[Rats] Re: Mohamed Boucadair's Discuss on draft-ietf-rats-network-device-subscription-13: (with DISCUSS and COMMENT)

Henk Birkholz <henk.birkholz@ietf.contact> Tue, 22 September 2026 06:57 UTC

Received: from smtp03-ext2.udag.de (smtp03-ext2.udag.de [62.146.106.30]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id 9D52B30; Tue, 22 Sep 2026 06:57:56 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=ietf.contact header.s=uddkim-202310 header.b=B9E6ehml; dmarc=none; spf=pass (mx.ietf.org: domain of henk.birkholz@ietf.contact designates 62.146.106.30 as permitted sender) smtp.mailfrom=henk.birkholz@ietf.contact
Received: from [134.102.158.213] (eduroam-pool12-1749.wlan.uni-bremen.de [134.102.158.213]) by smtp03-ext2.udag.de (Postfix) with ESMTPA id 6F5D7E03B6; Tue, 22 Sep 2026 08:57:48 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ietf.contact; s=uddkim-202310; t=1790060269; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=KtPPTiKl9AwPM0UkJvnelE9w7tgUgqHoPe388f51LQA=; b=B9E6ehmlRpdr+6smKwsavF1KtwiltmDcFDDn9GBqP8zwEVDpal43LXxdNgswq+eb6AmHRg z1bo8oU27LCp8cZ8BpqFhsyVgihR4ld6tcw0eVp59+DcoU4cGhc6boise4dAioubQBZlDY yiEELdj52l3F/6iVtu761M9u+4Hll75HOa7DanzHJW1ILJ8Q+GfDhryruJR2LcVcxA98Lr 3TT7fGUeloZexEWrgTCcyQokcT+QYicumWHjYdNCETm+9DdNz24oYvOJ6kMFINTJx7lJBG U9vfnMbabh8ucusODZEl5ibfB+oXsT1QmaEQW3YLuOcRkatMFQac0/gOsI/hbA==
Message-ID: <77d08267-d218-43f1-b364-08516a0e0c19@ietf.contact>
Date: Tue, 22 Sep 2026 08:57:46 +0200
MIME-Version: 1.0
To: mohamed.boucadair@orange.com, "Eric Voit (evoit)" <evoit@cisco.com>, The IESG <iesg@ietf.org>
References: <178168298771.611662.14249779187921167738@dt-datatracker-f9b87776f-xzl65> <CH2PR11MB8833D3F5020F31C3612A06D6A1B82@CH2PR11MB8833.namprd11.prod.outlook.com> <PAPP264MB749575492CA3A5983BDE9D6688842@PAPP264MB7495.FRAP264.PROD.OUTLOOK.COM>
Content-Language: en-US
From: Henk Birkholz <henk.birkholz@ietf.contact>
In-Reply-To: <PAPP264MB749575492CA3A5983BDE9D6688842@PAPP264MB7495.FRAP264.PROD.OUTLOOK.COM>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
X-Spam-Level: *
X-Spamd-Bar: +
Message-ID-Hash: WKI73NQ2WNGNYDNCFPTOAW5YHPW3XJ5U
X-Message-ID-Hash: WKI73NQ2WNGNYDNCFPTOAW5YHPW3XJ5U
X-MailFrom: henk.birkholz@ietf.contact
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-rats.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "draft-ietf-rats-network-device-subscription@ietf.org" <draft-ietf-rats-network-device-subscription@ietf.org>, "mcr+ietf@sandelman.ca" <mcr+ietf@sandelman.ca>, "rats-chairs@ietf.org" <rats-chairs@ietf.org>, "rats@ietf.org" <rats@ietf.org>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [Rats] Re: Mohamed Boucadair's Discuss on draft-ietf-rats-network-device-subscription-13: (with DISCUSS and COMMENT)
List-Id: Remote ATtestation procedureS <rats.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/RbJkVBtiuPckCun6NskUZKbkpiY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Owner: <mailto:rats-owner@ietf.org>
List-Post: <mailto:rats@ietf.org>
List-Subscribe: <mailto:rats-join@ietf.org>
List-Unsubscribe: <mailto:rats-leave@ietf.org>

Thank you a lot for your review and feedback, Med!

