RE: [apps-discuss] APPSDIR review of draft-ietf-nea-pt-tls-04

Paul Sangster <Paul_Sangster@symantec.com> Thu, 14 June 2012 04:09 UTC

Return-Path: <Paul_Sangster@symantec.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E238311E80B3; Wed, 13 Jun 2012 21:09:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level:
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FJ-ofcgXiI6F; Wed, 13 Jun 2012 21:09:01 -0700 (PDT)
Received: from tus1smtoutpex02.symantec.com (tus1smtoutpex02.symantec.com [216.10.195.242]) by ietfa.amsl.com (Postfix) with ESMTP id D95D811E8073; Wed, 13 Jun 2012 21:09:00 -0700 (PDT)
X-AuditID: d80ac3f2-b7fb36d000006edb-f9-4fd963dbb8a3
Received: from ecl1mtahubpin02.ges.symantec.com (ECL1MTAHUBPIN02.ges.symantec.com [10.48.69.202]) by tus1smtoutpex02.symantec.com (Symantec Brightmail Gateway out) with SMTP id 98.82.28379.CD369DF4; Thu, 14 Jun 2012 04:09:00 +0000 (GMT)
Received: from [155.64.220.137] (helo=TUS1XCHHUBPIN01.SYMC.SYMANTEC.COM) by ecl1mtahubpin02.ges.symantec.com with esmtp (Exim 4.76) (envelope-from <Paul_Sangster@symantec.com>) id 1Sf1Mh-0002dD-JI; Thu, 14 Jun 2012 04:08:59 +0000
Received: from TUS1XCHEVSPIN35.SYMC.SYMANTEC.COM ([155.64.220.150]) by TUS1XCHHUBPIN01.SYMC.SYMANTEC.COM ([155.64.220.137]) with mapi; Wed, 13 Jun 2012 21:08:59 -0700
From: Paul Sangster <Paul_Sangster@symantec.com>
To: Alexey Melnikov <alexey.melnikov@isode.com>, "apps-discuss@ietf.org" <apps-discuss@ietf.org>, "draft-ietf-nea-pt-tls.all@tools.ietf.org" <draft-ietf-nea-pt-tls.all@tools.ietf.org>
Date: Wed, 13 Jun 2012 21:11:17 -0700
Subject: RE: [apps-discuss] APPSDIR review of draft-ietf-nea-pt-tls-04
Thread-Topic: [apps-discuss] APPSDIR review of draft-ietf-nea-pt-tls-04
Thread-Index: Ac1JUdVFSXL4cIl6SCmIW/z3GYOE9QAkS6rw
Message-ID: <6E79D623502C70419A9EAB18E4D274252B8B06161A@TUS1XCHEVSPIN35.SYMC.SYMANTEC.COM>
References: <4FCD0614.5050902@isode.com> <4FD86FB2.2050002@isode.com>
In-Reply-To: <4FD86FB2.2050002@isode.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrNIsWRmVeSWpSXmKPExsXCZeB6SvdO8k1/g019ohYzVhdZrH65gs1i 7sUJ7BbPNs5ncWDxWLLkJ5PHqWZDjy+XP7MFMEdx2aSk5mSWpRbp2yVwZexdu4ytYLJwxddD 61kbGHfydzFyckgImEicm3WLCcIWk7hwbz1bFyMXh5DAO0aJ/SveMEE4rxklzh7awgzhrGKU WDz7EDtIC5uAgcTOI6fYQRIiArsZJR6c/8gGkmAWUJZ4umkO2FwWAVWJlYfvg8WFBdwkvi/p ZQGxRQTcJW683s8MYRtJvL71D8zmFYiS+LW8GaxXSMBV4sXctWBxTgFNiV1bvoPNYQS69fup NUwQu8Qlbj2ZD/WDgMSSPeeZIWxRiZeP/7FC1ItK3GlfzwhRryOxYPcnqDu1JZYtfA21V1Di 5MwnLBMYxWchGTsLScssJC2zkLQsYGRZxShTUlpsWJxbkl9aUpBaYWCkV1yZmwiMwGS95Pzc TYzAKLzBdfjTDsYbSxUPMQpwMCrx8KoAo1OINbEMqPIQowQHs5II7zMFoBBvSmJlVWpRfnxR aU5q8SFGaQ4WJXHeD7u3+gsJpCeWpGanphakFsFkmTg4pRoYPc+5vN0kvo73V1Bg617vIKN1 rExtXKdks7/o3Q9J2XS2Zs7+fkFx7fWG1XnvZjp/MbgidMsrYd1vGZWtV44a65UvmmJc9+Od ZKbmm1DT16yXHa6lWz2+9jBD4fvR7as+/9nz7NWE1+Kf5jNccFq5fOLj+eVN6hq/uRR+Xw4r vv3+Fav3ykrBr0osxRmJhlrMRcWJANJEHki+AgAA
X-Mailman-Approved-At: Thu, 14 Jun 2012 09:11:48 -0700
Cc: "ietf@ietf.org" <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jun 2012 04:09:02 -0000

> -----Original Message-----
> From: Alexey Melnikov [mailto:alexey.melnikov@isode.com]
> Sent: Wednesday, June 13, 2012 3:47 AM
> To: apps-discuss@ietf.org; draft-ietf-nea-pt-tls.all@tools.ietf.org
> Cc: ietf@ietf.org
> Subject: Re: [apps-discuss] APPSDIR review of draft-ietf-nea-pt-tls-04
> 
> On 04/06/2012 20:01, Alexey Melnikov wrote:
> > I have been selected as the Applications Area Directorate reviewer
> for
> > this draft (for background on APPSDIR, please see
> >
> http://trac.tools.ietf.org/area/app/trac/wiki/ApplicationsAreaDirectora
> te
> > ).
> >
> > Please resolve these comments along with any other Last Call comments
> > you may receive. Please wait for direction from your document
> shepherd
> > or AD before posting a new version of the draft.  The review is not
> > copied to the IESG as the Last Call has not been announced yet.
> >
> > Document: draft-ietf-nea-pt-tls-04
> > Title: PT-TLS: A TCP-based Posture Transport (PT) Protocol
> > Reviewer: Alexey Melnikov
> > Review Date: June 4, 2012
> >
> > Summary: This document is almost ready for publication as a Proposed
> > Standard, although some [mostly] SASL related issues remain.
> >
> > This document specifies PT-TLS, a TCP-based Posture Transport (PT)
> > protocol.  The PT-TLS protocol carries the Network Endpoint
> > Assessment (NEA) message exchange under the protection of a Transport
> > Layer Security (TLS) secured tunnel.
> >
> > (Note, I've reviewed -04, but I think all of this still applies to -
> 05.)
> Additional issues in -05:
> 
> 1) I didn't find the updated text prohibiting TLS renegotiation to be
> any clearer in -05? Can you maybe try to explain what is allowed and
> what is not?

[PS:] The editors will discuss this more and provide a response.

> 
> 2) In the IANA Considerations:
> 
> The PEN 0 (IETF) PT-TLS Message Type values between 9 and 2^32-2
> inclusive are allocated for future assignment by the IANA.  The value
> 2^32-1 is permanently reserved and is not to be allocated.
> 
> Whom does the last sentence apply to? This registry? Or the IANA PEN
> registry being documented by draft-liang-iana-pen?

[PS:] I'm assuming your asking about the text at the bottom of section 6.2. Registry for PT-TLS Message Types immediately below the table that defines registry values 0 thru 8 for PEN=0.  It refers to this specific registry not the PEN registry.