Re: [IPsec] John Scudder's No Objection on draft-ietf-ipsecme-ikev2-intermediate-09: (with COMMENT)

John Scudder <jgs@juniper.net> Thu, 03 March 2022 15:36 UTC

Return-Path: <jgs@juniper.net>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7084E3A0D0B; Thu, 3 Mar 2022 07:36:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.11
X-Spam-Level:
X-Spam-Status: No, score=-2.11 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=upolQygW; dkim=pass (1024-bit key) header.d=juniper.net header.b=N2kTCd7f
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OZKqrWxSvVpJ; Thu, 3 Mar 2022 07:36:21 -0800 (PST)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B7383A0D32; Thu, 3 Mar 2022 07:36:15 -0800 (PST)
Received: from pps.filterd (m0108163.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.1.2/8.16.1.2) with ESMTP id 2239HETv030425; Thu, 3 Mar 2022 07:36:11 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=PPS1017; bh=mJpYuMLFIV9V4jIMH66yvDHttHKMI00iAsJqgP0w7yE=; b=upolQygWq9f/QOb179PQTnrxlvUw5bj8WrzqEHes0+czHHVTfzvI9OfLj0Vuns6tJUQQ DZOhgYdUwly+SmZ5K+wHP1iBFpWHCoa98LVhWCqfv3DCpoG/Uk01NCignXMoq5WfI6tD z1QLGcGtth+ZbIorc7lBY92voFlbwqkLqS4QwgYvQO7i3JG/23byJ3V0n4bPUQp0F8XD EaxrfSk3hJ5pL/QZCLn4Q0ZKTM0TkQgLiOMk80iplRFRc4SUfpaL7Y/B3NUH+9pm0Ufu kaaAP1uxmf9bN5ad/ccRKgUVPisbJvFaZ1OBmY9H9zGjIVclXAeV/VuZYjNGFL43c98O OA==
Received: from nam04-bn8-obe.outbound.protection.outlook.com (mail-bn8nam08lp2040.outbound.protection.outlook.com [104.47.74.40]) by mx0b-00273201.pphosted.com (PPS) with ESMTPS id 3ejtwm0psy-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 03 Mar 2022 07:36:11 -0800
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=es+eQbh2YGoe2/BLRDdU9rAf/87foTy5gQeGKaLNOmn65fXB99g4O4cZthouXoNeBZyn//cvYo48GN423fcsHWkBLIkDtYcV1RQseLIntRMRoGX76rIYZq47G0k9bWKkBAkfQBubprqlYT16F6Yw06igRXdBSnrQGVjX7tYuSlc3O3fvrlS94CWGmIDmIMFYiK/HU8KtGsnKqzNxk6YCXCidSmWdyLFmAqRFeRe7cP1Kx3UzdykSgxLYVR5zRstQuqWi+52DxSmKwBE6fNH32Tm+GFcsFmVoTiGnAbM7oc07hUNi7Z6OuBp4Jzh1Iwr4kSY4PisuZIATYKOu2QZ/VA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=mJpYuMLFIV9V4jIMH66yvDHttHKMI00iAsJqgP0w7yE=; b=jlSZ3dc8vauD0cr2UA8y8iG9bXTHSG/EwnZ4jS/FMwPAYnzju3qhbA1zCUHgAmeUzDlG2tPLQm2dgDqxMu/bZqaHhSxnVMwHHw1UtRjzsAAWVJx8osOpC8oZMCdajrCnPBiZtMjrGrsOhq4n/zv2V5FbxhF1Ct3FTWDDKyYUx5HXqzgkNu5arC1eQdt8/tFWcvmyxgZE0ltD1+MrW3plD4j6CKfTKq5bZW/zXtFI3EjhnbS9K+e9OOLa8MCPgMw0v2cRFJ4go/M+YZGVAG/M/hNW1Y91bSaGbEelbLR299NdSm8dXW6bc0G4hnULx0rtWVfuQyPEHnPIVqMUfOD1HA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mJpYuMLFIV9V4jIMH66yvDHttHKMI00iAsJqgP0w7yE=; b=N2kTCd7f2iIjRzgnP6LSTiewB5dZwNUka9DbA45XlEUN5O52dxzwuGGu21tLnpsdksptjevNlTDyRSj+v7vZOo2Bex2Ng2X06CQ/ks1duV+fSLe7Q6W3yqurRRdPF4TVzVHAKMEv6Tvoj3Bol3NlHOkAgKa3ObV4iO1V0M0wzlM=
Received: from MN2PR05MB6109.namprd05.prod.outlook.com (2603:10b6:208:c4::20) by SN6PR05MB4143.namprd05.prod.outlook.com (2603:10b6:805:27::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5061.4; Thu, 3 Mar 2022 15:36:08 +0000
Received: from MN2PR05MB6109.namprd05.prod.outlook.com ([fe80::ac4f:f5d8:f411:5dcf]) by MN2PR05MB6109.namprd05.prod.outlook.com ([fe80::ac4f:f5d8:f411:5dcf%6]) with mapi id 15.20.5038.014; Thu, 3 Mar 2022 15:36:07 +0000
From: John Scudder <jgs@juniper.net>
To: Valery Smyslov <svan@elvis.ru>
CC: The IESG <iesg@ietf.org>, "draft-ietf-ipsecme-ikev2-intermediate@ietf.org" <draft-ietf-ipsecme-ikev2-intermediate@ietf.org>, "ipsecme-chairs@ietf.org" <ipsecme-chairs@ietf.org>, "ipsec@ietf.org" <ipsec@ietf.org>, "ynir.ietf@gmail.com" <ynir.ietf@gmail.com>
Thread-Topic: John Scudder's No Objection on draft-ietf-ipsecme-ikev2-intermediate-09: (with COMMENT)
Thread-Index: AQHYLpkFhzme+TaNGU6mqp/kpYCIJqytQAAAgACLmQA=
Date: Thu, 03 Mar 2022 15:36:07 +0000
Message-ID: <50EAB91B-9B2A-4734-8E3E-43DB2FDE3364@juniper.net>
References: <164626876794.28446.13200170927730672912@ietfa.amsl.com> <052701d82ece$99e43480$cdac9d80$@elvis.ru>
