Re: Gen-art LC review: draft-mcdonald-ipps-uri-scheme-16

Michael Sweet <msweet@apple.com> Mon, 24 November 2014 13:01 UTC

Return-Path: <msweet@apple.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C13DF1A6F12 for <ietf@ietfa.amsl.com>; Mon, 24 Nov 2014 05:01:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.412
X-Spam-Level:
X-Spam-Status: No, score=-2.412 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h7tlYJMIi4xz for <ietf@ietfa.amsl.com>; Mon, 24 Nov 2014 05:01:28 -0800 (PST)
Received: from mail-in4.apple.com (mail-out4.apple.com [17.151.62.26]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 279921A1BEC for <ietf@ietf.org>; Mon, 24 Nov 2014 05:01:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; d=apple.com; s=mailout2048s; c=relaxed/simple; q=dns/txt; i=@apple.com; t=1416834087; x=2280747687; h=From:Sender:Reply-To:Subject:Date:Message-id:To:Cc:MIME-version:Content-type: Content-transfer-encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-reply-to:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=0KKANEpzn6LRojquzVzHwKMa29GWsoaa7VnfoFsV98o=; b=LoK1M4PEDOqjk3eOGX0xq+zE7LUrygKddpYPCyMc7aRwfuPRuv7YvQ3+8xW34d8C kGh4E/tCqi0TtMNkVF40a9Q6ku+vEYqLhNXTdE+92iO94x2E+Y8fSlABN2kUThUd rR27iMJwHFUB++aR6z/FnyFJ7LarnwJRu/EZPKPZKtJQa3U9KdNt9uzwDjGkEtff LxguuEfChDIjWN+NJGixKN2nTAydC2JSmtzD0uiujRcS3NIczNzDFnIPAF57y3zT 9apoVAQVPMZz3XiZIFJc+dGL9dVCGBSUIKSMM+qpaBpP5VnLj9sknWUt2p5zsixx ztSk0ptk3bTdzsu5LoAYOQ==;
Received: from relay2.apple.com (relay2.apple.com [17.128.113.67]) by mail-in4.apple.com (Apple Secure Mail Relay) with SMTP id 41.C2.12968.72C23745; Mon, 24 Nov 2014 05:01:27 -0800 (PST)
X-AuditID: 11973e12-f79306d0000032a8-06-54732c27b295
Received: from spicerack.apple.com (spicerack.apple.com [17.128.115.40]) (using TLS with cipher RC4-MD5 (128/128 bits)) (Client did not present a certificate) by relay2.apple.com (Apple SCV relay) with SMTP id 1B.9B.05858.22C23745; Mon, 24 Nov 2014 05:01:22 -0800 (PST)
Received: from [17.153.17.50] (unknown [17.153.17.50]) by spicerack.apple.com (Oracle Communications Messaging Server 7.0.5.30.0 64bit (built Oct 22 2013)) with ESMTPSA id <0NFJ00DCBO6D4U40@spicerack.apple.com>; Mon, 24 Nov 2014 05:01:27 -0800 (PST)
Subject: Re: Gen-art LC review: draft-mcdonald-ipps-uri-scheme-16
MIME-version: 1.0 (Mac OS X Mail 8.1 \(1993\))
Content-type: text/plain; charset="us-ascii"
From: Michael Sweet <msweet@apple.com>
In-reply-to: <546FB4E7.7060704@nostrum.com>
Date: Mon, 24 Nov 2014 08:00:50 -0500
Content-transfer-encoding: quoted-printable
Message-id: <7CE97FF9-96A0-49BF-8011-51A365E596E5@apple.com>
References: <546FB4E7.7060704@nostrum.com>
To: Robert Sparks <rjsparks@nostrum.com>
X-Mailer: Apple Mail (2.1993)
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrOLMWRmVeSWpSXmKPExsUi2FDorKuuUxxi0LJYy+Lqq88sFs82zmdx YPJYsuQnUwBjFJdNSmpOZllqkb5dAlfG+6YdbAVvJSuWTtBqYNwj0sXIySEhYCLR2rqBBcIW k7hwbz1bFyMXh5DAXkaJXYtuMMMUzZ6wnhkiMZlJouPUElYIp5FJ4kjbKjaQKmEBR4ktM3eC jeIV0JNoevKYCcRmFtCSWL/zOJjNJqAm8XtSHyuIzSmgLfFr1VawehYBVYm18w8zgQxlFmhn lDgw4R0zRLO2xJN3F1ghhtpIzO5pYQSxhYCG7jjXyA5iiwhoSFxbsoQd4lRZiX8Xz0DZf1kl /jcbTWAUnoXkpllIbpqFZMUCRuZVjEK5iZk5upl5JnqJBQU5qXrJ+bmbGEEhPd1OaAfjqVVW hxgFOBiVeHgXbCsKEWJNLCuuzD3EKM3BoiTOa2pSECIkkJ5YkpqdmlqQWhRfVJqTWnyIkYmD U6qB0cvZVTDO59qXaWmZuYt+FMXsPJHnI1o74UtBzcPmo2mnRMO4WvLFvqXOsZhZV5DQs0SX 3zTTm+Wfyw1eBbGUbXpLIvO1tthNnvdg1+dbBWudnXvNN13/tnD9wboo8+uLin+c+eJccSPK dfOswBXP+I9/2GximOz6TlZJYu/Tc6rd7AXbcmv1lFiKMxINtZiLihMBrP5J/0oCAAA=
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrNLMWRmVeSWpSXmKPExsUi2FCsoaukUxxicHQpr8XVV59ZLJ5tnM/i wOSxZMlPpgDGKC6blNSczLLUIn27BK6M90072AreSlYsnaDVwLhHpIuRk0NCwERi9oT1zBC2 mMSFe+vZuhi5OIQEJjNJdJxawgrhNDJJHGlbxQZSJSzgKLFl5k4WEJtXQE+i6cljJhCbWUBL Yv3O42A2m4CaxO9JfawgNqeAtsSvVVvB6lkEVCXWzj/MBDKUWaCdUeLAhHfMEM3aEk/eXWCF GGojMbunhRHEFgIauuNcIzuILSKgIXFtyRJ2iFNlJf5dPMM+gVFgFpI7ZiG5YxaSsQsYmVcx ChSl5iRWGuklFhTkpOol5+duYgQHYaHzDsZjy6wOMQpwMCrx8C7YVhQixJpYVlyZe4hRgoNZ SYRXTKw4RIg3JbGyKrUoP76oNCe1+BCjNAeLkjhv1aPcECGB9MSS1OzU1ILUIpgsEwenVAPj 9HNbeuatOvwmnvfgm9fvdTtn/OKZ/9qS71/iDJPlqo+126d5X/iY/CsogGXR5RNPS3ZbSSzR 37LykL1Duui+9P8d95mrrBl3X3vuZyKUvvP7/3ZWgfNrp1QbvziZMzUg4N3aXWU+W+alP4v8 9vzr/ulsSZ+ms+U6bsz5fP6ER+EvkaKAmm3PviixFGckGmoxFxUnAgAeWMmCPgIAAA==
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/7IwnzHT4gac9N3TYZBhS9ipP3rI
X-Mailman-Approved-At: Mon, 24 Nov 2014 08:44:14 -0800
Cc: General Area Review Team <gen-art@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>, draft-mcdonald-ipps-uri-scheme.all@tools.ietf.org
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Nov 2014 13:01:30 -0000

