Re: [netconf] AD review of draft-ietf-netconf-over-tls13-02

["Rob Wilton (rwilton)" <[e-mail]>]

Hi Sean, authors,

I think that your updates are basically good, but with a couple of minor nits/suggestions on the security considerations (https://netconf-wg.github.io/netconf-over-tls13/draft-ietf-netconf-over-tls13.html)

1.
  "NETCONF implementations SHOULD follow the recommendations given in	
  [RFC9325]."

Consider tweaking to "SHOULD also follow the TLS recommendations".  I.e., really to just emphasize that this isn't just referring to the security considerations of RFC 9325 (which I know the doc as previously just mentioned anyway).

2.
"As specified in [RFC7589], NETCONF over TLS requires mutual authentication. For implementations that support TLS 1.3 [I-D.ietf-tls-rfc8446bis]:"

Probably should split this to two separate paragraphs, on the presumption that "NETCONF over TLS requires mutual authentication" isn't specific to TLS 1.3.

Either way, I'm happy to defer to your judgement on these, so please resolve as you see fit, and post an updated draft and I'll start IETF LC.

Regards,
Rob


> -----Original Message-----
> From: Sean Turner <[e-mail]>
> Sent: Wednesday, October 18, 2023 3:26 AM
> To: Rob Wilton (rwilton) <[e-mail]>
> Cc: [e-mail]; [e-mail]
> Subject: Re: AD review of draft-ietf-netconf-over-tls13-02
> 
> 
> > On Oct 13, 2023, at 06:40, Rob Wilton (rwilton) <[e-mail]> wrote:
> >
> > Hi,
> >
> > Thanks for this document.  Here is my AD review of draft-ietf-netconf-over-
> tls13.  I found this document pretty easy to read, and after all, it is quite short
> but have a few questions/comments:
> 
> Excellent!
> 
> > Moderate level comments:
> >
> > (1) p 3, sec 5.  Security Considerations
> >
> >   For implementations that support TLS 1.3, the Security Considerations
> >   of TLS 1.3 [I-D.ietf-tls-rfc8446bis] apply.
> >
> > Note, this will create a normative dependency on ietf-tls-rfc8446bis,
> potentially delaying the doc.  If this was a concern then it would seem that
> referencing RFC 8446 would be equally valid?
> 
> It will, but I think we’re okay with waiting. -rfc8446bis and -rfc8447bis should
> be coming along shortly; I’m shepherding one and authoring the other ;)
[Rob Wilton (rwilton)] 
Okay!

> 
> > (2) p 3, sec 5.  Security Considerations
> >
> >      NETCONF is used to access configuration and state information and
> >      to modify configuration information.  TLS 1.3 mutual
> >      authentication is used to ensure that only authorized users and
> >      systems are able to view the NETCONF server's configuration and
> >      state or to modify the NETCONF server's configuration.  To this
> >      end, neither the client nor the server should establish a NETCONF
> >      over TLS 1.3 connection with an unknown, unexpected, or
> >      incorrectly identified peer; see Section 7 of [RFC7589].  If
> >      deployments make use of a trusted list of Certification Authority
> >      (CA) certificates [RFC5280], then the listed CAs should only issue
> >      certificates to parties that are authorized to access the NETCONF
> >      servers.  Doing otherwise will allow certificates that were issued
> >      for other purposes to be inappropriately accepted by a NETCONF
> >      server.
> >
> > It is unclear which paragraph in RFC 7589 is being modified, and it is unclear
> to me whether the intent it to append a new paragraph or replace an existing
> one.  It looks like this is updating the first paragraph of the security
> considerations (sec 9).  But it could be interpreted that you are replacing a
> paragraph that would also apply to TLS 1.2 to only apply to TLS 1.3.  Would it
> be better to add a new paragraph that only covers TLS 1.3.  I.e., the text that
> you have above minus the first sentence?
> 
> It’s about adding new text for TLS 1.3. How about:
> 
> OLD:
> 
> The following considerations from [RFC7589] has been modified to also
>    apply to TLS 1.3 [I-D.ietf-tls-rfc8446bis]:
> 
>       NETCONF is used to access configuration and state information and
>       to modify configuration information. TLS 1.3 mutual ...
> 
> NEW:
> 
> As specified in [RFC7589], NETCONF over TLS requires mutual authentication.
> For implementations that support TLS 1.3:
> 
>    TLS 1.3 mutual …
> 
> See the following PR:
> https://github.com/netconf-wg/netconf-over-tls13/pull/15
> 
> > Minor level comments:
> >
> > (3) p 1, sec 1.  Introduction
> >
> >   This document updates [RFC7589] to address support
> >   requirements for TLS 1.2 [RFC5246] and TLS 1.3
> >   [I-D.ietf-tls-rfc8446bis] and the use of TLS 1.3's early data, which
> >   is also known as 0-RTT data.
> >
> > Did you mean "address support".  Perhaps "to update support requirements
> for TLS 1.2 ..."?  If you agree to change, then it would be worth making a similar
> change in the abstract.
> 
> I did mean address as in to speak to in a formal way, but maybe that’s not the
> best way to phrase it.  It does update the 1.2 requirements, but it add 1.3
> requirements.  Maybe something like:
> 
> This document updates RFC 7589 to update support requirements for TLS 1.2
> and add TLS 1.3 support requirements, including restrictions on the
> use of TLS 1.3's early data.
> 
> See the following PR:
> https://github.com/netconf-wg/netconf-over-tls13/pull/15
> 
> > (4) p 3, sec 4.  Cipher Suites
> >
> >   NETCONF implementations SHOULD follow the recommendations given in
> >   [RFC9325].
> >
> > I'm not sure that this is actionable, but I was wondering how many of the
> recommendations in RFC 9325 are relevant for NETCONF and haven't already
> been stated above.  I.e., I presume it doesn't make sense to cherry pick, or
> highlight the specific recommendations for RFC 9325 that are relevant?  I also
> note that this comment is within the Cipher Suites section but it wasn't clear
> whether the intention was to follow the recommendations more broadly?
> 
> RFC 9325 is a BCP about applications implementing TLS so I think it applies
> more broadly as NETCONF could be thought of as the application. How about
> we move that bit to the Security Considerations section?
> 
> See the following PR:
> https://github.com/netconf-wg/netconf-over-tls13/pull/15
> 
> > Regards,
> > Rob
> 
> 
> Cheers,
> spt