Re: [nfsv4] Fwd: New Version Notification for draft-dnoveck-nfsv4-security-03.txt

Note an xref typo on p. 64.

I'm not up for the effort to pin down mode/ACL interactions:

	- We know that two implementations (Linux and Solaris) already
	  have at least one minor irreconcileable difference.

	- We know nothing about any other implementations.  No other
	  implementors have stepped up to describe their server's
	  behavior.  Nobody's stepped up to test other implementations.
	  I strongly suspect such efforts would find more (and larger)
	  differences.

	- We know of no application that actually depends on these
	  details of how ACLs and mode interacts.  I've seen no
	  compelling reason we need this level of detail other than a
	  blanket preference for stricter over looser specification.

	- Pinning this all down and getting concensus on it is a major
	  effort.  I know I've already spent more time on this than I
	  want to.

	- This is a long complicated piece of an already long
	  complicated spec.

I'm fine with minor editorial changes.  Otherwise, if we're going to be
making substantive changes, I'm only interested in removing language.

--b.

On Tue, Nov 23, 2021 at 08:55:04AM -0500, David Noveck wrote:
> This is considerably different from -02 (1400 lines).  Still, a diff
> between -02 and -03 is useful to see where the changes/additions are, if
> you read -02.
> 
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org>
> Date: Tue, Nov 23, 2021 at 8:45 AM
> Subject: New Version Notification for draft-dnoveck-nfsv4-security-03.txt
> To: David Noveck <davenoveck@gmail.com>
> 
> 
> 
> A new version of I-D, draft-dnoveck-nfsv4-security-03.txt
> has been successfully submitted by David Noveck and posted to the
> IETF repository.
> 
> Name:           draft-dnoveck-nfsv4-security
> Revision:       03
> Title:          Security for the NFSv4 Protocols
> Document date:  2021-11-23
> Group:          Individual Submission
> Pages:          139
> URL:
> https://www.ietf.org/archive/id/draft-dnoveck-nfsv4-security-03.txt
> Status:
> https://datatracker.ietf.org/doc/draft-dnoveck-nfsv4-security/
> Html:
> https://www.ietf.org/archive/id/draft-dnoveck-nfsv4-security-03.html
> Htmlized:
> https://datatracker.ietf.org/doc/html/draft-dnoveck-nfsv4-security
> Diff:
> https://www.ietf.org/rfcdiff?url2=draft-dnoveck-nfsv4-security-03
> 
> Abstract:
>    This document describes the core security features of the NFSv4
>    family of protocols, applying to all minor versions.  The discussion
>    includes the use of security features provided by RPC on a per-
>    connection basis.
> 
>    This preliminary version of the document, is intended, in large part,
>    to result in working group discussion regarding existing NFSv4
>    security issues and to provide a framework for addressing these
>    issues and obtaining working group consensus regarding necessary
>    changes.
> 
>    When a successor document is eventually published as an RFC, it will
>    supersede the description of security appearing in existing minor
>    version specification documents such as RFC 7530 and RFC 8881.
> 
> 
> 
> 
> The IETF Secretariat

> _______________________________________________
> nfsv4 mailing list
> nfsv4@ietf.org
> https://www.ietf.org/mailman/listinfo/nfsv4