Re: [Sframe] Publication has been requested for draft-ietf-sframe-enc-06

"Murray S. Kucherawy" <superuser@gmail.com> Thu, 01 February 2024 05:48 UTC

Return-Path: <superuser@gmail.com>
X-Original-To: sframe@ietfa.amsl.com
Delivered-To: sframe@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B376C14F74A for <sframe@ietfa.amsl.com>; Wed, 31 Jan 2024 21:48:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wy7MZwS7HE6t for <sframe@ietfa.amsl.com>; Wed, 31 Jan 2024 21:48:29 -0800 (PST)
Received: from mail-ej1-x631.google.com (mail-ej1-x631.google.com [IPv6:2a00:1450:4864:20::631]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CF224C14F71F for <sframe@ietf.org>; Wed, 31 Jan 2024 21:48:29 -0800 (PST)
Received: by mail-ej1-x631.google.com with SMTP id a640c23a62f3a-a3169f46d73so8754166b.1 for <sframe@ietf.org>; Wed, 31 Jan 2024 21:48:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1706766507; x=1707371307; darn=ietf.org; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=IM/H+3PfwaaD8UL0rJRSe8jmUz/Lx2rmf3pEjJDXOsQ=; b=KFLWXZGmjbpKUyCH/Ze2dVnKeVXkbiFTqGe8fNtH1NrpcfbXJsSEXjAnK+aTfuSxt5 lc53hJYkyIDV5FLD2I6bncvZimCUoQt2Fc4KxxOjAsrq6dil/vgU3fTTQY/3zJjkMnpj ThXMnnGM2xRm6KEhVsoNRyPmCkToJMMZ0YzoOsQKShiPl2CAE3OpTZshdnxem9+wW/v0 pRNo2i6byX7QDE9T/Ip6wvrjOsw7X1X8xVNwyfu1yVjCiPnCTejcqOVghl+CrZH7hIbi MNvh8RMtyBTt8Ksb/L1iewRDgO2+1Fwu+GA7KH1TzGchvOG535kka113pgEYazo9F/XX PHFw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1706766507; x=1707371307; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=IM/H+3PfwaaD8UL0rJRSe8jmUz/Lx2rmf3pEjJDXOsQ=; b=NtQP5FTWfA/TrF4MBnOW0ijXaLlXZc8yjKNGdL1hWnUk9taYiBUYY35el014YxOlYK zdHt3jT7RAce7SmSAA2L0mW1okazOy1OZQpfxtxa+Cmq9A+zw3AB1ZA3LSL+i2SXDNXU oeSpbS8UYMgTt6VzXjOPkL1Bp7FyjwFuVFsm+tzyaXFykWZ/jC6dCjYJIBdpDiC5PP19 qigA/6VBHjRw+85ngbelBQnPaVgZ4dWU8O7B71J4dWoEfN+WvQY1lh1O/OEasjDFhxnV qEeCvNmMcMJcIwAjayV/7iZ/shTd8u2FdnPdy2TlPycDhh6IxZLAttzvAtxRfVIKtmaM Y7CA==
X-Gm-Message-State: AOJu0YzkRi+FCrI/GU1OhZSStOZnNoXhAZBH5GMz6i4SNrPjhEszwdEI EsXexeBHrpPvgHWk++MaOySKG52PSMWDCWQEgHS2xkBauW2eo2Vuv1HO8QynVEuN0s3V20cgKQu gjcjLYyowYi/u+ivcxXmgP8iCHi7ijJ87toY=
X-Google-Smtp-Source: AGHT+IH1zwQackA6I9e149VNVZ2Iqf/xSHxdKuccUqJXHETHdyLa/uCme+HXT4UHpoBHQ4U4io9ec9Qk3G/i1lfKfX0=
X-Received: by 2002:a17:906:6a1a:b0:a36:cb32:f403 with SMTP id qw26-20020a1709066a1a00b00a36cb32f403mr164247ejc.5.1706766507163; Wed, 31 Jan 2024 21:48:27 -0800 (PST)
MIME-Version: 1.0
References: <170182043936.679.4345250232615285561@ietfa.amsl.com>
In-Reply-To: <170182043936.679.4345250232615285561@ietfa.amsl.com>
From: "Murray S. Kucherawy" <superuser@gmail.com>
Date: Wed, 31 Jan 2024 21:48:14 -0800
Message-ID: <CAL0qLwa+73QryfCxGEG_0FSGRK06sJDsNjq2JZH3X4J9_JeUZg@mail.gmail.com>
To: sframe@ietf.org
Content-Type: multipart/alternative; boundary="0000000000005fc39b06104b8be6"
Archived-At: <https://mailarchive.ietf.org/arch/msg/sframe/NVTrPPwTkFoQcU_WZziQ74a2L-I>
Subject: Re: [Sframe] Publication has been requested for draft-ietf-sframe-enc-06
X-BeenThere: sframe@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Secure Media Frames <sframe.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sframe>, <mailto:sframe-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sframe/>
List-Post: <mailto:sframe@ietf.org>
List-Help: <mailto:sframe-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sframe>, <mailto:sframe-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Feb 2024 05:48:30 -0000

On Tue, Dec 5, 2023 at 3:54 PM Martin Thomson via Datatracker <
noreply@ietf.org> wrote:

> Martin Thomson has requested publication of draft-ietf-sframe-enc-06 as
> Proposed Standard on behalf of the SFRAME working group.
>
> Please verify the document's state at
> https://datatracker.ietf.org/doc/draft-ietf-sframe-enc/
>

Hello all,

Sorry this has taken me so long to get through.  Overall I think it's quite
well done and what I've managed to come up with is mostly minor.  So,
here's what I've got so far; rather than have you keep waiting on more
comments or questions, I'm going to request Last Call now in parallel with
me finishing my review.  We can deal with these alongside any Last Call
feedback and directorate reviews if you like.

In no particular order:

Section 8:

This kind of reads like at one point you were asking for multiple
registries, but only one remains.  Some of the grammar mismatches should be
tidied up.

Per RFC 8126, a "Specification Required" registry strongly encourages
advice to the Designated Expert about what one should consider when
deciding if the reference being offered is satisfactory, but no such advice
is present here.  Do we need any?

Section 4.4.1:

I'm a stickler for correct use of SHOULD, so I'm going to test a couple of
these.  In this section, there's a SHOULD mark keys one way or the other,
but never both.  Since SHOULD allows a choice, is there ever a reason to
mark a key as both?  Or should that really be a MUST?

Section 4.4.4:

Same SHOULD question.

Section 9.3:

Are there any informative references that might be offered regarding the
mitigations suggested here?

Appendix A:

Thanks for including this.

Section 7.5:

The first bullet appears to be one sentence that's been broken into two.

-MSK