Robert,

Thanks for your comments.  I have one response (inline below)...

> On Nov 21, 2014, at 4:55 PM, Robert Sparks <rjsparks@nostrum.com> wrote:
> ...
> First: (For Barry as sponsoring AD and shepherd):
> 
> I think you might want to say more about how this and the related PWG documents are being handled cross-organization.
> 
> An RFC that normatively updates a document under some other organization's change control is an unusual thing. Usually there are parallel documents coordinating this. Is there such a parallel PWG doc this time?

No.

Generally speaking, the PWG IPP WG doesn't develop parallel documents for publication by both the PWG (IEEE-ISTO) and IETF - there is no point.  PWG documents include IANA registration templates which go through the usual registration process, independent of any IETF RFC publication.

However, since RFC 3510 is an IETF document that was produced by the (now defunct) IETF IPP WG, and since this document is updating RFC 3510 (and inherits most of the text of RFC 3510), we (the PWG IPP WG) decided it should be submitted for publication by (and under the IP rules of) the IETF rather than publishing it as a PWG standard.  And Barry has graciously agreed to shepard the document...


> Why aren't there RFC variants of the PWG docs (we've republished other organization's documents in the RFC series before...)
> 
> Second: The 6 step construction in section 3 is a little odd. Why aren't steps 3-5 collapsed into one step that says "go do what https: says to do"? Split this way, especially with the repeated guidance in the security considerations section pointing somewhat loosely to 7320 and 5246 for things that "can be used to address     this threat" looks like an opportunity for someone to get creative with how they check the certificate supplied by the server against the name in the URI. If you don't want anything but what happens in https to happen, I think it needs to be more clearly stated. Otherwise, doesn't this go off into RFC 6125 territory?
> 
> Lastly (and much smaller nits):
> 
> There are several callouts from the text that look like references that are not represented in the references section.
> ID nits complains about all of these, and should make them easy to find and fix.
> For example (from section 1.2):
>>  2) Some existing IPP Client and IPP Printer implementations of HTTP
>>      Upgrade [RFC 2717] do not perform upgrade at the beginning of
>> 
> This reference is oddly constructed - please check early with the RFC Editor on whether they
> will take this, or want something a little different.
>> [HTTP1.1]     HTTP/1.1.  See [RFC7230], [RFC7231], [RFC7232],
>>              [RFC7233], [RFC7234], and [RFC7235].  
>> 
> This line is wrong, and is causing idnits to complain once where it shouldn't.
> (The thing in the [] should be RFC7235, not 4):
>>   [RFC7234]  Fielding, R., and J. Reschke, "Hypertext Transfer Protocol
>>              (HTTP/1.1):  Authentication", RFC 7235, June 2014.  
>> 
> 
> 
> 
> 
> 
> 
> 

_________________________________________________________
Michael Sweet, Senior Printing System Engineer, PWG Chair