IETF Logo Mail Archive

Re: [Pce] WG Last Call for draft-ietf-pce-pcep-yang-19

tom petch <ietfc@btconnect.com> Fri, 07 October 2022 08:55 UTC

Return-Path: <ietfc@btconnect.com>
X-Original-To: pce@ietfa.amsl.com
Delivered-To: pce@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16872C1522B8 for <pce@ietfa.amsl.com>; Fri, 7 Oct 2022 01:55:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.908
X-Spam-Level:
X-Spam-Status: No, score=-1.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t-IDAuZrZokM for <pce@ietfa.amsl.com>; Fri, 7 Oct 2022 01:55:20 -0700 (PDT)
Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2094.outbound.protection.outlook.com [40.107.22.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C25D5C14CE44 for <pce@ietf.org>; Fri, 7 Oct 2022 01:55:20 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hNKKER7yKle5sWz828Rvi1Q5jKLniWcKPpeLOqQcBnwBYT3KvUxEsmuCBGEDapNEhZAxtlM7RurId70wBJpZZ8PpylNEUL6eVYPtP9AQkkPc3XTQzEIvWUeOPjDaVMgCUMlpecr5ldJdqhaXUF2JOY7JUiIDB2rtPlOZ1buvAnKh9txgX/xdOxY7qpoI6x4okG2gW2338iORHADit/w3VuaMRk4Bpzree+AF8owpM/dRr4ZPXtGw2Mscpt935svXSdWmrCJeDOtmveg5Vl8Qz2mDWQ2M5pWDAsSBY/QpLv/0njovyDMOAFfUCNa4UOj06uR2zw1uAvnOVlncTcCSnw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=48A9LRcoivbWRPeBy/PtgJaNimgFmZKEzMg3KblEG7M=; b=c8HhghGfsoJ3NtUtYFWGmig0FiLZKHQgP81l30P2H0gkG2Z2klTLwkYKVoqQWHlWspLWf3C3/kbu6batLFWz7SauBXKFQNmNkJwhB+1uIfmuVBLJTFrqZeshaPYgKrfihbeJn37lj1ZWR+suuUTJ7ZymX7f9JK+pgfRO+QCcEjTwa4mGxphT6nJbsQusCvQ3tUtD+J7RslUXevDx35MbOZc1/aJ9Z7C4Ymd+h0scAIZwBEhO6QYGFFPTA+6d6EAJ1YM3inFckqgEn42dA7Iduu9J7Yw6EACTuYt8zssVsrSqCMJOfHWEDegoR5pzCxlzXR/fvv4/JJ6nHbk9br2byg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=48A9LRcoivbWRPeBy/PtgJaNimgFmZKEzMg3KblEG7M=; b=JG5gA+Mzl7SIJ14yN+lWt3/kaav+ElTEgbU8dB8nvLbEN2Hb1+eN3UHQwr2qlvjnLfX8puukvwliO7pOd/OYn+/79CyC6tiwCvQBWLINH2SlwOpDFj9sEfPq9To882KUpUg156gKQtKS8x+B3QTSEc4FG5m96bCmBNXoeFlSMQ0=
Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by DU2PR07MB8045.eurprd07.prod.outlook.com (2603:10a6:10:2b6::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5723.9; Fri, 7 Oct 2022 08:55:14 +0000
Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::d188:3110:6650:e155]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::d188:3110:6650:e155%9]) with mapi id 15.20.5709.010; Fri, 7 Oct 2022 08:55:14 +0000
From: tom petch <ietfc@btconnect.com>
To: "julien.meuric@orange.com" <julien.meuric@orange.com>, "pce@ietf.org" <pce@ietf.org>
Thread-Topic: [Pce] WG Last Call for draft-ietf-pce-pcep-yang-19
Thread-Index: AQHY0agp+SKthfRihE+fI17gKTPE/a38dzfMgAY40IQ=
Date: Fri, 07 Oct 2022 08:55:13 +0000
Message-ID: <AM7PR07MB6248A61A222C94766BBD0853A05F9@AM7PR07MB6248.eurprd07.prod.outlook.com>
References: <0d3e71b7-738b-a5f6-852d-0e46f24129f5@orange.com> <AM7PR07MB6248F14E883EDC71E5F85EDAA05B9@AM7PR07MB6248.eurprd07.prod.outlook.com>
In-Reply-To: <AM7PR07MB6248F14E883EDC71E5F85EDAA05B9@AM7PR07MB6248.eurprd07.prod.outlook.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=btconnect.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AM7PR07MB6248:EE_|DU2PR07MB8045:EE_
x-ms-office365-filtering-correlation-id: 08e7d7c3-5481-49c4-4d65-08daa841a624
