Re: [netconf] Pointers to major "crypto" threads?

Kent Watsen <kent+ietf@watsen.net> Thu, 08 August 2019 18:57 UTC

Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
From: Kent Watsen <kent+ietf@watsen.net>
In-Reply-To: <3BE70E76-AB66-4BF6-8FFD-A65F7294AD01@akamai.com>
Date: Thu, 08 Aug 2019 18:57:45 +0000
Cc: "netconf@ietf.org" <netconf@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-ID: <0100016c729816e0-2c474f96-ffee-4aac-9020-f2821fe4480b-000000@email.amazonses.com>
References: <EB4BBC2F-161C-4AED-9C01-BFBB75C0D923@akamai.com> <0100016c71dc7c15-fd7a35b0-1414-497e-8ecc-aa59e239c628-000000@email.amazonses.com> <3BE70E76-AB66-4BF6-8FFD-A65F7294AD01@akamai.com>
To: "Salz, Rich" <rsalz@akamai.com>
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/SoWoW2tTCg1ZC6CzOvBBxW2wfEw>
Subject: Re: [netconf] Pointers to major "crypto" threads?
Precedence: list

> 
> 	• What do you mean by "the crypto objects" drafts?   Do you mean https://tools.ietf.org/html/draft-ietf-netconf-crypto-types?
>  
> Yes, that one.
>   
> I am looking for email discussion (I guess I can watch meetecho archives if that’s useful) to understand the WG thoughts.


I'm guessing that you have the same concern with this draft as expressed by others, and thus imagine the thread you are looking for is here: https://mailarchive.ietf.org/arch/browse/netconf/?q=I-D%20Action.

The NETCONF WG's ultimate objective is to define YANG modules enabling the configuration of the NETCONF and RESTCONF protocol stacks, for both client and servers (please see [1] and [2]).  The crypto-types draft is the cornerstone of a hierarchy of drafts supporting this goal:


                                       crypto-types
                                         ^      ^
                                        /        \
                                       /          \
                             trust-anchors       keystore
                                ^      ^------+    ^
                                |              \   |
                                |      +-----------+
                                |     /          \
tcp-client-server     ssh-client-server      tls-client-server     http-client-server
      ^      ^              ^                  ^           ^               ^
      |      |              |                  |           |               |
      |      |              |       +----------+           |               |
      |      |              |       |                      |               |
      |      |              |       |                      |               |
      |      +--------------|-------|------------+         |               |
      |                     |       |            |         |               |
      |                     |       |            |         |               |
      +--------------+      |       |            |         |      +--------+
                     |      |       |            |         |      |
                     |      |       |            |         |      |
                  netconf-client-server        restconf-client-server



Not shown, other WGs are defining YANG modules that import parts of the above.


[1] https://tools.ietf.org/html/draft-ietf-netconf-netconf-client-server
[2] https://tools.ietf.org/html/draft-ietf-netconf-restconf-client-server

[netconf] Pointers to major "crypto" threads? Salz, Rich
Re: [netconf] Pointers to major "crypto" threads? Kent Watsen
Re: [netconf] Pointers to major "crypto" threads? Salz, Rich
Re: [netconf] Pointers to major "crypto" threads? Kent Watsen
Re: [netconf] Pointers to major "crypto" threads? Salz, Rich