Re: [OPSAWG] Zaheduzzaman Sarker's No Objection on draft-ietf-opsawg-sbom-access-15: (with COMMENT)

Eliot Lear <lear@cisco.com> Thu, 27 April 2023 09:46 UTC

Return-Path: <lear@cisco.com>
X-Original-To: opsawg@ietfa.amsl.com
Delivered-To: opsawg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 850B6C1522C8; Thu, 27 Apr 2023 02:46:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.597
X-Spam-Level:
X-Spam-Status: No, score=-9.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XWOWYPCFFBfM; Thu, 27 Apr 2023 02:46:21 -0700 (PDT)
Received: from aer-iport-4.cisco.com (aer-iport-4.cisco.com [173.38.203.54]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE2B0C1522AB; Thu, 27 Apr 2023 02:46:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3026; q=dns/txt; s=iport; t=1682588781; x=1683798381; h=mime-version:subject:from:in-reply-to:date:cc:message-id: references:to; bh=r7jk04H7cyG0c82aSVbWDO9uUEKtTNOsPY9pf1SiI9M=; b=Dic12BOf/DhVESHHUmI3xPa37Kg5vlxsQx5/vaCNnxdId1vyRxod8mHe 9/DnsNluCyaI6pdsOXstX4eREGQkZ4fqSekHWn3fO6NbWhz+6YSg2ibh3 Mt48csmyI9UwcFF1A0xyigjP//hwSI7Z1EqgTQmVpXoo6htILQ4Gl5/rc U=;
X-Files: signature.asc : 488
X-IPAS-Result: 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
IronPort-Data: A9a23:gfYYsanGDt0a5R04ToMYoUHo5gz9IURdPkR7XQ2eYbSJt16W5oA// 9YtKSrfbaHbJie3LscnK96GQXl26pHcnddrTQA5rCtmEiIW+ZXOX93JdEusMXPPJ5fKRks9v 8kXYNLOJslsHnWFrE/0bLXtoSBy3vGDFuX1BOOcNkidKeMcpAIJ0XqPzMZl0t4AbaGFPj6wV fPOT+z3YVP7hDd9Pm8asfvT+Rgwtqv+tmJAtwI3P6wVtVSPmXI8AcNEL8ldDZdXrqq4vwKeb 7yepF1s1jqBp3/BMvv8zvCjNBdirof6ZWBisFIOM0SZqkUE931aPpoTbqJGMh8L0WrRxbid9 f0U3XCOYVZxVkHzsLx1vylwS0mS6oUfpdcriVDm2SCi5xWun0nEmp2CP2lqVWEswdubNEkVn RAuxJ/hWTjY7w6+6OrTpuCBHa3PJuGzVG8UkikIIT00kZ/KTLibK5gm6+O00x811scTQdTfe vEcaBV+TjPYeCR2IwgIXcdWcOeA3hETchVRpUjQrq0t7i2Cigdwy7PqdtHSf7RmR+0MwR3e/ TKApTyiREtAXDCc4WLtHnaEguLGhwvwWZkZE/uz8fsCbFi7mTZNUkVKDTNXp9GwgA2ja80FL XAR4yQgnLUK5mHyXIPECkjQTHms505ABIU4//cBwAuMzq6S/BuxBnUNUTNALtchsaceRTEs1 RmDnsnqBTtropWOSG7b+K2dsDWyPiYYNykOaEcsShMe6sbsiIA+khyJScxseIaylsb8Bj61y DCDrTIlr7QekcBN0L+0lXjLmTuiut3IQxI7owLPRWu64UZibomgIoWj4lXA9t5BIZqXCF6bs xAsmsWF48gPAI2D0iuXT40lLrip6vqYIi/VhFdpWaIo7Teg4VauZ4Fb+yp5IgFiNcNsRNPyS Ebeo0ZQ/JhJID6sZLMxaIOqAMNsxq/lfTj4ahzKRt8eZcUtVg6axyRvSl+y+Hj2qXE1zr5qb P93bv2QJXodDK1myh+/SOEczaIny0gCKYX7GMmTI/OPjOP2WZKFdVsWGAbUNb5ovMtotC2Iq Y8FZqNm3j0FCIXDjj/rHZk7C3RiwZITLJTzptZaPtWfKwYO9IoJUqSInNvNl6RLm6lLkePB+ H3VZ6O59LYdrSCdQelpQik9AF8KYXqZhShrVcDLFQ3ys0XPma71sM8im2IfJNHLDtBLw/9uV OUicM6dGPlJQTmv021DPcOg99cyL0zy31Pm08+ZjN4XIsEIq+vhp4CMQ+cT3HVm4tef7JFn+ OTwims3v7JZG18/ZCopVB5f5wrh4SdC8A6Dd0DJOdJUMF7965RnLjeZsxPEC59kFPk3/RPDj 1z+KU5B/YHl+tZlmPGX3vrsh9nyTIND8r9yQjOzAUCeb3eKpwJOAOZoDY61QNwqfDqlpPj5N bUJlKGU3T9utA8ijreQ2o1DlcoWj+YDbZcDpui4NB0nt2iWN44=
IronPort-HdrOrdr: A9a23:pEGlma1nLQ567QKHKRE+gAqjBKUkLtp133Aq2lEZdPWaSKylfq GV9sjzuiWUtN98Yh4dcJW7VpVoP0mslqKdkLN9AV7KZmCP01dAbrsSj7cKqAeNJ8SRzJ856U 4ZSdkbNOHN
X-Talos-CUID: 9a23:qkhyYGrkFHA75le2+9/EOyHmUcV1dSCB7nbNGEq5JndLb6WOcGaJp7wxxg==
X-Talos-MUID: 9a23:eoruEg9psR9Z/uFZnLR12gSQf85ioLmeFxoLrZAftce1KBRiFm6P1g3iFw==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos; i="5.99,230,1677542400"; d="asc'?scan'208"; a="7262040"
Received: from aer-iport-nat.cisco.com (HELO aer-core-9.cisco.com) ([173.38.203.22]) by aer-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 27 Apr 2023 09:46:18 +0000
Received: from smtpclient.apple ([10.228.8.129]) by aer-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id 33R9kHcn042106 (version=TLSv1.2 cipher=AES256-GCM-SHA384 bits=256 verify=NO); Thu, 27 Apr 2023 09:46:18 GMT
Content-Type: multipart/signed; boundary="Apple-Mail=_7AB2B718-1AAE-41F4-96FB-9A5661EA84A3"; protocol="application/pgp-signature"; micalg="pgp-sha256"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.500.231\))
From: Eliot Lear <lear@cisco.com>
In-Reply-To: <DF261BDB-89D5-4A82-8BDB-91F7E5C41133@cisco.com>
Date: Thu, 27 Apr 2023 11:46:07 +0200
Cc: The IESG <iesg@ietf.org>, draft-ietf-opsawg-sbom-access@ietf.org, opsawg-chairs@ietf.org, opsawg@ietf.org, henk.birkholz@sit.fraunhofer.de, bill.wu@huawei.com
Message-Id: <DC52EC6A-5145-4383-A4E6-A35A798AF4E9@cisco.com>
References: <168254940349.29117.894604247287632283@ietfa.amsl.com> <DF261BDB-89D5-4A82-8BDB-91F7E5C41133@cisco.com>
To: Zaheduzzaman Sarker <Zaheduzzaman.Sarker@ericsson.com>
X-Mailer: Apple Mail (2.3731.500.231)
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/8HSY_C5ymprRuiT33LEr-nsmKEw>
Subject: Re: [OPSAWG] Zaheduzzaman Sarker's No Objection on draft-ietf-opsawg-sbom-access-15: (with COMMENT)
X-BeenThere: opsawg@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: OPSA Working Group Mail List <opsawg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsawg>, <mailto:opsawg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsawg/>
List-Post: <mailto:opsawg@ietf.org>
List-Help: <mailto:opsawg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsawg>, <mailto:opsawg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2023 09:46:25 -0000

