Re: [secdir] SecDir review of draft-mm-wg-effect-encrypt-09

Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> Thu, 06 April 2017 16:51 UTC

Return-Path: <kathleen.moriarty.ietf@gmail.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EDEE12420B; Thu, 6 Apr 2017 09:51:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6zvEgoTJzQHA; Thu, 6 Apr 2017 09:51:56 -0700 (PDT)
Received: from mail-pg0-x230.google.com (mail-pg0-x230.google.com [IPv6:2607:f8b0:400e:c05::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D4FB1200C5; Thu, 6 Apr 2017 09:51:56 -0700 (PDT)
Received: by mail-pg0-x230.google.com with SMTP id 21so41698344pgg.1; Thu, 06 Apr 2017 09:51:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=XjXO3aUTBK2edSCOJgjzC1OfXOvuG59xxzTHw4uejBI=; b=DzSjp6isIx+9OpQlXeVmAM+woNzmNxSsm9ov94445SiTgqumCss6RhXlhLF9kC9Fem LznOoOb/jWWl4OhV5Q0yLIjGIQcqVZPYJ1eHj8a866Rj4p3M9+rR9z6ldl3Zbb8MXwcD ufrbP5J/Bt9XPpz+tJXMi/jcM3Zmi+ycv17Ts6tpzIKBZ3al6PQBODV5pHc0gY504IUE vj/CceLgoIzp7u+4SjoajzqFIH64y3Tnt3RDm1OxoHw2fCbYQwO8aHbufOkWAoQEhWyU E/IJNQJSlzDZqqCiYZl1D5MURW6lQkaQ+xMv6TKXHpMRadxG4Cx+02I77v7PXKZEwsfg L6gg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=XjXO3aUTBK2edSCOJgjzC1OfXOvuG59xxzTHw4uejBI=; b=n8PCI6UqWmJdXkH8intQ7uirwSp/rAjgANlGzQ12ez5Ve0lVpzzNmVjQxLXizRNPSr V06MvHf9KE+ZiziUNw6Zdc4jkiLgeS/KC3EvhFeIikM3o4rqpOO5qXnuqP08IxqeDAaY 2XXo5QghUvWpOxqdaRx0VubbXJG0gREN9AooOfWfdSOfI72iXs9vySCGNMcJW600eMdP 1Hr9N+Zoh161z1MIoSnxs9AwCjIVu0wImOp+Roi8bTy0WkHBpj4SgjIcol/SmGGuykny OyrMFAxlfRGYBJR1m6+WWyEDiLC2nGvMDow83WMGXyQX+DomiuJauzhIVfKaduN09+aj M4tg==
X-Gm-Message-State: AFeK/H3A7P1ud2dEfaqE/OGuCNVvVhxRCvBK3Dp32AyoWcUVDhC2RAIla5QifeTBSqIEOQf4kysQrbUuatPl9w==
X-Received: by 10.99.126.13 with SMTP id z13mr35156798pgc.158.1491497515890; Thu, 06 Apr 2017 09:51:55 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.100.128.141 with HTTP; Thu, 6 Apr 2017 09:51:15 -0700 (PDT)
In-Reply-To: <4D7F4AD313D3FC43A053B309F97543CF25F6AA27@njmtexg5.research.att.com>
References: <CAGL6epLwPY=B0q2t+Qin8DHRy8oVh4hFofD1QeYvb3vAM7PTQg@mail.gmail.com> <CAHbuEH5npwx76m19zMT-uZNK0cA1Rpkyjth5ZSoMUmv5YDwXRA@mail.gmail.com> <4D7F4AD313D3FC43A053B309F97543CF25F6AA27@njmtexg5.research.att.com>
From: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Date: Thu, 06 Apr 2017 12:51:15 -0400
Message-ID: <CAHbuEH76f3sKPaRbbvgCFyqSUtp_zupfY7h2BukHK44TqGVbFw@mail.gmail.com>
To: "MORTON, ALFRED C (AL)" <acmorton@att.com>
Cc: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>, "secdir@ietf.org" <secdir@ietf.org>, The IESG <iesg@ietf.org>, "draft-mm-wg-effect-encrypt@ietf.org" <draft-mm-wg-effect-encrypt@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/DU79Uk5N4ec2aQrP6-EHI3NFX2w>
Subject: Re: [secdir] SecDir review of draft-mm-wg-effect-encrypt-09
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Apr 2017 16:51:58 -0000

Hi Al,

On Thu, Apr 6, 2017 at 12:27 PM, MORTON, ALFRED C (AL) <acmorton@att.com> wrote:
> Hi Kathleen and Rifaat,
>
> instead of
> ... forward packets to 'trusted' tools, ...
> we could say
> ... forward packets to SP-controlled tools,
>

I do like that better as it gets directly to the point of what the
contributor intended, I think.

> which seems correct for this section:
> 3.1.2.  SP Content Monitoring of Applications

I'll make the update as I think I have the running draft with the
appendix reference changes.

Thank you!
>
> Al
>
>> -----Original Message-----
>> From: Kathleen Moriarty [mailto:kathleen.moriarty.ietf@gmail.com]
>> Sent: Thursday, April 06, 2017 11:10 AM
>> To: Rifaat Shekh-Yusef
>> Cc: secdir@ietf.org; The IESG; draft-mm-wg-effect-encrypt@ietf.org
>> Subject: Re: SecDir review of draft-mm-wg-effect-encrypt-09
>>
>> Hi Rifaat,
>>
>> Thanks for your review!  We had #1 queued up for the next revision.
>> Trusted had single quotes around it because it isn't the term of a
>> product or well known term, but trusted by the organization.  I don't
>> like the word trust because it is loaded and used differently by many.
>> If others think we should remove that or the RFC editor, that's fine.
>>
>> Thanks,
>> Kathleen
>>
>> On Thu, Apr 6, 2017 at 9:00 AM, Rifaat Shekh-Yusef
>> <rifaat.ietf@gmail.com> wrote:
>> > I have reviewed this document as part of the security directorate's
>> > ongoing effort to review all IETF documents being processed by the
>> > IESG.  These comments were written primarily for the benefit of the
>> > security area directors.  Document editors and WG chairs should treat
>> > these comments just like any other last call comments.
>> >
>> > Summary: Ready with nits
>> >
>> > The document describes security and management functions that might be
>> > impacted by the increased use of encryption.
>> > The goal of the document is to only list the potential problems, not
>> to
>> > propose
>> > solutions to these problems.
>> >
>> >
>> > nits:
>> >
>> > 1. The document refers to an Appendix in multiples places, which is
>> now
>> > section 7.
>> > 2. Page 18, second line: the word 'trusted' has quotes around it; is
>> there a
>> > reason for that?
>> >
>> > Regards,
>> >  Rifaat
>> >
>> >
>>
>>
>>
>> --
>>
>> Best regards,
>> Kathleen



-- 

Best regards,
Kathleen