Re: [secdir] SECDIR review of draft-ietf-netmod-revised-datastores-09

Donald Eastlake <d3e3e3@gmail.com> Mon, 08 January 2018 03:59 UTC

Return-Path: <d3e3e3@gmail.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 229DB126D74; Sun, 7 Jan 2018 19:59:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.749
X-Spam-Level:
X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KE8NGE-hyLqr; Sun, 7 Jan 2018 19:59:08 -0800 (PST)
Received: from mail-oi0-x22e.google.com (mail-oi0-x22e.google.com [IPv6:2607:f8b0:4003:c06::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9AE501200C1; Sun, 7 Jan 2018 19:59:05 -0800 (PST)
Received: by mail-oi0-x22e.google.com with SMTP id a70so232876oib.1; Sun, 07 Jan 2018 19:59:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=cANsedGmzzAwg96PiWM8OyxdlPRNLlB3CUy2APQNa3o=; b=I1gqiR8RLdxAmDxUW+PkQAucKD640n7Li1LGiWgPPPqfNFkkmkUY/jKLGfCFpKrDxz ibjHab4PSENflzsJkGiuw6FNLQfFvaDQIy7a7/sATxVK0boWiC8c/1NkIsB1CmJr2hHt HefwAO+AR32Z0tf5x6s2IvvGJGg/0SOd7oNHpYLvdGBXb3X2K9HG42wfFWYrooWZt4IX gM/7uCCIFDjrTEhIVUg3yfamtVzW0K1Z+rzDMEfM2Mo4dbhbOQSj8NDvIAsggRZ1+R+C sUuu3uqdDSfXZhKBKNEKCSu0jLhIwfHGLFqZBK/s7WR40sLUrGaVZ/+wUpFpbZTLPHg+ nnUw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=cANsedGmzzAwg96PiWM8OyxdlPRNLlB3CUy2APQNa3o=; b=L/nUeCMhgUlVBNfDwBtgffqnVXKT4W7qlXfa/mHJukJzepEupcvofUHWvPpXK2dDAC 47hW7ZkJ1ZYp5/okyLNIsKB4B2GAJl7+UFsTDdy4qwOZ85kSjDzZ2Rlmj7EfhFkxKcMo myFt+nkpX6j9gBqMyfA/G/E/GA2u24kAHXH+DNzyYojCF0iytxe3ahI6vn2fR+dQPDF5 Di06eMOj1D1jCCrH326X3L75p4JROqtdjJRsWCjGRqxczVRUVWrkOwgVGHAcksYnH9sa gagP/HQo7/wDltShk5swrUF6n7R7TuF67B1Hl8i4u+MfsxZyA2WW4IKb4JIHy7zm5dHt 1XBw==
X-Gm-Message-State: AKGB3mK4eGvkcN5pm8++5oKzWbqbPMeSTfE2lqhfoKqIP1nIY5rjoD51 ErVBX1K/JHHocsrvo6fi/xBvTRMdMeWhys7gcVG2Vg==
X-Google-Smtp-Source: ACJfBotoh7OJi2BA+iGy5DPTdXNCW/zrKJJeYk4Gj62L99Usp+7jmXUweMfl5apnr5CxmmnVP9gmzEMo3POe7WNVx9A=
X-Received: by 10.202.91.212 with SMTP id p203mr5495953oib.269.1515383944589; Sun, 07 Jan 2018 19:59:04 -0800 (PST)
MIME-Version: 1.0
Received: by 10.168.53.129 with HTTP; Sun, 7 Jan 2018 19:58:49 -0800 (PST)
In-Reply-To: <CAF4+nEHeug=deumDV29iLWoE1_333Bx0BwpgpJ4vR1QEyjdqag@mail.gmail.com>
References: <CAF4+nEHeug=deumDV29iLWoE1_333Bx0BwpgpJ4vR1QEyjdqag@mail.gmail.com>
From: Donald Eastlake <d3e3e3@gmail.com>
Date: Sun, 07 Jan 2018 22:58:49 -0500
Message-ID: <CAF4+nEGKy347LvQVD+nxdwLDCtzvWg9jXHaC8Z931OpmWHYQAw@mail.gmail.com>
To: "iesg@ietf.org" <iesg@ietf.org>, draft-ietf-netmod-revised-datastores.all@ietf.org
Cc: secdir@ietf.org
Content-Type: multipart/alternative; boundary="001a113d56e6b738d005623bd13c"
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/kB7F5Jm4SG81QI33IVnKgTZrJbs>
Subject: Re: [secdir] SECDIR review of draft-ietf-netmod-revised-datastores-09
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Jan 2018 03:59:10 -0000

Resent with to address fixed.

Thanks,
Donald
===============================
 Donald E. Eastlake 3rd   +1-508-333-2270 (cell)
 155 Beaver Street, Milford, MA 01757 USA
 d3e3e3@gmail.com

On Sun, Jan 7, 2018 at 10:52 PM, Donald Eastlake <d3e3e3@gmail.com> wrote:

> I have reviewed this document as part of the security directorate's
> ongoing effort to review all IETF documents being processed by the
> IESG.  Document editors and WG chairs should treat these comments just
> like any other last call comments.
>
> The summary of the review is Ready.
>
> This draft specifies an elaborated datastore model for YANG based on
> experience with the original model in RFC 6241. It is probably
> correct, as stated in the Security Considerations, that this model
> itself has no security effect.
>
> The Security Considerations refer to the "YANG security module
> security guidelines" by that quoted string only. I would assume these
> guidelines are in a document somewhere and it would be nice to give a
> pointer to that document.
>
> Section 5.1, Page 11, third line up from the 5.1.1 heading, should the
> reference to "Section 5" be a reference to "Figure 2"?
>
> Thanks,
> Donald
> ===============================
>  Donald E. Eastlake 3rd   +1-508-333-2270 (cell)
>  155 Beaver Street, Milford, MA 01757 USA
>  d3e3e3@gmail.com
>