Re: [Sidrops] WGLC: draft-ietf-sidrops-rtr-keying - ENDS: 10/31/2018 (halloscream!)

Sean Turner <sean@sn3rd.com> Thu, 01 November 2018 20:10 UTC

Return-Path: <sean@sn3rd.com>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BC9812777C for <sidrops@ietfa.amsl.com>; Thu, 1 Nov 2018 13:10:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e1c3EyJ2vVXg for <sidrops@ietfa.amsl.com>; Thu, 1 Nov 2018 13:10:50 -0700 (PDT)
Received: from mail-qk1-x731.google.com (mail-qk1-x731.google.com [IPv6:2607:f8b0:4864:20::731]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92972127598 for <sidrops@ietf.org>; Thu, 1 Nov 2018 13:10:48 -0700 (PDT)
Received: by mail-qk1-x731.google.com with SMTP id u68so9386429qkg.9 for <sidrops@ietf.org>; Thu, 01 Nov 2018 13:10:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=y5GB8l10MwfaWUfbrLT9bBaco4+yXm24MEra2zD4ca0=; b=UplK3jjCd6Gb3wpp5/5XhV1CWn5jltGxrWeBCaf8JOvX0Dth5935ksMUkcO9EAcumz eualoyOKeCCKa92k9VAxekq3vPyS3OIc8FwpHgN5ymIJoDySJ94lF2YMCqz/z+YXU4lF PwVwoJevWwk2RF1vcILbQDS2y7pR/Z9dGPldU=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=y5GB8l10MwfaWUfbrLT9bBaco4+yXm24MEra2zD4ca0=; b=D5lguZzTbnWLd+La9CETedLzFczNcxBwoQTaI1L+6JtjDF/lWW9ai6eJ2Lv+QqLWG3 fN80Ci5tVA7cp6FvRtncSOFRsHXgjSDqD0H2MWFzHubjJfwSqmtY7PJZMehkQvhIO+n7 28F8Xd0TN+hHACIii8kxPeR1H0rvxLo96vL3n9saLIJZdKP6dOjA+ANa7Bj6bULZQuJN d3uczkQfxaOgNIepxvHWuBHah3SwmbfsR+jjKfZXmRMT7B54bf2KWL+3MwrYOn1bdYBL wJ+UHvH9hN9NzF5MCGuNuZeOzWCxQVdN1WFC+Jirll6jn7b2mA14ap+DuCNhuTwv8IiM 46xQ==
X-Gm-Message-State: AGRZ1gLRyCTm0Z4aWEn/JWydfC47Gzf+QmmsntxMOOh/grK6GQRx9iFY VZGWRW8b2IIB+c6YMSwkiVRg1Q==
X-Google-Smtp-Source: AJdET5cI5uWWDkA5gJFjdg/G0Isqmr5WCDpql0Iif8LPmteVK0c10mYeIxxkAgQQ8Evbi1DomdgMQg==
X-Received: by 2002:a0c:b60a:: with SMTP id f10-v6mr8460723qve.7.1541103047689; Thu, 01 Nov 2018 13:10:47 -0700 (PDT)
Received: from [172.16.0.18] ([96.231.224.191]) by smtp.gmail.com with ESMTPSA id 42-v6sm28561582qtt.31.2018.11.01.13.10.46 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 01 Nov 2018 13:10:47 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
From: Sean Turner <sean@sn3rd.com>
In-Reply-To: <14FDEA26-B8B7-41A9-8E19-31B0A3A2E708@cisco.com>
Date: Thu, 01 Nov 2018 16:10:45 -0400
Cc: Randy Bush <randy@psg.com>, Christopher Morrow <christopher.morrow@gmail.com>, "sidrops-chairs@ietf.org" <sidrops-chairs@ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>, "sidrops-ads@ietf.org" <sidrops-ads@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <B1775DAE-CB5D-4BBB-B4EC-EACE277157C0@sn3rd.com>
References: <CAL9jLabKUqYDfqFgUoeDgespEWbnb1NFk61gz2Q5JLP-7L4NAg@mail.gmail.com> <CAL9jLaZB5g03R9eiHr-1AY0O9fu3n+TrqhV35P_Y4wCoCn_SDw@mail.gmail.com> <m2tvl1x9y5.wl-randy@psg.com> <14FDEA26-B8B7-41A9-8E19-31B0A3A2E708@cisco.com>
To: Roque Gagliano <rogaglia@cisco.com>
X-Mailer: Apple Mail (2.3445.9.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/C55KK6yUEXUQ4xhSQlw3eMLaovE>
Subject: Re: [Sidrops] WGLC: draft-ietf-sidrops-rtr-keying - ENDS: 10/31/2018 (halloscream!)
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Nov 2018 20:10:52 -0000


> On Nov 1, 2018, at 09:30, Roque Gagliano (rogaglia) <rogaglia@cisco.com> wrote:
> 
> Hi Randy/Chris,
> 
> I read the document and I found it well written. Probably Appendix B is the clearest part BTW. 
> 
> I am going to jump do give two cosmetic comments.
> 
> 1) Why using "rtr" in the document's name? This got me confused that the document was related to RFC6810.

Ah I see where that might be confusing for now, but rtr, which is router, goes away when it gets published ;)

> 2) Section 3: You are giving as an option to use RFC2585. I understand that we are only exchanging signed documents and there is no need for SFTP/TLS but this may jump in further reviews from people outside of this domain as "unsecured" because of its use for FTP/HTTP. 
> 
> Maybe we should add an obvious comment such as: "Each of these options have security considerations described in the referred documents.” 

While the security considerations do not explicitly call out 2585, there is this bit and we are kind of hoping that it covers a wide variety of sins:

   This document defines no protocols so in some sense introduces no new
   security considerations.  However, it relies on many others and the
   security considerations in the referenced documents should be
   consulted; ...

spt

> Regards,
> Roque
> 
> 
> — 
> 
> On 01/11/18 13:24, "Sidrops on behalf of Randy Bush" <sidrops-bounces@ietf.org on behalf of randy@psg.com> wrote:
> 
>> This didn't get any comments, so ... does that mean move forward? (which
>> seems reasonable to me after a bunch of discussion in SIDR and revisions
>> and comments there)
> 
>    this is sidr[ops].  why don't we sit on it for a few years?
> 
>    _______________________________________________
>    Sidrops mailing list
>    Sidrops@ietf.org
>    https://www.ietf.org/mailman/listinfo/sidrops
> 
> 
> _______________________________________________
> Sidrops mailing list
> Sidrops@ietf.org
> https://www.ietf.org/mailman/listinfo/sidrops