Re: [nfsv4] I-D Action: draft-ietf-nfsv4-rpc-tls-11.txt

Magnus Westerlund <magnus.westerlund@ericsson.com> Mon, 23 November 2020 15:29 UTC

Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: nfsv4@ietfa.amsl.com
Delivered-To: nfsv4@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F39733A064E for <nfsv4@ietfa.amsl.com>; Mon, 23 Nov 2020 07:29:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.202
X-Spam-Level:
X-Spam-Status: No, score=-0.202 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1aOivVav7Kig for <nfsv4@ietfa.amsl.com>; Mon, 23 Nov 2020 07:29:21 -0800 (PST)
Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2066.outbound.protection.outlook.com [40.107.20.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F28D53A044A for <nfsv4@ietf.org>; Mon, 23 Nov 2020 07:29:20 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HR/Dn5lqiesuciBu80eurES65LM8S2pKZLju0ai29DzlWIxjeNx4FiMRJ4HKpvB2TM4ubj7FwpIs0YT8tD7SmpWRFMVZSWkr33YWfHCpuFkCE1Rljpjg/iCUaLRRVaogt3aAeppOlJZqvloQP9g3svIcBYYEqve/MoXcDJujcM/DIGhfJ+tgDH928N1Pn9n2by38navwXj9RaR7AjQiU5NE//jKplMrTzc2FwijLZDveTTtV/jgtOIoRedzSzhF/b5ppYDUjhksst8uPFHWhQY3w+lQ/mzm/nwZCYHtpabljnuJBUkUPYQ8TS/xk8IRORbPvfoZck4A/gNzTT2uncA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ozaEQp1oj2yXtqnyTABElgSTON5180BuymLI0VhzYWI=; b=hPOzuVbVRG7sgTxLvGlBsPkkL8QGJfPsXrVGhKoM1EEPIanFdLBpKuhUXcnKeOETeRjNAskgNQnphQsQjTbwsR+4ElU/L/1QQcd0DPcVgApNPbAf08wb72uQmtwgbY90EtrOtUZFl4na6xchMIygr5be6RTqaXpoR6S2PGpVSUxTd1gic0yZjZV2fHVxNxTLrVpcLRRvp02WM9X6/Ui+OneXl8Yah2RFd+rNPGWZ9QETcv+WhLIAMizKkH977RFnEmhXUArK1g6mlpzRRiVAHAkx9QBRlt0DAGXWtPcdL6N6ERjccAwul8JusssZJq1qM3fi2gNM0gp0zSCwj5LDqw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ozaEQp1oj2yXtqnyTABElgSTON5180BuymLI0VhzYWI=; b=H+NFRZDtJU09FajC53BKOUtqp/U1u4Rp82GiJld54FFmC6aQ42ap0SZqbP+9/Lxhytk3/QRm4QCjnNmXJLzMJzyBoUWzi+7ZbSL7Pb2DXTYKgH01/kKJqj8UGFIQbACoUCBe0f5/KwZJLURSKyw6P0RFyx6PDHw5x/3dY3lijqA=
Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com (2603:10a6:7:8e::14) by HE1PR07MB3097.eurprd07.prod.outlook.com (2603:10a6:7:32::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3611.20; Mon, 23 Nov 2020 15:29:16 +0000
Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::f006:1e1e:83a1:e5d2]) by HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::f006:1e1e:83a1:e5d2%7]) with mapi id 15.20.3564.035; Mon, 23 Nov 2020 15:29:16 +0000
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
To: "nfsv4@ietf.org" <nfsv4@ietf.org>
Thread-Topic: [nfsv4] I-D Action: draft-ietf-nfsv4-rpc-tls-11.txt
Thread-Index: AQHWwaq2V/ctEvJHg0+Z9AS9cKQIZanV0xqg
Date: Mon, 23 Nov 2020 15:29:16 +0000
Message-ID: <HE1PR0702MB37723001B8EF834DB316892395FC0@HE1PR0702MB3772.eurprd07.prod.outlook.com>
References: <160614418727.31910.14092299087405779612@ietfa.amsl.com>
In-Reply-To: <160614418727.31910.14092299087405779612@ietfa.amsl.com>
Accept-Language: sv-SE, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com;
x-originating-ip: [158.174.130.243]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 86f4043f-3979-4d9b-3697-08d88fc48a33
x-ms-traffictypediagnostic: HE1PR07MB3097:
x-microsoft-antispam-prvs: <HE1PR07MB309720D07030FBB73796E6C595FC0@HE1PR07MB3097.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: wJ/13J32KZsMDEkeNYUnrhaod3jxRpYLCFz/KVamzHAR+qCISrOhVxnITIOrKKP0j3rW0L/LUwDwTRINLEPypN5ZsPLzbEwhyHqsvzGuUJdsMNbT8awgd4aiHzreKxWyx1M6kkmET6hAXUonJ6cJjTriQBN7Oc9A2yxw9eyfKqaYotch6IK2Cx65YJrkgGjNbYlXiaAV7Tu0kDKfQhJ3EIgMqAPluXOEM/De+bztvs6gCuiAYR+cFgbW/a2dnPa7HOij/HV0qKnDsq1P9TMonE9bN1dbv1KEiyxUeqPUGzRNqMak+5S24QKiJBs8bbzw0ff6e+JKFI7FB5WCnh5YDoSgJZyoZ3GhFx4VbcyLyzSZRXYI/xT8xXDmP5khBDmv0Zoa/L4Jz2MXhx+TLNdONQ==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0702MB3772.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(39860400002)(366004)(396003)(376002)(346002)(5660300002)(83380400001)(186003)(9686003)(86362001)(26005)(53546011)(6506007)(66574015)(7696005)(55016002)(99936003)(966005)(33656002)(4001150100001)(76116006)(478600001)(316002)(8936002)(52536014)(66616009)(8676002)(66556008)(66946007)(64756008)(66446008)(66476007)(6916009)(2906002)(71200400001)(44832011); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 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
x-ms-exchange-transport-forked: True
Content-Type: multipart/signed; micalg="SHA1"; protocol="application/x-pkcs7-signature"; boundary="----=_NextPart_000_003A_01D6C1B5.C880BD90"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: HE1PR0702MB3772.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 86f4043f-3979-4d9b-3697-08d88fc48a33
X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Nov 2020 15:29:16.6949 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: YvB+A5zWWJWf+k+b0AF8XPcYaBolUVB23dfNgUj8U9aWwD/Po3Rc/EutAG49YBeYOa/PnULmNgkvMUztipDNljP8QEKdpvZZlx8SKzZMor0=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3097
Archived-At: <https://mailarchive.ietf.org/arch/msg/nfsv4/YChMfbQwG425ZxZlpBqA6_2Y04E>
Subject: Re: [nfsv4] I-D Action: draft-ietf-nfsv4-rpc-tls-11.txt
X-BeenThere: nfsv4@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NFSv4 Working Group <nfsv4.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/nfsv4>, <mailto:nfsv4-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/nfsv4/>
List-Post: <mailto:nfsv4@ietf.org>
List-Help: <mailto:nfsv4-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/nfsv4>, <mailto:nfsv4-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Nov 2020 15:29:23 -0000

