Re: [sidr] [Editorial Errata Reported] RFC6487 (5187)

Geoff Huston <gih@apnic.net> Tue, 28 November 2017 10:01 UTC

Return-Path: <gih@apnic.net>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8EB8B1293E1 for <sidr@ietfa.amsl.com>; Tue, 28 Nov 2017 02:01:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.92
X-Spam-Level:
X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=apnic.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6TvkEfNhJ9xq for <sidr@ietfa.amsl.com>; Tue, 28 Nov 2017 02:01:54 -0800 (PST)
Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-hk2apc01on0055.outbound.protection.outlook.com [104.47.124.55]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28B44126E3A for <sidr@ietf.org>; Tue, 28 Nov 2017 02:01:53 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apnic.onmicrosoft.com; s=selector1-apnic-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=FDWpkHRn1Afv9+K6T7hsd4M4OL+ThtokNWlcY1YzJtw=; b=REEXtpguti2lLxB5sVZU966OqlFtz9CVLFR+KQag4/Od8OdSe6wVjRtpPVn0HA+2b5khvCo16hyYqIoIdNhLqtNa0A8Z7x8nOaRLZCUttnLXwP2lAWbasuL+V/K9SYqJt5mUpuSOhRoubt51KM3BipLM1u9V87FswSDMMYCezd8=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=gih@apnic.net;
Received: from 2001-44b8-1121-1a00-f198-572d-d022-daff.static.ipv6.internode.on.net (2001:44b8:1121:1a00:f198:572d:d022:daff) by SG2PR04MB0695.apcprd04.prod.outlook.com (2a01:111:e400:520a::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.260.4; Tue, 28 Nov 2017 10:01:44 +0000
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 11.1 \(3445.4.7\))
From: Geoff Huston <gih@apnic.net>
In-Reply-To: <20171128090411.26C0DB80C87@rfc-editor.org>
Date: Tue, 28 Nov 2017 21:01:33 +1100
Cc: George Michaelson <ggm@apnic.net>, robertl@apnic.net, akatlas@gmail.com, db3546@att.com, aretana.ietf@gmail.com, morrowc@ops-netman.net, sandy@tislabs.com, nmalykh@gmail.com, sidr@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <2D0550E2-5A6A-4C10-8B4A-74A1E88E1EC1@apnic.net>
References: <20171128090411.26C0DB80C87@rfc-editor.org>
To: RFC Errata System <rfc-editor@rfc-editor.org>
X-Mailer: Apple Mail (2.3445.4.7)
X-Originating-IP: [2001:44b8:1121:1a00:f198:572d:d022:daff]
X-ClientProxiedBy: HK2PR0302CA0007.apcprd03.prod.outlook.com (2603:1096:202::17) To SG2PR04MB0695.apcprd04.prod.outlook.com (2a01:111:e400:520a::21)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: c57256c1-36d7-4f9a-43f6-08d536470a5d
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(5600026)(4604075)(2017052603258); SRVR:SG2PR04MB0695;
X-Microsoft-Exchange-Diagnostics: 1; SG2PR04MB0695; 3:eELwt8lUweJkU3UTz1AI57Cf3IIDMLDKtYSlFgqSqkqs6PIyO4F2VghuuDQmGw1kbWG9cCQoMlr3pE4UF9Q8iCzQWxQmmNENsMSZgrX1SM//lv86tcNQZf+T2yG/T8urTLXFf2Y5Ld1gf7YBEsHmxG6k/jaSLyJWWHwDW+SNc7kkqqWpKHKlCcenYq4VHC0VHOGRQiOnxo/3KEQfnWOsa3Jp/H4vi/ujGQ8eS38J3LhU4yIXDMDxjgxVL91VyCkv; 25:5/YSTCj3oUQStNk68x2aMHH4Dy8VO8DcNgnlBCHPjFDE5LlWLK+wiW7DbFNV+YvE3+jkBGEyneRHJQTR9EODomoR4eGiPtX5u1y1zdE7VKWrikxQRsl58RegEToMmmsdEqAQw7m6+cNnbhAuW2FrO+BenBh2L1a1A7nEZelrenxaVc74nqyrpJOcsBFXdnjpNF78uafUEPlltFv46HNTNHoUTxN/srVadR92k8rqdXzuUGh3hkYOwQX/LhOGzo27rP1Ux5hmkMu9A3nymp7CiY4n7FarJknnsSI1BjssZxqfATu9YG6VZS7q/6t+Fu+NKGft37PQfHkJdqGcQDXcgA==; 31:xK2+CKCIiWHsGJaebYyxU9PD63CKvNf5OSM38RxDLcmCwYmt/DroQOYs/EBzs5d4AyYLJVvEupDL5x0Y3O+afdYAOTHQ4GMNTir0eGn852XrvCr4MqgJmRV2k+tU9PtnspH0EyVroyAi0d6ItUAmJQNXQT7wvRH13rfTF2usMEYn6qsfMPDo0nkDGcsZ3xYwZnDy6Ox5nBiwHziClxnER3baCVQbTBk0+M4PZ520l8w=
