Re: [sidr] Warren Kumari's Discuss on draft-ietf-sidr-slurm-07: (with DISCUSS and COMMENT)

Di Ma <madi@zdns.cn> Fri, 27 April 2018 02:47 UTC

Return-Path: <madi@zdns.cn>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B068012D86D for <sidr@ietfa.amsl.com>; Thu, 26 Apr 2018 19:47:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.235
X-Spam-Level:
X-Spam-Status: No, score=-1.235 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZAzZw0qSyW91 for <sidr@ietfa.amsl.com>; Thu, 26 Apr 2018 19:47:24 -0700 (PDT)
Received: from smtpbguseast2.qq.com (smtpbguseast2.qq.com [54.204.34.130]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA0D712D7F9 for <sidr@ietf.org>; Thu, 26 Apr 2018 19:47:23 -0700 (PDT)
X-QQ-mid: bizesmtp18t1524797237tyfcvn2u
Received: from [192.168.218.249] (unknown [202.173.9.210]) by esmtp6.qq.com (ESMTP) with id ; Fri, 27 Apr 2018 10:47:16 +0800 (CST)
X-QQ-SSF: 00400000000000F0FH50B00A0000000
X-QQ-FEAT: L3nIu5GLLqKom63ythCRxZuB3EpotqaWLecse3AD6KM9x4gqtO4HwYxxAbHcP 11HlFnhyFQCZsw4PfH39hxbyj4W9nBCH5K8Tw5JT1WxtjdZWssBkNHujBMqeGebNnUUH4Kq 9vq6RuonWGv7NJiXQlgc9gZNleObAeZvxaBxT8EXgr/6SnlSQdlf5lM/Cj9j//JhFlK1ueg yyDOJGh4b0xn6fIQWaBPESnNC5RV3Cx/t36YX6ck58gxeda4o3UNs030E4BRQ/Vd8Oc6Smp OH8/wsbZIHANHTQ9BIA5R3Yt1L3DR/l9WC6P5Cw1b4iMBL
X-QQ-GoodBg: 2
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 11.3 \(3445.6.18\))
From: Di Ma <madi@zdns.cn>
In-Reply-To: <CAHw9_i+Y73rq=PakWYJTUFQj1xU6naauRTp3qP7gEqgSS2KQVg@mail.gmail.com>
Date: Fri, 27 Apr 2018 10:47:15 +0800
Cc: Chris Morrow <morrowc@ops-netman.net>, sidr-chairs@ietf.org, draft-ietf-sidr-slurm@ietf.org, The IESG <iesg@ietf.org>, sidr@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <38AC7D1E-1FDC-44BE-A664-6E08E0DD7F49@zdns.cn>
References: <152261657190.23824.4759371193986790926.idtracker@ietfa.amsl.com> <9958A258-44B0-4965-B1C9-5E76031198C2@zdns.cn> <CAHw9_i+Y73rq=PakWYJTUFQj1xU6naauRTp3qP7gEqgSS2KQVg@mail.gmail.com>
To: Warren Kumari <warren@kumari.net>
X-Mailer: Apple Mail (2.3445.6.18)
X-QQ-SENDSIZE: 520
Feedback-ID: bizesmtp:zdns.cn:qybgforeign:qybgforeign4
X-QQ-Bgrelay: 1
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidr/ar8IX7j9mEEBRuQBx-lWpphMygY>
Subject: Re: [sidr] Warren Kumari's Discuss on draft-ietf-sidr-slurm-07: (with DISCUSS and COMMENT)
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Apr 2018 02:47:29 -0000

Warren,

The version -08 of SLURM draft has just been submitted after we authors exchanged notes on JSON work in this document.

Among others, we have dropped slurmTarget.

Thanks again for your review and comments.

