IETF Logo Mail Archive

Re: [secdir] [Dots] Secdir telechat review of draft-ietf-dots-signal-channel-31

"Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com> Mon, 15 April 2019 14:38 UTC

Return-Path: <TirumaleswarReddy_Konda@mcafee.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90924120375; Mon, 15 Apr 2019 07:38:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.302
X-Spam-Level:
X-Spam-Status: No, score=-4.302 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J3h_xRK2hLS8; Mon, 15 Apr 2019 07:38:39 -0700 (PDT)
Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D63B712001E; Mon, 15 Apr 2019 07:38:38 -0700 (PDT)
X-NAI-Header: Modified by McAfee Email Gateway (5500)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1555338792; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:Content-Type: Content-Transfer-Encoding:MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-CrossTenant-mailboxtype: X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=johPuquT+BHHWtTLa0B8r5qRfkWVSaa0iAzD2j i6Blc=; b=WFftUXDkqJOTXOFfDzYuuYwUqwxIaBFMSMKWLwrs bWWzZAccJK7b4H/yMgGMp7T3aZXiWqipOAACZ+A/k70yYCDuRP cuRdUlrK1YYH9tZri19BBaw9yQvM3hLmTTTcE1KuWSlNFFndHr gaVQq6z98NR6kxlybbO1h3wfHeS7zCc=
Received: from DNVEXAPP1N04.corpzone.internalzone.com (DNVEXAPP1N04.corpzone.internalzone.com [10.44.48.88]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 5716_b4ae_acce3622_b5e9_4499_8eaf_46bc524fa5d2; Mon, 15 Apr 2019 08:33:11 -0600
Received: from DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 15 Apr 2019 08:38:22 -0600
Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1395.4 via Frontend Transport; Mon, 15 Apr 2019 08:38:22 -0600
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 15 Apr 2019 08:38:02 -0600
Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2567.namprd16.prod.outlook.com (20.177.226.33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1792.19; Mon, 15 Apr 2019 14:38:01 +0000
Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::4873:7200:9e57:9e62]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::4873:7200:9e57:9e62%5]) with mapi id 15.20.1792.018; Mon, 15 Apr 2019 14:38:01 +0000
From: "Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>, "mohamed.boucadair@orange.com" <mohamed.boucadair@orange.com>, "secdir@ietf.org" <secdir@ietf.org>
CC: "draft-ietf-dots-signal-channel.all@ietf.org" <draft-ietf-dots-signal-channel.all@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>, "dots@ietf.org" <dots@ietf.org>
Thread-Topic: [Dots] Secdir telechat review of draft-ietf-dots-signal-channel-31
Thread-Index: AQHU842Y1PTA/7yjVUSrEcvW+vhbdqY9NliAgAAS56A=
Date: Mon, 15 Apr 2019 14:38:01 +0000
Message-ID: <BYAPR16MB2790A2E8BF38B8B8014DED07EA2B0@BYAPR16MB2790.namprd16.prod.outlook.com>
References: <155533088202.10777.9128855796755282458@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302EA60294@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <6c4b8d89-c114-103e-9a6e-5a8ae6a59350@cs.tcd.ie>
In-Reply-To: <6c4b8d89-c114-103e-9a6e-5a8ae6a59350@cs.tcd.ie>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.2.0.6
dlp-reaction: no-action
authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com;
x-originating-ip: [1.39.154.147]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 5a7b5934-5944-4245-072d-08d6c1aff63c
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600140)(711020)(4605104)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:BYAPR16MB2567;
x-ms-traffictypediagnostic: BYAPR16MB2567:
x-microsoft-antispam-prvs: <BYAPR16MB2567098D77629106504AFA7BEA2B0@BYAPR16MB2567.namprd16.prod.outlook.com>
x-forefront-prvs: 000800954F
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(979002)(376002)(136003)(39860400002)(346002)(366004)(396003)(199004)(189003)(13464003)(32952001)(11346002)(54906003)(110136005)(446003)(316002)(3846002)(53936002)(9686003)(55016002)(6246003)(229853002)(6116002)(33656002)(476003)(25786009)(6436002)(99286004)(68736007)(81156014)(81166006)(296002)(8936002)(8676002)(2906002)(52536014)(5660300002)(7736002)(74316002)(256004)(6506007)(14444005)(76176011)(106356001)(71200400001)(72206003)(105586002)(26005)(97736004)(4326008)(486006)(71190400001)(2501003)(80792005)(102836004)(478600001)(53546011)(2201001)(14454004)(7696005)(186003)(86362001)(66066001)(305945005)(85282002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2567; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: vwIfLEoumsYAINzJfBxm7gYLlIQQwC7zHrFg26EZs3UQK58vGTr/Vzy9z5UWjg5zNPwQAH1t5XPma97iKGcANsfQvtNi8vG6S6QCOwA4LuGc+frBWs8oExZ4NxdOT5gIOcoiJEF2eRgGZao70sF7vAU9MAGXPz6F70XPsfQglW8Si6rGVZLULHoHXcClC3vqtvqusMvcUbXFo7p8SbMAgkfYF05UpdHUbaoGcsFaTUPMvxCXUFYeMGn4WySNgnOcKHOqXQduKZJoZr/SH1Ehcc1WGUXLxr+5qx908GZLDFHt+7VNqmyFwIktX/KOELUXbd5EKB94T26aoXaJmE6ZxBG5c3pL2mG5f/FGBPLBvfj8FlOkeMkUGMFP1T7MOGVMIXCs+5Kt0V1aRtv7lfTsluPCkcVI8boZrs9WQoKRo6E=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 5a7b5934-5944-4245-072d-08d6c1aff63c
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Apr 2019 14:38:01.2579 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2567
X-OriginatorOrg: mcafee.com
X-NAI-Spam-Flag: NO
X-NAI-Spam-Level:
X-NAI-Spam-Threshold: 15
X-NAI-Spam-Score: 0.1
X-NAI-Spam-Version: 2.3.0.9418 : core <6525> : inlines <7052> : streams <1818738> : uri <2832435>
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/fNjeNBzVkvFDcuy9IfUnnYGCbd0>
Subject: Re: [secdir] [Dots] Secdir telechat review of draft-ietf-dots-signal-channel-31
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Apr 2019 14:38:42 -0000

