Re: [sidr] WGLC: draft-ietf-sidr-rpsl-sig - End Jul 02 2015

Brian Haberman <brian@innovationslab.net> Wed, 24 June 2015 14:54 UTC

Return-Path: <brian@innovationslab.net>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1160D1A1A6C for <sidr@ietfa.amsl.com>; Wed, 24 Jun 2015 07:54:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q7m5Bl7W8wmg for <sidr@ietfa.amsl.com>; Wed, 24 Jun 2015 07:54:09 -0700 (PDT)
Received: from uillean.fuaim.com (uillean.fuaim.com [206.197.161.140]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C394E1A1A5B for <sidr@ietf.org>; Wed, 24 Jun 2015 07:54:09 -0700 (PDT)
Received: from clairseach.fuaim.com (clairseach-high.fuaim.com [206.197.161.158]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by uillean.fuaim.com (Postfix) with ESMTP id 98271880E1 for <sidr@ietf.org>; Wed, 24 Jun 2015 07:54:09 -0700 (PDT)
Received: from brians-mbp.jhuapl.edu (swifi-nat.jhuapl.edu [128.244.87.133]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by clairseach.fuaim.com (Postfix) with ESMTP id EDFAA1368260 for <sidr@ietf.org>; Wed, 24 Jun 2015 07:54:08 -0700 (PDT)
Message-ID: <558AC489.1030900@innovationslab.net>
Date: Wed, 24 Jun 2015 10:54:01 -0400
From: Brian Haberman <brian@innovationslab.net>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.7.0
MIME-Version: 1.0
To: sidr@ietf.org
References: <55828BEC.9010605@ops-netman.net> <BDDD7570-1F1C-4A25-8755-6E2A2E361659@gmail.com>
In-Reply-To: <BDDD7570-1F1C-4A25-8755-6E2A2E361659@gmail.com>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="Utj2lhQ9lDjjW0TH6dADH2QUAG8taROaE"
Archived-At: <http://mailarchive.ietf.org/arch/msg/sidr/R-IPEQvwMrGJZib5m38W6jRQmPM>
Subject: Re: [sidr] WGLC: draft-ietf-sidr-rpsl-sig - End Jul 02 2015
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jun 2015 14:54:17 -0000

Hi Geoff,
     Thanks for the review.  Some responses in-line...


On 6/23/15 10:26 PM, Geoff Huston wrote:
> section 3.1, bullet 4 - s/notaion/notation/

Will fix.

> 
> Bullet 4 of this list looks confused
> 
> * Date and time fields MUST be converted to 64-bit NTP Timestamp Format [RFC5905].
> 
>      thats a binary value, 32 bits of seconds since epoch and 32 bitss of fractions - right?

In the code I wrote a few years ago, I convert the timestamp to an ascii
string representation. Some of the conversion logic is in 5905 and the
rest is based on the C libraries for managing time.

>      Does this also mean that the Era is 1 January 1900?

Yes, it does... and that may be a problem in 21 years. Changing this to
the 128-bit Date Format from 5905 doesn't appear to be an issue.  When I
get some time in the next few days, I will update my prototype code and
test it out.

> 
> *  AS numbers MUST be converted to ASPLAIN syntax [RFC5396].
> 
>      hang on - thats ascii - why is the time field binary and this field ascii?

As noted above, the time is converted to ASCII.

> 
> *  IPv6 addresses must be canonicalized as defined in [RFC5952].
> 
>      this is also ascii 

Yes.

> 
> *  IPv4 addresses MUST be converted to a 32-bit representation
>           (e.g., Unix's inet_aton()).
> 
>      inet_aton returns a binary struct - which is NOT ascii. 
> 

But can be converted to the ASCII representation of the 32-bit number.
I will update the draft to be explicit about that.

>     
> *  All IP prefixes (IPv4 and IPv6) MUST be represented in CIDR
>           notaion [RFC4632].
> 

Yes, as described in RPSL (RFCs 2280 and 2622).

> 
>      I assume that this means that at times this will be a list of addresses
>      (i.e. the range of addresses 10.0.0.1 - 10.0.0.2 is 10.0.0.1/32 and 10.0.0.2/32)
> 
>      Are you wanting a cononical CIDR form? (i.e. should the pair of prefixes 10.0.0.0/24 and 10.0.1.0/24
>      be represented as 10.0.0.0/23?)
> 
> 
>      Other RPKI specs (e.g. RFC6487) referenced the canonical representation of a
>      set of addresses as defined in RFC3779. I assume you had a good reason not to
>      use the same approach
> 

The 3779 approach moves away from the RPSL representation of prefixes.
Introducing ASN.1-based representations to RPSL seems... odd.

Regards,
Brian