From mcr+ietf@sandelman.ca Sun Nov 26 07:18:29 2023 Return-Path: X-Original-To: saag@ietfa.amsl.com Delivered-To: saag@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31164C14CF1F for ; Sun, 26 Nov 2023 07:18:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.106 X-Spam-Level: X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sandelman.ca Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xny9-s2ckh2t for ; Sun, 26 Nov 2023 07:18:25 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AD16C151079 for ; Sun, 26 Nov 2023 07:18:25 -0800 (PST) Received: from dyas.sandelman.ca (unknown [77.39.186.42]) by relay.sandelman.ca (Postfix) with ESMTPS id 027E21F4A5; Sun, 26 Nov 2023 15:18:24 +0000 (UTC) Authentication-Results: relay.sandelman.ca; dkim=pass (2048-bit key; secure) header.d=sandelman.ca header.i=@sandelman.ca header.b="Q1xLZ1Hf"; dkim-atps=neutral Received: by dyas.sandelman.ca (Postfix, from userid 1000) id 21BC1A0E98; Sun, 26 Nov 2023 16:18:23 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=sandelman.ca; s=dyas; t=1701011903; bh=AnfuzxL5iQzNljFcrAf6ELESJfASSD5CGCiOZ78t92U=; h=From:To:Subject:In-reply-to:References:Date:From; b=Q1xLZ1Hf3Ubmct+wlCq8zKBBw9Y1J5OUvqlNTTjDzdmH0UQ1YScKXxD20aEfIOAWT etMFdIIcf6xwM//lfpW88VZUEvHJys8GPd+dWVMGnmc3X9TU59ElSFKf7uiWFaw5LI pqqt+NyjMlAHJyBHQRupafunqJNDiDspGpgtSaLz0LhVt4r26R7ual2F17qAT4Uu5D JErUxmlHKJr69zi+beVj9IuDR39uaFh694qIaYV6kbj8u/oSZiSZKcJXjZpqbahNzJ ismIoYNbn6FUFBoUNM/xaHUDotwRC1GTX/fF5xmZgAWaGIiV0TP0PGt/NcbXKi5V2t g7yiKYWL9iYZQ== Received: from dyas (localhost [127.0.0.1]) by dyas.sandelman.ca (Postfix) with ESMTP id 1F87AA05FE; Sun, 26 Nov 2023 16:18:23 +0100 (CET) From: Michael Richardson To: mohamed.boucadair@orange.com, "saag\@ietf.org" , "Qin Wu \(bill.wu\@huawei.com\)" In-reply-to: References: Comments: In-reply-to mohamed.boucadair@orange.com message dated "Fri, 24 Nov 2023 08:43:55 +0000." X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.3 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Date: Sun, 26 Nov 2023 16:18:23 +0100 Message-ID: <458601.1701011903@dyas> Archived-At: Subject: Re: [saag] draft-ietf-netmod-rfc8407bis: YANG Security Template X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.39 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 26 Nov 2023 15:18:29 -0000 --=-=-= Content-Type: text/plain mohamed.boucadair@orange.com wrote: > The Security template used in documents that specify YANG modules is > stable since years now. FYI, we are in the process of preparing > RFC8407bis, so we would welcome comments on that part: > https://datatracker.ietf.org/doc/html/draft-ietf-netmod-rfc8407bis-04#name-security-considerations-sec I see the exception for documents that are based upon RFC8791. I think it's probably enough, but maybe I'd move that paragraph earlier. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- *I*LIKE*TRAINS* --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEow/1qDVgAbWL2zxYcAKuwszYgEMFAmVjYb4ACgkQcAKuwszY gEOaTAv+I2lfOXt9y4HR904OPJgs6EAA1qAlqXl13U+U7N6o8h6RylbRTFLDOiaJ f7PC1Bj90ytngFd+9M/aGyg4q+h1I1i2D3X5s62swcEHBg098ZKkOH/MKJe1o0nW jplWMEcPvvRu4cJy01VDrkrcssA/kgJCghySfkgM7RWxBx/BS3lyaL0B72mEkI/K Bmlf6NroZ4PjEytUVQURuwtBoYkVqiBMIEcWLOLbqQCAQSGJGDfcfMctlopcxXsY M6oDkTlx3I9N1deBcFvMGk3fHOPX9qBX2DqTVMRKz8KoeO0zUSdBIjFeBa+p50tV hgY9tPNHIYmqnNut7zsxcKe9o8kZGPFKIePhEtjzS4BUU2GK8qXSo+gB1OG2vz25 0ewbJJYNkCSF14kpzREqhZ+m22NmlNx3p7MOq6720e1tLhVJUGmHDj7bIve+VUgW RGsWH2fSrfwmxv1Nvr7f9U2DdU4ssJZFDFTxWmOPeLnlr43QmZymRQyE52GvRXOz vIWbUJkj =U3Tf -----END PGP SIGNATURE----- --=-=-=--