[secdir] Re: [Last-Call] Secdir last call review of draft-ietf-opsawg-tacacs-tls13-18
"Joe Clarke (jclarke)" <jclarke@cisco.com> Thu, 03 April 2025 18:10 UTC
Return-Path: <jclarke@cisco.com>
X-Original-To: secdir@mail2.ietf.org
Delivered-To: secdir@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id AF5F71717FEF; Thu, 3 Apr 2025 11:10:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -11.886
X-Spam-Level:
X-Spam-Status: No, score=-11.886 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_NONE=0.001, T_SPF_HELO_PERMERROR=0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cisco.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xyrf2ZdlWkig; Thu, 3 Apr 2025 11:10:52 -0700 (PDT)
Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id B49191717FE8; Thu, 3 Apr 2025 11:10:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; i=@cisco.com; l=35798; q=dns/txt; s=iport01; t=1743703852; x=1744913452; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=lp0684G/d67iQq5wia59nyFSPidD+bBWWx5FWJ45ggw=; b=F/ZHJSkgL8+1Sa8hRpm9+lk6yt1l5cDLsPC1bktlohi73cNUXtelVnNL Uqq7zeP3E/wUD4eNwoIWGD+5WkFASzzvELUqHmYzGO4BgcT6cqBpi3pB1 pdooTDcBDmEOQ9FLP39shCgdemt3gt6FiSDpvmV6Lc6+klWsXyUPwkeCS PxncBVwWjsovq4jRWubbRnMRflEgnIZh6IfWnfzbVd6ZnMsfwL4fEUhbu 4fvCbbJrkBotZCowVDfdPpyVMVX6r9YXPmAjSWKtstwfv+7238v9TVJuZ 4Idw29U3kZ0sfYS+viP0ORzxHFVmoWdpycf/m1RvalRduoSEAh4RDr/Gg Q==;
X-CSE-ConnectionGUID: nDfUjww7TCWaHl04dpVNWw==
X-CSE-MsgGUID: ytGW9rBWR5SgccR3rMeKgw==
X-IPAS-Result: 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
IronPort-PHdr: A9a23:YggJtxR/9mxe9FC5vHdJUaJGRdpso47LVj580XJvo7tKdqLm+IztI wmCo/5sl1TOG47c7qEMh+nXtvX4UHcbqdaasX8EeYBRTRJNl8gMngIhDcLEQU32JfLndWo7S exJVURu+DewNk09JQ==
IronPort-Data: A9a23:otg+u6A44p7SdhVW/zviw5YqxClBgxIJ4kV8jS/XYbTApDgihDZRy TMdXj2COa2OYTTzKYxyboTk8k9UsZTTytRqOVdlrnsFo1CmBibm6XV1Cm+qYkt+++WaFBoPA /02M4eGdIZsCCeB/n9BC5C5xVFkz6aEW7HgP+DNPyF1VGdMRTwo4f5Zs7ZRbrVA357gXmthh fuo+5eCYAP9gGYvWo4pw/vrRC1H7ayaVAww5jTSVdgT1HfCmn8cCo4oJK3ZBxPQXolOE+emc P3Ixbe/83mx109F5gSNy+uTnuUiG9Y+DCDW4pZkc/HKbitq+kTe5p0G2M80Mi+7vdkmc+dZk 72hvbToIesg0zaldO41C3G0GAkmVUFKFSOuzXWX6aSuI0P6n3TExdlgMUMpItIk0dl+IWUWq fAAFhYycUXW7w626OrTpuhEnM8vKozveYgYoHwllW2fBvc9SpeFSKLPjTNa9G5v3YYVQrCEO pdfMGY2BPjDS0Un1lM/Cpk6lf2ri1H0ciZTrxSeoq9fD237l1chjemzbYKNEjCMbdRJsXnJv Ej5xTnCDRoRDoeF7Dem/W3504cjmgu+Aur+DoaQ+uRjjkHWx2EPBlgRTUCyvvb8lke1UtlEb lAQ4XN166E28GSqQ8XzGRqirxasuhcHR59bGuk+wACA1qSS5ByWbkADViVId9MOtcIqS3otz FDht8jkDjBuqpWURG6TsLCOoluP1TM9N2QOY2oACAAC+dSm+N11hRPURdElG6mw5jHoJQzNL /mxhHFWr50YjNUA0OOw+lWvvt5mjsGQJuLpzm07hl6Y0z4=