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230022)(346002)(396003)(376002)(39860400002)(366004)(136003)(451199015)(76116006)(66946007)(186003)(86362001)(966005)(66446008)(8676002)(66556008)(64756008)(91956017)(2906002)(82960400001)(38070700005)(38100700002)(55016003)(41300700001)(5660300002)(33656002)(8936002)(52536014)(122000001)(478600001)(83380400001)(66476007)(71200400001)(26005)(7696005)(316002)(9686003)(6506007)(110136005); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: GB1SdF1b12F685mXZl4OCqi2Ly1WmtZQxCmV1SkdhLay7v14Na0DIoD1uOhNucMMRHu6ddpe4vbLAQlVDJ4LiVN+B0zVh7ay6AtB/DCinMB5sC5t4DXdu3PRwCiaFMgVw2235zuRdHoJ4fQ/nKbLvpW2uUg6LOrjlbU+7nz+q4InFUKrqEYF0F9uSP9IWskaOLCkwH2lsLzg3noWg/qVogne1s3ZbI0xHwDVAZ7qgtHH6NxfxP35K6dbDeK+sj/ZscU/1mJTgWlpV70+DFlZdWi6zOlj6hXGMtGea+vozAx3VbkJ5I95gAZu7sNoOb8uWStcYR7rs2P2rwqqPmh8PP/hMeuHwKXC+kLWr7UKMfIxTdUmXsL3hOvEEe6vVJjSJvZgXY/Y3WmOuKaB0A17QHkHsYWxrYiIAzybh7PWLUbBoxo3LKaYvCCrgSkiy2jjg5n2xKWl1oqaE6VNh0biNc8d6Kt7ObS8KRAVamWFdPk2VaResZhIk14uVyT7xNlanBruQ0DWBOty3v+4oUeYXr/+km2d5u+FlpwmAxlfQe2pQoT/cxNt99JkmW1z+VgGPPwkzhsbfMGTYMXj7bQmcmcZXcn4jyAeXJcKBj5KSkoX1FMcoTNzjFZNDYv0aLB19p4ybEx0aL1HVGTKqDETglhz1af5R1fvg/sEvBip64WKuNUVIB+1X/R+he8C1UDYie/DuoaYBh71ubvYYzWOr/gUMvp2BF0xltz09xcFkm7TBbSibJcsMfr6vvbG7IMl2s5Mbrgq9xsle3jkpasSGnpK7rhEFH+zZ/SQav3MTgEBBE5DTss8QxX01+c5mMGi4epAPmZR6xW8F65GrIvtFMnmKZN9RIcNJkxKUoYFuDEuQZ52ogvioMzs0D0tU81cEg/1fkFPho519ie2zuPl6wZ9XP7L9ILI7Co9/gDuBrvm5fyPzP2r/veTizxZSmuppoEfJF6pCap0aLdzjk14N8BH9NqoUw2gDcW19ppadhvu8hsmqIXmLmtSuGCmgSYxwq7Q0ds9dUFEeSc4o+R0mQSIbYNEdCl1Cric5O2lrz1JyeQUbXDOC0KVcd93HfWvbJYo7V4459znKfR1kKff6Rwq1uNqKh0+g0CbiwyjcXcgmn2o2yYCnfBetRJX9SZIulcKja+v2khFPriYqoss4CpzfGu8DVSR8/LOipP2eYm1Rux1/UUIBGRvcRugbV1fpa9zdBR+L4WduInKHVkDAs2428bW7Trwa77Kw6XPAxxgsvyXRAD6JRjE2PhT7dTFNzuqZLtolXCWdHa3AT4TUm4zMfmTjPKmjoCBvg4DU2gVQ5KX249Wv4gnpAgMZ6X3YdPK8qvBl3AxOXA8/Y3SEyuf2PpqH9JJEQ3MkqUmKvRmfEXSv8qAPgbRcADY544ZdKezi9AM0FoJ42Wd8qnh8oibjEy2l+tp6Ft/Fw4XyK1BoFp2vIgozqQ3pYdXv+0PvTSgdI6J3q0+5UDbTXNfdPbGOJ14qGiJJU7H8ClBJ0OHr3c11xuFjIJGlDnhGkTOJ3SYmmuYOo+uN3KJ9bSOioQ4swLeuv+AyKGp3LSSHQmCZOAolVdecMg63IvzPIpz
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: btconnect.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 08e7d7c3-5481-49c4-4d65-08daa841a624
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Oct 2022 08:55:13.9927 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: mwgKA+a4z06XLncEcOZZMd3FDfQoAUUuRIbM3EUEl/EQuYTf+XolGRl9EqmjQ13DZibUPvOwNSUdTR+EidnWnw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PR07MB8045
Archived-At: <https://mailarchive.ietf.org/arch/msg/pce/uiyatItj9yh2mRgsu83l_mhFApY>
Subject: Re: [Pce] WG Last Call for draft-ietf-pce-pcep-yang-19
X-BeenThere: pce@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Path Computation Element <pce.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pce>, <mailto:pce-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pce/>
List-Post: <mailto:pce@ietf.org>
List-Help: <mailto:pce-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pce>, <mailto:pce-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Oct 2022 08:55:23 -0000

