Re: [IPsec] Which option to pick on draft-kivinen-ipsecme-oob-pubkey-02.txt

Sean Turner <turners@ieca.com> Thu, 29 November 2012 17:07 UTC

Return-Path: <turners@ieca.com>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80A3721F8B14 for <ipsec@ietfa.amsl.com>; Thu, 29 Nov 2012 09:07:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.422
X-Spam-Level:
X-Spam-Status: No, score=-102.422 tagged_above=-999 required=5 tests=[AWL=0.177, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SywJPkYhnzhr for <ipsec@ietfa.amsl.com>; Thu, 29 Nov 2012 09:07:06 -0800 (PST)
Received: from gateway04.websitewelcome.com (gateway04.websitewelcome.com [64.5.52.7]) by ietfa.amsl.com (Postfix) with ESMTP id EE06721F8B18 for <ipsec@ietf.org>; Thu, 29 Nov 2012 09:07:04 -0800 (PST)
Received: by gateway04.websitewelcome.com (Postfix, from userid 5007) id 683D190C9F82E; Thu, 29 Nov 2012 11:07:01 -0600 (CST)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway04.websitewelcome.com (Postfix) with ESMTP id 5AB2290C9F800 for <ipsec@ietf.org>; Thu, 29 Nov 2012 11:07:01 -0600 (CST)
Received: from [108.45.19.185] (port=49783 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from <turners@ieca.com>) id 1Te7Zl-0004XR-Rc; Thu, 29 Nov 2012 11:07:01 -0600
Message-ID: <50B79635.3080306@ieca.com>
Date: Thu, 29 Nov 2012 12:07:01 -0500
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:16.0) Gecko/20121026 Thunderbird/16.0.2
MIME-Version: 1.0
To: Tero Kivinen <kivinen@iki.fi>
References: <20633.24231.244628.939482@fireball.kivinen.iki.fi> <20663.26715.668188.141385@fireball.kivinen.iki.fi> <50B76DFA.9010705@ieca.com>
In-Reply-To: <50B76DFA.9010705@ieca.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: (thunderfish.local) [108.45.19.185]:49783
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 1
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Cc: ipsec@ietf.org
Subject: Re: [IPsec] Which option to pick on draft-kivinen-ipsecme-oob-pubkey-02.txt
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Nov 2012 17:07:08 -0000

On 11/29/12 9:15 AM, Sean Turner wrote:
> On 11/29/12 8:51 AM, Tero Kivinen wrote:
>> Tero Kivinen writes:
>>> My draft draft-kivinen-ipsecme-oob-pubkey-02.txt defines new way to
>>> send any type of raw public keys inside IKEv2. RFC5996 only allows
>>> sending RSA raw public keys. This means after this we would have two
>>> ways to do send RSA raw public keys, old RFC5996 and new format define
>>> din my draft.
>>>
>>> 3) Obsolete old format
>>>
>>>     Make old RFC 5996 format as MUST NOT, and officially obsolete
>>>     it. This means all implementations should switch to new format
>>>     as soon as possible. This document must be standard track, and
>>>     update RFC5996.
>>>
>>> In the discussion we did not found out that there would have been wide
>>> use for the old RFC 5996 defined RSA raw public key, so feeling was
>>> that it would be possible to obsolete the old format. It was
>>> considered a bad idea to keep two ways of doing same thing.
>>>
>>> So now I want to know if anybody have anything against if we do just
>>> that, i.e. pick the 3rd option and obsolete the old RSA raw public key
>>> format.
>>
>> As there as not been any objections to this change, I will change my
>> draft to say that RFC 5996 format is MUST NOT, and obsolete the old
>> RSA public key format. The new draft is already posted as
>> draft-kivinen-ipsecme-oob-pubkey-03.txt.
>>
>> http://datatracker.ietf.org/doc/draft-kivinen-ipsecme-oob-pubkey/
>>
>> Diff:
>>
>> http://www.ietf.org/rfcdiff?url1=draft-kivinen-ipsecme-oob-pubkey-02&difftype=--html&submit=Go!&url2=draft-kivinen-ipsecme-oob-pubkey-03
>>
>>
>>> The another question is whether this document needs to be WG document
>>> or not. As it seems to be that we are updating the RFC5996 and
>>> obsoleting stuff from it, there seemed to be some people who felt that
>>> this should be WG document. Send your comments about this too.
>>
>> Only comment to this in the list was from Michael supporting of making
>> this to WG document (especially if it can fit to charter).
>>
>> Yaron said in the meeting that he was unhappy this being individual
>> since it obsoletes old format.
>>
>> So now we need a comment from the ADs and/or chairs whether they feel
>> that this fits our current charter (maintain the IPsec standard and to
>> facilitate discussion of clarifications, improvements, and extensions
>> to IPsec, mostly to IKEv2) or do we need to update the charter.
>
> The one sentence change to add this to the charter is on today's telechat.

Ugh .. I sent it in too late so it's on the next telechat.

spt