IronPort-HdrOrdr: A9a23:b7V0Ka+D/4tBamZSxrNuk+Gldr1zdoMgy1knxilNoENuA6+lfp GV/MjziyWUtN9IYgBfpTnhAsW9qXO1z+8S3WBjB8bSYOCGghrmEGgM1/qZ/9SNIVybygcZ79 YeT0EcMqy/MbEZt7eG3ODQKb9Jq7f3ktHMuQ6d9QYQcegAUdAY0+4NMHfhLqQAfng/OXNWLu v62uN34xCbVTA8aMO9CnMZX+7FieHqufvdCyIuNloM0iXLqSmnxoLbPnGjsyv2VQkh/Z4StU z+1yDp7KSqtP+2jjXG0XXI0phQkNz9jvNeGc2lkKEuW3XRozftQL4kd6yJvTgzru3qwk0tis PwrxApONk2w2/Nf1uyvQDm12DboXUTAj7ZuB2laEnY0IjErQEBeo18bEViA13kAn8bzZRBOW RwrjukXtRsfEv9dW/Glqj1vllR5zmJSDwZ4K8uZ7g1a/pFVFeXxrZvp399AdMOGjn355sgF/ QrBMbA5OxOeVffdHzBuHJzqebcFEjbMy32CnTqgPblmAR+jTR81Q8V1cYflnAP+NY0TIRF/f 3NNuBtmKtVRsEbYKphDKNZKPHHRlDlUFbJKiafMF7nHKYINzbErIP2+qw84KWvdIYTxJU/lZ zdWBdTtHI0eUjpFcqStac7vyzlUSG4R3Dg28te7592tvn1Q6fqKzSKTBQ0n86ps5wkc4Tmsj aISeRr6tPYXBzT8NxyrnjDcogXLWNbS8EcsMs6XVWVy/i7WLECntarBMruGA==
X-Talos-CUID: 9a23:1tlEAGo3cAjj/JsSOhrxWK7mUcYJfEDf02iPH2SHAEZtEOGZUWG2x7wxxg==
X-Talos-MUID: 9a23:avJjIQbUo6MLi+BTpiPDu2B4HvhSvp+hA0s3yo8jtuqLKnkl
X-IronPort-Anti-Spam-Filtered: true
Received: from rcdn-l-core-04.cisco.com ([173.37.255.141]) by rcdn-iport-8.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 03 Apr 2025 18:10:44 +0000
Received: from alln-opgw-5.cisco.com (alln-opgw-5.cisco.com [173.37.147.253]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by rcdn-l-core-04.cisco.com (Postfix) with ESMTPS id B5584180001A4; Thu, 3 Apr 2025 18:10:43 +0000 (GMT)
X-CSE-ConnectionGUID: L429bDslT6SyCq9sMxAfXg==
X-CSE-MsgGUID: KV9qot4FRxeYMYz6mS8IqA==
Authentication-Results: alln-opgw-5.cisco.com; dkim=pass (signature verified) header.i=@cisco.com
X-IronPort-AV: E=Sophos;i="6.15,186,1739836800"; d="scan'208,217";a="24689922"
Received: from mail-mw2nam10lp2046.outbound.protection.outlook.com (HELO NAM10-MW2-obe.outbound.protection.outlook.com) ([104.47.55.46]) by alln-opgw-5.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 03 Apr 2025 18:10:42 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=WD1WFbyZ0kTcq1T0LsMxFPmZnW42aKg8KedaYjqNBs3WTqPISaykNI6dKpIeRe4KRGkkva3v6nJaDLQLokircsxVGAluTicVepz3n0ziKmFs/4lDJtYJroYtY0VjFuEQZg07BMJUB/o1EsyWQ9O8ptllGZw51tuhD284BM6eEvjQGN+aLMb7PC6Em5FnoxjAXRmRE3iYB6qsIydMoz2P4+o6hkVc9yuQ0momtlaQqBvyPaKKI7oHBo6pas83AC5I3Nt2/ctULc5o9iHwRllWy9S4vIZRiy/ysfYivLy22Vyqd+/+gmmSMFb1OEiS7mklM/YlCkliDPCSwmCg1aYDSw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=lp0684G/d67iQq5wia59nyFSPidD+bBWWx5FWJ45ggw=; b=ejd1xog9Nq