IETF Logo Mail Archive

Re: [saag] draft-ietf-netmod-rfc8407bis: YANG Security Template

"Salz, Rich" <rsalz@akamai.com> Fri, 24 November 2023 17:21 UTC

Return-Path: <rsalz@akamai.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE014C1516E1 for <saag@ietfa.amsl.com>; Fri, 24 Nov 2023 09:21:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.004
X-Spam-Level:
X-Spam-Status: No, score=-2.004 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kO7RAAY0fh6L for <saag@ietfa.amsl.com>; Fri, 24 Nov 2023 09:21:01 -0800 (PST)
Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EDEE4C15154D for <saag@ietf.org>; Fri, 24 Nov 2023 09:21:00 -0800 (PST)
Received: from pps.filterd (m0122332.ppops.net [127.0.0.1]) by mx0a-00190b01.pphosted.com (8.17.1.22/8.17.1.22) with ESMTP id 3AOGJQjr014212; Fri, 24 Nov 2023 17:20:48 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h= from:to:cc:subject:date:message-id:content-type:mime-version; s= jan2016.eng; bh=ujU05w+53KDLQjWx99l3JOp8ngF1leldpUhHa+D4Ecs=; b= jb3NAXyKFw1Sf94kGP7cSiMiARuK4gITbuLaRaHk7FHDf13MgtjKO7Igl3IdtJKt VHKLI4+4VCimT3ptWyLZgqHvbTTk5/gSJHuwRhyr00CIVypOGwSaDUGEkhBFVpx1 /pAMA9g+lshu//xZRkaMSOUe3ozkXBCXQAyZiLSgi9oryD65GQfZvPruqrtQxqXx EHLaG0igwHvNWl+uVfmbrM+nk/RO92qBpIaRh4q2aG3ZZXY07jGQulodFsXDiVo5 QQ1q5K6iQFld/LaZfoFBoV6cNNK1NqALqZ3JlR1Kmv7mmlgTUdK+O+S6K1VDo0kV SJLLG3omlPDMcB/oy2DuwQ==
Received: from prod-mail-ppoint3 (a72-247-45-31.deploy.static.akamaitechnologies.com [72.247.45.31] (may be forged)) by mx0a-00190b01.pphosted.com (PPS) with ESMTPS id 3uep7ptntw-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 24 Nov 2023 17:20:48 +0000 (GMT)
Received: from pps.filterd (prod-mail-ppoint3.akamai.com [127.0.0.1]) by prod-mail-ppoint3.akamai.com (8.17.1.19/8.17.1.19) with ESMTP id 3AOHHJRZ020380; Fri, 24 Nov 2023 12:20:46 -0500
Received: from email.msg.corp.akamai.com ([172.27.50.200]) by prod-mail-ppoint3.akamai.com (PPS) with ESMTPS id 3ufb246s1p-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 24 Nov 2023 12:20:46 -0500
Received: from ustx2ex-dag4mb4.msg.corp.akamai.com (172.27.50.203) by ustx2ex-dag4mb1.msg.corp.akamai.com (172.27.50.200) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.27; Fri, 24 Nov 2023 11:20:46 -0600
Received: from ustx2ex-dag4mb4.msg.corp.akamai.com ([172.27.50.203]) by ustx2ex-dag4mb4.msg.corp.akamai.com ([172.27.50.203]) with mapi id 15.02.1258.027; Fri, 24 Nov 2023 09:20:46 -0800
From: "Salz, Rich" <rsalz@akamai.com>
To: "mohamed.boucadair@orange.com" <mohamed.boucadair@orange.com>, "saag@ietf.org" <saag@ietf.org>
CC: "Qin Wu (bill.wu@huawei.com)" <bill.wu@huawei.com>
Thread-Topic: [saag] draft-ietf-netmod-rfc8407bis: YANG Security Template
Thread-Index: AQHaHvqPPOSWTdaoYEqvhH1vhG0r8w==
Date: Fri, 24 Nov 2023 17:20:46 +0000
Message-ID: <AAC5C7C2-7FDD-4FF0-A0E2-0944A49DEFEB@akamai.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.78.23102801
msip_labels: MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Enabled=true; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SetDate=2023-11-16T14:32:49Z; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Method=Privileged; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Name=unrestricted_parent.2; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SiteId=90c7a20a-f34b-40bf-bc48-b9253b6f5d20; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ActionId=38ace4d9-043f-4269-8101-8a084c190015; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ContentBits=0
x-originating-ip: [172.27.164.43]
Content-Type: multipart/alternative; boundary="_000_AAC5C7C27FDD4FF0A0E20944A49DEFEBakamaicom_"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.987,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2023-11-24_03,2023-11-22_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxlogscore=517 phishscore=0 spamscore=0 adultscore=0 suspectscore=0 malwarescore=0 mlxscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2311060000 definitions=main-2311240134
X-Proofpoint-ORIG-GUID: EIfMCk1xIHw8HOKw9El6hAuKhgXaAtIs
X-Proofpoint-GUID: EIfMCk1xIHw8HOKw9El6hAuKhgXaAtIs
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.987,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2023-11-24_03,2023-11-22_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxlogscore=517 suspectscore=0 spamscore=0 clxscore=1011 phishscore=0 impostorscore=0 priorityscore=1501 mlxscore=0 lowpriorityscore=0 malwarescore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2311060001 definitions=main-2311240134
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/GWXG691JO1yc5VNqcIOoERaBuTo>
Subject: Re: [saag] draft-ietf-netmod-rfc8407bis: YANG Security Template
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Nov 2023 17:21:05 -0000

The Security template used in documents that specify YANG modules is stable since years now. FYI, we are in the process of preparing RFC8407bis, so we would welcome comments on that part: https://datatracker.ietf.org/doc/html/draft-ietf-netmod-rfc8407bis-04#name-security-considerations-sec<https://urldefense.com/v3/__https:/datatracker.ietf.org/doc/html/draft-ietf-netmod-rfc8407bis-04*name-security-considerations-sec__;Iw!!GjvTz_vk!Wi0wD9nwg7iZZAjTfkB7QqNL-LvuU6QVvwBGKkZahy-K6G4plm7jZnshBtJGUw7NF-qSUgKU5tVkz7JRZzGbTcQb$>

You should remove the word “especially” in the two places it’s used and “significant” from the privacy concerns item.

They do not make the intent more clear, and when you remove those words it still leaves the authors to have room for judgement.

v2.46.0 | Report a Bug | By Email | System Status