Re: [secdir] Secdir review of draft-schaad-curdle-oid-registry-02

SMI = Structure of Management Information

That was assigned way back when someone thought that only MIB modules would need OIDs.

Russ

> On Oct 17, 2017, at 8:52 AM, Tero Kivinen <kivinen@iki.fi> wrote:
> 
> 
> I have reviewed this document as part of the security directorate's
> ongoing effort to review all IETF documents being processed by the
> IESG.  These comments were written primarily for the benefit of the
> security area directors.  Document editors and WG chairs should treat
> these comments just like any other last call comments.
> 
> This document is Ready with Nits.
> 
> This document creates and IANA registry and fills it with initial
> values. The numbers are inside the donated set of OIDs (donated from
> Symantec Website Security) that was donated to the curdle WG earlier.
> 
> The security considerations section that as this just creates an IANA
> registry it does not raise any new security considerations (altoigh
> somepeople claim anything related to ASN.1 is security issue, I do
> agree with the statement in the draft).
> 
> The only nit I have is that the document creates a called "SMI
> Security for Cryptographic Algorithms", and I have no idea what SMI
> means. I.e., it would be better if the name of the registry actually
> told people what is expected to be inside this registry...
> 
> Perhaps "Short OIDs for Cryptographic Algorithms for different IETF
> protocol" or similar.
> -- 
> kivinen@iki.fi
> 
> _______________________________________________
> secdir mailing list
> secdir@ietf.org
> https://www.ietf.org/mailman/listinfo/secdir
> wiki: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview