Re: [regext] WG LAST CALL draft-ietf-regext-rdap-rir-search

"Gould, James" <jgould@verisign.com> Fri, 26 January 2024 13:21 UTC

Return-Path: <jgould@verisign.com>
X-Original-To: regext@ietfa.amsl.com
Delivered-To: regext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73E36C15109D for <regext@ietfa.amsl.com>; Fri, 26 Jan 2024 05:21:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2gY7ZEmOnF6k for <regext@ietfa.amsl.com>; Fri, 26 Jan 2024 05:21:07 -0800 (PST)
Received: from mail4.verisign.com (mail4.verisign.com [69.58.187.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F973C15109C for <regext@ietf.org>; Fri, 26 Jan 2024 05:21:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=11458; q=dns/txt; s=VRSN; t=1706275268; h=from:to:cc:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version:subject; bh=TJMZxZAzr8N6hRrmMwUFi5oDRPU3E00LfCLa52n3SM8=; b=BnkULBTI0Ywy0t8pA/7ipw7t/Yg4HnPIH7YaVQv6KSzey5/HeSKvXFH8 qnVrZJEpDi0+VVSTnBkRbM+ZVCmQRbJTRVoTlEOqpK54EItAZQOt/lw+T WmDN8JyZMIJSV/t8z2btgsk4HkuzrwWHYZsQzVN/MXDMd1znv8jqX872W 2GKvFqcHMs1kLWefyMAuxKrFhj/zICURLpdceEl7KOEpKhsNH2A0osRyA DwAMLaphToSxlkMCL/0bx79G8X6MmtOBaSCynJBlIq2B8HHCMLOuMVo7l 22/Z6asDppBrSl3rqE8iY0L8yt0rYRvoAO/84Np+IkJERwHkRbJ43gyeB Q==;
X-CSE-ConnectionGUID: PJUnt/4sQ6uicCncidMzzg==
X-CSE-MsgGUID: alK5TDyJTBqTw2tfnxnd0A==
X-ThreatScanner-Verdict: Negative
IronPort-Data: A9a23:PSsFoK/eAKeMJREswNOLDrUD83+TJUtcMsCJ2f8bNWPcYEJGY0x3m jAZCDuOM6nfMDCkctgjPYzjo05VvZDdytNkSABt+S8xFiIbosf7XtnIdU2Y0wF+jCHgZBk+s 5hBMImowOQcFCK0SsKFa+C5xZVE/fjVAOK6UKidYnwZqTZMEE8JkQhkl/MynrlmiN24BxLlk d7pqqUzAnf8s9JPGjxSs//rRC9H5qyo5GtB5ABmPJingXeF/5UrJMNHTU2OByagKmVkNrbSb /rOyri/4lTY838FYj9yuu+mGqGiaue60Tmm0hK6aYD76vRxjnVaPpIACRYpQRw/ZwOhxIktl YoX5fRcfi9yVkHEsLx1vxBwTXkibfUekFPNCSDXXce7lyUqf5ZwqhnH4Y5f0YAwo45K7W9yG fMwEBIwaAzE2/mPnq+6QcJqjcUvCdv5M9ZK0p1g5Wmx4fcOa6rlGprsyO8AhXEujcdUBbDXa 4wHcyFpKh/HZnWjOH9OUNRnw7zu3ySkNWEIwL6WjfNfD2z7zgN2zbzhGMTYYN2RRMpT2E2fo woq+kyjU01DbYDDkVJp9FqlgsySoQ/qer44DYGnrOJkhk2VyjQ6XUh+uVyT5KPRZlSFc85YL kw88zIorKN08kG3JvH8UgG2iHeCohkdXZxWF4US8gyCx7rIyweUGmZCSSROAOHKr+c8Xzpzy VmEj4uwQCdxqvuQSGnY/LDSpym0YG4LN3QEIyQDSGPp/uXenW36tTqXJv4LLUJ/poSd9e3Yq 9xSkBUDug==
IronPort-HdrOrdr: A9a23:Y/6RPKhmrYuaOI5cpiVMmjrOmnBQXgcji2hC6mlwRA09TyX+rb HKoB17726XtN9/YhEdcLy7VpVoIkmyyXcd2+B4AV7IZniEhILHFuBfxLqn7THmFzb36+JRkY xxGpITNPTASXx3l9zz7gX9MdoxqePszImYwcPT1W1kQw0vUbxn9AsRMGumO1d7XxZLHqA0E5 eg5s5KzgDKRUgq
X-Talos-CUID: 9a23:MWqo925+bVpP3WsjntsszGwpHNxiLmbkkmrRKGS+Amdlba+HRgrF
X-Talos-MUID: 9a23:zKWQ2QaRN98TO+BTvjvP2Q1OJeVUyb2SFxoRn5MWvcXcHHkl
X-IronPort-AV: E=Sophos;i="6.05,216,1701147600"; d="scan'208";a="29411440"
Received: from BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) by BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.35; Fri, 26 Jan 2024 08:21:05 -0500
Received: from BRN1WNEX01.vcorp.ad.vrsn.com ([10.173.153.48]) by BRN1WNEX01.vcorp.ad.vrsn.com ([10.173.153.48]) with mapi id 15.01.2507.035; Fri, 26 Jan 2024 08:21:05 -0500
From: "Gould, James" <jgould@verisign.com>
To: "tomh@apnic.net" <tomh@apnic.net>
CC: "ietf@antoin.nl" <ietf@antoin.nl>, "regext@ietf.org" <regext@ietf.org>
Thread-Topic: [EXTERNAL] Re: [regext] WG LAST CALL draft-ietf-regext-rdap-rir-search
Thread-Index: AQHaLD5ZSOKxSVdaXkC4PIAYPU6NYbCkhuIAgEeE5YCAAFDDgA==
Date: Fri, 26 Jan 2024 13:21:05 +0000
Message-ID: <D028EF1E-3040-49D3-927D-FE81E4453EC5@verisign.com>
References: <57BB2E2E-F08C-4F2D-86CC-09C2952FDEF1@antoin.nl> <5A437704-41DB-4C4C-984E-4982244EF0A1@antoin.nl> <D6E47A05-2E0C-47B3-B60E-0B45A4B6E569@verisign.com> <ZbMnsZ40dhdn8RXP@TomH-498551.lan>
In-Reply-To: <ZbMnsZ40dhdn8RXP@TomH-498551.lan>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.80.23121017
x-originating-ip: [10.170.148.18]
Content-Type: text/plain; charset="utf-8"
Content-ID: <55B8577D466BBF4DB60F6DE4A05FC960@verisign.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/jXQX7X2P5hf5Nj61x4wgCH_L-c4>
Subject: Re: [regext] WG LAST CALL draft-ietf-regext-rdap-rir-search
X-BeenThere: regext@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Registration Protocols Extensions <regext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/regext>, <mailto:regext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext/>
List-Post: <mailto:regext@ietf.org>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/regext>, <mailto:regext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Jan 2024 13:21:12 -0000

