Re: [pim] Fw: I-D Action: draft-ietf-pim-msdp-yang-16.txt

Hi Sandy,

I see that the YANG module has been updated to use must
"derived-from-or-self(., 'key-chain:md5')" for the algorithm associated
with the password to attempt to indicate that TCP-MD5 is the only currently
defined mechanism, but I don't think this fully addresses my point.

(First off, using key-chain:md5 as an indicator to use keyed MD5 for
TCP-MD5 is rather an abuse of the identifier -- md5 is a hash algorithm,
and just saying "MD5" does not indicate a particular keyed hash usage or
that TCP-MD5 should be used, though I can probably grudgingly accept that
this has become convention.)

Shouldn't the description refer to TCP-MD5, not just "the md5 algorithm",
ideally with a section reference to where using TCP-MD5 for MSDP is
discussed?

I note that using this "must derived-from-or-self" basically requires the
YANG module to be revised if some future security service is defined for
MSDP, when otherwise an abstract crypto-algorithm identifier might be
usable without modifying the module.  This perhaps has pros and cons, but
I don't have a sense for what discussion occurred about this choice.

Also, the security considerations puts the "key" node in the *readable*
configuration section, but it seems to be both readable and writeable, so I
think the discussion needs to be expanded and relocated.

Finally, could you clarify what changes were made to address my point about
the reference time for elements in the "state-attributes" container?  That
grouping has moved to a different location in the module so the diff is not
very helpful.

Thanks,

Ben

On Mon, Mar 09, 2020 at 11:45:45AM +0800, zhang.zheng@zte.com.cn wrote:
> Hi Ben, Roman, Barry, Rob, Alvaro, Reshad,
> 
> 
> 
> 
> 
> 
> Thank you very much for your comments and modification suggestions.
> 
> 
> And many thanks to everyone who give us suggestions.
> 
> 
> We updated the draft to 16 version.
> 
> 
> Please review it. Hope this verson can be well.
> 
> 
> 
> 
> 
> 
> Best regards,
> 
> 
> 
> Sandy
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 原始邮件
> 
> 
> 
> 发件人：internet-drafts@ietf.org <internet-drafts@ietf.org>
> 收件人：i-d-announce@ietf.org <i-d-announce@ietf.org>;
> 抄送人：pim@ietf.org <pim@ietf.org>;
> 日 期 ：2020年03月09日 11:26
> 主 题 ：[pim] I-D Action: draft-ietf-pim-msdp-yang-16.txt
> 
> 
> 
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Protocols for IP Multicast WG of the IETF.
> 
>         Title           : A YANG Data Model for Multicast Source Discovery Protocol (MSDP)
>         Authors         : Xufeng Liu
>                           Zheng Zhang
>                           Anish Peter
>                           Mahesh Sivakumar
>                           Feng Guo
>                           Pete McAllister
>     Filename        : draft-ietf-pim-msdp-yang-16.txt
>     Pages           : 34
>     Date            : 2020-03-08
> 
> Abstract:
>    This document defines a YANG data model for the configuration and
>    management of Multicast Source Discovery Protocol (MSDP) Protocol.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-pim-msdp-yang/
> 
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-ietf-pim-msdp-yang-16
> https://datatracker.ietf.org/doc/html/draft-ietf-pim-msdp-yang-16
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-pim-msdp-yang-16
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> 
> _______________________________________________
> pim mailing list
> pim@ietf.org
> https://www.ietf.org/mailman/listinfo/pim