Re: [netmod] security considerations boilerplate updates to cover RESTCONF

[Benoit Claise <[e-mail]>]

On 3/16/2017 8:56 AM, Juergen Schoenwaelder wrote:
> On Thu, Mar 16, 2017 at 08:37:39AM +0100, Benoit Claise wrote:
>> Latest proposal:
>>
>>      The YANG module defined in this document is designed to be accessed
>>      via network management protocols such as NETCONF [RFC6241] or
>>      RESTCONF [RFC8040]. The lowest NETCONF layer is the secure transport
>> layer,
>>      and mandatory-to-implement secure transport is Secure Shell (SSH)
>> [RFC6242],
>>      while the lowest RESTCONF layer is HTTP, and the mandatory-to-implement
>> secure
>>      transport is Transport Layer Security (TLS) [RFC5246].
> Picking wording from Section 12 of RFC 8040 to replace your second
> sentence I get this:
>
>      The YANG module defined in this document is designed to be
>      accessed via network management protocols such as NETCONF
>      [RFC6241] or RESTCONF [RFC8040]. The lowest NETCONF layer is the
>      secure transport layer, and the mandatory-to-implement secure
>      transport is Secure Shell (SSH) [RFC6242]. The lowest RESTCONF
>      layer is HTTPS, and the mandatory-to-implement secure transport is
>      TLS [RFC5246].
>
>      The NETCONF access control model [RFC6536] provides the means to
>      restrict access for particular NETCONF or RESTCONF users to a
>      pre-configured subset of all available NETCONF or RESTCONF
>      protocol operations and content.
Yes, thank you.

Regards, B.
>
> /js
>