In-Reply-To: <052701d82ece$99e43480$cdac9d80$@elvis.ru>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3654.120.0.1.13)
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 4e61a5b7-8e2e-4453-a8ec-08d9fd2b893f
x-ms-traffictypediagnostic: SN6PR05MB4143:EE_
x-ms-exchange-atpmessageproperties: SA|SL
x-microsoft-antispam-prvs: <SN6PR05MB4143755868726104C7363737AA049@SN6PR05MB4143.namprd05.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR05MB6109.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(4636009)(366004)(508600001)(122000001)(86362001)(83380400001)(6916009)(5660300002)(966005)(6486002)(6512007)(4326008)(6506007)(2906002)(71200400001)(91956017)(38070700005)(54906003)(2616005)(316002)(66946007)(8936002)(66556008)(26005)(66476007)(38100700002)(36756003)(186003)(66446008)(64756008)(33656002)(8676002)(76116006)(53546011)(45980500001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: mxoaOuaC2ucH7PcgwsgMKEkoCRVyfAFAERuFqysp/QEvY3fqGYD6n2XZGdXxSrumh+YiSGQ02n4InlCSjE5e94cWfPXD3Xtf0jLKsKsJWEWyaQU3gKTsSOGMlUzMr9kOySP85QHE8k8xH0PpibS6hP/JdSsuKPtscZXV2P1YLZ6sP6EOyEejKoGCq8xRYNbQ1w+6dnULicaRCevnVe5Rwt9CVF0SDdV+XGOimSR/lbTHm6bKogibrgcUl2r1B8120+97DVfILGSRCrI/6+20ZzOayu9weV1ogAeuXh2Xt5TZiUD5G939HMR4PROxg7V/M9wT46Pe2fASm/g5RiNlGYEC9BorOYITc9dQ5l4QQDZckLYdetkBf1yPwIX178HBh5obJ2kfWIF5v1iAq3m6tgO6+TMkILIsmTI2T4aP0hy8+yE+zILz/v7su2J5RvZnSoXct+uTo9vHhs9WHkr+BUF0fQITw7YoFoA0vACN7iD1GiiAhNv7PDbFtJd80nLbDlrP+Sc0xAry3a9fPt79QJtuW9dkqS3E+pVWDKBsadAB0gwmoWf9fykL7+FLkrHuvgfyBDTwQD82HVpVw1i4Y3EvAiunSbE+Vx5HT2VNwk+VwieJt8x4liuH/iFY+YsDCiaU9KmG/WCsxsnhUKAZTa0Tk/Y//LdV7H4YhkSQzEz7ii4pXA+44HvkJo9kOa9G2osokfVhIsgrFTUY4rIBE8/B9EjHcZGcFQ3+qmkBaSo3FIJVhHqLWgofgjsCJi5umS9PDAIzJjXzg1l6i1NqppdyoTV7gwLZ5NrvBF1mkfxaFKk7HdpMU4nyKOJaKsPClf7XOdfT8xlUBhfwHfKegy1pQXIuE7d6vReClrj4gr82kuXTiTdn8BD4SYM2iC3PllZO3YzyBKfGEPjdZ6kwtWcZ8e30t/Bt0mKj9pA03avDlqDQqfEEP2r1ONmkEUWxjJ1ohXLssPUSoUW4AAlkBg1UYFfEzXyMLAyZJhdperxUTqkeYKJdRduuxyW+LUcMhZoGpBedgCyE9BbPuFevPQfUntzd9q/8l2d8jiBkFLiKxJBvo3Ahmhw8Qu90JgwldUqeEaNie2r5+wMIeFpupgT3FyP6/YTA1T1fnyky5H170sDtwU0OZLi/kBxXbyTTHF0YenV2uugWoZc22pUzrb6Gq1EqVeNlsAdgvN9Tz1cRehobgDPj+LPFKW0S0Pgi/29kJb8op0KjS49YJTowhUgvjUbZJo31bU5hw/SGhFRpCQFkKLL6ORL6T/WAH+varTYZfpWJKvHF1BtUjcY7Jpgphr04xcIC4XLfuFYIoFm4BySUXuFyLIR43ey45HSxaqhV2phyHkdiUpTaJvufQjlhR64eYU8ybktSg1SSLMmxHfw2fx0TViBEMJxdEpvbngCy0D1J8hnzfthMkeAOxwAOSGqOzUP3rEXppaWMpWLwHNE26ByZ1wv1kWSySoIF
Content-Type: text/plain; charset="utf-8"
Content-ID: <4A1FE520B106924EA3A17568E8B72E36@namprd05.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR05MB6109.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 4e61a5b7-8e2e-4453-a8ec-08d9fd2b893f
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Mar 2022 15:36:07.6145 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Ppqqc7KEk2Vn7RBWp7MKe81OijfxyrO8wiwqhNzXBuO/kux5qmsVsEd2ezCjDZrL
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR05MB4143
X-Proofpoint-ORIG-GUID: QhRa3qBxJyS1uzutvYauynFpDng-t334
X-Proofpoint-GUID: QhRa3qBxJyS1uzutvYauynFpDng-t334
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.205,Aquarius:18.0.816,Hydra:6.0.425,FMLib:17.11.64.514 definitions=2022-03-03_07,2022-02-26_01,2022-02-23_01
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 adultscore=0 bulkscore=0 suspectscore=0 impostorscore=0 lowpriorityscore=0 mlxlogscore=999 malwarescore=0 clxscore=1011 priorityscore=1501 mlxscore=0 phishscore=0 spamscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2201110000 definitions=main-2203030074
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipsec/Q8GTEU74kXy9_dxEfMTQJDUaA5A>
Subject: Re: [IPsec] John Scudder's No Objection on draft-ietf-ipsecme-ikev2-intermediate-09: (with COMMENT)
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipsec/>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Mar 2022 15:36:28 -0000

