Re: [ire] Extended verification process of the escrow deposit files

"Gould, James" <JGould@verisign.com> Mon, 17 December 2012 21:13 UTC

Return-Path: <JGould@verisign.com>
X-Original-To: ire@ietfa.amsl.com
Delivered-To: ire@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0343021F84E6 for <ire@ietfa.amsl.com>; Mon, 17 Dec 2012 13:13:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.849
X-Spam-Level:
X-Spam-Status: No, score=-4.849 tagged_above=-999 required=5 tests=[AWL=-1.250, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0r1pWLNb3YAu for <ire@ietfa.amsl.com>; Mon, 17 Dec 2012 13:13:35 -0800 (PST)
Received: from exprod6og118.obsmtp.com (exprod6og118.obsmtp.com [64.18.1.233]) by ietfa.amsl.com (Postfix) with ESMTP id D2ACB21F84D9 for <ire@ietf.org>; Mon, 17 Dec 2012 13:13:13 -0800 (PST)
Received: from peregrine.verisign.com ([216.168.239.74]) (using TLSv1) by exprod6ob118.postini.com ([64.18.5.12]) with SMTP ID DSNKUM+K6d98DDQfHAkRA5hc70P6yvG1akhD@postini.com; Mon, 17 Dec 2012 13:13:35 PST
Received: from brn1wnexcas02.vcorp.ad.vrsn.com (brn1wnexcas02.vcorp.ad.vrsn.com [10.173.152.206]) by peregrine.verisign.com (8.13.6/8.13.4) with ESMTP id qBHLD69e015861 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 17 Dec 2012 16:13:10 -0500
Received: from BRN1WNEXMBX02.vcorp.ad.vrsn.com ([::1]) by brn1wnexcas02.vcorp.ad.vrsn.com ([::1]) with mapi id 14.02.0318.004; Mon, 17 Dec 2012 16:13:06 -0500
From: "Gould, James" <JGould@verisign.com>
To: Francisco Obispo <fobispo@isc.org>
Thread-Topic: [ire] Extended verification process of the escrow deposit files
Thread-Index: Ac3Zkeu6eJJKrRR3SMuGey8/HtjSOQC9mawAAA7FBQD//6/HgA==
Date: Mon, 17 Dec 2012 21:13:05 +0000
Message-ID: <C41D7AF7FCECBE44940E9477E8E70D7A0D746312@BRN1WNEXMBX02.vcorp.ad.vrsn.com>
In-Reply-To: <7301997D-09BB-4F90-A058-47161C39C992@isc.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.2.2.120421
x-originating-ip: [10.173.152.4]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <9956B34112910E40882799B1511C825E@verisign.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "ire@ietf.org" <ire@ietf.org>
Subject: Re: [ire] Extended verification process of the escrow deposit files
X-BeenThere: ire@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Internet Registration Escrow discussion list." <ire.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ire>, <mailto:ire-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ire>
List-Post: <mailto:ire@ietf.org>
List-Help: <mailto:ire-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ire>, <mailto:ire-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 17 Dec 2012 21:13:36 -0000

Francisco,

Just to clarify the comment on CSV and XML.  The CSV format is defined in
XML and via XSD(s), so a validator (custom) would be able to verify the
CSV field formats of the CSV files in a similar fashion as using an XML
parser to validate an individual XML file against the XSD(s).  The email
address field value would be validated against the XSD simple element type
in either event.  
  
-- 

JG
 

 
James Gould
Principal Software Engineer
jgould@verisign.com
 
703-948-3271 (Office)
12061 Bluemont Way
Reston, VA 20190
VerisignInc.com







On 12/17/12 4:00 PM, "Francisco Obispo" <fobispo@isc.org> wrote:

>Hi *,
>
>On Dec 17, 2012, at 10:57 AM, "Gould, James" <JGould@verisign.com> wrote:
>...
>> The Data Escrow Provider should be able to validate the completeness of
>>the deposit by verifying the signatures and verify the deposit against
>>the format definition.  Items like email address validation should be
>>covered by the XSD format definition.
>
>
>As long as we use the XML, if the CSV is used, the validation will have
>to proceed by type-checking the values in each file.
>
>>  Applying differential deposits to the full deposit also sounds like
>>the job of the EBERO provider and not the Data Escrow Provider.
>
>I agree,
>
>What I propose is to ICANN use its contracted EBEROs to validate and
>confirm that they can rebuild a registry with the information in the
>deposits. I would say at least two (selected at random).
>
>
>> In summary, I believe that only #1 below should be required of the Data
>>Escrow Provider and the remainder should be discussed as a requirement
>>for an EBERO provider.
>
>+1
>
>
>
>Francisco Obispo 
>Director of Applications and Services - ISC
>email: fobispo@isc.org
>Phone: +1 650 423 1374 || INOC-DBA *3557* NOC
>PGP KeyID = B38DB1BE
>