Re: [netmod] [Anima] revising RFC8366 -- Re: BRSKI-AE enum issue -> empty, but what's he encoding ?

Michael Richardson <mcr+ietf@sandelman.ca> Sun, 04 July 2021 22:17 UTC

Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5D023A24B0; Sun, 4 Jul 2021 15:17:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level:
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ec-RrcgV4sXy; Sun, 4 Jul 2021 15:17:25 -0700 (PDT)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20ED23A24AD; Sun, 4 Jul 2021 15:17:25 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 8FB6338B10; Sun, 4 Jul 2021 18:19:44 -0400 (EDT)
Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id nEgyaik93mkj; Sun, 4 Jul 2021 18:19:40 -0400 (EDT)
Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 8250C38AAB; Sun, 4 Jul 2021 18:19:40 -0400 (EDT)
Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 5665F4B6; Sun, 4 Jul 2021 18:17:18 -0400 (EDT)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: "Fries, Steffen" <steffen.fries@siemens.com>, "Rob Wilton (rwilton)" <rwilton@cisco.com>, "anima@ietf.org" <anima@ietf.org>, "netmod@ietf.org" <netmod@ietf.org>, Toerless Eckert <tte@cs.fau.de>, Kent Watsen <kent+ietf@watsen.net>
In-Reply-To: <b36e56b3970c4908af0d1cb00d08504c@siemens.com>
References: <20210625190512.GB30200@faui48e.informatik.uni-erlangen.de> <5025.1624653668@localhost> <DM4PR11MB5438EE27158CDEAF63F89C97B5039@DM4PR11MB5438.namprd11.prod.outlook.com> <27560.1625013411@localhost> <b36e56b3970c4908af0d1cb00d08504c@siemens.com>
X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha512"; protocol="application/pgp-signature"
Date: Sun, 04 Jul 2021 18:17:18 -0400
Message-ID: <11899.1625437038@localhost>
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/pUN-1RH7luuPPthCc9w_9OfQX68>
Subject: Re: [netmod] [Anima] revising RFC8366 -- Re: BRSKI-AE enum issue -> empty, but what's he encoding ?
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 04 Jul 2021 22:17:30 -0000

Fries, Steffen <steffen.fries@siemens.com> wrote:
    >> I thought I wrote a really nice ASCII art version of what documents inherit from
    >> RFC8366.  I can't find it in my outbox... I wonder if I nuked the draft by mistake.
    >>
    >> The short of it:
    >> RFC8366 -> RFC8995 (voucher-request)
    -> constrained-voucher (voucher-request, voucher)
    -> brski-async-enroll (voucher-request)

    > Would it make sense to also state the voucher for BRSKI-AE as it also
    > uses the voucher and tries to argue for a new assertion type
    > (agent-proximity)?

I am of two feelings here.
On the one hand, it would be IANA proceedurally simpler to include the new
assertion type into the 8366bis document.

On the other hand, this means having some kind of explanation in RFC8366bis
for the new choice, and that might force a lot of text to enter and get reviewed.

Once RFC8366bis is published, then async-enroll can make use of the IANA
Considerations to allocate that new enum value.  That won't slow async-enroll
down, because either way, it has to wait for RFC8366bis.

Where I'm a bit blurry is how stuff like the YANG in RFC8995, which uses
RFC8366 gets updated when IANA revises the module.  I think, it mostly
doesn't matter because none of are generating code from YANG... AT THIS TIME.

--
Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
           Sandelman Software Works Inc, Ottawa and Worldwide