1giSMZvHW+TPVd4hsXUMR2G9y+SqeZTPiZypZlEURrRyHztAlhaTfR/l0vWryiPDaroCRtpeVlEykqRIWDosANsmHGZEkdYYPakcjQDUKLDrumsEN8IsGaB9fQcYS8080Fz/vcGhT7Vv9pCZYj1YFTTgQcej9W/oZiiQo+0XPnA5azLVlZAZU7GtWjwbH0/t5AsmKamXF1TCTjB9e+AX+OK2v8EHXsQi/Bs5Qdq3cCjwyovX0vAqSE7z2RTXZp+deGqG3utRzmFVYeGC/vx0eR1KqwhzljuWnDFHtvoKq5OhwKkQp2zPSRGjIaiQqScyYQtng+AIHw3A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
Received: from CH2PR11MB8867.namprd11.prod.outlook.com (2603:10b6:610:285::9) by PH8PR11MB6928.namprd11.prod.outlook.com (2603:10b6:510:224::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8534.44; Thu, 3 Apr 2025 18:10:40 +0000
Received: from CH2PR11MB8867.namprd11.prod.outlook.com ([fe80::9a8b:90dc:4fce:9bd6]) by CH2PR11MB8867.namprd11.prod.outlook.com ([fe80::9a8b:90dc:4fce:9bd6%2]) with mapi id 15.20.8534.045; Thu, 3 Apr 2025 18:10:40 +0000
From: "Joe Clarke (jclarke)" <jclarke@cisco.com>
To: Russ Housley <housley@vigilsec.com>, Med Boucadair <mohamed.boucadair@orange.com>
Thread-Topic: [Last-Call] Secdir last call review of draft-ietf-opsawg-tacacs-tls13-18
Thread-Index: AQHbkJEGK9PZTi5ZTE6LigLRqMvoIrNqjnYAgACMUwCABbn3AIAAOxEAgCE/YVSAAAsOgIAAAwQAgAABOgCAAAd1nw==
Date: Thu, 03 Apr 2025 18:10:40 +0000
Message-ID: <CH2PR11MB8867A8422232FC5DFF11F6FAB8AE2@CH2PR11MB8867.namprd11.prod.outlook.com>
References: <174148302104.312909.4945234439928364482@dt-datatracker-775fc5cbb8-824tp> <MR1PPF6395AA9E65B2B5D289A73D3843DD788D72@MR1PPF6395AA9E6.FRAP264.PROD.OUTLOOK.COM> <A29F710F-A777-4353-BC03-2DB2718972D7@vigilsec.com> <BL3PR11MB63643F35D2DD5DC5A5CAC17BB7D32@BL3PR11MB6364.namprd11.prod.outlook.com> <A9ADFA72-966B-4402-81D6-EF138605F937@vigilsec.com> <CH2PR11MB886780FC8F987671880423A2B8AE2@CH2PR11MB8867.namprd11.prod.outlook.com> <8B8B96D7-D376-4434-9FFF-9AF0FBA38B5F@vigilsec.com> <MR1PPF6395AA9E69CE268C9C9F0E0A4701188AE2@MR1PPF6395AA9E6.FRAP264.PROD.OUTLOOK.COM> <C28CDF9C-78D7-4F23-A03B-8D59105D4A5A@vigilsec.com>
In-Reply-To: <C28CDF9C-78D7-4F23-A03B-8D59105D4A5A@vigilsec.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: CH2PR11MB8867:EE_|PH8PR11MB6928:EE_
x-ms-office365-filtering-correlation-id: 6bb1e006-62ed-45b3-7ccf-08dd72dad7cb
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|10070799003|1800799024|366016|13003099007|8096899003|38070700018|7053199007;
