Re: [netmod] YANG module security considerations template - TLS reference

Lou Berger <lberger@labn.net> Mon, 01 October 2018 18:52 UTC

Return-Path: <lberger@labn.net>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C170130E0E for <netmod@ietfa.amsl.com>; Mon, 1 Oct 2018 11:52:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (768-bit key) header.d=labn.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u8hqdvoidb63 for <netmod@ietfa.amsl.com>; Mon, 1 Oct 2018 11:52:17 -0700 (PDT)
Received: from gproxy3-pub.mail.unifiedlayer.com (gproxy3-pub.mail.unifiedlayer.com [69.89.30.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0BCA91252B7 for <netmod@ietf.org>; Mon, 1 Oct 2018 11:52:17 -0700 (PDT)
Received: from cmgw10.unifiedlayer.com (unknown [10.9.0.10]) by gproxy3.mail.unifiedlayer.com (Postfix) with ESMTP id 4EDB540E10 for <netmod@ietf.org>; Mon, 1 Oct 2018 12:50:44 -0600 (MDT)
Received: from box313.bluehost.com ([69.89.31.113]) by cmsmtp with ESMTP id 73HIg5xbKxGUV73HIgEOmM; Mon, 01 Oct 2018 12:50:44 -0600
X-Authority-Reason: nr=8
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=labn.net; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Subject: References:In-Reply-To:Message-ID:Date:To:From:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=cBb7feAbH43bqjq1Apt2E63B4oyGhGVo9aqiB6gRgVY=; b=FY6KK9cDcN3TH/WZHa0bLXuPxT pfW5TafBNOQhGwfzzytoDKjAV+NLs060ahboGj/WWoi/w/c6374OFyk1kjrNYZb8Mmid3uQFueaO1 c19OZNtJWKijCYvJOyo3KdQgJ;
Received: from [172.58.185.146] (port=19760 helo=[IPV6:2607:fb90:64bf:85af:0:4a:a606:c201]) by box313.bluehost.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.91) (envelope-from <lberger@labn.net>) id 1g73HH-002d1T-P8; Mon, 01 Oct 2018 12:50:43 -0600
From: Lou Berger <lberger@labn.net>
To: Kent Watsen <kwatsen@juniper.net>, "Acee Lindem (acee)" <acee@cisco.com>, Martin Bjorklund <mbj@tail-f.com>, netmod-chairs@ietf.org, netmod-ads@ietf.org, netmod@ietf.org
Date: Mon, 01 Oct 2018 14:50:39 -0400
Message-ID: <16630f7d018.27ce.9b4188e636579690ba6c69f2c8a0f1fd@labn.net>
In-Reply-To: <4BF93030-3371-417B-A897-61A44464834C@juniper.net>
References: <20181001.091910.1896030373672380031.mbj@tail-f.com> <43AB5D62-FCB5-4B84-841E-30F14235A147@cisco.com> <4BF93030-3371-417B-A897-61A44464834C@juniper.net>
User-Agent: AquaMail/1.16.0-1193 (build: 101600006)
MIME-Version: 1.0
Content-Type: text/plain; format="flowed"; charset="us-ascii"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - box313.bluehost.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - labn.net
X-BWhitelist: no
X-Source-IP: 172.58.185.146
X-Source-L: No
X-Exim-ID: 1g73HH-002d1T-P8
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: ([IPV6:2607:fb90:64bf:85af:0:4a:a606:c201]) [172.58.185.146]:19760
X-Source-Auth: lberger@labn.net
X-Email-Count: 1
X-Source-Cap: bGFibm1vYmk7bGFibm1vYmk7Ym94MzEzLmJsdWVob3N0LmNvbQ==
X-Org: HG=bhcustomer;ORG=bluehost;
X-Local-Domain: yes
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/pYXl-I0QLDuecSfzbh9TjfBx6hg>
Subject: Re: [netmod] YANG module security considerations template - TLS reference
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 01 Oct 2018 18:52:18 -0000

At this point I think it's mature enough to be a yang DR or NETMOD wg thing?

Thoughts, objections?

Lou


----------
On October 1, 2018 2:32:34 PM Kent Watsen <kwatsen@juniper.net> wrote:

> Benoit is the progenitor of the template.  I took it to be an "AD thing"
> has since passed to Ignas.
>
> Kent
>
>
>
> ?-----Original Message-----
> From: "Acee Lindem (acee)" <acee@cisco.com>
> Date: Monday, October 1, 2018 at 10:25 AM
> To: Martin Bjorklund <mbj@tail-f.com>, "netmod-chairs@ietf.org" 
> <netmod-chairs@ietf.org>, "netmod-ads@ietf.org" <netmod-ads@ietf.org>, 
> "netmod@ietf.org" <netmod@ietf.org>
> Subject: Re: [netmod] YANG module security considerations template - TLS 
> reference
> Resent-From: <alias-bounces@ietf.org>
> Resent-To: <joelja@bogus.com>, <wangzitao@huawei.com>, <lberger@labn.net>, 
> <kwatsen@juniper.net>
> Resent-Date: Monday, October 1, 2018 at 10:25 AM
>
> Agreed - although I'm not sure who has control over the template either.
>
> For drafts that are in-progress, IDNITs will flag this obsolete reference 
> and, for at least one of the drafts I'm an editor, I've already made the 
> update.
>
> Thanks,
> Acee
>
> On 10/1/18, 3:19 AM, "netmod on behalf of Martin Bjorklund" 
> <netmod-bounces@ietf.org on behalf of mbj@tail-f.com> wrote:
>
>     Hi,
>
>     In their review of draft-ietf-netconf-nmda-restconf, the IESG
>     suggested we update the reference to TLS from RFC 5246 to RFC 8446
>     (which obsoletes 5246).
>
>     This update needs to be done to the template available at
>     https://urldefense.proofpoint.com/v2/url?u=https-3A__trac.ietf.org_trac_ops_wiki_yang-2Dsecurity-2Dguidelines&d=DwIGaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=54lt0_rCJTvXEIWmFXsdUNDbzJIkrJ86K-IveL1QoG4&s=9uZWNJN6weNKKk7ABnZ-yFVkwdZxZzQOSm9bSXwT1SQ&e=
>
>     (it is not quite clear who is repsonsible for this template; maybe
>     that should be clarified on the page)
>
>
>     /martin
>
>     _______________________________________________
>     netmod mailing list
>     netmod@ietf.org
>     https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_netmod&d=DwIGaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=54lt0_rCJTvXEIWmFXsdUNDbzJIkrJ86K-IveL1QoG4&s=QhZGZPVsGhr3-uPQZRPyHFcBYz59K2QZxenbb7Ly7L8&e=
>
>
>
> _______________________________________________
> netmod mailing list
> netmod@ietf.org
> https://www.ietf.org/mailman/listinfo/netmod