we've applied the changes as outlined in PR #47.


Viele Grüße,

Henk

On 21.09.2026 15:49, mohamed.boucadair@orange.com wrote:
> Hi Eric,
> 
> Thank you for the follow-up and for preparing these PRs. I think this address main points.
> 
> Cheers,
> Med
> 
>> -----Message d'origine-----
>> De : Eric Voit (evoit) <evoit@cisco.com>
>> Envoyé : jeudi 17 septembre 2026 18:41
>> À : BOUCADAIR Mohamed INNOV/NET <mohamed.boucadair@orange.com>;
>> The IESG <iesg@ietf.org>
>> Cc : draft-ietf-rats-network-device-subscription@ietf.org;
>> mcr+ietf@sandelman.ca; rats-chairs@ietf.org; rats@ietf.org
>> Objet : RE: Mohamed Boucadair's Discuss on draft-ietf-rats-
>> network-device-subscription-13: (with DISCUSS and COMMENT)
>>
>>
>>
>> Hi Med,
>>
>> Thanks for the detailed review. I have added brief responses
>> inline only where we are proposing a change or clarification.
>> Comments already addressed or not being acted on are left without
>> a response. .  A new PR now exists for these changes in our
>> repository.
>> https://fra01.safelinks.protection.outlook.com/?url=https%3A%2F%2F
>> github.com%2Fietf-rats-wg%2Fdraft-ietf-rats-network-device-
>> subscription%2Fpulls&data=05%7C02%7Cmohamed.boucadair%40orange.com
>> %7Cd5526d0eb5b84854e53f08df14da78da%7C90c7a20af34b40bfbc48b9253b6f
>> 5d20%7C0%7C0%7C639252600735556834%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0
>> eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbC
>> IsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=hiiUzhq%2BxStfpw2GdYHB4MVjqW
>> PWLyndWr%2BXkY21lqs%3D&reserved=0
>>
>>> -----Original Message-----
>>> From: Mohamed Boucadair via Datatracker <noreply@ietf.org>
>>>
>>> ----------------------------------------------------------------
>>> DISCUSS:
>>> ----------------------------------------------------------------
>>>
>>> Hi Henk, Eric, and Wei,
>>>
>>> Thank you for the effort put into this document.
>>>
>>> I must admit that it wasn't an easy read but that's OK as the
>> document have a discussion on how to glue this piece with other
>> RATS documents.
>>>
>>> I don't know if this was implemented or if issues such as the
>> ones carried in NETCONF WG (e.g., YP-Lite, support of other
>> transport mappings to accommodate (massive) distributed data) are
>> relevant for this work. No action is needed at this stage, but I
>> just wanted to let you know that work is happening.
>>>
>>> Pointes are ordered per their appearance order in the document.
>>>
>>> Please find below some comments for discussion:
>>>
>>> # I don't find where <pcr-indicies> in the doc.
>>>
>>> CURRENT:
>>>
>>>         These attestation
>>>         notifications MUST at least include all the <pcr-
>> indicies>
>>>         requested in the RPC.
>>>
>>> # Is this 10 seconds frozen or configurable? Also, given the
>> SHOULD out there, an implem may use a different value, how the
>> value actually in use can be retrieved using the module?
>>
>> Response: The 10-second interval is intended to be a fixed value
>> defined by this specification, not an implementation-configurable
>> timer. The SHOULD permits an implementation to deviate when there
>> is a specific justified reason, but such a deviation does not
>> establish or advertise a different timer value. We will clarify
>> that the 10-second value is fixed and non-configurable. Therefore,
>> there is no alternate timer value for the YANG module to expose or
>> for a Verifier to retrieve.
