Re: [secdir] [lamps] Secdir early review of draft-ietf-lamps-rfc7030-csrattrs-08

Sean Turner <sean@sn3rd.com> Thu, 04 April 2024 13:13 UTC

Return-Path: <sean@sn3rd.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31566C14F6A2 for <secdir@ietfa.amsl.com>; Thu, 4 Apr 2024 06:13:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Cb9TOSm6OGN8 for <secdir@ietfa.amsl.com>; Thu, 4 Apr 2024 06:13:33 -0700 (PDT)
Received: from mail-qv1-xf2f.google.com (mail-qv1-xf2f.google.com [IPv6:2607:f8b0:4864:20::f2f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 80014C151076 for <secdir@ietf.org>; Thu, 4 Apr 2024 06:12:21 -0700 (PDT)
Received: by mail-qv1-xf2f.google.com with SMTP id 6a1803df08f44-69931ca3b9dso3143036d6.0 for <secdir@ietf.org>; Thu, 04 Apr 2024 06:12:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; t=1712236340; x=1712841140; darn=ietf.org; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:from:to:cc:subject:date:message-id:reply-to; bh=TocEHFXX90r9X+poPDK/alHgkEUKzMuKYo+USmc/cSI=; b=NajEapVrX5pAGbQI52P1yOrBesHbvRxbTLuKGgl5R01OHBien5jnPCFsG0FUQzocR0 qqJ8CtZza2R1SqM+hSFn0uB4aGkrvcDytSfFOYtp485nh6tEIkmiTWVAUzYO7I0/B6pl nijwfzLOx92X4CyfInwd4EJJ2sjcGG6xmBPN4=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712236340; x=1712841140; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=TocEHFXX90r9X+poPDK/alHgkEUKzMuKYo+USmc/cSI=; b=iQhlRUkSUO0504k5FzgFzm1mR+qVtCq20KWQbrU31z69MvjAFsxN2kJXLLRVORR1x4 Hc66hAXhaf/RmNiNzqpubP3xSP9tkfiuGvPsLrzpmNfRerb5g4sFXjNYukLChvP0uUVJ KmBBlI+826xppzqRowU6H10BkjCswSQql6RiqnrIL1j9VE2VkYoEYiYGHw9mOGrBKGYJ yvHfiRC6cOInXhSsFAIGonNdtrveImbPNlGYhdqdVn6GkSnATiRB/ik3N8tUU6Sefnm3 3NxdGzrftW/yy06W5TOV9lIvmWJAUldw/jq4XZiB5ITRA+tOEYt4AnZTDwr8zgdFDymh kJPg==
X-Forwarded-Encrypted: i=1; AJvYcCXStuIoIw3iQBjj2OnYLHaT6cLpi+TITsRipZcRyLCHXJIoKEoQVFhcV1TMoU3kqC0HGF+p4TE3Oefd4CgfcN4=
X-Gm-Message-State: AOJu0YwmzyBE8W57Ue5sZa377z8AUlwwcqRbuugGccxKLqdA8CwpX3CT 6OGKEE0skTwEAB+UPFpJYQLESCmPRZDbei3vw7qxEvcWfOBOZphdaCaQKrYHdDI=
X-Google-Smtp-Source: AGHT+IGxWMzDBMrZN3BN1/5Heok0MMm5qb8B5zuglfE9PrQlovuqDJ+taKGRvKdieR8UkbIIx9fVrw==
X-Received: by 2002:a05:6214:518b:b0:696:7d37:1a6b with SMTP id kl11-20020a056214518b00b006967d371a6bmr1948580qvb.56.1712236340073; Thu, 04 Apr 2024 06:12:20 -0700 (PDT)
Received: from smtpclient.apple (pool-68-238-162-47.washdc.fios.verizon.net. [68.238.162.47]) by smtp.gmail.com with ESMTPSA id dv13-20020ad44eed000000b0069903c37a36sm4476989qvb.100.2024.04.04.06.12.19 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 04 Apr 2024 06:12:19 -0700 (PDT)
From: Sean Turner <sean@sn3rd.com>
Message-Id: <58E178E6-0D7D-4862-BAE2-69C5D91DF033@sn3rd.com>
Content-Type: multipart/signed; boundary="Apple-Mail=_4B152AB5-A5D4-481D-9517-3831455222CC"; protocol="application/pgp-signature"; micalg="pgp-sha256"
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.120.0.1.15\))
Date: Thu, 04 Apr 2024 09:12:18 -0400
In-Reply-To: <15325.1712150494@obiwan.sandelman.ca>
Cc: Valery Smyslov <valery@smyslov.net>, secdir@ietf.org, draft-ietf-lamps-rfc7030-csrattrs.all@ietf.org, spasm@ietf.org
To: Michael Richardson <mcr+ietf@sandelman.ca>
References: <171214769605.4394.3756625912941164021@ietfa.amsl.com> <15325.1712150494@obiwan.sandelman.ca>
X-Mailer: Apple Mail (2.3654.120.0.1.15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/xcUdE9EVlnfxLZv7A4jBw2bQJFU>
Subject: Re: [secdir] [lamps] Secdir early review of draft-ietf-lamps-rfc7030-csrattrs-08
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Apr 2024 13:13:38 -0000


> On Apr 3, 2024, at 09:21, Michael Richardson <mcr+ietf@sandelman.ca> wrote:
> 
> Signed PGP part
> 
> Valery Smyslov via Datatracker <noreply@ietf.org> wrote:
>> I have reviewed this document as part of the security directorate's
> 
> Thank you.
> 
>> Nits: 1. This draft updates RFC 7030, but this is not indicated in its
>> header.
> 
> fixed.
> 
>> 2. It seems to me that definition of
>> id-aa-certificationRequestInfoTemplate in the Section 3.3 and in the
>> Appendix A lacks the name of the new element in OID (only value "TBD2"
>> is present).
> 
> I see, we didn't really give it a clear name.
> I think that we should also link in the IANA Considerations TBD1/TBD2.
> I'm not sure what name we should give to TBD2.  Sean?

For the list, yeah I should have put a name in front of TBD2; Michael has one in the editor’s copy that works.  The link in the IANA considerations is also a good idea.

spt

>> 3. Section 3.2, typo: s/MUST by/MUST be
>> 4. Section 3.3, typo, perhaps: s/The avoid this drawback/To avoid this
>> drawback
>> 5. Section 3.3, possible typo: s/The SubjectPublicKeyInfo field must be
>> present/The SubjectPublicKeyInfo field MUST be present
> 
> Thank you, updated.
> 
> 
> 
> --
> Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
>           Sandelman Software Works Inc, Ottawa and Worldwide
> 
> 
> 
> 
> 
>