IETF Logo Mail Archive

Re: [Pce] WG Last Call for draft-ietf-pce-pcep-yang-19

tom petch <ietfc@btconnect.com> Mon, 03 October 2022 10:02 UTC

Return-Path: <ietfc@btconnect.com>
X-Original-To: pce@ietfa.amsl.com
Delivered-To: pce@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 183E4C1522C8 for <pce@ietfa.amsl.com>; Mon, 3 Oct 2022 03:02:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.911
X-Spam-Level:
X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cO9nY27EqWAT for <pce@ietfa.amsl.com>; Mon, 3 Oct 2022 03:02:25 -0700 (PDT)
Received: from EUR05-VI1-obe.outbound.protection.outlook.com (mail-vi1eur05on2126.outbound.protection.outlook.com [40.107.21.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CDEC4C1522C7 for <pce@ietf.org>; Mon, 3 Oct 2022 03:02:24 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CVwrenVZ5wV/5xAj15iwC/quemDwtPDfDj6DHYYJ8PPi3yy+IJgYO8OkkVJC99uqxV9iXm4CyBw4gqQjI2zOlyWebloxA4PmJ9z3cSGlDGCb5kn/xArSgr+DGJTrrZ/dPjoV3uNJLnz+I5L/5iDHpU3mkEM1O8Lc8RX9s/Cj32aq8x56iQMbD7WVa/KtRG/XHwBJ9Q0HuiXm7upyFBywN/Wq6i0lqy2qZnKRAfVuZx2gzg2Afk7gyIOoxlOAKr8Fn22R1DrPAh0M7DAoxyr0gI4a+WspKT6X9vSG7Lm33hT7b45bov6HbXh8bTaV8IQc2GeKPzjiwliEE34nSvKnqw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=MGhbc5DMnLPBDMxldtcyIJWxHFPFHPSlT/hSMiof5ZQ=; b=hrBivtFkbmxv29qmsGdbhXuM+ec+3/xMZnHWvUqlkv5dN3oYDKRRNs9nwNfoCJvs26gLDg6Q38XHShperC3dNMmwQdWrT3EiPrC+e8yY7NTzmz/+4PWmC/p+LeO5Ps5ACOTlHsNpnvUdBYtOQnvxabx8aXZ7PS21LXH9iQ4fDYfJNvJVFijuY+U7p10hT4VfbPOSzpG8jNGss8klOG4WsBQ26r4CDP4MbDxspI5fNLPqtlhQX3z7Qa5KIfH7QiV5v5cMNlZRC3S2qgb2hEotFmyYZJYwXUqWp4FSCgZayFudV2oL5zBT+Mj1jqJItPMG7b+WiVWthZwmj/mDZfDpng==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MGhbc5DMnLPBDMxldtcyIJWxHFPFHPSlT/hSMiof5ZQ=; b=OAErOPo6ThpMlbaFGLRrnbvkZUsUkslf/6uHLldG5dhONQOjJs753dT1IrS+fENjLQ1VVVpAMxdDHx1hzRtpoRETRYK+J62cMNZjXzgw/8ydYHCjz8vudi7roJ6IuRMQpQEd8BTHuapf86wG6DCw7xMWyMGoAiGUV6MsOG4kRmk=
Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by DB9PR07MB8499.eurprd07.prod.outlook.com (2603:10a6:10:36c::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5709.8; Mon, 3 Oct 2022 10:02:20 +0000
Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::d188:3110:6650:e155]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::d188:3110:6650:e155%9]) with mapi id 15.20.5709.005; Mon, 3 Oct 2022 10:02:20 +0000
From: tom petch <ietfc@btconnect.com>
To: "julien.meuric@orange.com" <julien.meuric@orange.com>, "pce@ietf.org" <pce@ietf.org>
Thread-Topic: [Pce] WG Last Call for draft-ietf-pce-pcep-yang-19
Thread-Index: AQHY0agp+SKthfRihE+fI17gKTPE/a38dzfM
Date: Mon, 03 Oct 2022 10:02:20 +0000
Message-ID: <AM7PR07MB6248F14E883EDC71E5F85EDAA05B9@AM7PR07MB6248.eurprd07.prod.outlook.com>
References: <0d3e71b7-738b-a5f6-852d-0e46f24129f5@orange.com>
In-Reply-To: <0d3e71b7-738b-a5f6-852d-0e46f24129f5@orange.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=btconnect.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AM7PR07MB6248:EE_|DB9PR07MB8499:EE_
x-ms-office365-filtering-correlation-id: 6ccb7f8d-6783-43a8-7f3c-08daa5265ca5
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230022)(376002)(396003)(366004)(136003)(39860400002)(346002)(451199015)(5660300002)(38100700002)(82960400001)(110136005)(6506007)(122000001)(2906002)(7696005)(71200400001)(86362001)(33656002)(38070700005)(478600001)(316002)(41300700001)(52536014)(55016003)(83380400001)(26005)(9686003)(186003)(8936002)(76116006)(91956017)(64756008)(66946007)(66476007)(66556008)(66446008)(8676002); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: btconnect.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 6ccb7f8d-6783-43a8-7f3c-08daa5265ca5
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Oct 2022 10:02:20.7724 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: yQ/tFaMcHveJvfAOMmX0f1g3eWO+RqXXeaGhRkqiEi7GGUMLfGNdGPUCoSZh6V8Cu8OK95uwi9RiFmdQIdMsNA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR07MB8499
Archived-At: <https://mailarchive.ietf.org/arch/msg/pce/pze2AXplqKoK3z6ZhiuLjjeX9kM>
Subject: Re: [Pce] WG Last Call for draft-ietf-pce-pcep-yang-19
X-BeenThere: pce@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Path Computation Element <pce.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pce>, <mailto:pce-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pce/>
List-Post: <mailto:pce@ietf.org>
List-Help: <mailto:pce-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pce>, <mailto:pce-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Oct 2022 10:02:26 -0000

From: Pce <pce-bounces@ietf.org> on behalf of julien.meuric@orange.com <julien.meuric@orange.com>
Sent: 26 September 2022 14:01

Hi PCE WG,

This message starts a 2-week WG Last Call for
draft-ietf-pce-pcep-yang-19. Please review and share any feedback using
the PCE mailing list.
This WGLC will end on Tuesday October 11.

<tp>
There are several little problems with this I-D, which I will post in due course, but one big one that I think needs outside assistance and will take time to resolve, namely the lack of security.

This imports netconf-tls groupings and the netconf  I-D says basically security is nothing to do with us, that is up to the user of the grouping.  It recommends TLS1.3 and says TLS1.2 is obsolete and not recommended.

Trouble is, for most users TLS1.3 is not recommended because it is insecure because it introduces new features which are fine for web access and dangerous for almost other cases (eg early data).  There are a number of IETF documents looking at this and nailing down all the things you must not do with TLS1.3 in an operational environment (which is what most of the IETF is about).  RFC9190 section 2 is an example of what I mean but from tracking the evolution of that RFC I suspect that that got watered down by the supporters of TLS1.3.

This I-D needs the equivalent (or else a MUST NOT for TLS1.3!).  Many of those involved with security in the IETF will not understand the issue, how dangerous TLS1.3 is for anything other than web access.

Tom Petch

Thanks,

Julien

v2.23.0 | Report a Bug | By Email