>>
>>>
>>> CURRENT:
>>>
>>>     * every time at least one PCR has changed from a previous
>>>       <tpm20-attestation>. In this case, the notification SHOULD
>> be
>>>       emitted within 10 seconds of the corresponding <pcr-extend>
>> being
>>>       sent:
>>>
>>> # Why the container is needed here? adding that level increases
>> the
>>> size of notifications
>>
>> Response: We agree that the additional container is not strictly
>> required to represent the information and that removing it could
>> slightly reduce the encoded notification size. However, the
>> current structure is valid YANG and is already part of the defined
>> notification schema. Removing it would change existing schema
>> paths and notification encoding without correcting an
>> interoperability or correctness problem. We therefore propose
>> retaining the existing structure and avoiding an unnecessary data-
>> model change at this stage.
>>
>>>
>>> CURRENT:
>>>
>>>         list attested-event {
>>>           description
>>>             "A set of events which extended an Attester PCR. The
>>>             sequence of elements represented in list must match
>> the
>>>             sequence of events placed into the TPM's PCR.";
>>>           container attested-event {
>>>             description
>>>               "An instance of an event which extended an Attester
>> PCR";
>>>
>>> # Correlation
>>>
>>> CURRENT:
>>>
>>>           leaf-list pcr-index {
>>>             type tpm:pcr;
>>>             min-elements 1;
>>>             description
>>>               "PCR index number.";
>>>           }
>>>           leaf-list pcr-value {
>>>             type binary;
>>>             description
>>>               "PCR value in a sequence which matches to the
>>>               'pcr-index'.";
>>>           }
>>>
>>> ## The description is not clear about the intended use.
>>
>> Response: Agreed that the intended use should be clearer. These
>> fields are unsigned convenience information intended to expose the
>> TPM 1.2 PCR indices and corresponding values to YANG-based
>> filtering and processing without requiring consumers to parse the
>> underlying TCG binary structures. They do not replace or redefine
>> the signed TPM 1.2 attestation Evidence, which remains
>> authoritative. We will clarify this in the description.
>>
>>>
>>> ## This structure imposes an ordering constraint that may lead
>> to correlation issues. Why a list is not used here?
>>
>> Response: We agree that the correlation must be unambiguous, but
>> propose retaining the existing TPM 1.2 representation. TPM 1.2
>> represents this information as a PCR selection associated with an
>> ordered sequence of PCR values rather than independently keyed
>> {PCR index, PCR value} objects. Converting it to the TPM 2.0-style
>> keyed representation would introduce a different abstraction
>> rather than simply clarify the existing one. We will instead state
>> explicitly that the two leaf-lists have equal cardinality and that
>> entry N in <pcr-value> corresponds to entry N in <pcr-index>,
>> following the TPM 1.2 PCR selection/value ordering.
>>
>>>
>>>               +--ro pcr-values* [pcr-index]
>>>                  +--ro pcr-index    pcr
>>>                  +--ro pcr-value?   binary
>>>
>>> # YANG Validation
>>>
>>> There are some points to fix:
>>>
>>> ./yang/ietf-tpm-remote-attestation-stream.yang:49: warning: RFC
>> 8407: 3.1:
>>> The IETF Trust Copyright statement seems to be missing or is not
>> correct (see pyang --ietf-help for details). ./yang/ietf-tpm-
>> remote-attestation-stream.yang:120:
>>> warning: the module seems to use RFC 2119 keywords, but the
>> required text from RFC 8174 is not found or is not correct (see
>> pyang --ietf-help for details).
>>> ./yang/ietf-tpm-remote-attestation-stream.yang:292: warning: RFC
>> 8407: 4.4:
>>> statement "config" is given with its default value "true"
>>>
>>> ## Some can fixed by following the template in 9907
>>>
>>> ## Add the keywords boilerplate to the description of the module
>>
>> Response: Agreed. These are mechanical module-hygiene issues
>> rather than changes to the information model. We will update the
>> module boilerplate to follow RFC 9907, add the BCP 14 keyword text
>> to the module description, and remove the redundant <config true>
>> statement. None of these changes alter the resulting YANG data
>> tree.
>>
>>>
>>> # I don't understand the following, especially how the intend of
>> this MUST and how it will be followed.