Except that Rob suggested that I posted a new draft with the updates, which I have done.

Eliot

> On 27 Apr 2023, at 07:26, Eliot Lear <lear@cisco.com> wrote:
> 
> This, along with all edits in answer to AD commentss, is corrected in the working copy.  I’ll post that update in the next day or so, barring new comments from other ADs.
> 
> Eliot
> 
>> On 27 Apr 2023, at 00:50, Zaheduzzaman Sarker via Datatracker <noreply@ietf.org> wrote:
>> 
>> Zaheduzzaman Sarker has entered the following ballot position for
>> draft-ietf-opsawg-sbom-access-15: No Objection
>> 
>> When responding, please keep the subject line intact and reply to all
>> email addresses included in the To and CC lines. (Feel free to cut this
>> introductory paragraph, however.)
>> 
>> 
>> Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/
>> for more information about how to handle DISCUSS and COMMENT positions.
>> 
>> 
>> The document, along with other ballot positions, can be found here:
>> https://datatracker.ietf.org/doc/draft-ietf-opsawg-sbom-access/
>> 
>> 
>> 
>> ----------------------------------------------------------------------
>> COMMENT:
>> ----------------------------------------------------------------------
>> 
>> Thanks for working on this specification.
>> 
>> I also stumbled upon "sbom" and "vuln" nodes in section 1.2. I assumed these
>> refers to the nodes in the YANG tree sbom node = starts with sbom- and vuln
>> node = starts with vuln- .... yes that I had to guess to continue reading. Now
>> I see Roman has a discuss on this point hence supporting the discuss. I believe
>> evenif it might be a convention call those node as I assumed, we could be more
>> clear by actually describing the notion in the doc. And if my assumption is
>> wrong then we definitely need to describe the nodes so that readers like me
>> don't make wrong assumption :-).
>> 
>> 
>> 
>