[netconf] 答复: I-D Action: draft-ietf-netconf-crypto-types-09.txt

["Xialiang (Frank, Network Standard & Patent Dept)" <[e-mail]>]

Hi Kent and all,
Please see my comments inline:


发件人: netconf [mailto:[e-mail]] 代表 Kent Watsen
发送时间: 2019年6月20日 23:44
收件人: [e-mail]
主题: Re: [netconf] I-D Action: draft-ietf-netconf-crypto-types-09.txt

This update converts the algorithms from being identities to enumerations.

This is suppose to be the result from the thread started on April 25 entitled "The maintenance of the algorithm identifiers in draft-ietf-crypto-types" but, actually, I think it's from an earlier thread in which I believe Lada stated rationale for using enumerations instead of identities (I can't find that thread right now).   Seeing that the enum "values" are just in position-order, I'm unsure what issue this change resolves, but it seems nicer that a server doesn't have to *implement* the module, and also the values don't have to be prefixed...
[Frank]: FYI, the earlier thread discussing and proposing a good solution for currently using enumerations instead of identities is: https://mailarchive.ietf.org/arch/msg/i2nsf/CKUsox3ua9JitEb5pQMN8-Iogwg   (Thanks Lada, Mahesh, Juergen, Martin, Andy, Acee, Paul Wouters and etc. for the productive discussion). The next issue to be addressed is whether the enum “values” can be in position-order, or should be the same as their respective IANA defined crypto algorithm numbers? For the latter case, which IANA should they be aligned: TLS, IPSec or SSH?

All said, I think that the maintainability issue remains.  IIRC, Tom Petch suggestion breaking the algorithms into smaller modules, that is, one module per what is now an "enumeration", and also I think that there was a recommendation for making these "iana-" modules...
[Frank]: Should we define the YANG modules for crypto types in yang IANA page?

B.R.
Frank

This change is orthogonal to the update posted three days ago, which focused on how to support server-generated keys, etc.  No objections have been received so far, and thus I'm beginning to think it's okay and we can go into last call after the above discussion resolves.

Kent // contributor



On Jun 20, 2019, at 10:52 AM, [e-mail]<mailto:[e-mail]> wrote:


A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Network Configuration WG of the IETF.

       Title           : Common YANG Data Types for Cryptography
       Authors         : Kent Watsen
                         Wang Haiguang
  Filename        : draft-ietf-netconf-crypto-types-09.txt
  Pages           : 56
  Date            : 2019-06-20

Abstract:
  This document defines YANG identities, typedefs, the groupings useful
  for cryptographic applications.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-netconf-crypto-types/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-netconf-crypto-types-09
https://datatracker.ietf.org/doc/html/draft-ietf-netconf-crypto-types-09

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-crypto-types-09


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
netconf mailing list
[e-mail]<mailto:[e-mail]>
https://www.ietf.org/mailman/listinfo/netconf