Re: [P2PSIP] [Technical Errata Reported] RFC7363 (7088)

Dean Willis <dean.willis@softarmor.com> Wed, 17 August 2022 18:53 UTC

Return-Path: <dean.willis@softarmor.com>
X-Original-To: p2psip@ietfa.amsl.com
Delivered-To: p2psip@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28C4AC1524A5 for <p2psip@ietfa.amsl.com>; Wed, 17 Aug 2022 11:53:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.106
X-Spam-Level:
X-Spam-Status: No, score=-7.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=softarmor.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OMT58cSF-qP7 for <p2psip@ietfa.amsl.com>; Wed, 17 Aug 2022 11:52:55 -0700 (PDT)
Received: from mail-4022.proton.ch (mail-4022.proton.ch [185.70.40.22]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED5F2C14CE35 for <p2psip@ietf.org>; Wed, 17 Aug 2022 11:52:54 -0700 (PDT)
Date: Wed, 17 Aug 2022 18:52:45 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=softarmor.com; s=protonmail; t=1660762371; x=1661021571; bh=RMSZ2T/n8GrgmRfgMrIIGrslN0/bOd//ACTHq5pv1dU=; h=Date:To:From:Cc:Reply-To:Subject:Message-ID:In-Reply-To: References:Feedback-ID:From:To:Cc:Date:Subject:Reply-To: Feedback-ID:Message-ID; b=AIy3zamlvWtT40q57iqAKsuRw73TajDFkVUKtTG4fL+oxfMl1vVw8Pseug3nswb7m Tu7L3fx634swxIZP5GC2wbfDOzaPBJkQlWrY5CU3safvppRsF3tNqpR1PVaTEBTNEm /NOuS41UQSQGC7oSS5gaFwK3Kq1zjjLMnqgC88v7HxcWqDci+M87K5QbovCiibV6iJ QklYhmdwfymnRCtIxoQrot4HLePoMNZdBr97sQdKAHa/2/cSGQ9tgdEHpA69TlVa5D 1Ui3TAy5RzzWFYDC2cJU99Lt6LBamdElkpipo0WKCjs0WAAJF1Hw5fV+5Cg/XBsHO6 w8kMXujWiqisw==
To: RFC Errata System <rfc-editor@rfc-editor.org>, Jouni.Maenpaa@ericsson.com, Gonzalo.Camarillo@ericsson.com, superuser@gmail.com, francesca.palombini@ericsson.com, br@brianrosen.net, cjbc@it.uc3m.es
From: Dean Willis <dean.willis@softarmor.com>
Cc: keepn58@gmail.com, p2psip@ietf.org
Reply-To: Dean Willis <dean.willis@softarmor.com>
Message-ID: <acb8ff49-93f7-7f1e-55c9-114ca0b3d6ec@softarmor.com>
In-Reply-To: <20220815074425.ECED34C09D@rfcpa.amsl.com>
References: <20220815074425.ECED34C09D@rfcpa.amsl.com>
Feedback-ID: 30044069:user:proton
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/p2psip/oI0TO7t3keFruRJiAHhh2JAJLAA>
Subject: Re: [P2PSIP] [Technical Errata Reported] RFC7363 (7088)
X-BeenThere: p2psip@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Peer-to-Peer SIP working group discussion list <p2psip.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/p2psip>, <mailto:p2psip-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/p2psip/>
List-Post: <mailto:p2psip@ietf.org>
List-Help: <mailto:p2psip-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/p2psip>, <mailto:p2psip-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Aug 2022 18:53:00 -0000

Seems legit.

On 8/15/22 02:44, RFC Errata System wrote:
> The following errata report has been submitted for RFC7363,
> "Self-Tuning Distributed Hash Table (DHT) for REsource LOcation And Discovery (RELOAD)".
>
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid7088
>
> --------------------------------------
> Type: Technical
> Reported by: Keepn <keepn58@gmail.com>
>
> Section: 7.1
>
> Original Text
> -------------
> The client SHOULD create a "code_verifier" with a minimum of 256 bits
> of entropy.  This can be done by having a suitable random number
> generator create a 32-octet sequence.  The octet sequence can then be
> base64url-encoded to produce a 43-octet URL safe string to use as a
> "code_challenge" that has the required entropy.
>
> Corrected Text
> --------------
> The client SHOULD create a "code_verifier" with a minimum of 256 bits
> of entropy.  This can be done by having a suitable random number
> generator create a 32-octet sequence.  The octet sequence can then be
> base64url-encoded to produce a 43-octet URL safe string to use as a
> "code_verifier" that has the required entropy.
>
> Notes
> -----
> The "32-octet sequence" referenced in the original text seems to be inconsistent with Section 4.1, which states that the minimum length of the code_verifier is 43 characters. It would be consistent by changing "code_challenge" to "code_verifier".
>
> Instructions:
> -------------
> This erratum is currently posted as "Reported". If necessary, please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party
> can log in to change the status and edit the report, if necessary.
>
> --------------------------------------
> RFC7363 (draft-ietf-p2psip-self-tuning-15)
> --------------------------------------
> Title               : Self-Tuning Distributed Hash Table (DHT) for REsource LOcation And Discovery (RELOAD)
> Publication Date    : September 2014
> Author(s)           : J. Maenpaa, G. Camarillo
> Category            : PROPOSED STANDARD
> Source              : Peer-to-Peer Session Initiation Protocol RAI
> Area                : Real-time Applications and Infrastructure
> Stream              : IETF
> Verifying Party     : IESG
>
> _______________________________________________
> P2PSIP mailing list
> P2PSIP@ietf.org
> https://www.ietf.org/mailman/listinfo/p2psip