>>
>> Response: Agreed that the current wording makes the scope of the
>> MUST difficult to determine. The intent is that a specification
>> using this framework to define another RATS Conceptual Message
>> Event Stream identifies that extension through a YANG augmentation
>> of this module, including when the carried event content itself is
>> not YANG modeled. We will rewrite the requirement directly so that
>> it is clear what must be augmented and what an extending
>> specification is required to provide.
>>
>>>
>>> CURRENT:
>>>
>>>     It is possible to
>>>     use either YANG subscription methods to other YANG modules
>> for RATS
>>>     Conceptual Messages or to define Event Streams for other
>> none-YANG-
>>>     modeled data. In the context of RATS Conceptual Messages,
>> both
>>>     options MUST be a specified via YANG augments to this
>> specification.
>>>
>>> # BCP 216
>>>
>>> The document does not follow many of the templates in 9907. In
>>> particular, please follow the security template provided in
>> https://fra01.safelinks.protection.outlook.com/?url=https%3A%2F%2F
>> datatracker.ietf.org%2Fdoc%2Fhtml%2Frfc9907%23name-security-
>> considerations-
>> sect&data=05%7C02%7Cmohamed.boucadair%40orange.com%7Cd5526d0eb5b84
>> 854e53f08df14da78da%7C90c7a20af34b40bfbc48b9253b6f5d20%7C0%7C0%7C6
>> 39252600735579190%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUs
>> IlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%
>> 3D%7C0%7C%7C%7C&sdata=vzuhl2mmhIf9Cwdvqz%2Bnv5%2FtPfGs1U7DLGMnOABS
>> V0Q%3D&reserved=0.
>>
>> Response: Agreed. We will restructure the YANG security text
>> around the RFC 9907 template and explicitly identify the security-
>> sensitive writable and readable information introduced by this
>> module. We will also add the security considerations that arise
>> specifically from persistent streaming attestation, including
>> long-lived subscription resource consumption and the freshness
>> implications when expected attestation or heartbeat notifications
>> are delayed or absent. This also removes the current implication
>> that streaming introduces no additional considerations.
>>
>>>
>>>
>>> ----------------------------------------------------------------
>> ------
>>> COMMENT:
>>> ----------------------------------------------------------------
>> ------
>>>
>>> # PCR was used without being defined. Please update Section 2
>> accordingly.
>>>
>>> # Please avoid use "YANG model". Overall, refer to the guidance
>> in Section 2.5 of RFC9907.
>>>
>>> # Notations
>>>
>>> Please consider adding some text to explain how to read the
>> various notations our there (e.g., ? in the excerpt below):
>>>
>>> CURRENT:
>>>
>>> |    |<----------------- subscribe(nonce, TpmName,
>> ?PcrSelection) |    |
>>> |    | {nonce} -------------------------------------------------
>> ->|    |
>>>
>>> # Tree diagrams: RFC8340
>>>
>>> Please add a note early in the document about the tree diagrams.
>>>
>>> As a reminder, RFC9907 says:
>>>
>>>     If YANG tree diagrams are used, then an informative reference
>> to the
>>>     YANG tree diagrams specification MUST be included in the
>> document.
>>>
>>> # I don't parse this sentence:
>>
>> Response: Agreed. We will state that if either counter increments,
>> the existing subscription MUST terminate; if the Verifier intends
>> to continue receiving Evidence, it MUST establish a new
>> subscription.
>>
>>>
>>> CURRENT:
>>>
>>>     * If the <reset-counter>, <restart-counter> has incremented.
>> The
>>>       existing subscription MUST be terminated, and a new
>> <establish-
>>>       subscription> SHOULD be generated.
>>>
>>> # Likewise, I don't parse the following:
>>>
>>> CURRENT:
>>>
>>>     This is done via the augmentation of a <nonce-value> into
>>>     [RFC8639] the <establish-subscription> RPC.
>>>
>>> # Why both notifications will be provided? Shouldn't this be
>> "or"?
