Re: [apps-discuss] APPSDIR review of draft-ietf-nea-pt-tls-04

[Alexey Melnikov <[e-mail]>]

Hi Paul,

On 14/06/2012 05:11, Paul Sangster wrote:
>> -----Original Message-----
>> From: Alexey Melnikov [mailto:[e-mail]]
>> Sent: Wednesday, June 13, 2012 3:47 AM
>> To: [e-mail]; [e-mail]
>> Cc: [e-mail]
>> Subject: Re: [apps-discuss] APPSDIR review of draft-ietf-nea-pt-tls-04
>>
>> On 04/06/2012 20:01, Alexey Melnikov wrote:
>>> I have been selected as the Applications Area Directorate reviewer
>> for
>>> this draft (for background on APPSDIR, please see
>>>
>> http://trac.tools.ietf.org/area/app/trac/wiki/ApplicationsAreaDirectora
>> te
>>> ).
>>>
>>> Please resolve these comments along with any other Last Call comments
>>> you may receive. Please wait for direction from your document
>> shepherd
>>> or AD before posting a new version of the draft.  The review is not
>>> copied to the IESG as the Last Call has not been announced yet.
>>>
>>> Document: draft-ietf-nea-pt-tls-04
>>> Title: PT-TLS: A TCP-based Posture Transport (PT) Protocol
>>> Reviewer: Alexey Melnikov
>>> Review Date: June 4, 2012
>>>
>>> Summary: This document is almost ready for publication as a Proposed
>>> Standard, although some [mostly] SASL related issues remain.
>>>
>>> This document specifies PT-TLS, a TCP-based Posture Transport (PT)
>>> protocol.  The PT-TLS protocol carries the Network Endpoint
>>> Assessment (NEA) message exchange under the protection of a Transport
>>> Layer Security (TLS) secured tunnel.
>>>
>>> (Note, I've reviewed -04, but I think all of this still applies to -
>> 05.)
>> Additional issues in -05:
>>
>> 1) I didn't find the updated text prohibiting TLS renegotiation to be
>> any clearer in -05? Can you maybe try to explain what is allowed and
>> what is not?
> [PS:] The editors will discuss this more and provide a response.

Thanks.

>> 2) In the IANA Considerations:
>>
>> The PEN 0 (IETF) PT-TLS Message Type values between 9 and 2^32-2
>> inclusive are allocated for future assignment by the IANA.  The value
>> 2^32-1 is permanently reserved and is not to be allocated.
>>
>> Whom does the last sentence apply to? This registry? Or the IANA PEN
>> registry being documented by draft-liang-iana-pen?
> [PS:] I'm assuming your asking about the text at the bottom of section 6.2. Registry for PT-TLS Message Types immediately below the table that defines registry values 0 thru 8 for PEN=0.  It refers to this specific registry not the PEN registry.
Please make this clear in your document. If you want to reserve the 
value 2^32-1 in the PEN registry, then you need to make this clear in 
your document as well.