Re: [Netconf] Draft Charter Proposal for NETCONF WG

[Kent Watsen <[e-mail]>]

[+draft-ietf-rtgwg-yang-key-chain-all]


Hi Mahesh,


>> Again, a keystore is not limited to asymmetric keys.   At the moment 
>> it is exclusively asymmetric, but that's only because we (the authors)
>> moved the passwords (read symmetric keys) that were present in the 
>> previous version to the ietf-ssh-client module, but they may return,
>> as many real-world keystore mechanisms do manage passwords as well
>> (e.g., Mac OSX's Keychain Access utility).
>> 
>> The module names are fine, but we could update the draft title. How
>> about "A System-level Keystore Model"?
>
>
> How about "Asymmetric Key System-level Keystore Model"?
> 
> And add a reference to keychain model for symmetric keys. 


Regarding "asymmetric", as mentioned above, while the keystore module
is currently exclusively asymmetric, it's probable that passwords will
be added to it in the future.

Regarding "system-level", I'm not 100% sure.  Specifically, the PCE-PCEP
use of the ietf-tls-client module, which uses the keystore module, gives
me pause.  Is it still a system-level use then?

Maybe one of the authors of the RTGWG key-chain draft to try to express
how the two modules differ, and why they shouldn't be merged into one
draft.

Thanks,
Kent