Re: [IPsec] Adam Roach's No Objection on draft-ietf-ipsecme-qr-ikev2-10: (with COMMENT)

Valery Smyslov <svan@elvis.ru> Thu, 09 January 2020 07:15 UTC

Return-Path: <svan@elvis.ru>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FB34120020; Wed, 8 Jan 2020 23:15:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nTK9k6QJrfrl; Wed, 8 Jan 2020 23:15:38 -0800 (PST)
Received: from akmail.elvis.ru (akmail.elvis.ru [82.138.51.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 83FEF120220; Wed, 8 Jan 2020 23:15:38 -0800 (PST)
Received: from kmail2.elvis.ru ([93.188.44.210]) by akmail.elvis.ru with esmtp (Exim 4.89) (envelope-from <svan@elvis.ru>) id 1ipS2Y-0008NS-Ct; Thu, 09 Jan 2020 10:15:34 +0300
Received: from mail16.office.elvis.ru ([10.111.1.29] helo=mail.office.elvis.ru) by kmail2.elvis.ru with esmtp (Exim 4.89) (envelope-from <svan@elvis.ru>) id 1ipS2X-00004x-5c; Thu, 09 Jan 2020 10:15:34 +0300
Received: from MAIL16.office.elvis.ru (10.111.1.29) by MAIL16.office.elvis.ru (10.111.1.29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1779.2; Thu, 9 Jan 2020 10:15:33 +0300
Received: from buildpc (10.111.10.33) by MAIL16.office.elvis.ru (10.111.1.29) with Microsoft SMTP Server id 15.1.1779.2 via Frontend Transport; Thu, 9 Jan 2020 10:15:32 +0300
From: Valery Smyslov <svan@elvis.ru>
To: 'Adam Roach' <adam@nostrum.com>, 'The IESG' <iesg@ietf.org>
CC: draft-ietf-ipsecme-qr-ikev2@ietf.org, 'David Waltermire' <david.waltermire@nist.gov>, ipsecme-chairs@ietf.org, ipsec@ietf.org
References: <157852727628.22527.5762506193173961280.idtracker@ietfa.amsl.com>
In-Reply-To: <157852727628.22527.5762506193173961280.idtracker@ietfa.amsl.com>
Date: Thu, 09 Jan 2020 10:15:37 +0300
Message-ID: <08d601d5c6bc$97722850$c65678f0$@elvis.ru>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQJzNWDF2HhuFj6Cl/A7+jzM8rmPNqanDZeA
Content-Language: ru
X-CrossPremisesHeadersFilteredBySendConnector: MAIL16.office.elvis.ru
X-OrganizationHeadersPreserved: MAIL16.office.elvis.ru
X-Spam-Scanner: Rspamd work in kmail2.elvis.ru, WHITELIST
X-KLMS-Rule-ID: 1
X-KLMS-Message-Action: clean
X-KLMS-AntiSpam-Status: not scanned, disabled by settings
X-KLMS-AntiPhishing: Clean, bases: 2020/01/09 06:53:00
X-KLMS-AntiVirus: Kaspersky Security for Linux Mail Server, version 8.0.3.30, bases: 2020/01/09 05:07:00 #14996825
X-KLMS-AntiVirus-Status: Clean, skipped
X-Spam-Scanner: Rspamd work in akmail.elvis.ru, WHITELIST
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipsec/CJtlUhEo-AFdyTMi42laI8rC9lc>
Subject: Re: [IPsec] Adam Roach's No Objection on draft-ietf-ipsecme-qr-ikev2-10: (with COMMENT)
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipsec/>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Jan 2020 07:15:41 -0000

Hi Adam,

> Adam Roach has entered the following ballot position for
> draft-ietf-ipsecme-qr-ikev2-10: No Objection
> 
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
> 
> 
> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
> for more information about IESG DISCUSS and COMMENT positions.
> 
> 
> The document, along with other ballot positions, can be found here:
> https://datatracker.ietf.org/doc/draft-ietf-ipsecme-qr-ikev2/
> 
> 
> 
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
> 
> 
> Thanks for the work done on this protocol extension. I only have two
> relatively minor comments.
> 
> ---------------------------------------------------------------------------
> 
> §5.1:
> 
> >  It is anticipated
> >  that later standards will extend this technique to allow dynamically
> >  changing PPK values.
> 
> It's likely that future specifications will extend the technique even before
> becoming standards. Consider changing "standards" to "specifications."

OK, makes sense.

> ---------------------------------------------------------------------------
> 
> §5.1:
> 
> >     Not all implementations are
> >     able to configure arbitrary octet strings; to improve the
> >     potential interoperability, it is recommended that, in the
> >     PPK_ID_FIXED case, both the PPK and the PPK_ID strings be limited
> >     to the base64 character set, namely the 64 characters 0-9, A-Z,
> >     a-z, + and /.
> 
> This is a little confusing, since the base64 character set has 65 characters
> in it (the 64 cited, plus '='). If the omission of '=' is intentional,
> please add a short statement indicating so -- otherwise, implementors may
> assume that its omission is unintentional and include it in their IDs. To
> the extent that the problem describes arises in the field, this has the
> potential to cause cause similar issues.

The omission was unintentional, we'll add '=' to the list of characters.

Thank you,
Valery.