x-microsoft-antispam-message-info: BJqQas1CaeVS/7h5Sg1GF8zNnYq7hYgcuJfYWq/DhIUb7qZzw59IGFzVu4YlXvSePZd6bmM98yfJRq91nUSGpw08LjzXzfcVVMS5kMxMUrQiMbJBA3vz4lb+Y0VSnA6/XCJ6jLD9kaCHYRagYZd8iG0e1TpKKxmQq9G5vrkLp03agWv4FASVJdGGD5ZBk4rs82LuZwTpg8V0SAdunSpaXiJXXQNVABc6JK7Jpcnh+v6Mh+H/HoSFTWh5EMPAY8n3wlbS8UKlsov2FWqFzWC0Q/DEAZ5m6qJeG8Ofa7MNxp0GNk+ciEmM4h2/Mw8CCGXV5U7AqB2/SD3/eFHuy+rPsFSLNDBL5qdKUyvF0TDCi6U3+f0k8GcdriWS7JqE/dbvz02f+oI3HADEydbnk1n0+rfX0GmmqkdBtIQGeVhYm5QEl2F5LfBGqMSXnsP2lVL6A0A/mJcC4Qj40AIq55MxLyngoeIUZzFJNWz2znOExVHM7BHB+UdqhV2/vzE/mHbqLUnt0zPCLMK5CCbU3v+j9m9rTkcy2xUcHvaQ1IEarj8KD2BuGldH4fUbGlzndesmKkTv2oX94psqWr5g8PxBjW/bO7XzDxanJU6mvVaC2Xd3AnVmdAO1SgKdGCkNSl4CJemZhNDeaHM8MjVmUcWV2OBq4owN15lPqfOZMRYovSE/ZN2hSHmN5YgsJBaD4da19aWJXRo/Cv/6Rk8pt8V77soQhiRXAhMLPqnOJUqhxN3LhrvvuG3ZtsVZdKIBlDEueJseZVcArdXX8qht0BaMUm5saSoN/9HCu6m4e0RAcJTFJA2yGjI3zNv81VORjc1dcwXYAM2sTEGw2hs7ZciuwnTgdG0XXacKArKhz9/KAgHvT/DqIKNok2qtJzhYb+gi3JECoDovMvVFEfnJDWnKGpukUDN0IHQTr6aRAaF1fT31KH50JBkbM/0v1UcBk4aCMCSjuhjtOHNY9eBiQn0s+yAfNdAq6VWrIK9RxN1lXwnpXvz6W6mXLfqF66PvHAtUIpkJakMcncRJ/krCPxmj5ov70kGRpmBx+RcQoeN1M9QKU2s+R1w/k+kOsh1bUiQX+vrT7KJ6iTR9o99aabvku5Erm/U3jszUbXEOW+l/9Q30u6hHF0xH+M27/+E+8TqCHvB2uu23htJ8PWq/L10eEFTj5HZXOTSipFEq2dPxUaoh97Up24pOoFJ91Ce6Kq5wT6istXITfvQSX4qUsvq+twajalzBLWxfo65GaF1RLMmCQfQbESXMhSND8psiajkCHeq8e68fPYL64ow2HyLuLL0bW8Cz8WhfXBE+eUvmPU9cCacb/2U92PUUGrZrP6BbcD8i+ipZiYZzUIWEUrITLhUyhhmXOJ1sTx5S0GD3C4b7+KCbOy+OSsCtHVKmTRtInzvEqwQFcMrWM1IzvGP5DA==
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CH2PR11MB8867.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(10070799003)(1800799024)(366016)(13003099007)(8096899003)(38070700018)(7053199007);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: ruoMx6fatHCnwxv2QvCk+Ij86weWp1/rXh6l4HWx29PMOXJoEL1OwaOozowU2F3zMCcy91iHm6gp3aqcn86RvumLUGeTx5hVEqU04BdtOmxi7CefA1kur0yu6dKDSwUnlFt7nGDtqPS+OaILiVIIDVxVp1GRi5W0mpI6x8t2nkIZL5cEQy2XjujvF2S50fTW1D7dUj1v0z0TQ5ZnNXGXL6HlK9fAceHeiNs5B6ALxeZN5q8dx4ZiO+/JwKB+NtrU02WpJEfB2zNOam7NeYtMGT8DJntnJSZ0eXVwKRxloBGfY3HSG9bKqzaRAQ2UTyh0zlIRvQOt1oBeeWTIENDSBEK5hsNdt+rDx7E1sBr/0qhVI+3QlIC0tDSOke2Mmn4PHPncRn49U8SxrioiwCer6wp2h5ZK0tZ0N/rixp3ujEiqiv9TiqywlVymvsUfOOWaRRGnIpsDYwGjRmctAWyrghIg2bM2ZREBnUsazAbMN5MmVpdqWzrc8qJV+BfWCwck90H1V4E3hSLPweWE6VQ1n7jTJFbEF7WHKIgIWjVt+woEi+8t4QG8TFS2Zdy6pjV+cmyRF/vkv1P4QlJIlPV7BhU3c3kGZCtUk3ZhDwia6JQLWsPzHM+0DtybqaIqR/NP/ZDtYG6hnjMHDm87ftoB0hiZjFCEj1HDC2AYzZPwS7AjJvJ55qwfoP52eX321hKu4avmqQ37Kpf/pIYzTe8WYcYojuT0lANWrmyqT+7gbrkW0V8KTFlwyBD5ddh+u/+8LTnBBd6XieJ2qzfbhgCCsdPfbIzZhWSf18Jlc8qtI1hO0J1DPva8y5TLZobeRmniM7eaKpXZJNPZFwsmT9ZfB8f7X48ckO9Alawa/TMsPx2sfLTrecMDbDSrHdGYekqLsqyqa/ozbR/