[kitten] Jari Arkko's Discuss on draft-ietf-kitten-pkinit-freshness-07: (with DISCUSS and COMMENT)

"Jari Arkko" <jari.arkko@piuha.net> Thu, 01 December 2016 09:29 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Jari Arkko <jari.arkko@piuha.net>
To: The IESG <iesg@ietf.org>
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <148058454371.10318.13833993922629313553.idtracker@ietfa.amsl.com>
Date: Thu, 01 Dec 2016 01:29:03 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/kitten/EL47kcmkVqb7s0M-_Ab20ndVeRw>
Cc: mrogers@redhat.com, kitten@ietf.org, kitten-chairs@ietf.org, housley@vigilsec.com, draft-ietf-kitten-pkinit-freshness@ietf.org
Subject: [kitten] Jari Arkko's Discuss on draft-ietf-kitten-pkinit-freshness-07: (with DISCUSS and COMMENT)

Jari Arkko has entered the following ballot position for
draft-ietf-kitten-pkinit-freshness-07: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-kitten-pkinit-freshness/



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

I am concerned about the issue that Russ Housley raised in his Gen-ART
review: bad practices in creating the freshness tokens creates a security
issue. If this cannot be handled in the way that Russ initially suggested
(setting a minimum number of bits) then a proper discussion of the issue
and recommendations to avoid the problems need to be included in the
security considerations section.


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Other issues from Russ' Gen-ART review should also be addressed
(editorial ones + possible max size).

[kitten] Jari Arkko's Discuss on draft-ietf-kitte… Jari Arkko