Re: [Lager] AD review of draft-ietf-lager-specification-10

On 20 Mar 2016, at 16:57, Kim Davies wrote:

> Hi Barry, Hi all,
>
> On 3/13/16, 7:57 AM, "barryleiba@gmail.com on behalf of Barry Leiba" 
> <barryleiba@gmail.com on behalf of barryleiba@computer.org> wrote:
>
>> Hi, authors, shepherd, and working group.
>> Here's my AD review of draft-ietf-lager-specification-10.
>
> Asmus and I have implemented this feedback into a revised -11 draft 
> that
> is ready to post, except for one outstanding issue:
>
>> -- Section 12 --
>>
>>   If a system that is querying an identifier list (such as a domain
>>   zone) that uses the rules in this memo, and those rules are not
>>   implemented correctly, and that system is relying on the rules 
>> being
>>   applied, the system might fail if the rules are not applied in a
>>   predictable fashion.  This could cause security problems for the
>>   querying system.
>>
>> First, I think you have an extra "that" after the parentheses.
>> Second, can you be more specific than "This could cause security
>> problems"?  What sort of problems?  How can they be mitigated?  This
>> needs to be something more than "bad implementations can result in 
>> bad
>> things."
>
> I agree this paragraph essentially means bad implementations can 
> result in
> bad things. I don't have a proposed approach on how to mitigate this 
> general
> situation other than to follow the specification. Perhaps it makes the 
> most
> sense simply to strike this entire paragraph unless anyone has 
> suggestions
> on alternative wording.

I would vote to just strike the paragraph, since reading it does not 
help me really.

Marc.

>
> kim_______________________________________________
> Lager mailing list
> Lager@ietf.org
> https://www.ietf.org/mailman/listinfo/lager