> -----Original Message-----
> From: Dots <dots-bounces@ietf.org> On Behalf Of Stephen Farrell
> Sent: Monday, April 15, 2019 6:56 PM
> To: mohamed.boucadair@orange.com; secdir@ietf.org
> Cc: draft-ietf-dots-signal-channel.all@ietf.org; ietf@ietf.org; dots@ietf.org
> Subject: Re: [Dots] Secdir telechat review of draft-ietf-dots-signal-channel-31
> 
> 
> Hiya,
> 
> On 15/04/2019 14:16, mohamed.boucadair@orange.com wrote:
> >> - p13: The cuid still seems to me to be too static (there's a
> >
> > [Med] This is a feature not a bug. This scheme is particularly useful
> > to recover state, for example, upon reboot or crash of a DOTS client.
> >
> 
> Well, fair enough, but FWIW I'm not convinced that a client that can keep state
> (the private key and other dots stuff) couldn't also as easily keep a cuid value.
> And ISTM there should also be equally good ways to recommend for generating
> a cuid that don't have that
> 1:1 mapping to a key pair. All that said, it's not me needs to be convinced, but
> the IESG, so probably best to wait and see if they think this is worth changing or
> not before doing so.

The advantage of the 1:1 mapping is the DOTS servers can validate the DOTS client is not using the 'cuid' of another client. 

-Tiru

> 
> S.
>

v2.23.0 | Report a Bug | By Email