IETF Logo Mail Archive

Re: [secdir] Secdir last call review of draft-ietf-opsawg-service-model-explained-03

Adrian Farrel <afarrel@juniper.net> Mon, 18 September 2017 02:26 UTC

Return-Path: <afarrel@juniper.net>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17F1613247A; Sun, 17 Sep 2017 19:26:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level:
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9mAar6Io_NVl; Sun, 17 Sep 2017 19:26:41 -0700 (PDT)
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0121.outbound.protection.outlook.com [104.47.33.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DFEE413234B; Sun, 17 Sep 2017 19:26:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=fY9fu9wmD+9EVGLnXBy77whHmwUu1eKuGK69Q4FYwQ8=; b=Ubd+LwdYuwvln2FMmM/SwtXrzpi6EQjjEoKobokW1kSc2LoNTB3P7xxAEpITvBB2sWDvwQn0q8ooHl7BRkxUEZxPswebFtEaPNWsIshALpndIrZJiAPEdfZpv2EO0uOCoZucTwu3Z5iAzivhhWZLsgSG16YjTkYb+ssCqIz6GQs=
Received: from CO2PR05MB971.namprd05.prod.outlook.com (10.141.226.17) by CO2PR05MB764.namprd05.prod.outlook.com (10.141.227.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.77.5; Mon, 18 Sep 2017 02:26:38 +0000
Received: from CO2PR05MB971.namprd05.prod.outlook.com ([10.141.226.17]) by CO2PR05MB971.namprd05.prod.outlook.com ([10.141.226.17]) with mapi id 15.20.0077.008; Mon, 18 Sep 2017 02:26:38 +0000
From: Adrian Farrel <afarrel@juniper.net>
To: Joseph Salowey <joe@salowey.net>, "secdir@ietf.org" <secdir@ietf.org>
CC: "opsawg@ietf.org" <opsawg@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "draft-ietf-opsawg-service-model-explained.all@ietf.org" <draft-ietf-opsawg-service-model-explained.all@ietf.org>
Thread-Topic: Secdir last call review of draft-ietf-opsawg-service-model-explained-03
Thread-Index: AQHTL+umKROSgFAImUSAR1bBXyKHlqK56xUQ
Date: Mon, 18 Sep 2017 02:26:38 +0000
Message-ID: <CO2PR05MB971CF6A13B561BB067834C0BB630@CO2PR05MB971.namprd05.prod.outlook.com>
References: <150567672431.672.1037086780979343658@ietfa.amsl.com>
In-Reply-To: <150567672431.672.1037086780979343658@ietfa.amsl.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=afarrel@juniper.net;
x-originating-ip: [116.197.184.13]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CO2PR05MB764; 6:6KaWQA5B9Uy1B46Botl6XAPI11lWV/QOJTKj7ZRUFeKRSWIZacVNekrT/ADP24++3uRjzLJyP1i0Tv/CBGsBgQhWBLS8zQ64QtcYNerf/6XTT0UkgWJD9fKXjD7qjqU6gK9ayUa/IzVybTOqMpEInEGShz5whQ/+efQQrM7tTXiaMgsjrUbXUbqnSTDj0Ytu+iZY4a+wTOR9dWRTwGrhxjX0Oa0J0krsKw9H3eH6Kic0tWUPf65Ybh8o1R0AkIyX7ieo8vhyHqe3dVCvJ58jahHFZOknYEnO7Lii++JOVLv0d+z+GcKKpce+pLk7waxLdjEn1VMfaukR33QUPY53LA==; 5:2eL6uX9uv4ouOmfsdrY3zMVfDrgoAnOT25p8tH9zOoKYe46QOGJ+8rKi6d6le8Vb0Wj2C8UySAE+Kvh5AzeHbmIwjspjum/m/xTQU+QLVnK37BzykUv6e1wMO5pKsqlP+lJkLZRwqRgtcVI2YERM1w==; 24:EvNrTwstW7nxRCGp9MQr+AzGJUsKxzApG2Kd8Aakl2HJnKFGdUuN6om51yuyavnZiVTloLT7ybOKgrFvEwjiY6L+IsXB1e+NL1Dh3mzW8nQ=; 7:RXgOJXFCBX8o+EmMtrQBEAoN+LVaQEPd9IlbxZV/gnOIpLEq/K6j/yTfshY9GvR9yLQJjWq5qqpCdltjVbsy45/n7PRbsPvWPg//L5k4ltmjlC6nw7Oqp2ey18rlqMdxzfXERzj6lskpx9+Fu8lMqi10fIdldBBoGWthpW3zjVbttAeotPfHmNdLK356LYvxCEIUcmn3D/z3m/Dl6XDE5izIB0fRzhSTvoVxuaFjTVs=
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-correlation-id: d38af553-e7ee-4bb0-5add-08d4fe3cb0be
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(48565401081)(300000503095)(300135400095)(2017052603199)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:CO2PR05MB764;
x-ms-traffictypediagnostic: CO2PR05MB764:
x-exchange-antispam-report-test: UriScan:(192374486261705);
x-microsoft-antispam-prvs: <CO2PR05MB764880F6C295B1423B21335BB630@CO2PR05MB764.namprd05.prod.outlook.com>
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(5005006)(8121501046)(100000703101)(100105400095)(93006095)(93001095)(10201501046)(3002001)(6055026)(6041248)(20161123555025)(20161123558100)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(20161123564025)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:CO2PR05MB764; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:CO2PR05MB764;
x-forefront-prvs: 04347F8039
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(376002)(346002)(39860400002)(13464003)(189002)(199003)(99286003)(189998001)(25786009)(3280700002)(55016002)(54906002)(6116002)(3846002)(106356001)(102836003)(105586002)(9686003)(14454004)(8936002)(53936002)(97736004)(68736007)(86362001)(8676002)(3660700001)(81156014)(81166006)(478600001)(316002)(2906002)(229853002)(4326008)(33656002)(7696004)(305945005)(5660300001)(101416001)(6246003)(7736002)(66066001)(50986999)(76176999)(53546010)(54356999)(230783001)(77096006)(2950100002)(6436002)(6506006)(2501003)(74316002)(2900100001); DIR:OUT; SFP:1102; SCL:1; SRVR:CO2PR05MB764; H:CO2PR05MB971.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Sep 2017 02:26:38.2059 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR05MB764
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/IQlNrjC7dr_J2jtdFkuidcvLTLs>
Subject: Re: [secdir] Secdir last call review of draft-ietf-opsawg-service-model-explained-03
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Sep 2017 02:26:43 -0000

Hey Joe,

Thanks for that. Looks like an easy change for us to pick up along the way.

Best,
Adrian

-----Original Message-----
From: Joseph Salowey [mailto:joe@salowey.net] 
Sent: 17 September 2017 20:32
To: secdir@ietf.org
Cc: opsawg@ietf.org; iesg@ietf.org; draft-ietf-opsawg-service-model-explained.all@ietf.org
Subject: Secdir last call review of draft-ietf-opsawg-service-model-explained-03

Reviewer: Joseph Salowey
Review result: Ready

I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.  These comments were written primarily for the benefit of the security area directors.  Document editors and WG chairs should treat these comments just like any other last call comments.

The summary of the review is the document is ready for publication.

I think the document could be improved slightly by touching on the fact that the service models themselves may involve security parameters.  You could add a sentence to the security considerations section following the last sentence:

"The service model should expose security related parameters where they are available to the customer."

Cheers,

Joe

v2.23.0 | Report a Bug | By Email