f+arq1PPGOBgHFeQyuvKDAmekZX0SgWavO6EhUn/2vUNmvdL3aiYa8UxSb/ili7qqzh79zeG15TjtK9j6pMUXpm6sfZkwQ6q4o0jieTWMZ7viOQB52v5UXGL3m34zw4n4b57ZQy4jzyQgVjLe/7AjFvudWwrgSAQYdZ+SHIsm75A4T3RDBhYIYarhiw/yPI+erzi91jX1xuAP5CwRyRztuIUXhDgUsqNVIbfUOWbggFRmxjTe6or2WTv5cGW2RBpmlA5IhB10LJc2b5tZnNgFBFfHX6d7QGP0yJ6gIP5ssU/uVCS8rYaFyjAjzyPfPWpnR21seq3rtqUBCP8hoRhLBokQA6a26ToOPnXSgUPSGUwrkx2t8vf0tnxCZg41/6w1/RwyKkBH8/LyUUluHEKEf6SFyybefR69X0Ner9vIFFPQVYSj5qFzbUQPb44+eAWoUMbs6zqrE4EV3U6eBd0r/O5sY1Rda2Q2wMwp8m5xNYkKflHzWlJQDCwa2LSsiRCizKCMnPdbCXEKgdTpNe9WjRNtVTFKC7YjTslq8sBYlJIuB6BhsKkqpx4+pkknhZbEzeIAtJZA1HA2IkXJ7mwqXAv6dbVEoq3D0mfkUUqUjCsOzP32lmZ8gDfdBXYP7rZxPHSPRlym4aVJTy3muOgWoAANKPXb2i3NAbpzQPVhWd1+9rq+t+xSjeVaINCTW+nTg7DmR/A8c+9/WEGRbuc7zH1quhBKL9lEmZ6L3zxS7661XnUa01v1W9DDpZIbJ593cgHoNkfQJQ==
Content-Type: multipart/alternative; boundary="_000_CH2PR11MB8867A8422232FC5DFF11F6FAB8AE2CH2PR11MB8867namp_"
MIME-Version: 1.0
X-OriginatorOrg: cisco.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CH2PR11MB8867.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 6bb1e006-62ed-45b3-7ccf-08dd72dad7cb
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Apr 2025 18:10:40.4459 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: OPALgqlsggIg4cmPTQkHXIBVIq2L7VF0plKXZCgpKNsSmYyzWJVwW+XEAkrwgJK3aTTZVEZy0VxcABCFtTmuBQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR11MB6928
X-Outbound-SMTP-Client: 173.37.147.253, alln-opgw-5.cisco.com
X-Outbound-Node: rcdn-l-core-04.cisco.com
Message-ID-Hash: 2R4Q362YHB4FRCD4UCVORM6UEFKNNLRY
X-Message-ID-Hash: 2R4Q362YHB4FRCD4UCVORM6UEFKNNLRY
X-MailFrom: jclarke@cisco.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-secdir.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "Douglas Gash (dcmgash)" <dcmgash=40cisco.com@dmarc.ietf.org>, IETF SecDir <secdir@ietf.org>, "draft-ietf-opsawg-tacacs-tls13.all@ietf.org" <draft-ietf-opsawg-tacacs-tls13.all@ietf.org>, "last-call@ietf.org" <last-call@ietf.org>, "opsawg@ietf.org" <opsawg@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [secdir] Re: [Last-Call] Secdir last call review of draft-ietf-opsawg-tacacs-tls13-18
List-Id: Security Area Directorate <secdir.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/gKgurIcygApuFfO1RYoAPCiPR3I>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Owner: <mailto:secdir-owner@ietf.org>
List-Post: <mailto:secdir@ietf.org>
List-Subscribe: <mailto:secdir-join@ietf.org>
List-Unsubscribe: <mailto:secdir-leave@ietf.org>
