Re: [OPSAWG] Start of WGLC for TACACS+ document.

[Alan DeKok <[e-mail]>]

On Oct 6, 2016, at 12:19 PM, t.petch <[e-mail]> wrote:
> You are not, and I did not mean to imply that you were.  I mean that
> your changes seem to me reflect a different approach, a different style
> which I do not see as that of the authors.  I see the existing style as
> unusual, but not wrong, and am content to leave it as is for an
> Informational RFC which documents what is, or perhaps what has been. You
> used the word 'philosophical' and I agreed.

  I see the existing draft as not documenting the protocol.  That's my main concern.

> So I would keep changes to the minimum, omissions or contradictions and
> those required  by the publication process (such as splitting References
> into Informative and Normative).  It is, after all, WGLC.

  This doesn't address my concerns.

  Again, as an implementor, I have *no idea* what to do for huge swathes of the protocol.

  On top of that, the current draft is silent on serious security topics.

  e.g. Length of CHAP challenges is implied from the context.  OK, that's fine, but what are the *limits* on CHAP challenge lengths?

 A: none.  CHAP challenges can be omitted entirely!

> On Security, I would invite the chairs to ask for an early review by the
> Security Directorate, explaining the context of this document, asking
> them how much more is needed and how it should be expressed.  It might
> not be very much although my experience is that I never know in advance
> what they are going to come up with.

  I've been a member of SAAG for a while now, and have done reviews, and read many more.  My prediction is that the current document will give SAAG a heart attack, and they will refuse publication.

  There is a huge push to get the draft published.  That's fine.  What's *not* fine is that it seems to me at least... that many people simply don't care what's in the document.  They don't care if the protocol is badly specified.  Or if it's insecure.  In fact, these "features" could be beneficial.  Because it means that everyone can claim compliance.  And no one has to re-examine their implementation.

  That may sound harsh, but I just don't see any other explanation.  If we are going to document the protocol, then let's document the protocol.  If we're going to agree that we don't need to document the protocol then put a huge disclaimer at the top of the draft saying so.

  Giving lip service to "document the protocol", while opposing attempts to do so is unproductive.

  Alan DeKok.