Re: [IPsec] Comments to the draft-ietf-ipsecme-split-dns-04.txt

[Paul Wouters <[e-mail]>]

On Tue, 6 Feb 2018, Tero Kivinen wrote:

> While approving the IANA allocations I re-read the document again, and
> I have some more comments that might make the document more
> understandable.

Thanks!

> In section 4.1 there is example of example.com, but it would be better
> to put quotes around it it

Fixed in -05

> In section 4.2 there is "Digest Type" in the figure, but the
> list has only item for "DS algorithm". Make those same.

Fixed.

> It is bit misleading to say that "Key Tag", "Algorithm", "DS algoritm"
> etc can either be 0 or 2/1/1 etc octets long. How does the receiver
> know what is going to be the length of the "Key Tag" value for
> example?

It was actually a mistake (partially induced by my memory of rfc-8078
work and its errata). Those fields are all fixed length. Only the digest
itself is variable length, and as per 8078 errata, the shortest
representation would be "00", so two octets.

> I assume the intent has been to say that either all the fields are
> there with fixed lengths, or they are all omitted, meaning the length
> is 0 for all of them.

That was not at all the intent :)

I've submitted -05. My only question now is what to do with the
length field of both records. It now says "2 octects, unsigned integer"
but perhaps it should say "2 octets in network order" ?

https://tools.ietf.org/rfcdiff?url2=draft-ietf-ipsecme-split-dns-05.txt

Paul