Yeah, this was new to me, too. But when logged into DT, if I go to [My Name] > My Reviews at the top, I can select a given review and click the correct review button to change the status and the revision reviewed. Joe From: Russ Housley <housley@vigilsec.com> Date: Thursday, April 3, 2025 at 13:43 To: Med Boucadair <mohamed.boucadair@orange.com> Cc: Joe Clarke (jclarke) <jclarke@cisco.com>, Douglas Gash (dcmgash) <dcmgash=40cisco.com@dmarc.ietf.org>, IETF SecDir <secdir@ietf.org>, draft-ietf-opsawg-tacacs-tls13.all@ietf.org <draft-ietf-opsawg-tacacs-tls13.all@ietf.org>, last-call@ietf.org <last-call@ietf.org>, opsawg@ietf.org <opsawg@ietf.org> Subject: Re: [Last-Call] Secdir last call review of draft-ietf-opsawg-tacacs-tls13-18 I do not see such a button. Anyway, I'd want to enter the review for -19, not correct the review for -18. Russ On Apr 3, 2025, at 1:38 PM, mohamed.boucadair@orange.com wrote: Russ, You should have a “correct review” button under “review” (Assignment) at https://datatracker.ietf.org/doc/review-ietf-opsawg-tacacs-tls13-18-secdir-lc-housley-2025-03-08/ Cheers Med De : Russ Housley <housley@vigilsec.com<mailto:housley@vigilsec.com>> Envoyé : jeudi 3 avril 2025 19:28 À : Joe Clarke (jclarke) <jclarke@cisco.com<mailto:jclarke@cisco.com>> Cc : Douglas Gash (dcmgash) <dcmgash=40cisco.com@dmarc.ietf.org<mailto:dcmgash=40cisco.com@dmarc.ietf.org>>; BOUCADAIR Mohamed INNOV/NET <mohamed.boucadair@orange.com<mailto:mohamed.boucadair@orange.com>>; IETF SecDir <secdir@ietf.org<mailto:secdir@ietf.org>>; draft-ietf-opsawg-tacacs-tls13.all@ietf.org<mailto:draft-ietf-opsawg-tacacs-tls13.all@ietf.org>; last-call@ietf.org<mailto:last-call@ietf.org>; opsawg@ietf.org<mailto:opsawg@ietf.org> Objet : Re: [Last-Call] Secdir last call review of draft-ietf-opsawg-tacacs-tls13-18 Joe: This resolves my concern. I've asked the SecDir Secretary how to post an unrequested review. Russ On Apr 3, 2025, at 12:49 PM, Joe Clarke (jclarke) <jclarke@cisco.com<mailto:jclarke@cisco.com>> wrote: Thanks, Russ. The authors have published -19. The diff is at https://author-tools.ietf.org/iddiff?url2=draft-ietf-opsawg-tacacs-tls13-19. If you agree with the modified text can you amend your DIR review to Ready? Thanks. Joe From: Russ Housley <housley@vigilsec.com<mailto:housley@vigilsec.com>> Date: Thursday, March 13, 2025 at 23:02 To: Douglas Gash (dcmgash) <dcmgash=40cisco.com@dmarc.ietf.org<mailto:dcmgash=40cisco.com@dmarc.ietf.org>> Cc: