IETF Logo Mail Archive

Re: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-20.txt

Kent Watsen <kwatsen@juniper.net> Sat, 03 March 2018 02:44 UTC

Return-Path: <kwatsen@juniper.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 508F612751F for <netconf@ietfa.amsl.com>; Fri, 2 Mar 2018 18:44:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nycRs5Hg5ux1 for <netconf@ietfa.amsl.com>; Fri, 2 Mar 2018 18:44:28 -0800 (PST)
Received: from mx0b-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7685C1271DF for <netconf@ietf.org>; Fri, 2 Mar 2018 18:44:28 -0800 (PST)
Received: from pps.filterd (m0108157.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w232hTCC019755; Fri, 2 Mar 2018 18:44:27 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=PPS1017; bh=Owwv7Ya+4OHfAaQmwE6mpdedlT1QQ4T5DWcIS1hnrs8=; b=LWV5RO+FSgd919QKuy9wtuPGACfMvlSOccj8QeDS2xEPINZNrBRc+nQ1KLbBBiQEJdDk AdBPgo+c0z23SGOcmqJ3Qi9UAgxcbj2uWR+AHjqHmlp5H2PksheXibreM/uakaLa5ijn 3CY4ZNZnM9zo27GnyAGdjJjNy4SdrlkhPlRnoO3vKca/0RsgfMzAYLr0O2oywMCL3UF3 TKLjo6mWBg6LNI0uuJ3QTy199ERG+I2QfkLq9VLsokcXXyjpeP2NdPR9NrjfadWuhq4b LFvWCipgaHCPaQ/lewVvchSew4ivLEYDp5PgNuYTidOYyvuvsDuPzkgOTx1aE1rc9T+t kg==
Received: from nam01-bn3-obe.outbound.protection.outlook.com (mail-bn3nam01lp0182.outbound.protection.outlook.com [216.32.180.182]) by mx0a-00273201.pphosted.com with ESMTP id 2gfdsd8n5s-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Fri, 02 Mar 2018 18:44:26 -0800
Received: from DM5PR05MB3484.namprd05.prod.outlook.com (10.174.240.147) by DM5PR05MB3340.namprd05.prod.outlook.com (10.174.191.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.6; Sat, 3 Mar 2018 02:44:24 +0000
Received: from DM5PR05MB3484.namprd05.prod.outlook.com ([fe80::d42c:9ad2:ced3:e377]) by DM5PR05MB3484.namprd05.prod.outlook.com ([fe80::d42c:9ad2:ced3:e377%2]) with mapi id 15.20.0567.006; Sat, 3 Mar 2018 02:44:24 +0000
From: Kent Watsen <kwatsen@juniper.net>
To: Randy Presuhn <randy_presuhn@alumni.stanford.edu>, "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-20.txt
Thread-Index: AQHTsFpiqaZfkPGglk2etMijYvOn2aO5/3UAgABzaID//7umgIAAaiKAgALl6AA=
Date: Sat, 03 Mar 2018 02:44:24 +0000
Message-ID: <C1DEE660-8B98-403C-9C5D-967B6548C1D9@juniper.net>
References: <151979802020.5151.7317601888119593836@ietfa.amsl.com> <365BF574-16ED-4D35-9322-8BC0AEDD8228@juniper.net> <20180228231347.jaohyad3pfzqmqcw@elstar.local> <B0EE9B5D-0EC3-4853-A85C-F7D080177051@juniper.net> <a8f93781-9d09-681a-0499-44eab1149b41@alumni.stanford.edu>
In-Reply-To: <a8f93781-9d09-681a-0499-44eab1149b41@alumni.stanford.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/f.20.0.170309
x-originating-ip: [66.129.241.14]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DM5PR05MB3340; 7:usDNYM2/Pd6zFHv5QfAKtY/nTXjmE7dD8iH+6z14SUY7v9Aciu2oqEwttC9A0HIh1QMvc9A1ck6VnqeL04y7tytHTeTs2WLwW7oiDPPn3jK2qPkA4T4ft0SVW+BCSgXch9xlBw1NqR+B/6o0mpSMch6PRni4usPgxGnjHo8NVYVW8/ApkbjaT3PZhNGsfodq91gm+sIPdMjqauVZsJsJ1P/uGKihAkZAUgeAN25I7TCAkkg7UjkeRcX2rAG4KdGn
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: ea6595ed-e648-4606-1b4a-08d580b0acea
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:DM5PR05MB3340;
x-ms-traffictypediagnostic: DM5PR05MB3340:
x-microsoft-antispam-prvs: <DM5PR05MB33402386BB17793EABC3F95EA5C40@DM5PR05MB3340.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(10436049006162)(166708455590820);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(3231220)(944501244)(52105095)(3002001)(93006095)(93001095)(10201501046)(6055026)(6041288)(20161123564045)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011); SRVR:DM5PR05MB3340; BCL:0; PCL:0; RULEID:; SRVR:DM5PR05MB3340;
x-forefront-prvs: 0600F93FE1
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(39380400002)(39860400002)(376002)(366004)(396003)(199004)(189003)(110136005)(76176011)(25786009)(2171002)(2950100002)(33656002)(6246003)(6436002)(36756003)(99286004)(966005)(68736007)(14454004)(82746002)(53936002)(2900100001)(93886005)(6306002)(6512007)(478600001)(81156014)(59450400001)(3846002)(97736004)(6116002)(8676002)(2906002)(81166006)(106356001)(8936002)(3280700002)(3660700001)(7736002)(5250100002)(305945005)(86362001)(575784001)(2501003)(105586002)(6486002)(229853002)(58126008)(83716003)(316002)(5660300001)(186003)(66066001)(102836004)(6506007)(53546011)(26005); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR05MB3340; H:DM5PR05MB3484.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-microsoft-antispam-message-info: XC4p6vGpt2iBkjZ+pUNUtlf7R7tR8hP1ZNiPBIq/uRV4ayYhVETZIjver3m0+2GlRMP95ZINeYcxnSY0nMpiHeEaNsFbmRbVD/JQkmBNiRIIfr24YHNgc9okEYNajSz8gNdag4UAvKFr9Kfoz5hnA/Nd5fF5AROUjqk4t0YOA0Y=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <1C10EED9F27C5D4AA328A26921DACBFB@namprd05.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: ea6595ed-e648-4606-1b4a-08d580b0acea
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Mar 2018 02:44:24.6103 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR05MB3340
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-03_01:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803030029
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/_5yU23Q-v9VFZoIhqY3Rx8e2A7Y>
Subject: Re: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-20.txt
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Network Configuration WG mailing list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 03 Mar 2018 02:44:30 -0000

Here is a git commit for adding support for encrypting the zerotouch artifacts:

  https://github.com/netconf-wg/zero-touch/commit/ba11e4cfc139c28e191661c688212f5e791aa1d2


This was done in a branch that, if there are no objections, I will merge into 
master and submit an update before the cutoff.

Kent // author


=====

Hi -

On 2/28/2018 4:09 PM, Kent Watsen wrote:
> 
>> If its not a big deal, allow for encryption of artefacts. Encryption
>> is a good thing these days.
> 
> Okay, any more support?

I agree with Juergen's sentiment.

Randy

_______________________________________________
Netconf mailing list
Netconf@ietf.org
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_netconf&d=DwICAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=wcBruA4_TJhCit8_T7xFDmg0RWPk8RaAxccKp1m62qY&s=UA7Hv4L5jYyYT0H3Yt3vP4VihJO5Jiop_iAzhGycC3E&e=

v2.23.0 | Report a Bug | By Email