[netconf] Draft updates

Kent Watsen <kent+ietf@watsen.net> Thu, 11 February 2021 00:57 UTC

Return-Path: <010001778e975419-ae0fec48-c491-4c4d-b7e4-fb303e7e9748-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D0E33A0D31 for <netconf@ietfa.amsl.com>; Wed, 10 Feb 2021 16:57:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s_iA8N7MLUMg for <netconf@ietfa.amsl.com>; Wed, 10 Feb 2021 16:56:59 -0800 (PST)
Received: from a48-95.smtp-out.amazonses.com (a48-95.smtp-out.amazonses.com [54.240.48.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 63EEB3A0D2E for <netconf@ietf.org>; Wed, 10 Feb 2021 16:56:59 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1613005018; h=From:Content-Type:Content-Transfer-Encoding:Mime-Version:Subject:Message-Id:Date:To:Feedback-ID; bh=ivUz2rubPiuyl+Ms0WfytWOKqpW0D2rRDu8VXPqOVtw=; b=FSoDnYWNVP5NC0lZOmEEKBh/jXHx6i51GvOPQG+3FKnfcTFCJXVoTHzPF4iE2fx4 1q19juSQI+gXKZ7TVPaZjaSFc8S2vuRJMfQz1UUCu5hM9v0h2Xyx0ZaGAmwK3IIie7D fRtiNnBMnr4rKMVogrcuHGBqJ+1SIN5+5AqagH8E=
From: Kent Watsen <kent+ietf@watsen.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Message-ID: <010001778e975419-ae0fec48-c491-4c4d-b7e4-fb303e7e9748-000000@email.amazonses.com>
Date: Thu, 11 Feb 2021 00:56:58 +0000
To: "netconf@ietf.org" <netconf@ietf.org>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.02.11-54.240.48.95
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/6eiLPLczRViLc4oyfygm7k2yZ2w>
Subject: [netconf] Draft updates
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Feb 2021 00:57:00 -0000

Updated all drafts, but only the 1st three (ct, ts, and ks) have notable updates:


Crypto-types:
   *  Added a "Unconstrained Public Key Usage" Security Consideration to
      address concern raised by SecDir of the 'truststore' draft.

   *  Added a "Unconstrained Private Key Usage" Security Consideration
      to address concern raised by SecDir of the 'truststore' draft.

   *  Changed the encryption strategy, after conferring with Russ
      Housley.

   *  Added a "password-grouping" example to the "crypto-types-usage"
      example.

   *  Added an "Encrypting Passwords" section to Security Consideration.

   *  Addressed other comments raised by YANG Doctor.


Truststore:
   *  Added an "Unconstrained Public Key Usage" Security Consideration
      to address concern raised by SecDir.

   *  Addressed comments raised by YANG Doctor.


Keystore:

   *  Added a "Unconstrained Private Key Usage" Security Consideration
      to address concern raised by SecDir.

   *  Addressed comments raised by YANG Doctor.



K.