Re: [saag] draft-ietf-netmod-rfc8407bis: YANG Security Template
Michael Richardson <mcr+ietf@sandelman.ca> Sun, 26 November 2023 15:18 UTC
Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31164C14CF1F for <saag@ietfa.amsl.com>; Sun, 26 Nov 2023 07:18:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sandelman.ca
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xny9-s2ckh2t for <saag@ietfa.amsl.com>; Sun, 26 Nov 2023 07:18:25 -0800 (PST)
Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AD16C151079 for <saag@ietf.org>; Sun, 26 Nov 2023 07:18:25 -0800 (PST)
Received: from dyas.sandelman.ca (unknown [77.39.186.42]) by relay.sandelman.ca (Postfix) with ESMTPS id 027E21F4A5; Sun, 26 Nov 2023 15:18:24 +0000 (UTC)
Authentication-Results: relay.sandelman.ca; dkim=pass (2048-bit key; secure) header.d=sandelman.ca header.i=@sandelman.ca header.b="Q1xLZ1Hf"; dkim-atps=neutral
Received: by dyas.sandelman.ca (Postfix, from userid 1000) id 21BC1A0E98; Sun, 26 Nov 2023 16:18:23 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=sandelman.ca; s=dyas; t=1701011903; bh=AnfuzxL5iQzNljFcrAf6ELESJfASSD5CGCiOZ78t92U=; h=From:To:Subject:In-reply-to:References:Date:From; b=Q1xLZ1Hf3Ubmct+wlCq8zKBBw9Y1J5OUvqlNTTjDzdmH0UQ1YScKXxD20aEfIOAWT etMFdIIcf6xwM//lfpW88VZUEvHJys8GPd+dWVMGnmc3X9TU59ElSFKf7uiWFaw5LI pqqt+NyjMlAHJyBHQRupafunqJNDiDspGpgtSaLz0LhVt4r26R7ual2F17qAT4Uu5D JErUxmlHKJr69zi+beVj9IuDR39uaFh694qIaYV6kbj8u/oSZiSZKcJXjZpqbahNzJ ismIoYNbn6FUFBoUNM/xaHUDotwRC1GTX/fF5xmZgAWaGIiV0TP0PGt/NcbXKi5V2t g7yiKYWL9iYZQ==
Received: from dyas (localhost [127.0.0.1]) by dyas.sandelman.ca (Postfix) with ESMTP id 1F87AA05FE; Sun, 26 Nov 2023 16:18:23 +0100 (CET)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: mohamed.boucadair@orange.com, "saag@ietf.org" <saag@ietf.org>, "Qin Wu (bill.wu@huawei.com)" <bill.wu@huawei.com>
In-reply-to: <DU2PR02MB101606B3D6495526FE13B274688B8A@DU2PR02MB10160.eurprd02.prod.outlook.com>
References: <DU2PR02MB101606B3D6495526FE13B274688B8A@DU2PR02MB10160.eurprd02.prod.outlook.com>
Comments: In-reply-to mohamed.boucadair@orange.com message dated "Fri, 24 Nov 2023 08:43:55 +0000."
X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.3
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha512"; protocol="application/pgp-signature"
Date: Sun, 26 Nov 2023 16:18:23 +0100
Message-ID: <458601.1701011903@dyas>
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/BxKwnrtOUxV5i7AFZFH5z6977zw>
Subject: Re: [saag] draft-ietf-netmod-rfc8407bis: YANG Security Template
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 26 Nov 2023 15:18:29 -0000
mohamed.boucadair@orange.com wrote: > The Security template used in documents that specify YANG modules is > stable since years now. FYI, we are in the process of preparing > RFC8407bis, so we would welcome comments on that part: > https://datatracker.ietf.org/doc/html/draft-ietf-netmod-rfc8407bis-04#name-security-considerations-sec I see the exception for documents that are based upon RFC8791. I think it's probably enough, but maybe I'd move that paragraph earlier. -- Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works -= IPv6 IoT consulting =- *I*LIKE*TRAINS*
- [saag] draft-ietf-netmod-rfc8407bis: YANG Securit… mohamed.boucadair
- Re: [saag] draft-ietf-netmod-rfc8407bis: YANG Sec… Salz, Rich
- Re: [saag] draft-ietf-netmod-rfc8407bis: YANG Sec… mohamed.boucadair
- Re: [saag] draft-ietf-netmod-rfc8407bis: YANG Sec… Michael Richardson
- Re: [saag] draft-ietf-netmod-rfc8407bis: YANG Sec… mohamed.boucadair
- Re: [saag] draft-ietf-netmod-rfc8407bis: YANG Sec… mohamed.boucadair