Re: [secdir] SECDIR review of draft-sgtatham-secsh-iutf8

Daniel Migault <daniel.migault@ericsson.com> Thu, 02 March 2017 15:52 UTC

Return-Path: <daniel.migault@ericsson.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42C7C129517; Thu, 2 Mar 2017 07:52:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MqSUpC17VTMR; Thu, 2 Mar 2017 07:52:35 -0800 (PST)
Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16C911294C3; Thu, 2 Mar 2017 07:52:35 -0800 (PST)
X-AuditID: c6180641-c53ff70000000a06-88-58b7f96a6173
Received: from EUSAAHC008.ericsson.se (Unknown_Domain [147.117.188.96]) by (Symantec Mail Security) with SMTP id AA.43.02566.A69F7B85; Thu, 2 Mar 2017 11:52:29 +0100 (CET)
Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC008.ericsson.se ([147.117.188.96]) with mapi id 14.03.0319.002; Thu, 2 Mar 2017 10:52:31 -0500
From: Daniel Migault <daniel.migault@ericsson.com>
To: Melinda Shore <melinda.shore@gmail.com>, "secdir@ietf.org" <secdir@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "draft-sgtatham-secsh-iutf8.all@ietf.org" <draft-sgtatham-secsh-iutf8.all@ietf.org>
Thread-Topic: SECDIR review of draft-sgtatham-secsh-iutf8
Thread-Index: AQHSkG+rShKU9B7xMUeeLbjvAAWf2qGBuMCQ
Date: Thu, 02 Mar 2017 15:52:30 +0000
Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C11801C243@eusaamb107.ericsson.se>
References: <e94692fe-f381-43f7-3638-c81f601c9d8e@gmail.com>
In-Reply-To: <e94692fe-f381-43f7-3638-c81f601c9d8e@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [147.117.188.10]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrBLMWRmVeSWpSXmKPExsUyuXRPgm7uz+0RBhMWqlqcv7uAzWLGn4nM Fm1ts1gsPix8yOLA4rFz1l12jyVLfjIFMEVx2aSk5mSWpRbp2yVwZSycfZet4BpPxfI1p1gb GNfwdDFyckgImEgsf3eMFcQWEljPKNG6QxPCXsYocWm+NojNJmAk0Xaon72LkYtDROAMo8Sx 7Z9ZQBLCAhYSy09NYgKxRQQsJfY9PgVkcwDZRhLn34L1sgioSEybsocNJMwr4CuxZpociCkk YCPxcZk3SAWngK3EkovPwC5gFBCT+H5qDdhAZgFxiVtP5jNBXCkgsWTPeWYIW1Ti5eN/rBC2 ksSkpedYQUYyC2hKrN+lD9GqKDGl+yE7iM0rIChxcuYTlgmMIrOQTJ2F0DELSccsJB0LGFlW MXKUFhfk5KYbGW5iBIb/MQk2xx2Me3s9DzEKcDAq8fB+eLgtQog1say4MvcQowQHs5IIr5zI jggh3pTEyqrUovz4otKc1OJDjNIcLErivNdD7ocLCaQnlqRmp6YWpBbBZJk4OKUaGDl7Lr86 +DpPpbnTwE7yuQ8T97wgngsLD/OZqsqIdtbrP+BwDvpwQ0kyb0+CqUIs1+qvDL4fyy3qL57P binimxUb7COjqXjXQv7PnRurNu9R11F9VK4gMb02eIX9Q/Hbr29fTN1Wn2FQHjDJzFr5c3lb 7HLxpkfM0e8KZq278Ddfb0+YwoZvSizFGYmGWsxFxYkAXfCuwHsCAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/4pHhzRtsVM3gokD3gA41rsdFrgE>
Subject: Re: [secdir] SECDIR review of draft-sgtatham-secsh-iutf8
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Mar 2017 15:52:36 -0000

Hi Melinda, 

Thank you for reviewing the draft. We will make appear the reference in the text. 

Yours, 
Daniel

-----Original Message-----
From: Melinda Shore [mailto:melinda.shore@gmail.com] 
Sent: Sunday, February 26, 2017 3:34 PM
To: secdir@ietf.org; iesg@ietf.org; draft-sgtatham-secsh-iutf8.all@ietf.org
Subject: SECDIR review of draft-sgtatham-secsh-iutf8

I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.  These comments were written primarily for the benefit of the security area directors.  Document editors and WG chairs should treat these comments just like any other last call comments.

Summary: ready with some incredibly minor nits

This document adds a new opcode to ssh terminal modes, to match the iutf8 flag in the Linux terminal driver.  This draft has been implemented in openssh and putty.  There are no additional security concerns introduced by this draft beyond those already documented in RFC 4254.

The nits checker didn't like the spacing in the table in section 4.  There's an unused reference (UNICODE).  Otherwise it's clean.

Melinda