Tom,

Thanks for making the drafts updates.  I will do a detailed review of the updated draft.  

For the "..." convention, we had to explicitly define it in RFC 8334 with " The use of "..." is used as shorthand for elements defined outside this document.".  I believe that was based on feedback from the IESG.  It's something to consider as the document proceeds.  

Thanks,

-- 

JG 



James Gould
Fellow Engineer
jgould@Verisign.com <applewebdata://13890C55-AAE8-4BF3-A6CE-B4BA42740803/jgould@Verisign.com>

703-948-3271
12061 Bluemont Way
Reston, VA 20190

Verisign.com <http://verisigninc.com/> 




On 1/25/24, 10:32 PM, "Tom Harrison" <tomh@apnic.net <mailto:tomh@apnic.net>> wrote:


Caution: This email originated from outside the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. 


Hi James,


Thanks for your feedback. Comments on non-nits inline:


On Mon, Dec 11, 2023 at 08:21:57PM +0000, Gould, James wrote:
> I did my review of draft-ietf-regext-rdap-rir-search-05, and below
> is my primarily editorial feedback:
> 
> 1. Section 1.1 “Requirements Language”
> * Recommend make this Section 2 “Conventions Used in This
> Document” for consistency with the RDAP RFCs.


This has been updated.


> I also recommend defining the convention of using the ‘*’ to
> support the partial string searching specified in Section 4.1
> of RFC9082.


This has been added to section 2.1 (Basic Searches -> Path Segments),
since it's specific to the basic searches.


> 2. Section 2.1 “Path Segments”
> * I would use the term “semantics” instead of “logic”.
> Section 3.2 of RFC9082 does reference Section 4.1 of RFC9082,
> but I still believe it’s best to explicitly define the use of
> partial string searching in the “Conventions Used in this
> Document” section.


Since the search paths are defined more fully in the subsequent
sections anyway, this sentence has now been omitted (missed in the
-06 submission, but will include it in the next one). 


