Re: [apps-discuss] APPSDIR review of draft-ietf-nea-pt-tls-04

Alexey Melnikov <alexey.melnikov@isode.com> Thu, 14 June 2012 21:25 UTC

Return-Path: <alexey.melnikov@isode.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F52521F84A5; Thu, 14 Jun 2012 14:25:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 35yTTfI-HbCM; Thu, 14 Jun 2012 14:25:14 -0700 (PDT)
Received: from statler.isode.com (statler.isode.com [62.3.217.254]) by ietfa.amsl.com (Postfix) with ESMTP id 77BFC21F8498; Thu, 14 Jun 2012 14:25:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1339709113; d=isode.com; s=selector; i=@isode.com; bh=81mR9i2F7RG42oI6bOpLQGMiTVTv8elqSyGxOuZDM+Y=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=cMMq/gHwhstEPBOJXtyxyq1jneZmbO6joY/ITXEWx5I6GA73qNHl0qCoUQQGPV+SNKJsCf CYPhwSmmKoUcp8GZQfxojj3SuMTUY8TW+sacyemqe0iLcOnzgGE3gD8TIejaT/pwHsIuaZ JuCrHmjjQw20+dPM+/pr9cTemfGSeMo=;
Received: from [172.20.10.2] ((unknown) [212.183.128.139]) by statler.isode.com (submission channel) via TCP with ESMTPSA id <T9pWtwBjLJuC@statler.isode.com>; Thu, 14 Jun 2012 22:25:13 +0100
X-SMTP-Protocol-Errors: PIPELINING
Message-ID: <4FDA4CFA.7000507@isode.com>
Date: Thu, 14 Jun 2012 21:43:38 +0100
From: Alexey Melnikov <alexey.melnikov@isode.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:10.0.2) Gecko/20120216 Thunderbird/10.0.2
To: Paul Sangster <Paul_Sangster@symantec.com>
Subject: Re: [apps-discuss] APPSDIR review of draft-ietf-nea-pt-tls-04
References: <4FCD0614.5050902@isode.com> <4FD86FB2.2050002@isode.com> <6E79D623502C70419A9EAB18E4D274252B8B06161A@TUS1XCHEVSPIN35.SYMC.SYMANTEC.COM>
In-Reply-To: <6E79D623502C70419A9EAB18E4D274252B8B06161A@TUS1XCHEVSPIN35.SYMC.SYMANTEC.COM>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "draft-ietf-nea-pt-tls.all@tools.ietf.org" <draft-ietf-nea-pt-tls.all@tools.ietf.org>, "ietf@ietf.org" <ietf@ietf.org>, "apps-discuss@ietf.org" <apps-discuss@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jun 2012 21:25:15 -0000

Hi Paul,

On 14/06/2012 05:11, Paul Sangster wrote:
>> -----Original Message-----
>> From: Alexey Melnikov [mailto:alexey.melnikov@isode.com]
>> Sent: Wednesday, June 13, 2012 3:47 AM
>> To: apps-discuss@ietf.org; draft-ietf-nea-pt-tls.all@tools.ietf.org
>> Cc: ietf@ietf.org
>> Subject: Re: [apps-discuss] APPSDIR review of draft-ietf-nea-pt-tls-04
>>
>> On 04/06/2012 20:01, Alexey Melnikov wrote:
>>> I have been selected as the Applications Area Directorate reviewer
>> for
>>> this draft (for background on APPSDIR, please see
>>>
>> http://trac.tools.ietf.org/area/app/trac/wiki/ApplicationsAreaDirectora
>> te
>>> ).
>>>
>>> Please resolve these comments along with any other Last Call comments
>>> you may receive. Please wait for direction from your document
>> shepherd
>>> or AD before posting a new version of the draft.  The review is not
>>> copied to the IESG as the Last Call has not been announced yet.
>>>
>>> Document: draft-ietf-nea-pt-tls-04
>>> Title: PT-TLS: A TCP-based Posture Transport (PT) Protocol
>>> Reviewer: Alexey Melnikov
>>> Review Date: June 4, 2012
>>>
>>> Summary: This document is almost ready for publication as a Proposed
>>> Standard, although some [mostly] SASL related issues remain.
>>>
>>> This document specifies PT-TLS, a TCP-based Posture Transport (PT)
>>> protocol.  The PT-TLS protocol carries the Network Endpoint
>>> Assessment (NEA) message exchange under the protection of a Transport
>>> Layer Security (TLS) secured tunnel.
>>>
>>> (Note, I've reviewed -04, but I think all of this still applies to -
>> 05.)
>> Additional issues in -05:
>>
>> 1) I didn't find the updated text prohibiting TLS renegotiation to be
>> any clearer in -05? Can you maybe try to explain what is allowed and
>> what is not?
> [PS:] The editors will discuss this more and provide a response.

Thanks.

>> 2) In the IANA Considerations:
>>
>> The PEN 0 (IETF) PT-TLS Message Type values between 9 and 2^32-2
>> inclusive are allocated for future assignment by the IANA.  The value
>> 2^32-1 is permanently reserved and is not to be allocated.
>>
>> Whom does the last sentence apply to? This registry? Or the IANA PEN
>> registry being documented by draft-liang-iana-pen?
> [PS:] I'm assuming your asking about the text at the bottom of section 6.2. Registry for PT-TLS Message Types immediately below the table that defines registry values 0 thru 8 for PEN=0.  It refers to this specific registry not the PEN registry.
Please make this clear in your document. If you want to reserve the 
value 2^32-1 in the PEN registry, then you need to make this clear in 
your document as well.