Re: [IPsec] Editorial changes to RFC5996

"Valery Smyslov" <svanru@gmail.com> Mon, 21 October 2013 04:54 UTC

Return-Path: <svanru@gmail.com>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0235C11E8115 for <ipsec@ietfa.amsl.com>; Sun, 20 Oct 2013 21:54:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0+b7gfquOyrA for <ipsec@ietfa.amsl.com>; Sun, 20 Oct 2013 21:53:59 -0700 (PDT)
Received: from mail-lb0-x22e.google.com (mail-lb0-x22e.google.com [IPv6:2a00:1450:4010:c04::22e]) by ietfa.amsl.com (Postfix) with ESMTP id 80DF211E8149 for <ipsec@ietf.org>; Sun, 20 Oct 2013 21:53:57 -0700 (PDT)
Received: by mail-lb0-f174.google.com with SMTP id w6so4993186lbh.5 for <ipsec@ietf.org>; Sun, 20 Oct 2013 21:53:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:from:to:cc:references:subject:date:mime-version :content-type:content-transfer-encoding; bh=wFZaZ7yly8taBGqL0hmkdautYzspDSXDIbGlRSGbUdE=; b=Lgndln/KX1X7q4ZzYz0xA/fcf3mzqkoRibv2lCCkZuCPVbKNL+kfjbJArASmLPZUoX yNfe+QLM0B6EIkUmtiZiiJ8xMAY7UWIhqVflbFLO+6u2s6+La+azyviCwOFBKLHAF4Sb XqWKtAdBVG5jMJA3q5IX0KR/6gAtYi9X/BF7nRr6qi+kKfyPI8gF9fVco6TpT2MXcceo GTRFEj9wy15QVDcY7sknHE+q2EGoOkZ/jojdy/CXkbsVKhzVE8LGFNWltH6Olo/V9Aog 4M1uJqlnzHMTNSixzUiNU/WP57h/1bzMaOE8HRXQ+4lIY8FPiqsTd2MJ1T68ft6mFI5J +uGg==
X-Received: by 10.112.135.104 with SMTP id pr8mr147123lbb.34.1382331236079; Sun, 20 Oct 2013 21:53:56 -0700 (PDT)
Received: from buildpc ([93.188.44.200]) by mx.google.com with ESMTPSA id mr1sm10853131lbc.16.2013.10.20.21.53.54 for <multiple recipients> (version=TLSv1 cipher=RC4-SHA bits=128/128); Sun, 20 Oct 2013 21:53:55 -0700 (PDT)
Message-ID: <13A3907F5B6D4AB4ACFE91840F131924@buildpc>
From: Valery Smyslov <svanru@gmail.com>
To: Yaron Sheffer <yaronf.ietf@gmail.com>, Yoav Nir <ynir@checkpoint.com>
References: <21087.60447.758422.672867@fireball.kivinen.iki.fi> <7C1EFED8998C4309B562F2224DD39AA2@buildpc> <526141A0.5030206@gmail.com> <3AAB8F2857A0484D9CE7DF44871E7D02@buildpc> <52627368.8090200@gmail.com> <3D85C762-B605-4CA3-A21F-21878B846486@checkpoint.com> <5262A980.10304@gmail.com>
Date: Mon, 21 Oct 2013 08:53:52 +0400
MIME-Version: 1.0
Content-Type: text/plain; format="flowed"; charset="ISO-8859-1"; reply-type="response"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157
Cc: ipsec@ietf.org, Tero Kivinen <kivinen@iki.fi>
Subject: Re: [IPsec] Editorial changes to RFC5996
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Oct 2013 04:54:00 -0000

HI Yaron,

> Hi Yoav,
>
> You're probably right in your speculation. But my point was that Valery's 
> subject line said "editorial changes", and two of these changes were 
> arguably non-editorial. Technical changes would be treated

Actually, I don't think #6 is technical, as It doesn't change protocol's 
behaviour.
Current text doesn't specify what to do if SPIs are the same for AH and ESP,
and we can leave the behaviour unspecified either. The only difference
is that current text is written as if this situation cannot happen, which
contradicts RFC4301. We can rewrite is so, that admit that it may
happen, but leave to implementers to decide what to do in this case.
I think that it is important that RFC4301 and IKEv2 be aligned.

What about #8 - it is a minor issue and we can forgo it.

Valery.

> differently in an errata review and should be treated differently in a 
> "bis" document, whose main purpose in life is to progress (i.e., 
> stabilize) the protocol.
>
> Thanks,
> Yaron
>
> On 2013-10-19 15:27, Yoav Nir wrote:
>> Hi, Yaron
>>
>> Suppose that instead of sending the message to the list yesterday, Valery 
>> had submitted his comments as errata a few months ago, before Sean asked 
>> us to do the revision. Would those errata not have been verified?
>>
>> If so (and I think it's true for at least #3, #4, #7, and #11, and #6 
>> would also merit some new text), the corrections would now be in the 
>> draft. So why not now?
>>
>> Yoav
>>
>> On Oct 19, 2013, at 2:56 PM, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:
>>
>>>> Hi Yaron,
>>>>
>>>>> Hi Valery,
>>>>>
>>>>> Sorry for being the Bad Guy on this. Your #6 does not seem editorial 
>>>>> to
>>>>
>>>> I think that current text is not aligned with RFC4301.
>>>> We may leave it as is or try to find other form that
>>>> would not appear so misaligned.
>>>
>>> Your new text is fine, if we leave it at that. If we try to add text to 
>>> deal with the exceptional cases (same SPI shared between protocols), 
>>> this will quickly become normative. I don't want to do it in "bis" and 
>>> frankly, I think this situation is too rare to matter.
>>>
>>>>
>>>>> me. Similarly, #8 (adding new RFC 2119 language) is not editorial. I
>>>>> would suggest to implement #6 only if it is critical to
>>>>> interoperability or security, and to forgo #8.
>>>>
>>>> What about #8 - it's just a question from me. From my feeling it must
>>>> be uppercase, but I might be wrong. We may leave it as is.
>>>
>>> IETF process is very serious about the difference between lowercase and 
>>> uppercase (see RFC 6919). Maybe it should have been a SHOULD to start 
>>> with. But we SHOULD NOT change it for a "bis" document.
>>>
>>>>
>>>>> By the way, your correction #2 still does not do it IMHO. The sentence
>>>>> refers to RFC 5996. So:
>>>>>
>>>>> "IKEv2 as stated in RFC 4306 was a change to the IKE protocol that was
>>>>> not backward compatible. RFC 5996 revised RFC 4306 to provide a
>>>>> clarification of IKEv2, making minimum changes to the IKEv2 protocol.
>>>>> The current document slightly revises RFC 5996 to make it suitable for
>>>>> progression to Internet Standard."
>>>>
>>>> Yes, your text is for RFC5996bis, while I made my notes a while ago
>>>> and the text was for RFC5996. Of course your variant is better.
>>>>
>>>> Valery.
>>>>
>>>>> Thanks,
>>>>> Yaron
>>>>>
>>> _______________________________________________
>>> IPsec mailing list
>>> IPsec@ietf.org
>>> https://www.ietf.org/mailman/listinfo/ipsec
>>