OK thanks. Those changes would make the document clearer for me, at least.

Regards,

—John

> On Mar 3, 2022, at 2:16 AM, Valery Smyslov <svan@elvis.ru> wrote:
> 
> 
> Hi John,
> 
>> John Scudder has entered the following ballot position for
>> draft-ietf-ipsecme-ikev2-intermediate-09: No Objection
>> 
>> When responding, please keep the subject line intact and reply to all
>> email addresses included in the To and CC lines. (Feel free to cut this
>> introductory paragraph, however.)
>> 
>> 
>> Please refer to https://urldefense.com/v3/__https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/__;!!NEt6yMaO-gk!XGQjnyKG320X2cLxK9O8lUUdHDPAUAqktikCKjmq47JKLaRtoV4JBm_gnZUvhQ$
>> for more information about how to handle DISCUSS and COMMENT positions.
>> 
>> 
>> The document, along with other ballot positions, can be found here:
>> https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-ipsecme-ikev2-intermediate/__;!!NEt6yMaO-gk!XGQjnyKG320X2cLxK9O8lUUdHDPAUAqktikCKjmq47JKLaRtoV4JBm-OaYI_mg$
>> 
>> 
>> 
>> ----------------------------------------------------------------------
>> COMMENT:
>> ----------------------------------------------------------------------
>> 
>> Thanks for this. I have just a couple minor questions/suggestions.
>> 
>> 1. Section 3.2, “these exchanges MUST follow each other”. I suppose what is
>> meant is, “these exchanges MUST be sequential” (this hardly seems to need to be
>> mandated, but OK). Or is something else intended, in which case, what is it?
> 
> No, you got the point. If you think “these exchanges MUST be sequential”
> is more natural English wording, I'll use it. As a non-native speaker
> I probably don't feel the difference...
> 
>> 2. In Section 3.4, there is:
>> 
>>   not all error notifications may ever appear in the IKE_INTERMEDIATE
>>   exchange (for example, errors concerning authentication are generally
>>   only applicable to the IKE_AUTH exchange).
>> 
>> I can’t make sense of what the word “ever” is doing there. It makes sense to me
>> if I remove “ever” to make it “not all error notifications may appear”. It’s OK
>> if I change “ever” to “even”. But I don’t get it, as written. Am I missing
>> something, or would one of my edits be appropriate?
> 
> This is again an artefact of me being a non-native speaker.
> By using this word I intended to stress that some error notifications
> may _never_ appear in the IKE_INTERMEDIATE, but it's OK for me to drop this word.
> 
> Thank you!
> 
> Regards,
> Valery.