>>> (same comment for other similar constructs in the doc)
>>>
>>> CURRENT:
>>>
>>>     1. <tpm12-attestation> and <tpm20-attestation> notifications
>> which
>>>        include the provided <nonce-value>. These attestation
>>>        notifications MUST at least include all the <pcr-indicies>
>>>        requested in the RPC.
>>>
>>> # Consider adding an appendix with the full tree.
>>>
>>> # Please replace with the RFC number + title
>>
>> Response: Agreed. We will replace the draft reference with RFC
>> 9684 and its title.
>>
>>>
>>> CURRENT:
>>>
>>>       import ietf-tpm-remote-attestation {
>>>         prefix tpm;
>>>         reference
>>>           "draft-ietf-rats-yang-tpm-charra";
>>>       }
>>>
>>> # Add a reference statement
>>
>> Response: Agreed. We will add the RFC 9684 reference to the <ietf-
>> tcg-algs> import.
>>
>>>
>>> CURRENT:
>>>
>>>       import ietf-tcg-algs {
>>>         prefix taa;
>>>       }
>>>
>>> # Please update to follow the template at
>>>
>> https://fra01.safelinks.protection.outlook.com/?url=https%3A%2F%2F
>> data
>>> tracker.ietf.org%2Fdoc%2Fhtml%2Frfc9907%23name-template-for-
>> ietf-modul
>>>
>> es&data=05%7C02%7Cmohamed.boucadair%40orange.com%7Cd5526d0eb5b8485
>> 4e53
>>>
>> f08df14da78da%7C90c7a20af34b40bfbc48b9253b6f5d20%7C0%7C0%7C6392526
>> 0073
>>>
>> 5593700%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLj
>> AuMD
>>>
>> AwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7
>> C&sd
>>> ata=e65terYgRMwhIQHJNCccBywkUoSiobY5ovvZDhNlZ9M%3D&reserved=0
>>
>> Response: Agreed. We will update the organization/contact
>> information and module boilerplate to follow the RFC 9907
>> template.
>>
>>>
>>> CURRENT:
>>>
>>>       organization "IETF";
>>>       contact
>>>         "WG Web:
>> <https://fra01.safelinks.protection.outlook.com/?url=http%3A%2F%2F
>> tools.ietf.org%2Fwg%2Frats%2F&data=05%7C02%7Cmohamed.boucadair%40o
>> range.com%7Cd5526d0eb5b84854e53f08df14da78da%7C90c7a20af34b40bfbc4
>> 8b9253b6f5d20%7C0%7C0%7C639252600735604111%7CUnknown%7CTWFpbGZsb3d
>> 8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOI
>> joiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=%2Bx%2B%2BLF2GGAled
>> pzzCQky2RXDNA%2B21G9dNWSSSuqw8vg%3D&reserved=0>
>>>          WG List:  <mailto:rats@ietf.org>
>>>
>>>          Editor:   Eric Voit
>>>                    <mailto:evoit@cisco.com>";
>>>
>>>       description
>>>         "This module contains YANG specification for subscribing
>>>          to attestation streams which contain events that have
>>>          been generated by TPM chips or equivalent hardware
>>>          implementations that include the protected capabilities
>>>          as provided by TPMs.
>>>
>>>          Copyright (c) 2024 IETF Trust and the persons identified
>>>          as authors of the code. All rights reserved.
>>>
>>>          Redistribution and use in source and binary forms, with
>>>          or without modification, is permitted pursuant to, and
>>>          subject to the license terms contained in, the
>> Simplified
>>>          BSD License set forth in Section 4.c of the IETF Trust's
>>>          Legal Provisions Relating to IETF Documents
>>>
>> (https://fra01.safelinks.protection.outlook.com/?url=https%3A%2F%2
>> Ftrustee.ietf.org%2Flicense-
>> info&data=05%7C02%7Cmohamed.boucadair%40orange.com%7Cd5526d0eb5b84
>> 854e53f08df14da78da%7C90c7a20af34b40bfbc48b9253b6f5d20%7C0%7C0%7C6
>> 39252600735615173%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUs
>> IlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%
>> 3D%7C0%7C%7C%7C&sdata=sJrGsIO82UACE%2BC1T6r%2BoKvM6Kn1ubZ8Kls2uga6
>> yiU%3D&reserved=0).
