Re: [sacm] Proposed [minor] changes to sacm-nea-swid-patnc-1

"Schmidt, Charles M." <cmschmidt@mitre.org> Tue, 20 June 2017 16:38 UTC

Return-Path: <cmschmidt@mitre.org>
X-Original-To: sacm@ietfa.amsl.com
Delivered-To: sacm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4A75131B3A for <sacm@ietfa.amsl.com>; Tue, 20 Jun 2017 09:38:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wkuITsEaCBT8 for <sacm@ietfa.amsl.com>; Tue, 20 Jun 2017 09:38:02 -0700 (PDT)
Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id D8403129442 for <sacm@ietf.org>; Tue, 20 Jun 2017 09:38:01 -0700 (PDT)
Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 58C446C04E1; Tue, 20 Jun 2017 12:38:01 -0400 (EDT)
Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 4B7FE6C0429; Tue, 20 Jun 2017 12:38:01 -0400 (EDT)
Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Tue, 20 Jun 2017 12:38:01 -0400
Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5 via Frontend Transport; Tue, 20 Jun 2017 12:38:00 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=pvZ5qDXy/8LZ8L9a59iJ2Cof82wf6FtAB3XiTAXHuVQ=; b=dW0SEvqa1Zurg/Izvb/oS3SJeU5q/BPVenfppNAC6pzlsQUVuzL6vu4mMAx+PfpuQ09BGZ4jrI05Y9ZnQgUNGnOy18dkTMlDWd2WBNTQen/nmpLpK7iKI4Nj3H1p04gs2uVeVAtNa73DVeCeKs6Xj7UC2LWH6R9ttPQi/4z/gKs=
Received: from CY1PR09MB0796.namprd09.prod.outlook.com (10.163.43.146) by CY1PR09MB0796.namprd09.prod.outlook.com (10.163.43.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1199.15; Tue, 20 Jun 2017 16:37:54 +0000
Received: from CY1PR09MB0796.namprd09.prod.outlook.com ([10.163.43.146]) by CY1PR09MB0796.namprd09.prod.outlook.com ([10.163.43.146]) with mapi id 15.01.1199.015; Tue, 20 Jun 2017 16:37:54 +0000
From: "Schmidt, Charles M." <cmschmidt@mitre.org>
To: Andreas Steffen <andreas.steffen@strongswan.org>, "sacm@ietf.org" <sacm@ietf.org>
Thread-Topic: [sacm] Proposed [minor] changes to sacm-nea-swid-patnc-1
Thread-Index: AQHS5ouBtLWJ+a6NMUeC0BrrrdvvgqIt8yxQ
Date: Tue, 20 Jun 2017 16:37:54 +0000
Message-ID: <CY1PR09MB07961D4B847E336C80274E77ABC50@CY1PR09MB0796.namprd09.prod.outlook.com>
References: <e67a3464-96b5-8297-eec2-de35a6397c5e@strongswan.org>
In-Reply-To: <e67a3464-96b5-8297-eec2-de35a6397c5e@strongswan.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: strongswan.org; dkim=none (message not signed) header.d=none;strongswan.org; dmarc=none action=none header.from=mitre.org;
x-originating-ip: [192.160.51.88]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CY1PR09MB0796; 7:4G+P/l5eeNE9ER8bwq7PUoHVd7S8JXKyvpVlcC0C8JiC7/PlaRwix1CNxr/X5ZZKWho3jkiXz8PKziF8OlZzYeTTsdYRPLxLHiBdnTaV8DWNZ/7tQVxzKfFZbJIZudjOht2KiODb5N+cKrj6YfgMEMoYoF+idP2wnaCEhf4qc9O2gIda180mBTLdYvrurGJ2oZYxd+nrFYv4JjtoZUZARbWynC3n/3QNIQ1QsIs+AJRQlRL6NDu83VVb8p/Y4T+984XGY5NVeYkOCf9XkW5QJ7ImbBgsDfpqlpNGgh/w/+8lfrVDqchcX5QGRS8Mmqrc+9zijYEQZAQbLDy47DsRla3xjjAC39jidrqACi43iEwRFd+GPid6bsnIs1jRoL3xbE8LKbK5zT6pDXkVYVo7fk2/sLc5rD43s/Vx7e1+gzUWDxFHVMRT6DMLjY2wvoDiEIyjO0CEWA0Q4dyWLUJDVL8HHuV7hgINJE2F0uWFPEhklwRSDNgA6WHdcR/PdIq+2rc7/cxxUFG1OWSCiErQPI4gGs3PK7KAePYzqv9k6kJBpIe5w/87BRzU4/+zSYBlTCUsCnBgB1u0CxG3J/AI8Wg2rDN+S/2KiSTNLevYCQSMN1msiB8x5jMow7e7krRHeCS7g+lFuBeWy5OkClh8vNJ1s4p9uDYE2S6FS6TP5C/Y8Qe7+zux+PabFzVweHSb6ROLZrV8sPnrt0IF2b1La10EX91TW5HyWUcs5xZHVHYE934/4k357JJWJhCqWxitaXxFqTeSFS2KCPPwKDyAR7rZSuPeszXYsarR3rNZl/Y=
x-ms-office365-filtering-correlation-id: 15221e48-c991-4d9c-b651-08d4b7fab398
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081); SRVR:CY1PR09MB0796;
x-ms-traffictypediagnostic: CY1PR09MB0796:
x-microsoft-antispam-prvs: <CY1PR09MB0796DEF4DCFC16E5E49AADA0ABC50@CY1PR09MB0796.namprd09.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(8121501046)(5005006)(10201501046)(100000703101)(100105400095)(93006095)(93001095)(3002001)(6055026)(6041248)(20161123564025)(20161123560025)(20161123555025)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:CY1PR09MB0796; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:CY1PR09MB0796;
x-forefront-prvs: 03449D5DD1
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(39860400002)(39400400002)(39840400002)(39850400002)(39450400003)(39410400002)(377454003)(13464003)(43784003)(66654002)(86362001)(8676002)(6436002)(33656002)(15974865002)(76176999)(53936002)(9686003)(50986999)(74316002)(81166006)(305945005)(99286003)(55016002)(2950100002)(7736002)(230783001)(77096006)(54356999)(14454004)(345774005)(229853002)(6506006)(66066001)(3660700001)(3280700002)(189998001)(122556002)(2906002)(2900100001)(2501003)(5660300001)(478600001)(102836003)(6116002)(8936002)(25786009)(53546009)(3846002)(6246003)(38730400002)(7696004); DIR:OUT; SFP:1101; SCL:1; SRVR:CY1PR09MB0796; H:CY1PR09MB0796.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jun 2017 16:37:54.7669 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR09MB0796
X-OriginatorOrg: mitre.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/sacm/hNfVzgNIW1qw6j5lKQtVEnh19mM>
Subject: Re: [sacm] Proposed [minor] changes to sacm-nea-swid-patnc-1
X-BeenThere: sacm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: SACM WG mail list <sacm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sacm>, <mailto:sacm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sacm/>
List-Post: <mailto:sacm@ietf.org>
List-Help: <mailto:sacm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sacm>, <mailto:sacm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Jun 2017 16:38:05 -0000

