IETF Logo Mail Archive

Re: [sidr] [Editorial Errata Reported] RFC6487 (5187)

Nikolai Malykh <nmalykh@gmail.com> Tue, 28 November 2017 10:30 UTC

Return-Path: <nmalykh@gmail.com>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6BE3C126B6E for <sidr@ietfa.amsl.com>; Tue, 28 Nov 2017 02:30:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t9FpgClg4LBL for <sidr@ietfa.amsl.com>; Tue, 28 Nov 2017 02:30:20 -0800 (PST)
Received: from mail-qt0-x22a.google.com (mail-qt0-x22a.google.com [IPv6:2607:f8b0:400d:c0d::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41494124BE8 for <sidr@ietf.org>; Tue, 28 Nov 2017 02:30:20 -0800 (PST)
Received: by mail-qt0-x22a.google.com with SMTP id r37so34874086qtj.12 for <sidr@ietf.org>; Tue, 28 Nov 2017 02:30:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=XUGhUhqJFp4RqD7uEt6QzIO8WahlJPTWJodom7Wmg40=; b=leYLpS1k7GKR9bD2ChVva4qP7YVS8SFhxbUvm9fokLK+U70fq0O/owhjkbGfURJYPI xyWGbLALUGAM3nAi2AVcglPBr0GLo45Pm34DbmeGW05KT2z7Lsz9Lf+se+DB9JDMpKaO qT4JLW7sfO6yO5Z0e1O1RMnLne12k77lIwmqDir52I1y64NnH2NBu0nTtBb9G32tEEHF A37mvMs/ZEIcYcKfI/0ZdHCkJBMyUT/MgmXSp23fCzPidpUd3nrQ6ISfMGwXo2LEF+Os /jMPav/cfokJHeowuxMcQtql2v0UKZHhBHdswWhH0DbhBihcOozhm9yK9XOGaG9r+Xov 13hw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=XUGhUhqJFp4RqD7uEt6QzIO8WahlJPTWJodom7Wmg40=; b=Jgd2Ie+49rMyM8HAsTyoRX2+XAzNye747OD5DWfl8aSclKW8l324h7X1cDs6O8Em56 LTNNyN/6agr0l+WJW0zkYGTpA0ifI6xP0AAzFathXRmSZsS/Zm3HQ+Ywe9SFrMNGW0rK XFsXrMLHQX3Gygd+WJuB0G/mRXj1RNQmrQMuMMtATj7xqiQNLJEx4mAhKHYquDspEemk 50ff3AT7WtOq79uxNwZeQpdpnY+UjlNkLWm3cLD0+kkC1O9y5frRF5H++TKOvpYAKC+r 84o07oQBBv/Fybg5YQ+HSGihWwLw1bK78BMDvcEbxiTqwENTqFh8Lw9Pa0hgs13UIc/9 5CZA==
X-Gm-Message-State: AJaThX7sbykrNGWVf7ng6iDMiohmIp/TD8pnE2TolcaVarPsS+loQZ+2 Iiw5NDo+VNpVexvnWYAEcwxnBTyoaU6kuPyOEeU=
X-Google-Smtp-Source: AGs4zMazxDYddze9l6K/8qekrVNbFKLZZ3HKPWLLvb+IIMpYH28i0tHCHgsrkJB7UmQnLEWbsn1MPP0A/U2gsHnb8Pc=
X-Received: by 10.200.45.89 with SMTP id o25mr60180306qta.227.1511865019433; Tue, 28 Nov 2017 02:30:19 -0800 (PST)
MIME-Version: 1.0
Received: by 10.237.61.98 with HTTP; Tue, 28 Nov 2017 02:30:19 -0800 (PST)
In-Reply-To: <2D0550E2-5A6A-4C10-8B4A-74A1E88E1EC1@apnic.net>
References: <20171128090411.26C0DB80C87@rfc-editor.org> <2D0550E2-5A6A-4C10-8B4A-74A1E88E1EC1@apnic.net>
From: Nikolai Malykh <nmalykh@gmail.com>
Date: Tue, 28 Nov 2017 13:30:19 +0300
Message-ID: <CAEGXcODB3WtLNk3tQ52yUNDn2jVzxJYtQaCGhS_+tFmKEWHnZQ@mail.gmail.com>
To: Geoff Huston <gih@apnic.net>
Cc: RFC Errata System <rfc-editor@rfc-editor.org>, George Michaelson <ggm@apnic.net>, robertl@apnic.net, Alia Atlas <akatlas@gmail.com>, db3546@att.com, aretana.ietf@gmail.com, morrowc@ops-netman.net, sandy@tislabs.com, sidr@ietf.org
Content-Type: multipart/alternative; boundary="001a113e319a6e8739055f088183"
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidr/iU6GuJi5_Bx72UxqbChy3XM8qNk>
Subject: Re: [sidr] [Editorial Errata Reported] RFC6487 (5187)
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Nov 2017 10:30:22 -0000

May but not must.
What about certificate that contain IP address set only OR AS number set
only (not both)?

2017-11-28 13:01 GMT+03:00 Geoff Huston <gih@apnic.net>:

> Reject - in the context of resource certificates the resources may contain
> both IP addresses _AND_ AS numbers.
>
>
>
> > On 28 Nov 2017, at 8:04 pm, RFC Errata System <rfc-editor@rfc-editor.org>
> wrote:
> >
> > The following errata report has been submitted for RFC6487,
> > "A Profile for X.509 PKIX Resource Certificates".
> >
> > --------------------------------------
> > You may review the report below and at:
> > http://www.rfc-editor.org/errata/eid5187
> >
> > --------------------------------------
> > Type: Editorial
> > Reported by: Nikolai Malykh <nmalykh@gmail.com>
> >
> > Section: 7.1
> >
> > Original Text
> > -------------
> >      encompass
> >         Given two IP address and AS number sets, X and Y, X
> >         "encompasses" Y if, for every contiguous range of IP addresses
> >         or AS numbers elements in set Y, the range element is either
> >         "more specific" than or "equal" to a contiguous range element
> >         within the set X.
> >
> >
> > Corrected Text
> > --------------
> >      encompass
> >         Given two IP address or two AS number sets, X and Y, X
> >         "encompasses" Y if, for every contiguous range of IP addresses
> >         or AS numbers elements in set Y, the range element is either
> >         "more specific" than or "equal" to a contiguous range element
> >         within the set X.
> >
> >
> > Notes
> > -----
> >
> >
> > Instructions:
> > -------------
> > This erratum is currently posted as "Reported". If necessary, please
> > use "Reply All" to discuss whether it should be verified or
> > rejected. When a decision is reached, the verifying party
> > can log in to change the status and edit the report, if necessary.
> >
> > --------------------------------------
> > RFC6487 (draft-ietf-sidr-res-certs-22)
> > --------------------------------------
> > Title               : A Profile for X.509 PKIX Resource Certificates
> > Publication Date    : February 2012
> > Author(s)           : G. Huston, G. Michaelson, R. Loomans
> > Category            : PROPOSED STANDARD
> > Source              : Secure Inter-Domain Routing
> > Area                : Routing
> > Stream              : IETF
> > Verifying Party     : IESG
>
>

v2.23.0 | Report a Bug | By Email