From: Pce <pce-bounces@ietf.org> on behalf of tom petch <ietfc@btconnect.com>
Sent: 03 October 2022 11:02

From: Pce <pce-bounces@ietf.org> on behalf of julien.meuric@orange.com <julien.meuric@orange.com>
Sent: 26 September 2022 14:01

Hi PCE WG,

This message starts a 2-week WG Last Call for
draft-ietf-pce-pcep-yang-19. Please review and share any feedback using
the PCE mailing list.
This WGLC will end on Tuesday October 11.

<tp>
There are several little problems with this I-D, which I will post in due course, but one big one that I think needs outside assistance and will take time to resolve, namely the lack of security.

This imports netconf-tls groupings and the netconf  I-D says basically security is nothing to do with us, that is up to the user of the grouping.  It recommends TLS1.3 and says TLS1.2 is obsolete and not recommended.

Trouble is, for most users TLS1.3 is not recommended because it is insecure because it introduces new features which are fine for web access and dangerous for almost other cases (eg early data).  There are a number of IETF documents looking at this and nailing down all the things you must not do with TLS1.3 in an operational environment (which is what most of the IETF is about).  RFC9190 section 2 is an example of what I mean but from tracking the evolution of that RFC I suspect that that got watered down by the supporters of TLS1.3.

This I-D needs the equivalent (or else a MUST NOT for TLS1.3!).  Many of those involved with security in the IETF will not understand the issue, how dangerous TLS1.3 is for anything other than web access.

<tp2>
I note the submission of draft-dhody ... TLS13.

I wonder what that plan is; for pcep-yang to ban TLS1.3 and have a reference to this I-D? or what?

I think that PSK need more treatment.  My take is that RFC8446 bans PSK except when used for resumption where a session has been set up using certificates.  I see two documents addressing this issue, - 9257, 9258 - but I have yet to read them.

Tom Petch


Tom Petch

Thanks,

Julien



_______________________________________________
Pce mailing list
Pce@ietf.org
https://www.ietf.org/mailman/listinfo/pce

v2.23.0 | Report a Bug | By Email