Re: [Sidrops] I-D Action: draft-ietf-sidrops-rpki-rsc-07.txt

Russ Housley <housley@vigilsec.com> Thu, 19 May 2022 17:40 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FB04C1D5AD3 for <sidrops@ietfa.amsl.com>; Thu, 19 May 2022 10:40:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1vSlBsRKFuJj for <sidrops@ietfa.amsl.com>; Thu, 19 May 2022 10:40:05 -0700 (PDT)
Received: from mail3.g24.pair.com (mail3.g24.pair.com [66.39.134.11]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 512C7C1D5AD0 for <sidrops@ietf.org>; Thu, 19 May 2022 10:40:05 -0700 (PDT)
Received: from mail3.g24.pair.com (localhost [127.0.0.1]) by mail3.g24.pair.com (Postfix) with ESMTP id 30923178689; Thu, 19 May 2022 13:40:04 -0400 (EDT)
Received: from [10.0.1.2] (pfs.iad.rg.net [198.180.150.6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail3.g24.pair.com (Postfix) with ESMTPSA id 1E9D4178438; Thu, 19 May 2022 13:40:04 -0400 (EDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.21\))
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <YoZ/bsYUeHpCW3Mc@snel>
Date: Thu, 19 May 2022 13:40:03 -0400
Cc: sidrops@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <D55CE24C-36E2-4976-84BB-BDB19E0E2CC2@vigilsec.com>
References: <165298105049.28270.14685971986743868185@ietfa.amsl.com> <YoZ/bsYUeHpCW3Mc@snel>
To: Job Snijders <job=40fastly.com@dmarc.ietf.org>
X-Mailer: Apple Mail (2.3445.104.21)
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/3irKc7Ky_Ni0nlO1GHbd03bIMKw>
Subject: Re: [Sidrops] I-D Action: draft-ietf-sidrops-rpki-rsc-07.txt
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 May 2022 17:40:09 -0000

Job:

I understand that inheritance is purposfully being removed.  No concerns there.

However, RFC 779 says:

   IPAddressFamily     ::= SEQUENCE {    -- AFI & optional SAFI --
      addressFamily        OCTET STRING (SIZE (2..3)),
      ipAddressChoice      IPAddressChoice }

Why is the addressFamily in this document limited to two octets?

Russ


> On May 19, 2022, at 1:33 PM, Job Snijders <job=40fastly.com@dmarc.ietf.org> wrote:
> 
> Dear all,
> 
> Based on feedback from RPKI Cache Validator implementers the wire format
> was adjusted Surely For Last Time! [tm] :-)
> 
> The new RSC ASN.1 module permits the use of existing RFC 3779
> encoders/decoders, with two major constraints: inheritance is not
> permitted, and RDI is not a thing. This update enables implementers to
> use commonly deployed high-level API functions, or generate code from
> the ASN.1 module which will impose the desired constraints.
> 
> @ Chairs - I think the ball now is back in your court? :-)
> 
> Kind regards,
> 
> Job
> 
> On Thu, May 19, 2022 at 10:24:10AM -0700, internet-drafts@ietf.org wrote:
>> 
>> A New Internet-Draft is available from the on-line Internet-Drafts directories.
>> This draft is a work item of the SIDR Operations WG of the IETF.
>> 
>>        Title           : A profile for Resource Public Key Infrastructure (RPKI) Signed Checklists (RSC)
>>        Authors         : Job Snijders
>>                          Tom Harrison
>>                          Ben Maddison
>> 	Filename        : draft-ietf-sidrops-rpki-rsc-07.txt
>> 	Pages           : 16
>> 	Date            : 2022-05-19
>> 
>> Abstract:
>>   This document defines a Cryptographic Message Syntax (CMS) profile
>>   for a general purpose listing of checksums (a 'checklist'), for use
>>   with the Resource Public Key Infrastructure (RPKI).  The objective is
>>   to allow an attestation, in the form of a listing of one or more
>>   checksums of arbitrary digital objects (files), to be signed "with
>>   resources", and for validation to provide a means to confirm a
>>   specific Internet Resource Holder produced the Signed Checklist.  The
>>   profile is intended to provide for the signing of an arbitrary
>>   checksum listing with a specific set of Internet Number Resources.
>> 
>> 
>> 
>> The IETF datatracker status page for this draft is:
>> https://datatracker.ietf.org/doc/draft-ietf-sidrops-rpki-rsc/
>> 
>> There is also an HTML version available at:
>> https://www.ietf.org/archive/id/draft-ietf-sidrops-rpki-rsc-07.html
>> 
>> A diff from the previous version is available at:
>> https://www.ietf.org/rfcdiff?url2=draft-ietf-sidrops-rpki-rsc-07
>> 
>> 
>> Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts
>> 
>> 
>> _______________________________________________
>> Sidrops mailing list
>> Sidrops@ietf.org
>> https://www.ietf.org/mailman/listinfo/sidrops
> 
> _______________________________________________
> Sidrops mailing list
> Sidrops@ietf.org
> https://www.ietf.org/mailman/listinfo/sidrops