>>>
>>>          This version of this YANG module is part of RFC XXXX
>>>
>> (https://fra01.safelinks.protection.outlook.com/?url=https%3A%2F%2
>> Fwww.rfc-
>> editor.org%2Finfo%2FrfcXXXX&data=05%7C02%7Cmohamed.boucadair%40ora
>> nge.com%7Cd5526d0eb5b84854e53f08df14da78da%7C90c7a20af34b40bfbc48b
>> 9253b6f5d20%7C0%7C0%7C639252600735637050%7CUnknown%7CTWFpbGZsb3d8e
>> yJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjo
>> iTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=MnigQDYKo5w7gk68h8eZx
>> BI336dO8KUU5JLHYey9bdY%3D&reserved=0); see the RFC
>>>          itself for full legal notices.";
>>>
>>> # The revision date MUST match the one used in the file name +
>> update
>>> reference to include the document title
>>
>> Response: Agreed. We will align the revision date with the module
>> filename and update the reference text to include the document
>> title.
>>
>>>
>>> CURENT:
>>>
>>>       revision 2024-07-06 {
>>>         description
>>>           "Initial version.";
>>>         reference
>>>           "draft-ietf-rats-network-device-subscription";
>>>
>>> # Please use meaningful description as the module will be
>> consumed out
>>> of the RFC
>>>
>>> CURRENT:
>>>
>>>       identity pcr-unsubscribable {
>>>         base sn:establish-subscription-error;
>>>         description
>>>           "Requested PCR is unsubscribable by the Attester.";
>>>       }
>>>
>>> # Add prefix
>>
>> Response: There is a related issue here. RFC 8639 <stream> is a
>> leafref to the stream name rather than an identityref, so
>> <derived-from-or-self()> is not the appropriate XPath function
>> even if an identity prefix is added. We will instead use a direct
>> comparison: when 'sn:stream = "attestation"';.
>>
>>>
>>> OLD:
>>>
>>>       augment "/sn:establish-subscription/sn:input" {
>>>         when 'derived-from-or-self(sn:stream, "attestation")';
>>>
>>> NEW:
>>>
>>>       augment "/sn:establish-subscription/sn:input" {
>>>         when 'derived-from-or-self(sn:stream,
>> "tras:attestation")';
>>>
>>> # binary instead of structured data
>>>
>>> Please consider adding some text to explain why binary is used
>> rather
>>> than a more structured data
>>>
>>> # List names
>>>
>>> RFC9907 says:
>>>
>>>   "List identifiers SHOULD be singular with the surrounding
>> container
>>> name  plural. Similarly, "leaf-list" identifiers SHOULD be
>> singular."
>>>
>>> Please make this change:
>>
>> Response: We propose retaining <unsigned-pcr-values>. The RFC 9907
>> naming guidance is a SHOULD, and RFC 9684 already uses this
>> identifier. Renaming it here would introduce an unnecessary schema
>> difference without changing the semantics.
>>
>>>
>>> OLD:
>>>
>>>         list unsigned-pcr-values {
>>>           description
>>>             "Allows notifications to be filtered by PCR number or
>>>             PCR value based on via YANG related mechanisms such
>> as PATH.
>>>
>>> NEW:
>>>
>>>         list unsigned-pcr-value {
>>>           description
>>>             "Allows notifications to be filtered by PCR number or
>>>             PCR value based on via YANG related mechanisms such
>> as PATH.
>>>
>>> # Missing units + reference for the default value
>>
>> Response: Agreed. We will add <units "seconds"> and a reference to
>> the section defining the default value and its behavior.
