Re: [secdir] Secdir last call review of draft-ietf-netconf-notification-capabilities-17

Benoit Claise <benoit.claise@huawei.com> Mon, 04 October 2021 12:16 UTC

Return-Path: <benoit.claise@huawei.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5AD63A14FD; Mon, 4 Oct 2021 05:16:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WgfqfO0LaBdv; Mon, 4 Oct 2021 05:16:39 -0700 (PDT)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 354913A14A3; Mon, 4 Oct 2021 05:16:35 -0700 (PDT)
Received: from fraeml736-chm.china.huawei.com (unknown [172.18.147.206]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4HNKPn3z3pz67hkD; Mon, 4 Oct 2021 20:13:49 +0800 (CST)
Received: from [10.47.79.104] (10.47.79.104) by fraeml736-chm.china.huawei.com (10.206.15.217) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.8; Mon, 4 Oct 2021 14:16:28 +0200
To: Barry Leiba <barryleiba@computer.org>, secdir@ietf.org
CC: draft-ietf-netconf-notification-capabilities.all@ietf.org, last-call@ietf.org, netconf@ietf.org
References: <163310133388.21527.3735122449294464093@ietfa.amsl.com>
From: Benoit Claise <benoit.claise@huawei.com>
Message-ID: <42ab0032-4994-396e-08cc-3437fcf971a7@huawei.com>
Date: Mon, 04 Oct 2021 14:15:55 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0
MIME-Version: 1.0
In-Reply-To: <163310133388.21527.3735122449294464093@ietfa.amsl.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Content-Language: en-GB
X-Originating-IP: [10.47.79.104]
X-ClientProxiedBy: dggems703-chm.china.huawei.com (10.3.19.180) To fraeml736-chm.china.huawei.com (10.206.15.217)
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/vw3mPMFjrJy8AHfMt3AzX8my_pA>
X-Mailman-Approved-At: Tue, 05 Oct 2021 08:09:14 -0700
Subject: Re: [secdir] Secdir last call review of draft-ietf-netconf-notification-capabilities-17
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Oct 2021 12:16:48 -0000

Hi Barry,

Thanks for your insightful review.
All remarks improve (the reading of) the specifications.
See inline for some some specific remarks.

On 10/1/2021 5:15 PM, Barry Leiba via Datatracker wrote:
> Reviewer: Barry Leiba
> Review result: Has Nits
>
> Well written and easy to read; thanks.  I only have some very minor editorial
> suggestions that I ask you to consider:
>
> — Section 1 —
>
>     Many such capabilities are
>     specific to either the complete system, individual YANG datastores
>     [RFC8342], specific parts of the YANG schema, or even individual data
>     nodes.
>
> Nit: “either” is correctly used for two items (“either A or B”).  For the four
> items here, you might just eliminate the word “either”, as it’s not really
> needed.
>
>     A NMS implementation that wants to
>     support notifications, needs the information about a system's
>     capability to send "on-change" notifications.
>
> I often find that I have to read this sort of thing (“A needs B to do C”) twice
> to determine whether you mean that A requires that B do C, or that A needs B so
> that A can do C — it’s ambiguous, so it requires extra analysis by the reader.
> I suggest the following (which also eliminates the personification of NMS):
>
> NEW
>     An NMS implementation that supports
>     notifications needs the information about a system's
>     capability so it can send "on-change" notifications.
> END
>
> — Section 2 —
>
>     This allows a user to
>     discover capabilities both at implementation-time and run-time.
>
> Nit: The “at” is factored wrong with respect to “both”. Either “both at
> implementation time and at run time” or “at both implementation time and run
> time”.  In either case, no hyphens here, as they’re not compound modifiers.
>
>        The file MUST be
>        available already at implementation-time retrievable in a way that
>        does not depend on a live network node.
>
> Nit: No hyphen (again, not a modifier), and it needs a comma after it:
> “implementation time,”
>
>        For the run-time use-case
>
> Nit: Here, “run-time” is a modifier and needs the hyphen, but “use case” is a
> noun and does not.
>
>        (implementing the publisher) during run-time.  Implementations
>        that support changing these capabilities at run-time SHOULD
>
> Nit: No hyphens in “run time” for these two (nouns, not modifiers).
>
> — Section 3 —
>
>     A specific case is the need to specify capabilities is the YANG-Push
>     functionality.
>
> I’m not sure of the right fix for this, but the two instances of “is” can’t
> both be right.  Maybe the first should be “of”?

A specific case is the need to specify capabilities in the YANG-Push
    functionality.

>
>     As defined in [RFC8641] a publisher may allow
>     subscribers to subscribe to updates from a datastore and subsequently
>     push such update notifications to the receiver.
>
> It’s unclear who is pushing: it looks like it could be the subscribers.  Maybe
> clarify this way?:
>
> NEW
>     As defined in [RFC8641] a publisher may allow
>     subscribers to subscribe to updates from a datastore and will
>     subsequently push such update notifications to the subscriber.
> END
Yes to the above.
>
>     unless the subscriber has some means to
>     identify which objects "on-change" notifications are supported.
>
> Missing word: “are supported for.”
>
> — Section 4 —
>
>     It SHOULD be used by other modules to augment-in specific
>     capability information.
>
> The term “augment-in” is not one I’m familiar with.  If it’s common in YANG,
> that’s fine.  If not, maybe rephrase?

    It SHOULD be used by other modules to augment in specific
    capability information.


>
>     data is considered as if it was part
>     of the running datastore.
>
> Ultra-nit: “as if it were part”: subjunctive mood is needed after “as if”.
>
>
> .
Thanks again.

Regards, Benoit