> 4. Section 3.1 “Path Segments”
> * It would be helpful to define the variables in the path segments with the relevant references, such as:
> 
> i. The variables used in the path segments include:
> 
> * <relation>: The type of relation defined in Section 3.2.2
> * <IP Address>: IP Address defined in Section 3.1.1 of RFC9082
> * <CIDR prefix>: CIDR block defined in Section 3.1.1 of RFC9082
> * <CIDR length>: Prefix length defined in Section 3.1.1 of RFC9082
> * <domain name>: Fully qualified domain name defined in Section 3.1.3 of RFC9082
> * <autonomous system number or range> - Should this be <autonomous system number> or <autonomous system range> with the following definitions?
> * <autonomous system number>: Autonomous system number defined in Section 3.1.2 of RFC9082.
> * <autonomous system range>: Unclear what the appropriate reference is for the <autonomous system range>, where autonomous system ranges are referenced in Section 3.2.1.


This section has been updated along the lines of the above text.
"autonomous system number or range" was preserved, since both should
be supported, but a definition for the syntax for a range has now been
added.


> 1. Section 3.2 “Relation Search”
> * It would help to define the variables in the search path.
> * My assumption is that the <relation> matches the values in Section 3.2.2.
> * What is the definition of <object-value>?


We were going to add this, but it doesn't seem to add much, given the
updates to section 3.1 above, so we've left it as-is.


> * <status>: Either “active” or “inactive” defined in Section 3.2.


We don't intend to limit the status to "active" or "inactive", but
more to the point, section 3.3 covers off on status in some detail, so
we're not sure about adding this extra text in.


> 2. Section 3.2.1 “Definitions”
> * I would expand INR as in Internet Number Resource (INR) in
> the first reference.


This has been updated.


> 3. Section 3.2.2 “Relations”
> * I recommend using double quotes for the titles of each of
> the sub-sections, since the relations are literals.


This has been updated.


> 4. Section 3.3 “Status”
> * Are the supported status values “active” and “inactive”?


All statuses should be supported, but servers can opt to limit their
support to the "active" status on "up"/"top" relations only, if they
prefer. The text has now been updated to suit.


> 5. Section 3.4 “Link Relations”
> * “The response returned by a server when fetching the link
> target for a link within an RDAP object with one of those link
> relations MUST be the same response that would be returned for
> the corresponding search.” Is hard to follow and I recommend
> rewording it. Maybe it’s too many references to the word
> “link”.


Updated text:


When constructing these link objects, the server MUST set link
targets that yield the same response as for the corresponding
search.


> * Can “top-active” and “up-active” also be used for
> <relation> values? It looks like that is the case based on the
> Link Relations Registry entries, but the values are somewhat
> embedded in the text.


They can be used in this way. The existing text on this point appears
clear to us:


Two additional link relations are defined that
correspond to relation searches with a "status" of
"active": "top-active" and "up-active".


> * “The equivalent link relations for "down" and "bottom" are
> not defined, because it is not expected that they will be
> used.” Is not clear. I recommend removing it or clarifying why
> it is not expected to be used.


Updated text:


Two additional link relations are defined that
correspond to relation searches with a "status" of
"active": "top-active" and "up-active". No other
status-specific link relations are defined, because
the only known use cases for status filtering involve
the "top" and "up" relations and the "active" status.


> * “…for the RDAP INR context only, though, and in that
> context it does not conflict with the current description of
> that link relation” sentence fragment is hard to follow. There
> is a reference to the RDAP INR context and then there is a
> reference to “that context” and “current description”, which
> are not clearly defined.


Updated text:


This section mandates specific behaviour for the "up"
link relation, but does not define that link relation
(see <xref target="RFC8288" />). This is acceptable,
because this behaviour:


does not conflict with the current description
of the link relation; and


is not generally applicable, but instead
limited to the context of RDAP INR objects
only.


> 6. Section 4 “Responding To Searches”
> * “for /ips searches, the array is "ipSearchResults"” can
> provide additional detail, such as “for /ips searches, the
> array is "ipSearchResults" of “ip network” objects, defined in
> Section 5.4 of RFC9083.
> * “for /autnums searches, the array is "autnumSearchResults"”
> can provide additional detail, such as “for /autnums searches,
> the array is "autnumSearchResults" of “atnum” objects, defined
> in Section 5.5 of RFC9083.


There are now updates for this in the first paragraph in this section
instead, since it is about similar things.


> * The “rirSearch1”, “ips”, and “autnums” extension
> identifiers don’t need to be in the sample rdapConformance,
> since they are not included in the response.


See the reply to Mario for more detail on this point.


> * The “,…” could be removed from the sample rdapConformance
> unless the use of ,…” is included in the “Conventions Used in
> This Document”


We don't understand this point. 9083 (e.g.) uses ellipses in objects
without documenting that in a specific section. 


> 7. Section 6 “RDAP Conformance”
> * "rirSearch1", "ips", "autnums" can be removed from the
> rdapConformance since they are path segment extensions and not
> included in the response.


Per earlier comment, see the reply to Mario for more detail on this
point.


-Tom