Hi Andreas,

Thanks a bunch for the feedback, and many, many thanks for putting together an implementation of SWIMA.

Regarding your comments:
1) Thank you for noticing the copy-paste errors. I'll get those fixed.

2) Regarding your comment about having length-value fields adjacent to each other: my original thought had been to have all fixed-length fields precede all variable-length fields. I reasoned that by doing this, one could read in all the fixed length fields, and then have all the information necessary to jump to whichever variable length field was of interest, instead of having to do a read-skip-read-skip-read-skip-read-read to get the contents of the fourth variable length field. It sounds like between the fact that A) I am violating typical procedures for data organization, and B) in this case it is unlikely that the reader of the message would care about field 4 but not care about fields 1, 2 and 3, that this design is counterproductive. I have no objection to changing to a more traditional data organization as you propose.

3) I agree that allowing the unknown location to be represented with 0 bytes instead of 8 bytes makes sense.

4) I completely understand and agree with your concerns about starting the software identifier with a length number - definitely not a good thing. I remain a bit nervous about the fact that, while unlikely, it is not impossible for the Tag Creator Regid to include a double underscore, which would cause the decomposition of the software identifier back into its component fields to fail. That said, I understand that this is a theoretical objection to a practical solution. I am also guessing that parties will only rarely have a need to decompose the software identifier into its component fields, and even then a failure of that process would probably not have severe consequences. Thus my objection is a theory of possible minor problems in an edge case. I'm happy to have practical experience override that any day. Barring concerns from others, I'll make the change.

Thanks again for your work and input!

Charles

> -----Original Message-----
> From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Andreas Steffen
> Sent: Friday, June 16, 2017 5:28 AM
> To: sacm@ietf.org
> Cc: Schmidt, Charles M. <cmschmidt@mitre.org>
> Subject: [sacm] Proposed [minor] changes to sacm-nea-swid-patnc-1
> 
> Hi,
> 
> based on the experience of our SWIMA prototype implementation
> we propose four minor changes to the SWIMA draft document
> "draft-ietf-sacm-nea-swid-patnc-1".
> 
> Best regards
> 
> Andreas
> 
> ==========================================================
> ============
> Andreas Steffen                         andreas.steffen@strongswan.org
> strongSwan - the Open Source VPN Solution!          www.strongswan.org
> Institute for Networked Solutions
> HSR University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ==========================================================
> =[INS-HSR]==