Re: [sfc] Murray Kucherawy's Discuss on draft-ietf-sfc-nsh-integrity-06: (with DISCUSS and COMMENT)

mohamed.boucadair@orange.com Thu, 15 July 2021 09:54 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: sfc@ietfa.amsl.com
Delivered-To: sfc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A5313A24E7; Thu, 15 Jul 2021 02:54:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.796
X-Spam-Level:
X-Spam-Status: No, score=-2.796 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kAxYFBtLy3EM; Thu, 15 Jul 2021 02:54:41 -0700 (PDT)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4FAA3A24EC; Thu, 15 Jul 2021 02:54:32 -0700 (PDT)
Received: from opfednr00.francetelecom.fr (unknown [xx.xx.xx.64]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by opfednr21.francetelecom.fr (ESMTP service) with ESMTPS id 4GQV8Q5HcKz5w02; Thu, 15 Jul 2021 11:54:30 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1626342870; bh=y9v3XCOypjy58RTjC9fzt1rh7WSZ/9eWb2tcXMkvC8Y=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=f4FNcseXRrM8tW6HjtJIUmmPhZ7yHIkM+KLqalxGGQgRimHGym74h2EXLRPCF3tDd jPXd+ShfXSyP5cnu3EERsMAnz3nFW1L+83K8wRDigUTnqs2/RKGrkXvs4zqJGKm1NX lBly8jc8ihGjARJkqyvKR6ni0T8r6UYO/fP5uA7Zujryx9URrtF+zTiV/LdO42Z8wY OPN+8kL1zzDpxgYDInOqLkhXyGrKCGEohsKNc3TdCE5rM2Ng1+h6c028JEff5CYPnZ YaIUxgyBMyZRaC2CB2NEeaH+cgg1OeihTfCrl34NXnsbL9hjKe5EouGK11vOG1F1m7 UaCcC3HGTsvBA==
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.38]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by opfednr00.francetelecom.fr (ESMTP service) with ESMTPS id 4GQV8Q4LpvzDq7q; Thu, 15 Jul 2021 11:54:30 +0200 (CEST)
From: <mohamed.boucadair@orange.com>
To: Murray Kucherawy <superuser@gmail.com>, The IESG <iesg@ietf.org>
CC: "draft-ietf-sfc-nsh-integrity@ietf.org" <draft-ietf-sfc-nsh-integrity@ietf.org>, "sfc-chairs@ietf.org" <sfc-chairs@ietf.org>, "sfc@ietf.org" <sfc@ietf.org>, "gregimirsky@gmail.com" <gregimirsky@gmail.com>
Thread-Topic: Murray Kucherawy's Discuss on draft-ietf-sfc-nsh-integrity-06: (with DISCUSS and COMMENT)
Thread-Index: AQHXeUCRRoFE1lG5BU+IA6kn2WVtFatDytWg
Date: Thu, 15 Jul 2021 09:54:29 +0000
Message-ID: <7171_1626342870_60F005D6_7171_103_3_787AE7BB302AE849A7480A190F8B9330353BF653@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
References: <162632962077.15354.4548212112967523910@ietfa.amsl.com>
In-Reply-To: <162632962077.15354.4548212112967523910@ietfa.amsl.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.13.245]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/sfc/8eMNtUcuu793LaaQVzcXRCANDdA>
Subject: Re: [sfc] Murray Kucherawy's Discuss on draft-ietf-sfc-nsh-integrity-06: (with DISCUSS and COMMENT)
X-BeenThere: sfc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Network Service Chaining <sfc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sfc>, <mailto:sfc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sfc/>
List-Post: <mailto:sfc@ietf.org>
List-Help: <mailto:sfc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sfc>, <mailto:sfc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Jul 2021 09:54:46 -0000

Hi Murray, 

Thanks for the comments.

I don't have much to add to the DISCUSS point in addition to what both Joel and myself said in other threads. We added new text as agreed with Alvaro and Zahed to make sure that we are referring to an option that is discussed in RFC8300 + we don't recommend against transport security. We will add the update header if this is the conclusion of the IESG discussion. We will follow Martin's guidance on this.

Fixed the nits as you can see in: https://tinyurl.com/nsh-integrity-latest.

Cheers,
Med

> -----Message d'origine-----
> De : Murray Kucherawy via Datatracker [mailto:noreply@ietf.org]
> Envoyé : jeudi 15 juillet 2021 08:14
> À : The IESG <iesg@ietf.org>
> Cc : draft-ietf-sfc-nsh-integrity@ietf.org; sfc-chairs@ietf.org;
> sfc@ietf.org; gregimirsky@gmail.com
> Objet : Murray Kucherawy's Discuss on draft-ietf-sfc-nsh-integrity-
> 06: (with DISCUSS and COMMENT)
> 
> Murray Kucherawy has entered the following ballot position for
> draft-ietf-sfc-nsh-integrity-06: Discuss
> 
> When responding, please keep the subject line intact and reply to
> all email addresses included in the To and CC lines. (Feel free to
> cut this introductory paragraph, however.)
> 
> 
> Please refer to https://www.ietf.org/iesg/statement/discuss-
> criteria.html
> for more information about DISCUSS and COMMENT positions.
> 
> 
> The document, along with other ballot positions, can be found here:
> https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh-integrity/
> 
> 
> 
> --------------------------------------------------------------------
> --
> DISCUSS:
> --------------------------------------------------------------------
> --
> 
> Enough other Area Directors have said, and I agree, that this should
> officially update RFC 8300, so I'd like to have the discussion.  In
> particular, given that this was identified as a gap in RFC 8300, and
> since I don't see any explicit statement that this is meant to be an
> optional extension, shouldn't it be an update?
> 
> 
> --------------------------------------------------------------------
> --
> COMMENT:
> --------------------------------------------------------------------
> --
> 
> Only nits to add, given the thorough treatment already given by
> others:
> 
> Section 4.1.2: "The first level of assurance where all NSH data ..."
> -- add "is" before "where"?  And the same issue in the next
> paragraph.
> 
> Section 5.2: s/Coves/Covers/
> 
> 


_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.