From: Jasdip Singh <jasdips@arin.net>
To: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>, "secdir@ietf.org"
	<secdir@ietf.org>
Thread-Topic: Secdir last call review of draft-ietf-regext-rdap-geofeed-09
Thread-Index: AQHblOl7DLoujapKGUeCSCam5RfWK7OmwZm/
Date: Wed, 16 Apr 2025 17:45:42 +0000
Message-ID: 
 <PH7PR15MB608443C4B81851E9F744BC0EC9BD2@PH7PR15MB6084.namprd15.prod.outlook.com>
References: 
 <174196083789.1147960.9772417019019095779@dt-datatracker-775fc5cbb8-824tp>
In-Reply-To: 
 <174196083789.1147960.9772417019019095779@dt-datatracker-775fc5cbb8-824tp>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?Windows-1252?Q?EUQGXSyK7ssPwzkCDqaZq9x5GCC6QUS7Vn4XsaXzZ8aSyeSi6vTLIrGb?=
 =?Windows-1252?Q?gb4tFPJxlUf/GB0g/j7jO7Cc8oYIfreVPi7vpKwMwnTPTBuvakISohhd?=
 =?Windows-1252?Q?r94V8Ppu6aR6VZKSPYr35XZgtB+VaLaxPAOJupV9XEmEUur66JsHJyu4?=
 =?Windows-1252?Q?qL2FQ3jBA8b9/z89F/ZWTyuoOhFmNpgvtoUCNVtHvIAgWIWLTxK2nSE+?=
 =?Windows-1252?Q?tdsY0wA8MKs/cTn+rmkFshaqgSN7Y0gBqjTO/R0ASABKk349BbG/0rCd?=
 =?Windows-1252?Q?M+OE6/R6Dn97jlOQAjEE1hdFuvP/Lyb6qQu7F3Hyq9uLcX/n6FoQ72UD?=
 =?Windows-1252?Q?Yl22clPqQwZJr8C9MR05p5ERim0I1Wwb7cV8Fx1ZGYKPtho65dk/VHUy?=
 =?Windows-1252?Q?FZFxDGFZ0weidDKQK5V0trEbFzJFESM/rQ64c6gxh1lDnD+ELAOryiAG?=
 =?Windows-1252?Q?MRLAXea0nGRIgVPDlVR53yDbl9CGXtTLZoRutLWZjEta666DTj0SNd3a?=
 =?Windows-1252?Q?sKVf6pDbjG9Cr+CTy9ew3e1pf7pC+vdsojD926UNcKnORR03CzS+9tKH?=
 =?Windows-1252?Q?kOa5Clfgky4hsvSWSY0b4e/AX7X6F71Kn74eONFM7RMRyxbQzyG/WJye?=
 =?Windows-1252?Q?GRtuHl+6yZImpOc0E+f2J5wWuDoTc0h/od8uhLbuAExWaPxEA4vi1wnz?=
 =?Windows-1252?Q?0dO3JvsbozS03e9aMvfvjATOmglCxCPq1P0wKOWrOWJ/l5NreSWSrium?=
 =?Windows-1252?Q?ZxeXWM5k/vH1ZOmVTketlcOedbzoVgcI6u635M3gMQc1wbrC95oZxlkN?=
 =?Windows-1252?Q?oLKUatMdGlxnVZa0ugiUandlXXJEOYurblc/PZfZFlpmylq7/ZScpH7b?=
 =?Windows-1252?Q?cMEEi28aH0qTnwlc+VXrKScpLCD5eI0CnGa6UJYeq+SI3XK+Pkfz4Ky0?=
 =?Windows-1252?Q?b7nH3xo7MEijU61zasFqObHx/CR8kaSTADrfIOKzMNJ80kJDFY5VahVc?=
 =?Windows-1252?Q?C/ibP9xRvw0EkBWZy2TJmIU6/DaU+LqDaOHyFIUalGp7Dn0uMXUu2/e4?=
 =?Windows-1252?Q?46xldDcwSF1sNInVvELwv0uSWot3I9ECNAod4mOkBkLcfComdcrdazbB?=
 =?Windows-1252?Q?2ZXJVC03XshKqZD73R+iq5E/g9hEApZYICYUDVE0HyCjc+3YRDkrQnLM?=
 =?Windows-1252?Q?OzLqzaDu+mkaiMfgTO5Tc05c1TVmMkOSYrT1HsQFWU2eWUboEsVUdejB?=
 =?Windows-1252?Q?PT72MBPBNSqIYRajXqdR6q+H60OTH+JETgawgF32HIkhAtqvRtHK1vBR?=
 =?Windows-1252?Q?v10YssC0UogsscxpV/Vi8PvLH0UrigxOE8Ko+EgGLPXHwOAQAInSRNay?=
 =?Windows-1252?Q?0Drlfp7Cl/zHIIqVHJU3PEKOpPfrDQRZdVpnR8SAkcarKH70gvQK2Dxu?=
 =?Windows-1252?Q?nVO0YuHh18Iyw70r8Ntok0eamoT10Q+Bt/WyhcfZlAfYVEPv65rqqDk0?=
 =?Windows-1252?Q?ennw53PtdPYd0Kf+pUwcp3nvCAmy3Ts45YdEv+BHTN2B6tusNo0CpDTY?=
 =?Windows-1252?Q?03KWRzXFHITgldepKGfzugzfgd1tEXZCcdhDq5gmbvhYjOmvQLXX32b9?=
 =?Windows-1252?Q?QGLWtpn4dAVHFrC46rxC+3TX+iQiY8/G7LMkKfrulCp3ZsRXHNjZP51T?=
 =?Windows-1252?Q?8y82WteuLsA7yWYHcKlLAEXZspPYu47p2c5/eJg5SCJMqdW7RC82YA?=
 =?Windows-1252?Q?=3D=3D?=
Content-Type: multipart/alternative;
	boundary="_000_PH7PR15MB608443C4B81851E9F744BC0EC9BD2PH7PR15MB6084namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH7PR15MB6084.namprd15.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 b74d8107-8997-49f5-745e-08dd7d0e822b
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Apr 2025 17:45:42.3193
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cad70df5-eb75-43b7-adb3-12798d38d9b7
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 
 BNgoCNa+MqvsuM9Kxws1r/E24jCMxxERyuMfhnC5TiuCd/fTJ3O84nfwRWJ/PQ+99IVjIBnbuex/j8Iwi9+JWA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR15MB5824
X-OriginatorOrg: arin.net
Message-ID-Hash: KA43TOYE5NLLQJQS6POTT2XZHEY5RSXG
X-Message-ID-Hash: KA43TOYE5NLLQJQS6POTT2XZHEY5RSXG
X-MailFrom: jasdips@arin.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-secdir.ietf.org-0;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
CC: "draft-ietf-regext-rdap-geofeed.all@ietf.org"
 <draft-ietf-regext-rdap-geofeed.all@ietf.org>,
 "last-call@ietf.org" <last-call@ietf.org>,
 "regext@ietf.org" <regext@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5Bsecdir=5D_Re=3A_Secdir_last_call_review_of_draft-ietf-regext-rd?=
	=?utf-8?q?ap-geofeed-09?=
List-Id: Security Area Directorate <secdir.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/secdir/HvNnlPLEtpwStJ8O_G-7As7MbB8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Owner: <mailto:secdir-owner@ietf.org>
List-Post: <mailto:secdir@ietf.org>
List-Subscribe: <mailto:secdir-join@ietf.org>
List-Unsubscribe: <mailto:secdir-leave@ietf.org>