X-MS-TrafficTypeDiagnostic: SG2PR04MB0695:
X-Microsoft-Antispam-PRVS: <SG2PR04MB06955A0E3FDA00142FD67A4AB83A0@SG2PR04MB0695.apcprd04.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(131327999870524);
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(3231022)(6041248)(20161123560025)(201703131423075)(201703061421075)(20161123562025)(20161123558100)(20161123564025)(20161123555025)(6072148)(201708071742011); SRVR:SG2PR04MB0695; BCL:0; PCL:0; RULEID:(100000803101)(100110400095); SRVR:SG2PR04MB0695;
X-Microsoft-Exchange-Diagnostics: 1; SG2PR04MB0695; 4:ZvrkpbuwbPbymLce6JikqHGaI6L1f3bFz6xDjkPcfsksQz1SpjajdC5mxqUWc8TsLSvMy7IaAgLJkUW6H3TRV7erId2Mlr9j9TVGN4AP8EbPuQwCavUKUkJ+9yCZ17GYEgBoXvV98eIH1F7M8t1rHJ6bu4FKdSBiJOX7BVqqP/TE4qYQrRZa9ReSmxi7CHqQkkCFsT5eGLP2sVIk/lBE7D6641g5DWCpLpRtEHLcrlj6/6RMk9RMO38P3RY95zU64AFd62V4mIvBRHtvCCPJ65BaW5F4c7FLcQA169GEgQAfttv24o5F8dhMNzlV4uln
X-Forefront-PRVS: 0505147DDB
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(6009001)(366004)(346002)(376002)(199003)(189002)(24454002)(39060400002)(7736002)(106356001)(47776003)(5660300001)(68736007)(53546010)(6506006)(8936002)(8676002)(50466002)(36756003)(50226002)(508600001)(6246003)(76176999)(2950100002)(6486002)(33656002)(6306002)(305945005)(4326008)(50986999)(53936002)(6916009)(229853002)(101416001)(966005)(6116002)(1720100001)(57306001)(6666003)(97736004)(25786009)(86362001)(105586002)(23726003)(83716003)(52396003)(81156014)(6512007)(8746002)(81166006)(189998001)(2906002)(52116002)(82746002)(42262002); DIR:OUT; SFP:1101; SCL:1; SRVR:SG2PR04MB0695; H:2001-44b8-1121-1a00-f198-572d-d022-daff.static.ipv6.internode.on.net; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
Received-SPF: None (protection.outlook.com: apnic.net does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1; SG2PR04MB0695; 23:wFV4Tv9obF+KMzNl3Bw95w1i76KfH72NTF5UxCX6aYyBdMUI0IGSVgWdDQVo7IdyUe+8Qc2v3ik+KUE9qXjxu75CW99a3Iv1EzOTpT/bqVx3aGEoUAB7xqQhssxjVg2YkR5BL49LbtYGdp9NhZ1rh8n2LjTp+uhQwjRzYui7paYdH6gfKfKxyLwfa4wJRHjLfpaSBLzBwVi5zCC5P9xFETKLh7G7qdapN+XmZQdaZZgYWQ6LNxrjj7OZ0YS7ap30OgpKrOUcIotHcNpPRtHor1tOT6CQUfppfoKSAq3Wo6c8UWUVqicWlfwYtFJv1XSElnrInHUHFybZRMsEwuAegEZU1CksRu1fMEDJ+T9SaPBiXy2Dt96dgsueQKXa2RHnmzOD7yHPyd21M7wYkPNfMgA/5I5khdQeC0iAe28GVMPfz87o+G6Z9vceooZJ2YnJwqP6x61OP+uuBcvUz2+l1KgfjXqTNfaEn3l0X30LR7Eq/AjgZqOwRv71DK/3STiuIWnyZi1MBX4oUgOLgk8DRdHkFMwaOy7Ikum36Ny/pIe40YFX9eekSIx/ejt2pjtocPd7Bv3oq9RHiugaQ84dAKeLLjw8YNAeuyW7qtLWvMH0Vc8KQr3/2R4ydWnO6TBsyzrODaZJKLfLXROYH7EUr4eBiiHXJ4szhzO2E00XmcQfMzN5WFjlqa+FOz3BTTBnM0VEm4PAb39B/mwIAK/dEo/5LGW1ZDWpm832gzfvQNaXBzaeTn5CWFvNqFrK0Xalua2RNfZ9v0yb8rFb2uAO4Ksl2FfUkGSu+WQtotFkT3o2gIJ8zdPXufwagPP9xszMgORXkmA2Uo8lKQ8RqgCbHuHUGviER8iEdgSO3nT91cTjL0yz4WsDvynyO5EgQ56eAy5rxLR2eB2uYeQ1xFRxvjqzSr8Y9ZeMVToTh9HtS+8N0m/JqHbMoPhhLu4yKZAxU5xBYjoQLNmvYrR5zNhlsWTzsSagcCReteTlgpBp/1lPdeb97Z4dgoEDDl1QtNDgtV46ixY76HU3OvOyxAnkpsR+WHGCkzIMF8H8966hm1/y4wmTVQzi0Uh8oBNEvCqpAs7/2lMCV8H6n3LXo+4thhp/FwN1C1ywfKAY5PlDRi+c54UwGskXQdLFm9yx47JXPgNNq+qmMRbQ/wF0DsH64eSJvUQlmVEcbfB2teQarMS33EMFS6rQYZxwFhI+mtbHDGMJIgF3R3RhX4gbp/mlIvEqF9gUNLv22tCLvdMjZkaTbPwvaB3SYawv5v87MMMH
