Re: [IPsec] Rename IKE_AUX?

"Hu, Jun (Nokia - US/Mountain View)" <jun.hu@nokia.com> Tue, 13 November 2018 04:59 UTC

Return-Path: <jun.hu@nokia.com>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB43D129C6B for <ipsec@ietfa.amsl.com>; Mon, 12 Nov 2018 20:59:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.371
X-Spam-Level:
X-Spam-Status: No, score=-2.371 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xc7PprjoHg82 for <ipsec@ietfa.amsl.com>; Mon, 12 Nov 2018 20:59:29 -0800 (PST)
Received: from FRA01-MR2-obe.outbound.protection.outlook.com (mail-eopbgr90119.outbound.protection.outlook.com [40.107.9.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3340C124408 for <ipsec@ietf.org>; Mon, 12 Nov 2018 20:59:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+WqEqoTnNUAUUB+r3JVhsMc5wP0CCWvXc+aWxPsR498=; b=VAX437uul2MHLvZ4O2bvfc9pzyWOOQHI/1UAvycG1Yov1qz2LtUqzCK0CSlUDa5GQiZPmFJbvp6ojzE5p8HxtymkSXUt86mnQruD0tC3forgyXUuXx1A/WzNjsL38KU614i3E7eon9E48K44QD9q+BdIe5d9Aa+NhZ47xUZGenI=
Received: from PR1PR07MB5755.eurprd07.prod.outlook.com (20.177.210.161) by PR1PR07MB5737.eurprd07.prod.outlook.com (20.177.210.95) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1339.14; Tue, 13 Nov 2018 04:59:26 +0000
Received: from PR1PR07MB5755.eurprd07.prod.outlook.com ([fe80::e501:ccf1:8866:9eee]) by PR1PR07MB5755.eurprd07.prod.outlook.com ([fe80::e501:ccf1:8866:9eee%2]) with mapi id 15.20.1339.019; Tue, 13 Nov 2018 04:59:26 +0000
From: "Hu, Jun (Nokia - US/Mountain View)" <jun.hu@nokia.com>
To: CJ Tjhai <cjt@post-quantum.com>, "tpauly@apple.com" <tpauly@apple.com>
CC: "ipsec@ietf.org" <ipsec@ietf.org>, Valery Smyslov <smyslov.ietf@gmail.com>
Thread-Topic: [IPsec] Rename IKE_AUX?
Thread-Index: AQHUes7HpkjHFd7dEUqDrqmkz+3M+KVNJXBQ
Date: Tue, 13 Nov 2018 04:59:26 +0000
Message-ID: <PR1PR07MB57555409F7321D1B18B4F45895C20@PR1PR07MB5755.eurprd07.prod.outlook.com>
References: <003b01d47a91$06b04950$1410dbf0$@gmail.com> <BC27A036-01C7-4381-9663-B7DDCCA55470@apple.com> <CANs=h-WM+z8NwD+YV_kzmC7WgLryZPxfjSh=fJ9ASvCD-B3DwQ@mail.gmail.com>
In-Reply-To: <CANs=h-WM+z8NwD+YV_kzmC7WgLryZPxfjSh=fJ9ASvCD-B3DwQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=jun.hu@nokia.com;
x-originating-ip: [2601:646:8780:b0d4:74f3:4934:65e8:5255]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; PR1PR07MB5737; 6:MSUZN2YvHOUyxVa56Y3aUnvb7eMsCoOpSEOTedrcLBYWWxGB8yhKhGCyNV8ZsqIKm4gPro/I281D4Qf3faJfzfqwfV+6YtAI+LsPUQ41N9jxjnVmTLUKoRKYbaSy72i/nWA00j6p/d08ypuPEE2imKUTemuWKeSN5aI8p57IdEuBtHGxEYB3owkP9lPj5Ev88ozNNr5vgTW9kg7Trcixfl9sElI6IBeYYLc8dZmv8k3cwAUGAT/NuVVH1EolPniUSRYAgyvLQL+cj20w09Vs5jrl/RDWT8cQHXRWiT78/hJZzBXN+bRajdXXUbo7XVQOdE3AmNfEMFGwmyQd600dQezkvSuxbv/+EznV2w+dWEgVMPWRG9G6ZxtPKooqSOAgI5bS9gXa/GNmEtTe+jAGA7lZF6FVwAu/meb1gi5JjnmtAjvOy0yyJeHDh6VdwCcC7aTDUXANk1VtEP79fbYHxg==; 5:T3JBzy2OZ0aV+VIMOjW9gXQ/GhRQ/w4Kssff7xVk73u2vO3v5tGMS13HJES16MPOeoHepwthEOcX8hQZ2k9/TO9e3sPnCAirODdINlCm3LNgWzsTXL/QS+7NKjY17CT0KhHztArZNwlxlEvVAJJJo5zJiLszuNH+aPQ0QsqZlIs=; 7:v4FrU8OxAXTJTnyme7bzePqpNmQIYm5pM5ecoV9zTwPjh7XUFmr70B+AZS6r0t0rrognc9S2UKQBnqeN4HsEfRujmNsAHThthOXSoQrAvd/EJFOwChPzJYaOr0imOf+ImBqhG5iNL+wl/UHo33kIHA==
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 70a35f3c-d9f4-42bf-528d-08d64924c97b
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390060)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:PR1PR07MB5737;
x-ms-traffictypediagnostic: PR1PR07MB5737:
x-microsoft-antispam-prvs: <PR1PR07MB573732767D059FCCE464023295C20@PR1PR07MB5737.eurprd07.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(3231382)(11241501184)(806099)(944501410)(52105112)(10201501046)(6055026)(148016)(149066)(150057)(6041310)(20161123562045)(20161123558120)(20161123560045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:PR1PR07MB5737; BCL:0; PCL:0; RULEID:; SRVR:PR1PR07MB5737;
x-forefront-prvs: 085551F5A8
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(39860400002)(396003)(136003)(366004)(13464003)(199004)(189003)(68736007)(5660300001)(46003)(7736002)(11346002)(2906002)(446003)(476003)(14444005)(256004)(486006)(4326008)(71190400001)(39060400002)(71200400001)(81156014)(8676002)(55016002)(6246003)(9686003)(2900100001)(81166006)(6306002)(106356001)(105586002)(86362001)(53936002)(6116002)(6506007)(186003)(478600001)(110136005)(97736004)(54906003)(2501003)(33656002)(316002)(25786009)(102836004)(53546011)(99286004)(8936002)(966005)(76176011)(7696005)(305945005)(74316002)(229853002)(6436002)(14454004); DIR:OUT; SFP:1102; SCL:1; SRVR:PR1PR07MB5737; H:PR1PR07MB5755.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: B3NwO8plj1I1Fg6PAU6dv1P04C+28o4+GjZUGthazmevrqo2jBjUL++pJB1iTZcawFS2Q/SPSY9RlGPiucyal7Jhae/DIRrpp6F0p55/7sGrlftUtOKVH2X3G1kThWKuwToNUNYFc4KEUKZrcV59mw3k1DkpChHgjtUfrmIFOxuFo93j1xSNmI2CAzZSEdskoe8BJCEnmNIP0rPx4X/Dh1Xj8N9ovMM2xZ6MsMBvAt4w67iNv3A1MZb49TQc3JoQ0g1lVTeQlurf/VZLPF/6ppU9nWIbom/e4PT89tUMxP/GrpTGVxFnDsILE4uxQFcabqI6+8R7OOL3vwBwR01Ro0PP3wC/EW13kha3HNj8WIg=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 70a35f3c-d9f4-42bf-528d-08d64924c97b
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2018 04:59:26.6831 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR1PR07MB5737
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipsec/stNsrqLcWWfpr9MwMax49Rtt3CE>
Subject: Re: [IPsec] Rename IKE_AUX?
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipsec/>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Nov 2018 04:59:32 -0000