--_000_PH7PR15MB608443C4B81851E9F744BC0EC9BD2PH7PR15MB6084namp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Hi Rifaat,

Thank you for your review of this draft. Please find below our comments.

Also, please see [1] for the diffs in the updated draft.

Thanks,
Jasdip & Tom

[1] https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-regext-rdap-geof=
eed-10

From: Rifaat Shekh-Yusef via Datatracker <noreply@ietf.org>
Date: Friday, March 14, 2025 at 10:00 AM
To: secdir@ietf.org <secdir@ietf.org>
Cc: draft-ietf-regext-rdap-geofeed.all@ietf.org <draft-ietf-regext-rdap-geo=
feed.all@ietf.org>, last-call@ietf.org <last-call@ietf.org>, regext@ietf.or=
g <regext@ietf.org>
Subject: Secdir last call review of draft-ietf-regext-rdap-geofeed-09
Reviewer: Rifaat Shekh-Yusef
Review result: Has Issues

Section 2.1.

=93optional Resource Public Key Infrastructure (RPKI, [RFC6480]) signature=
=94

Did you mean to refer to RFC6488?

[JS] No, RFC 6480 is the introductory RFC for RPKI and this reference helps=
 introduce the =93RPKI=94 term for the first time in the spec.


Section 5, Security Considerations

=93The geofeed file may also contain an RPKI signature.=94

You might want to add a reference to the RPKI signature spec.

[JS] Thanks, added the reference.


Also, what is this document=92s opinion on this signature? It just states t=
hat
the file =93may contain=85=94 I think it warrants adding a sentence or two =
to
elaborate on this.

[JS] In our opinion, since this =93may=94 follows from Section 5 of RFC 963=
2, the reader should be able to consume related authoritative text from tha=
t RFC.


=93Besides that, this document does not introduce any new security consider=
ations
past those already discussed in the RDAP protocol specifications.=94

You might want to add references to the other specs that cover the security
aspects of the RDAP protocol.

[JS] Thanks, added the relevant references.




