Re: [regext] draft-ietf-regext-rdap-redacted-10 Posted

Pawel Kowalik <kowalik@denic.de> Mon, 19 December 2022 07:43 UTC

Return-Path: <kowalik@denic.de>
X-Original-To: regext@ietfa.amsl.com
Delivered-To: regext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6FBBC14F735 for <regext@ietfa.amsl.com>; Sun, 18 Dec 2022 23:43:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.097
X-Spam-Level:
X-Spam-Status: No, score=-7.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=denic.de
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R5ia34w_wV7T for <regext@ietfa.amsl.com>; Sun, 18 Dec 2022 23:43:41 -0800 (PST)
Received: from mout-b-206.mailbox.org (mout-b-206.mailbox.org [IPv6:2001:67c:2050:102:465::206]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CAC8C14F72C for <regext@ietf.org>; Sun, 18 Dec 2022 23:43:38 -0800 (PST)
Received: from smtp2.mailbox.org (smtp2.mailbox.org [IPv6:2001:67c:2050:b231:465::2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-b-206.mailbox.org (Postfix) with ESMTPS id 4NbBXN2DGbz9snY; Mon, 19 Dec 2022 08:43:32 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=denic.de; s=MBO0001; t=1671435812; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=SbKv4gJ+STMTpIr4UuCKpHaH+9yVg+wrc8ySOu/CpPM=; b=e1oBVFRZM+cJk8dKA+35GGjInr4QYTwZGmvkzk11nWSMvw+S24oN9SQyObFxKu/iQtxUmg GiT3LKSvH6YbBoxu7ho0nGiWnGMCF3RFOd/xiktw52e6llNV+nAG5QqkMZPDGuEvl1Xw/R 2xRtHyzp/TN3MsD5Dn13bTWolXf0M2LxhakLJgqwl0OPhjAbSR1fAKH22qr1a7whQ/krvE W1At55hMnyGSdEvsBeosV2kKFLvFch+FyM/eN9EOQMdae5/L/c/JE37tMxLa1pxbFGA3OS +uivHdlTSfVuDQMWAQUdvk/fCwJoG+6WVFPh/4bIOTr7BKXeUX4Lk+tOx7QfhQ==
Message-ID: <066c53a0-7691-d645-dd38-5c34358fc39e@denic.de>
Date: Mon, 19 Dec 2022 08:43:30 +0100
MIME-Version: 1.0
Content-Language: en-GB
To: "regext@ietf.org" <regext@ietf.org>, "Gould, James" <jgould=40verisign.com@dmarc.ietf.org>
References: <96C80974-5ADE-4F7D-B17C-624046A56EEB@verisign.com>
From: Pawel Kowalik <kowalik@denic.de>
In-Reply-To: <96C80974-5ADE-4F7D-B17C-624046A56EEB@verisign.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
X-MBO-RS-ID: 9a51b42ba7def13c2a1
X-MBO-RS-META: qbrkqypi454tg1fd3pqmnw9pu5fjsrwh
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/cWbJdSqCcqX47T0WXDdCzXRvxvQ>
Subject: Re: [regext] draft-ietf-regext-rdap-redacted-10 Posted
X-BeenThere: regext@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Registration Protocols Extensions <regext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/regext>, <mailto:regext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext/>
List-Post: <mailto:regext@ietf.org>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/regext>, <mailto:regext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Dec 2022 07:43:46 -0000

Hi James,

Thanks for posting the new version incorporating the changes. I reviewed 
it and have few comments on that:

1. As the WG consensus seems to be to keep normative language in the 
form "placeholder text XXXX, MUST NOT be used for redaction" I would 
recommend to extend Abstract and Introduction accordingly, that the 
document also specifies allowed methods of RDAP response redaction.


2. The description of "path" member in 4.3 is now correctly describing 
all the cases for different redaction methods, but due to that it became 
very complex. I would still reconsider, if it wouldn't be better to have 
2 members "preredactedPath" and "redactedPath", which refer to 
pre-redacted response and redacted response accordingly. Then for 
different redaction method you would apply:

- Redaction By Removal Method: preredactedPath (OPTIONAL, same as path 
in -10)

- Redaction by Empty Value Method: redactedPath (MANDATORY, same as path 
in -10)

- Redaction by Partial Value Method: redactedPath (MANDATORY, same as 
path in -10)

- Redaction by Replacement Value Method: preredactedPath (OPTIONAL, same 
as path in -10) and redactedPath (MANDATORY, same as replacementPath in -10)

I see a clear advantage of this approach that the clients can always use 
"redactedPath" on the response object without tedious logic depending on 
redaction method.


Kind Regards,

Pawel