X-Microsoft-Exchange-Diagnostics: 1; SG2PR04MB0695; 6:jZgdQfyfj9ASrLXJr24YYa06NighDMKgGEvdLwzVnWix3RfsjK6GHQX+7XkAOyV8J2nJPHP8jPNVSbA5ppXxnrMXfXh/0Es7tv3nHB5XENYrfS5nzrh6nVwZSCmZci6H81tMCBwzkKCd7Kc5jMWHUAHgTeV7jVzPdczSWWnqMt6z4dcB6C5u6993Dj6/eG5RS59yZdRCanv+Kk5nD1QSnLmfP4U5dNSYRndTqL4ytHs1UYsJHkHj00lcb3jSu3pQyuea0cSvexoCqIAI25H1+p2Iksvb2pUIetJFG5nmEcXaWN41/vtI2jjRu3VeNDUqjJ4iewcUYRDmY69vGDD9xrxYM+1iGDozjQqUedI1z8E=; 5:niTCkiDn4YCDif0d9zaZQMNBA3kOHnEGae9ScFR04KjdppSTmXnrceiKCC3zws0GfUQ5qwSnacdeclI1uS0pRnWieZuuoUsLH2x2PuivEIWKmIQMYud60nkHuEjLfi126MGHdR7c0ST4qLX1wRazsKa/s9uQnOJqLn9DDPm5XmU=; 24:zvDWhRxBePHtiUBEEVgJrMSkA2bsprLsifv5/gvdLuo0/spOzBwd7NW9sGa+LoFFZBwlhIrCH8iB3nxqNIIRNYq0I7Tb+8czY2VbdjIp8Es=; 7:/7tf1JnpWYmngh34PfwOhJTQuU0Zy1lD3/S4ZcBxSVTiFjTKbZxAPSR93MB4KoUDgds/wCs4Po/gL+Yk9knGkRdcPJzlnAZPME8KiEbu0aIygJAZuAkRIDurKBF/MfKBe9TZM/4rtpamwgeAdAEEyco85scxBVIKMr5Iz+jpNMN0sW0TASmxIV0tuuhcgVJpBPkYNpKwlH+DtXaig9LVFQ8Hq2lWB93bXe9MKLtRPo3KJk1QbnGsjznZa8RaOSeA
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: apnic.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Nov 2017 10:01:44.8034 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: c57256c1-36d7-4f9a-43f6-08d536470a5d
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 127d8d0d-7ccf-473d-ab09-6e44ad752ded
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR04MB0695
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidr/2G5Rkvn5LHp69U-sikVTMK8cIf0>
Subject: Re: [sidr] [Editorial Errata Reported] RFC6487 (5187)
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Nov 2017 10:01:57 -0000

Reject - in the context of resource certificates the resources may contain
both IP addresses _AND_ AS numbers. 



> On 28 Nov 2017, at 8:04 pm, RFC Errata System <rfc-editor@rfc-editor.org> wrote:
> 
> The following errata report has been submitted for RFC6487,
> "A Profile for X.509 PKIX Resource Certificates".
> 
> --------------------------------------
> You may review the report below and at:
> http://www.rfc-editor.org/errata/eid5187
> 
> --------------------------------------
> Type: Editorial
> Reported by: Nikolai Malykh <nmalykh@gmail.com>
> 
> Section: 7.1
> 
> Original Text
> -------------
>      encompass
>         Given two IP address and AS number sets, X and Y, X
>         "encompasses" Y if, for every contiguous range of IP addresses
>         or AS numbers elements in set Y, the range element is either
>         "more specific" than or "equal" to a contiguous range element
>         within the set X.
> 
> 
> Corrected Text
> --------------
>      encompass
>         Given two IP address or two AS number sets, X and Y, X
>         "encompasses" Y if, for every contiguous range of IP addresses
>         or AS numbers elements in set Y, the range element is either
>         "more specific" than or "equal" to a contiguous range element
>         within the set X.
> 
> 
> Notes
> -----
> 
> 
> Instructions:
> -------------
> This erratum is currently posted as "Reported". If necessary, please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party  
> can log in to change the status and edit the report, if necessary. 
> 
> --------------------------------------
> RFC6487 (draft-ietf-sidr-res-certs-22)
> --------------------------------------
> Title               : A Profile for X.509 PKIX Resource Certificates
> Publication Date    : February 2012
> Author(s)           : G. Huston, G. Michaelson, R. Loomans
> Category            : PROPOSED STANDARD
> Source              : Secure Inter-Domain Routing
> Area                : Routing
> Stream              : IETF
> Verifying Party     : IESG