### Section 7.1, paragraph 7
```
     3.  The "https://www.sns-example1.com/" rel="noreferrer nofollow" target="_blank">https://www.sns-example1.com/" and "https://www.sns-" rel="noreferrer nofollow" target="_blank">https://www.sns-
         http://example2.com/" rel="noreferrer nofollow" target="_blank">example2.com/" URLs are labeled as "sns-websites".

     4.  The "sip:alice@atlanta.com", "sip:bob@203.0.113.15", and
         "sip:carol@chicago.com" SIP identities are labeled as "malicious-
         id".
```
Use actual RFC2606 example domain names and RFC5737 example IP addresses.
Also in the XML in Figure 19 of course.

### Section 10.1, paragraph 43
```
     [MISPCORE] Dulaunoy, A. and A. Iklody, "MISP Core",
                commit 051e33b6711a660faf81733d825f1015aa0d301b, February
                2022, <https://github.com/MISP/misp-" rel="noreferrer nofollow" target="_blank">https://github.com/MISP/misp-
                rfc/blob/051e33b6711a660faf81733d825f1015aa0d301b/misp-
                core-format/raw.md.html>.

     [OPENIOC]  Gibb, W., "OpenIOC 1.1 DRAFT",
                commit d42a8777708e171f8bdd3c2c9f8590c83488285d, August
                2013, <https://github.com/fireeye/OpenIOC_1.1/blob/" rel="noreferrer nofollow" target="_blank">https://github.com/fireeye/OpenIOC_1.1/blob/
                d42a8777708e171f8bdd3c2c9f8590c83488285d/schemas/ioc.xsd>.
```
For discussion in the IESG. I don't think GitHub commits are appropriate
normative references.


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

## Comments

### DOWNREFs

Possible DOWNREF from this Standards Track doc to `[OPENIOC]`. If so, the IESG
needs to approve it.

Possible DOWNREF from this Standards Track doc to `[MISPCORE]`. If so, the IESG
needs to approve it.

### Inclusive language

Found terminology that should be reviewed for inclusivity; see
https://www.rfc-editor.org/part2/#inclusive_language" rel="noreferrer nofollow" target="_blank">https://www.rfc-editor.org/part2/#inclusive_language for background and more
guidance:

 * Term `traditional`; alternatives might be `classic`, `classical`, `common`,
   `conventional`, `customary`, `fixed`, `habitual`, `historic`,
   `long-established`, `popular`, `prescribed`, `regular`, `rooted`,
   `time-honored`, `universal`, `widely used`, `widespread`

## Nits

All comments below are about very minor potential issues that you may choose to
address in some way - or ignore - as you see fit. Some were flagged by
automated tools (via https://github.com/larseggert/ietf-reviewtool" rel="noreferrer nofollow" target="_blank">https://github.com/larseggert/ietf-reviewtool), so there
will likely be some false positives. There is no need to let me know what you
did with these suggestions.

### Typos

#### Section 6.1, paragraph 99
```
-           for an IP address, such as IPv4 adress and IPv6 address.";
+           for an IP address, such as IPv4 address and IPv6 address.";
+                                             +
```

#### Section 6.1, paragraph 121
```
-                   category such as SNS sites, game sites, ecommerce
+                   category such as SNS sites, game sites, e-commerce
+                                                            +
```

#### Section 6.1, paragraph 135
```
-               gaming sites, ecommerce sites";
+               gaming sites, e-commerce sites";
+                              +
```

### URLs

These URLs in the document can probably be converted to HTTPS:

 * http://www.iso.org/iso/home/standards/country_codes/iso-3166-1_decoding_table.htm" rel="noreferrer nofollow" target="_blank">http://www.iso.org/iso/home/standards/country_codes/iso-3166-1_decoding_table.htm
 * http://www.iso.org/iso/home/standards/country_codes.htm#2012_iso3166-2" rel="noreferrer nofollow" target="_blank">http://www.iso.org/iso/home/standards/country_codes.htm#2012_iso3166-2

### Grammar/style

#### Section 3.1, paragraph 1
```
sf-capability-data-model]. Case (anti-virus): This field represents the conf
                                 ^^^^^^^^^^
```
This word is normally spelled as one.