--_000_PH7PR15MB608443C4B81851E9F744BC0EC9BD2PH7PR15MB6084namp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:w=3D"urn:sc=
hemas-microsoft-com:office:word" xmlns:m=3D"http://schemas.microsoft.com/of=
fice/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1=
252">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Aptos;
	panose-1:2 11 0 4 2 2 2 2 2 4;}
@font-face
	{font-family:"Helvetica Neue";
	panose-1:2 0 5 3 0 0 0 2 0 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	font-size:10.0pt;
	font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#467886;
	text-decoration:underline;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;
	mso-ligatures:none;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style>
</head>
<body lang=3D"EN-US" link=3D"#467886" vlink=3D"#96607D" style=3D"word-wrap:=
break-word">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Hi Rifaat,<o:p></o:=
p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><o:p>&nbsp;</o:p></=
span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Thank you for your =
review of this draft. Please find below our comments.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><o:p>&nbsp;</o:p></=
span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Also, please see [1=
] for the diffs in the updated draft.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><o:p>&nbsp;</o:p></=
span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Thanks,<o:p></o:p><=
/span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Jasdip &amp; Tom<o:=
p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><o:p>&nbsp;</o:p></=
span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">[1] </span><a href=
=3D"https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-regext-rdap-geof=
eed-10" title=3D"https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-reg=
ext-rdap-geofeed-10"><span style=3D"font-size:11.0pt;color:#0078D7">https:/=
/author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-regext-rdap-geofeed-10</spa=
n></a><span style=3D"font-size:11.0pt"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><o:p>&nbsp;</o:p></=
span></p>
<div id=3D"mail-editor-reference-message-container">
<div>
<div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:0in;margin-right:0in;mar=
gin-bottom:12.0pt;margin-left:.5in">
<b><span style=3D"font-size:12.0pt;color:black">From: </span></b><span styl=
e=3D"font-size:12.0pt;color:black">Rifaat Shekh-Yusef via Datatracker &lt;n=
oreply@ietf.org&gt;<br>
<b>Date: </b>Friday, March 14, 2025 at 10:00 AM<br>
<b>To: </b>secdir@ietf.org &lt;secdir@ietf.org&gt;<br>
<b>Cc: </b>draft-ietf-regext-rdap-geofeed.all@ietf.org &lt;draft-ietf-regex=
t-rdap-geofeed.all@ietf.org&gt;, last-call@ietf.org &lt;last-call@ietf.org&=
gt;, regext@ietf.org &lt;regext@ietf.org&gt;<br>
<b>Subject: </b>Secdir last call review of draft-ietf-regext-rdap-geofeed-0=
9<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:0in;margin-right:0in;mar=
gin-bottom:12.0pt;margin-left:.5in">
<span style=3D"font-size:11.0pt">Reviewer: Rifaat Shekh-Yusef<br>
Review result: Has Issues<br>
<br>
Section 2.1.<br>
<br>
=93optional Resource Public Key Infrastructure (RPKI, [RFC6480]) signature=
=94<br>
<br>
Did you mean to refer to RFC6488?<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-s=
ize:11.0pt"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-f=
amily:&quot;Helvetica Neue&quot;;color:#212121">[JS] No, RFC 6480 is the in=
troductory RFC for RPKI and this reference helps introduce the =93RPKI=94 t=
erm for the first time in the spec.</span><span style=3D"font-size:11.0pt">=
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:0in;margin-right:0in;mar=
gin-bottom:12.0pt;margin-left:.5in">
<span style=3D"font-size:11.0pt"><br>
<br>
Section 5, Security Considerations<br>
<br>
=93The geofeed file may also contain an RPKI signature.=94<br>
<br>
You might want to add a reference to the RPKI signature spec.<o:p></o:p></s=
pan></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-s=
ize:11.0pt"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-f=
amily:&quot;Helvetica Neue&quot;;color:#212121">[JS] Thanks, added the refe=
rence.</span><span style=3D"font-size:11.0pt"><o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:0in;margin-right:0in;mar=
gin-bottom:12.0pt;margin-left:.5in">
<span style=3D"font-size:11.0pt"><br>
<br>
Also, what is this document=92s opinion on this signature? It just states t=
hat<br>
the file =93may contain=85=94 I think it warrants adding a sentence or two =
to<br>
elaborate on this.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-s=
ize:11.0pt"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-f=
amily:&quot;Helvetica Neue&quot;;color:#212121">[JS] In our opinion, since =
this =93may=94 follows from Section 5 of RFC 9632, the reader should be abl=
e to consume related authoritative text from that RFC.</span><span style=3D=
"font-size:11.0pt"><o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:0in;margin-right:0in;mar=
gin-bottom:12.0pt;margin-left:.5in">
<span style=3D"font-size:11.0pt"><br>
<br>
=93Besides that, this document does not introduce any new security consider=
ations<br>
past those already discussed in the RDAP protocol specifications.=94<br>
<br>
You might want to add references to the other specs that cover the security=
<br>
aspects of the RDAP protocol.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-s=
ize:11.0pt"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-f=
amily:&quot;Helvetica Neue&quot;;color:#212121">[JS] Thanks, added the rele=
vant references.</span><span style=3D"font-size:11.0pt"><o:p></o:p></span><=
/p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:0in;margin-right:0in;mar=
gin-bottom:12.0pt;margin-left:.5in">
<span style=3D"font-size:11.0pt"><br>
<br>
<br>
<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>

--_000_PH7PR15MB608443C4B81851E9F744BC0EC9BD2PH7PR15MB6084namp_--