mohamed.boucadair@orange.com<mailto:mohamed.boucadair@orange.com> <mohamed.boucadair@orange.com<mailto:mohamed.boucadair@orange.com>>, IETF SecDir <secdir@ietf.org<mailto:secdir@ietf.org>>, draft-ietf-opsawg-tacacs-tls13.all@ietf.org<mailto:draft-ietf-opsawg-tacacs-tls13.all@ietf.org> <draft-ietf-opsawg-tacacs-tls13.all@ietf.org<mailto:draft-ietf-opsawg-tacacs-tls13.all@ietf.org>>, last-call@ietf.org<mailto:last-call@ietf.org> <last-call@ietf.org<mailto:last-call@ietf.org>>, opsawg@ietf.org<mailto:opsawg@ietf.org> <opsawg@ietf.org<mailto:opsawg@ietf.org>> Subject: Re: [Last-Call] Secdir last call review of draft-ietf-opsawg-tacacs-tls13-18 This approach works for me. Russ On Mar 13, 2025, at 5:33 AM, Douglas Gash (dcmgash) <dcmgash=40cisco.com@dmarc.ietf.org<mailto:dcmgash=40cisco.com@dmarc.ietf.org>> wrote: Just to confirm, there are three authentication methods (Cert, PSK, RPK). Cert MUST be implemented, the other two MAY be implemented, as they become mature. We have made two specific changes, which we hope will clarify: 1. We have indicated that the two options (PSK and RPK) are alternatives to Cert based, to avoid the impression that they are augmentations which are intended to work in combination. 2. In the start of the Cert based section, we have clarified that this section covers Cert based only. Please let us know if this new version changes clarify this intent. ____________________________________________________________________________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. Thank you.
- [secdir] Secdir last call review of draft-ietf-op… Russ Housley via Datatracker
- [secdir] Re: Secdir last call review of draft-iet… mohamed.boucadair
- [secdir] Re: [Last-Call] Secdir last call review … Russ Housley
- [secdir] Re: [Last-Call] Secdir last call review … mohamed.boucadair
- [secdir] Re: [Last-Call] Secdir last call review … Douglas Gash (dcmgash)
- [secdir] Re: [Last-Call] Secdir last call review … Russ Housley
- [secdir] Re: [Last-Call] Secdir last call review … Joe Clarke (jclarke)
- [secdir] Re: [Last-Call] Secdir last call review … Russ Housley
- [secdir] Re: [Last-Call] Secdir last call review … mohamed.boucadair
- [secdir] Re: [Last-Call] Secdir last call review … Russ Housley
- [secdir] Re: [Last-Call] Secdir last call review … Joe Clarke (jclarke)
- [secdir] Re: [Last-Call] Secdir last call review … Tero Kivinen
- [secdir] Re: [Last-Call] Secdir last call review … Joe Clarke (jclarke)