>>
>>>
>>> CURRENT:
>>>
>>>         leaf marshalling-period {
>>>           type uint8;
>>>           default 5;
>>>           description
>>>             "The maximum number of seconds between the time an
>> event
>>>             extends a PCR, and the 'tpm-extend' notification
>> which
>>>             reports it to a subscribed Verifier. This period
>> allows
>>>             multiple extend operations bundled together and
>> handled as a
>>>             group.";
>>>         }
>>>
>>> ## Please add units statement
>>>
>>> ## Also, can we have a reference where the default value is
>> defined?
>>>
>>> # Other as Security Consideration
>>>
>>> CURRENT:
>>>
>>> 8.3. Other
>>>
>>>     There are no additional security considerations introduced by
>> this
>>>     document.
>>>
>>> I suggest to remove this as it is misleading.
>>
>> Response: Agreed. We will remove this statement as part of the RFC
>> 9907 and streaming-security update.
>>
>>>
>>> # IANA
>>>
>>> Please update IANA requests to follow the template in
>>>
>> https://fra01.safelinks.protection.outlook.com/?url=https%3A%2F%2F
>> data
>>> tracker.ietf.org%2Fdoc%2Fhtml%2Frfc9907%23name-iana-template-
>> for-docum
>>>
>> ents&data=05%7C02%7Cmohamed.boucadair%40orange.com%7Cd5526d0eb5b84
>> 854e
>>>
>> 53f08df14da78da%7C90c7a20af34b40bfbc48b9253b6f5d20%7C0%7C0%7C63925
>> 2600
>>>
>> 735656277%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIw
>> LjAu
>>>
>> MDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C
>> %7C&
>>>
>> sdata=%2FG1JqmE9wjiTpBoeT2dMyUbILu6VUu8Slenb94x%2FrI8%3D&reserved=
>> 0
>>>
>>> # Missing Examples
>>>
>>> RFC9907 says:
>>>
>>>     Each specification that defines one or more modules SHOULD
>> contain
>>>     usage examples, either throughout the document or in an
>> appendix.
>>>
>>> Consider adding some examples to illustrate the use of the
>> module.
>>>
>>> # Nits
>>>
>>> ## s/such as a Verifiers or a Relying Parties/such as a Verifier
>> or a
>>> Relying Party
>>
>> Nits will be fixed
>>
>> Eric
>>
>>> ## Please fix the following
>>>
>>> CURRENT:
>>>
>>>     The second adverse effect stems from the use of nonces in the
>>>     challenge-response interaction model Section 7.1 of
>>>     [I-D.ietf-rats-reference-interaction-models] realized in
>> [RFC9684].
>>>
>>> ##
>>>
>>> OLD:
>>>
>>>     The
>>>     operational model and corresponding sequence diagram
>> described in
>>>     this section is based on [RFC9684]
>>>
>>> NEW:
>>>
>>>     The
>>>     operational model and corresponding sequence diagram
>> described in
>>>     this section are based on [RFC9684]
>>>
>>> # s/diagram focusses on matching/diagram focuses on matching
>>>
>>> #
>>>
>>> OLD:
>>>
>>>   at that time.Methods of doing this verification vary based on
>> the
>>>
>>> NEW:
>>>
>>>   at that time. Methods of doing this verification vary based on
>> the
>>>
>>> # Clarity
>>>
>>> OLD:
>>>
>>>     Therefore, a Verifier MUST periodically issue a new nonce and
>>>     receive this nonce within a TPM quote response in order to
>> ensure the
>>>     freshness of the results.
>>>
>>> NEW:
>>>
>>>     Therefore, a Verifier MUST periodically issue a new nonce and
>>>     MUST receive this nonce within a TPM quote response in order
>> to ensure the
>>>     freshness of the results.
>>>
>>> # s/Evidence to assists a Verifier/Evidence to assist a Verifier
>>>
>>> Cheers,
>>>
>>> Med
> ____________________________________________________________________________________________________________
> Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
> Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
> 
> This message and its attachments may contain confidential or privileged information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and delete this message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
> Thank you.
> 
> _______________________________________________
> RATS mailing list -- rats@ietf.org
> To unsubscribe send an email to rats-leave@ietf.org