WG,

This update is a minor changes due to feedback from Russ Housley about some
not aligned terminology that we got during the actual assignment. Chuck has
drafted this and Russ are happy with it. I see no issues with the changes.
It would be good if the WG participants check the changes. 

I thought it was best that the document was updated directly, rather than
introduce these changes in AUTH48. Especially as this document are now in
the MISSREF status due to the DTLS related drafts and the TLS Channel
Binding (ietf-kitten-tls-channel-bindings-for-tls13). The last is likely the
one that will take the longest time, as the other already are with the AD.

Cheers

Magnus 



> -----Original Message-----
> From: nfsv4 <nfsv4-bounces@ietf.org> On Behalf Of internet-
> drafts@ietf.org
> Sent: den 23 november 2020 16:10
> To: i-d-announce@ietf.org
> Cc: nfsv4@ietf.org
> Subject: [nfsv4] I-D Action: draft-ietf-nfsv4-rpc-tls-11.txt
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts
directories.
> This draft is a work item of the Network File System Version 4 WG of the
> IETF.
> 
>         Title           : Towards Remote Procedure Call Encryption By
Default
>         Authors         : Trond Myklebust
>                           Charles Lever
> 	Filename        : draft-ietf-nfsv4-rpc-tls-11.txt
> 	Pages           : 26
> 	Date            : 2020-11-23
> 
> Abstract:
>    This document describes a mechanism that, through the use of
>    opportunistic Transport Layer Security (TLS), enables encryption of
>    Remote Procedure Call (RPC) transactions while they are in-transit.
>    The proposed mechanism interoperates with ONC RPC implementations
>    that do not support it.  This document updates RFC 5531.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-nfsv4-rpc-tls/
> 
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-nfsv4-rpc-tls-11.html
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-nfsv4-rpc-tls-11
> 
> 
> Please note that it may take a couple of minutes from the time of
submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> 
> _______________________________________________
> nfsv4 mailing list
> nfsv4@ietf.org
> https://www.ietf.org/mailman/listinfo/nfsv4