Re: [OPSAWG] Éric Vyncke's No Objection on draft-ietf-opsawg-mud-iot-dns-considerations-12: (with COMMENT)

Michael Richardson <mcr+ietf@sandelman.ca> Mon, 25 March 2024 18:47 UTC

Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: opsawg@ietfa.amsl.com
Delivered-To: opsawg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF952C157927; Mon, 25 Mar 2024 11:47:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.107
X-Spam-Level:
X-Spam-Status: No, score=-7.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sandelman.ca
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fqNqbEl16mCe; Mon, 25 Mar 2024 11:47:17 -0700 (PDT)
Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00:e000:2bb::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 286D5C1654EC; Mon, 25 Mar 2024 11:47:16 -0700 (PDT)
Received: from dyas.sandelman.ca (unknown [111.65.46.58]) by relay.sandelman.ca (Postfix) with ESMTPS id 584EC1F448; Mon, 25 Mar 2024 18:47:14 +0000 (UTC)
Authentication-Results: relay.sandelman.ca; dkim=pass (2048-bit key; secure) header.d=sandelman.ca header.i=@sandelman.ca header.b="cM3IJIxQ"; dkim-atps=neutral
Received: by dyas.sandelman.ca (Postfix, from userid 1000) id EFB80A1915; Tue, 26 Mar 2024 04:47:07 +1000 (AEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=sandelman.ca; s=dyas; t=1711392427; bh=Fe6GYjFkSrU20HIuKsiLg5G0XrcajYjggTpg8kcv+pc=; h=From:To:cc:Subject:In-reply-to:References:Date:From; b=cM3IJIxQEnwr9Zh1jT6dPBAVieqWTY+2dKvc6SBkAqgmSm4EPO4z/LfJxFl3C3r6C 2uH0eumQBGeXKKK/f49rzOaLXyPzoRWi16guGsldOCjzIaYBTq+mF3pozyCDGHGfBf uhY32/K6bTuB6LSg32wdEoIJhnUPZ70e3tSMDRQYUzNSQifLkl+zsYGPZF/FEozR/K qrn2YNlyiHi0fEB05F6sT2ovrVexMLvVIJhanZurH6EV1fVhwkEMY7ageUhfdeBrKB UhnzBl8g8mXYUkJttvGHmD/DDaBFA3n5/U3lnPRvK2NnwDgGpg2wuYKmBJp3dsHfDm D7A0Dhuhj2D9g==
Received: from dyas (localhost [127.0.0.1]) by dyas.sandelman.ca (Postfix) with ESMTP id EC9A9A1913; Tue, 26 Mar 2024 04:47:07 +1000 (AEST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: =?utf-8?q?=C3=89ric_Vyncke?= <evyncke@cisco.com>
cc: The IESG <iesg@ietf.org>, dthaler1968@gmail.com, opsawg@ietf.org, mud@ietf.org, opsawg-chairs@ietf.org, draft-ietf-opsawg-mud-iot-dns-considerations@ietf.org
In-reply-to: <170965098581.18959.9237979064052019782@ietfa.amsl.com>
References: <170965098581.18959.9237979064052019782@ietfa.amsl.com>
Comments: In-reply-to =?utf-8?q?=C3=89ric_Vyncke_via_Datatracker?= <noreply@ietf.org> message dated "Tue, 05 Mar 2024 07:03:05 -0800."
X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.3
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha512"; protocol="application/pgp-signature"
Date: Tue, 26 Mar 2024 04:47:07 +1000
Message-ID: <419143.1711392427@dyas>
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/b0aanMdVnoKwZUcTxvo8JUh5zPo>
Subject: Re: [OPSAWG] Éric Vyncke's No Objection on draft-ietf-opsawg-mud-iot-dns-considerations-12: (with COMMENT)
X-BeenThere: opsawg@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: OPSA Working Group Mail List <opsawg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsawg>, <mailto:opsawg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsawg/>
List-Post: <mailto:opsawg@ietf.org>
List-Help: <mailto:opsawg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsawg>, <mailto:opsawg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Mar 2024 18:47:21 -0000

Dear IESG and MUD Enthusiasts,

I'm working through your comments, turning them all into issues, but I want
to alert you that the -12/-13 diff includes a significant restructuring of
the document in order to bring the *BCP* nature of the document more clearly
to the front.  I've tried to socialize this change via hallway conversations.
This also means that some of your detailed comments have completely missed
the mark, and I won't be turning those into issues as I go through them.

There is no attempt in this document to standardize any *MUD
controller* aspects or protocols, but IoT vendors need a model against which
to determine what kind of DNS behaviour will work, and what will not.

That was stated in the abstract:

   This document details concerns about how Internet of Things (IoT) devices use IP
   addresses and DNS names.
   These concerns become acute as network operators begin deploying RFC 8520
   Manufacturer Usage Description (MUD) definitions to control device
   access.

   Also, this document makes recommendations on when and how to use DNS names in MUD files.

I won't repeat this in each of the comments that I got, assuming everyone
might read this once.

https://author-tools.ietf.org/iddiff?url1=draft-ietf-opsawg-mud-iot-dns-considerations-12&url2=draft-ietf-opsawg-mud-iot-dns-considerations-13&difftype=--html

Looks like this might also contain some xml2rfc version based changes, e.g.:
  as s3.amazonaws.com).  vs as "s3.example.com"


--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-                      *I*LIKE*TRAINS*