Di


> 在 2018年4月7日,23:37,Warren Kumari <warren@kumari.net> 写道:
> 
> 
> On Fri, Apr 6, 2018 at 10:02 AM Di Ma <madi@zdns.cn> wrote:
> Warren,
> 
> Thanks very much for your comments.
> 
> Please see my responses in lines.
> 
> > 在 2018年4月2日,05:02,Warren Kumari <warren@kumari.net> 写道:
> >
> > Warren Kumari has entered the following ballot position for
> > draft-ietf-sidr-slurm-07: Discuss
> >
> > When responding, please keep the subject line intact and reply to all
> > email addresses included in the To and CC lines. (Feel free to cut this
> > introductory paragraph, however.)
> >
> >
> > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
> > for more information about IESG DISCUSS and COMMENT positions.
> >
> >
> > The document, along with other ballot positions, can be found here:
> > https://datatracker.ietf.org/doc/draft-ietf-sidr-slurm/
> >
> >
> >
> > ----------------------------------------------------------------------
> > DISCUSS:
> > ----------------------------------------------------------------------
> >
> > I don't understand the targeting as it related to domain/host names (and
> > suspect that others will have the same issue).
> >
> >> From section 3.3:
> > "  If a "slurmTarget" element is
> >   present, an RP SHOULD verify that the target is an acceptable value,
> >   and reject this SLURM file if the "slurmTarget" element is not
> >   acceptable.... Accordingly, the SLURM file
> >   source needs to indicate which RP(s) should make use of the file by
> >   adding the domain name(s) of the RP(s) to the SLURM file target...
> >  Such a target value is a server name expressed in FQDN.
> >
> >   "slurmTarget": [
> >     {
> >       "hostname": "rpki.example.com",
> >       "comment": "This file is intended for RP server rpki.example.com"
> >     }
> > ]
> >
> > So, if I want to target multiple RPs (rpki1.example.com, rpki2.example.com) can
> > I do:
> >
> >   "slurmTarget": [
> >     {
> >       "hostname": "example.com",
> >       "comment": "This file is intended for RP server rpki.example.com"
> >     }
> > ]
> >
> > ?
> > The "domain names(s)" versus "hostname" vs "server name expressed in FQDN" text
> > is handwavey. I'm assuming that I'd need to do:
> >
> >   "slurmTarget": [
> >     {
> >       "hostname": "rpki1.example.com",
> >       "comment": "This file is intended for RP server rpki1.example.com"
> >     },
> > {
> >       "hostname": "rpki2.example.com",
> >       "comment": "This file is intended for the RP server, rpki2.example.com"
> >     },
> > ]"
> > Can you please make this clearer, and hopefully add more targets to the
> > examples? This seems like an easy fix / clarification, happy to clear once it
> > is, er, clear.
> >
> >
> 
> We authors have decided to drop the slurmTarget element completely.
> 
> 
> That works for me​.​
> 
> Please ​(explicitly and loudly!) ​let me know when the new version is ​submitted ​and I'll remove my discuss.
> 
> 
> ​W​
> 
> 
> Initially the implementation team was thinking that it would be useful to have the ability to offer the same set of SLURM files to all RPs deployed in a network, where local config of the RP would then evaluate the applicability of each file. However, now that both implementations (RIPE NCC Validator and RPSTIR) progressed we reconsider and we feel that it would be better to deal with this on the provisioning side. I.e. only offer the SLURM file(s) relevant to each RP.
> 
> 
> > ----------------------------------------------------------------------
> > COMMENT:
> > ----------------------------------------------------------------------
> >
> > I have a few questions and editorial comments:
> >
> > 1: Section Abstract:
> > ISPs can also be able to use the RPKI to validate the path of a BGP route.
> > I think you meant “ISPs can also use the RPKI..."
> 
> 
> ACK.
> 
> >
> > 2: Section 1.  Introduction
> > "However, an "RPKI relying party" (RP) may want to override some of the
> > information expressed via putative Trust Anchor(TA) and the certificates
> > downloaded from the RPKI repository system." I think this should be either "a
> > putative Trust Anchor (TA)" or "putative Trust Anchors (TA)" (single vs
> > plurals). I agree with others that "putative TA" is not a well known term -
> > perhaps you can find a better one?
> >
> 
> We will use ‘configured Trust Anchor(s)’ instead.
> 
> 
> > Section 3.4.1.  Validated ROA Prefix Filters
> > In the "prefixFilters examples", I think it would be helpful to update the
> > comments to be more explicit about what is being matched (e.g"All VRPs covered
> > by 198.51.100.0/24 and matching AS 64497")
> >
> >
> ACK.
> 
> And we will update JSON related content in this draft based on Adam’s suggestions.
> 
> Di
> 
> _______________________________________________
> sidr mailing list
> sidr@ietf.org
> https://www.ietf.org/mailman/listinfo/sidr