Re: [Netconf] WGLC for draft-ietf-netconf-tls-04.txt

[Juergen Schoenwaelder <[e-mail]>]

On Fri, Sep 26, 2008 at 10:25:13PM +0200, [e-mail] wrote:
 
> OLD:
> 
>    Section 3.1 describes how the client authenticates the server if
>    public key certificates are provided by the server, section 3.2
>    describes how the server authenticates the client if public key
>    certificates are provided by the client, and section 3.3 describes how
>    the client and server mutually authenticate one another using a pre-
>    shared key (PSK).
> 
> NEW:
> 
>    Section 3.1 describes how the client authenticates the server if
>    public key certificates are provided by the server, section 3.2
>    describes how the server authenticates the client if public key
>    certificates are provided by the client, and section 3.3 describes how
>    the client and server MAY mutually authenticate one another using a
>    pre-shared key (PSK). ^^^

OK

> OLD:
> 
>    A compliant implementation of the protocol specified in this document
>    MUST implement the cipher suite TLS_DHE_PSK_WITH_AES_128_CBC_SHA and
>    MAY implement any TLS cipher suite that provides mutual authentication.
> 
> NEW:
> 
>    A compliant implementation of the protocol specified in this document
>    MAY implement any TLS cipher suite that provides mutual authentication.
> 
>    For authentication based on PSKs, a compliant implementation MUST
>    implement the cipher suite TLS_DHE_PSK_WITH_AES_128_CBC_SHA.

I suggest to add "[RFC4279]" to end of the sentence so that it is easy
to find the definition.

>    Fro authentication based on public key certificates, a compliant
>    implementation MUST implement the 'mandatory cipher suite' specified by
>    each TLS version (e.g.  with TLS 1.2, the mandotary cipher suite is
>    TLS_RSA_WITH_AES_128_CBC_SHA).

Please s/Fro/For and add "[RFC 5246]" as a service to the readers.

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: [phone]         Campus Ring 1, 28759 Bremen, Germany
Fax:   [phone]         <http://www.jacobs-university.de/>
_______________________________________________
Netconf mailing list
[e-mail]
https://www.ietf.org/mailman/listinfo/netconf