#### Section 3.2, paragraph 1
```
 This information describes a caller id or receiver id in order to prevent an
                                     ^^
```
This abbreviation for "identification" is spelled all-uppercase.

#### Section 3.2, paragraph 1
```
on describes a caller id or receiver id in order to prevent any exploits (or
                                     ^^
```
This abbreviation for "identification" is spelled all-uppercase.

#### Section 3.2, paragraph 3
```
ow-rate-threshold? uint64 | +--rw anti-virus | | +--rw profile* string | | +-
                                  ^^^^^^^^^^
```
This word is normally spelled as one.

#### Section 3.2, paragraph 9
```
he Action object SHALL have following information: Primary-action: This fiel
                            ^^^^^^^^^^^^^^^^^^^^^
```
The article "the" may be missing.

#### Section 4, paragraph 3
```
, e.g., 'Dublin', 'New York', and 'Sao Paulo'. Range-ipv4-address: This repre
                                   ^^^^^^^^^
```
Did you mean "São Paulo" (= city in Brazil)?

#### Section 4.5, paragraph 1
```
is field is not mandatory but recommended to be used as it is helpful for fut
                              ^^^^^^^^^^^^^^^^^
```
The verb "recommended" is used with the gerund form.

#### Section 5.1, paragraph 4
```
er-Facing Interface, this document provide examples for security policy rules
                                   ^^^^^^^
```
The verb "provide" is plural. Did you mean: "provides"? Did you use a verb
instead of a noun?

#### Section 6.1, paragraph 68
```
nclude 'Dublin', 'New York', and 'Sao Paulo'."; } uses ip-address-info{ refin
                                  ^^^^^^^^^
```
Did you mean "São Paulo" (= city in Brazil)?

#### Section 6.1, paragraph 94
```
ck mitigation."; } } } container anti-virus { description "A condition for an
                                 ^^^^^^^^^^
```
This word is normally spelled as one.

#### Section 6.1, paragraph 94
```
us { description "A condition for anti-virus"; leaf-list profile { type strin
                                  ^^^^^^^^^^
```
This word is normally spelled as one.

#### Section 6.1, paragraph 97
```
hs are filenames/paths to be excluded and relative ones are interpreted as gl
                                     ^^^^
```
Use a comma before "and" if it connects two independent clauses (unless they
are closely connected and short).

#### Section 6.1, paragraph 114
```
ed as a binary to accommodate any kind of a payload type such as HTTP, HTTPS,
                                  ^^^^^^^^^
```
If "kind" is a classification term, "a" is not necessary. Use "kind of". (The
phrases "kind of" and "sort of" are informal if they mean "to some extent".).

#### Section 6.1, paragraph 114
```
5 bytes of the payload. This field accept values greater than or equal to th
                                   ^^^^^^
```
The verb "accept" is plural. Did you mean: "accepts"? Did you use a verb
instead of a noun?

## Notes

This review is in the ["IETF Comments" Markdown format][ICMF], You can use the
[`ietf-comments` tool][ICT] to automatically convert this review into
individual GitHub issues. Review generated by the [`ietf-reviewtool`][IRT].

[ICMF]: https://github.com/mnot/ietf-comments/blob/main/format.md" rel="noreferrer nofollow" target="_blank">https://github.com/mnot/ietf-comments/blob/main/format.md
[ICT]: https://github.com/mnot/ietf-comments" rel="noreferrer nofollow" target="_blank">https://github.com/mnot/ietf-comments
[IRT]: https://github.com/larseggert/ietf-reviewtool" rel="noreferrer nofollow" target="_blank">https://github.com/larseggert/ietf-reviewtool



_______________________________________________
I2nsf mailing list
I2nsf@ietf.org
https://www.ietf.org/mailman/listinfo/i2nsf" rel="noreferrer nofollow" target="_blank">https://www.ietf.org/mailman/listinfo/i2nsf