I think IKE_SUPP is better compare to what have mentioned 

-----Original Message-----
From: IPsec <ipsec-bounces@ietf.org> On Behalf Of CJ Tjhai
Sent: Monday, November 12, 2018 1:29 PM
To: tpauly@apple.com
Cc: ipsec@ietf.org; Valery Smyslov <smyslov.ietf@gmail.com>
Subject: Re: [IPsec] Rename IKE_AUX?

How about IKE_SUP or IKE_SUPP (for IKE_SUPPLEMENTARY)?
On Mon, 12 Nov 2018 at 21:14, Tommy Pauly <tpauly@apple.com> wrote:
>
> I agree that IKE_AUX can be easily confused with IKE_AUTH. Similarly, IKE_INT looks a lot like the INIT from IKE_SA_INIT.
>
> I don't necessarily love IKE_PRE_AUTH, but it still seems preferable to the other options. You could also spell out "intermediate" to have IKE_INTERMEDIATE. This is still shorter than other existing exchange types, like IKE_SESSION_RESUME.
>
> Thanks,
> Tommy
>
> > On Nov 12, 2018, at 6:07 AM, Valery Smyslov <smyslov.ietf@gmail.com> wrote:
> >
> > Hi,
> >
> > I'm going to update IKE_AUX draft (in particular - change the way it 
> > is authenticated based on recent discussion with Scott).
> >
> > I recall that there were some complaints that the name IKE_AUX is 
> > not good because it can easily be mixed up with IKE_AUTH Actually, 
> > the phonetically close name was selected intentionally to show that 
> > these exchanges are related. However, I'm not a native speaker and 
> > not always can realize how good or bad this similarity sounds for a 
> > native ear.
> >
> > So, my question to WG - do we need to change the name? If yes, then 
> > to what? Possible variants - IKE_INT (intermediate), IKE_PRE_AUTH.
> > Something else?
> >
> > Regards,
> > Valery.
> >
> > _______________________________________________
> > IPsec mailing list
> > IPsec@ietf.org
> > https://www.ietf.org/mailman/listinfo/ipsec
>
> _______________________________________________
> IPsec mailing list
> IPsec@ietf.org
> https://www.ietf.org/mailman/listinfo/ipsec

_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec