Re: [kitten] Shepherd review: draft-ietf-kitten-pkinit-freshness-07

Benjamin Kaduk <kaduk@MIT.EDU> Tue, 18 October 2016 04:10 UTC

Return-Path: <kaduk@mit.edu>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A64E1294F6 for <kitten@ietfa.amsl.com>; Mon, 17 Oct 2016 21:10:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.632
X-Spam-Level:
X-Spam-Status: No, score=-4.632 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.431, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e5J61FvZkdZR for <kitten@ietfa.amsl.com>; Mon, 17 Oct 2016 21:10:28 -0700 (PDT)
Received: from dmz-mailsec-scanner-6.mit.edu (dmz-mailsec-scanner-6.mit.edu [18.7.68.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 846FD1294FE for <kitten@ietf.org>; Mon, 17 Oct 2016 21:10:28 -0700 (PDT)
X-AuditID: 12074423-5cbff7000000781a-96-5805a0b18a57
Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by (Symantec Messaging Gateway) with SMTP id 4E.30.30746.1B0A5085; Tue, 18 Oct 2016 00:10:27 -0400 (EDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id u9I4APNY021098; Tue, 18 Oct 2016 00:10:25 -0400
Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u9I4AMv4000903 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 18 Oct 2016 00:10:24 -0400
Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id u9I4AL9S004166; Tue, 18 Oct 2016 00:10:21 -0400 (EDT)
Date: Tue, 18 Oct 2016 00:10:21 -0400
From: Benjamin Kaduk <kaduk@MIT.EDU>
To: Matt Rogers <mrogers@redhat.com>
In-Reply-To: <1476719323.13238.1.camel@redhat.com>
Message-ID: <alpine.GSO.1.10.1610180007300.5272@multics.mit.edu>
References: <1476719323.13238.1.camel@redhat.com>
User-Agent: Alpine 1.10 (GSO 962 2008-03-14)
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="-559023410-1545790862-1476763821=:5272"
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrOIsWRmVeSWpSXmKPExsUixCmqrLt5AWuEwextohZHN69isbg/Mc6B yWPJkp9MHu/3XWULYIrisklJzcksSy3St0vgyri9+yNLQaNYxfsLs9gaGLcLdTFyckgImEgs vziVsYuRi0NIoI1J4v3rAywgCSGBjYwSr59HQiQOMUksPHWDGcJpYJRY0rWJDaSKRUBbYuPb 7WAdbAIqEjPfbASKc3CIANlzd4iChJkFhCXWn5vBDGILC/hLnNzcxwRicwoYSXSu/M4IYvMK OEi0rp3OCrHYUOL/hktgtqiAjsTq/VNYIGoEJU7OfMICMTNA4u/dM+wTGAVmIUnNQpKCsNUl Gh+cZYOwtSXu32xjW8DIsopRNiW3Sjc3MTOnODVZtzg5MS8vtUjXTC83s0QvNaV0EyMofNld lHcwvuzzPsQowMGoxMO74QpLhBBrYllxZe4hRkkOJiVR3nlFrBFCfEn5KZUZicUZ8UWlOanF hxglOJiVRHjF5wDleFMSK6tSi/JhUtIcLErivP/dvoYLCaQnlqRmp6YWpBbBZGU4OJQkeN3n AzUKFqWmp1akZeaUIKSZODhBhvMADdcAqeEtLkjMLc5Mh8ifYlSUEudNngeUEABJZJTmwfWC 08tuJtVXjOJArwjzFoG08wBTE1z3K6DBTECDz+WxgAwuSURISTUwqkXJcbRlR+UKzNm69sHE vJpDPpJfV6asvPzBnfWX0q62xRkhvXGbvoYkn1yi8WjO5ZOiZyfv+HHgStXGx5bLpric0i4M Wn9+hkaZf+gjbkF+nWnL1+6x2KoU7DCTt36jkcaL1qarj3cL3wiZwMu3a8V1heUNc14JMaad lJB92sHrJhxzmc91lRJLcUaioRZzUXEiAG3RqmwKAwAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/kitten/EUPGA51nqX3i6RVb0vNvOqwo9ik>
Cc: kitten@ietf.org
Subject: Re: [kitten] Shepherd review: draft-ietf-kitten-pkinit-freshness-07
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Oct 2016 04:10:30 -0000

On Mon, 17 Oct 2016, Matt Rogers wrote:

> Hi,
>
> During my review of draft-ietf-kitten-pkinit-freshness-07, the idnits
> checker brought up the following issues:
>
>  Checking nits according to http://www.ietf.org/id-info/checklist :
>   -------------------------------------------------------------------
> ---------
>
>   ** The abstract seems to contain references ([RFC4556]), which it
>      shouldn't.  Please replace those with straight textual mentions of
> the
>      documents in question.
>
>
>   Miscellaneous warnings:
>   -------------------------------------------------------------------
> ---------
>
>   -- The document date (May 23, 2016) is 147 days in the past.  Is this
>      intentional?


These two seem to be valid warnings, though the "147 days in the past" is
mostly just the chairs' fault.

>   Checking references for intended status: Proposed Standard
>   -------------------------------------------------------------------
> ---------
>
>      (See RFCs 3967 and 4897 for information about using normative
> references
>      to lower-maturity documents in RFCs)
>
>   -- Looks like a reference, but probably isn't: '0' on line 224
>      'cusec        [0] INTEGER (0..999999),...'

The idnits checker doesn't like our ASN.1 explicit tag values; there's
nothing we can do other than ignore the nits alerts.

>   == Missing Reference: 'This RFC' is mentioned on line 261, but not
>      defined
> '| 150  | PA_AS_FRESHNESS | [This RFC] |...'

This one can probably be ignored as well.  There might be some magic text
that will have the idnits checker ignore the self-reference, but I don't
know what it is.

>   ** Downref: Normative reference to an Informational RFC: RFC 5349
>
>
>      Summary: 2 errors (**), 0 flaws (~~), 1 warning (==), 6 comments
> (--).
>
> An updated document with these corrections, or some comments on these
> for justification of leaving them be would be helpful.

An updated document would be nice, but the needed changes are small
enough that in my opinion they could be left as RFC Editor notes.

-Ben