IETF Logo Mail Archive

Re: [Sidrops] AD Review of: draft-ietf-sidrops-rfc6482bis - "A Profile for Route Origin Authorizations (ROAs)"

Martin Hoffmann <martin@nlnetlabs.nl> Thu, 21 September 2023 13:40 UTC

Return-Path: <martin@nlnetlabs.nl>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB1C1C14CF17; Thu, 21 Sep 2023 06:40:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.108
X-Spam-Level:
X-Spam-Status: No, score=-7.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=nlnetlabs.nl
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tZSvnoNx4EAS; Thu, 21 Sep 2023 06:40:04 -0700 (PDT)
Received: from outbound.soverin.net (outbound.soverin.net [IPv6:2a10:de80:1:4091:b9e9:2212:0:1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0FBFDC151522; Thu, 21 Sep 2023 06:40:03 -0700 (PDT)
Received: from smtp.soverin.net (c04cst-smtp-sov02.int.sover.in [10.10.4.100]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by outbound.soverin.net (Postfix) with ESMTPS id 4RrxNJ6jyqz1g; Thu, 21 Sep 2023 13:40:00 +0000 (UTC)
Received: from smtp.soverin.net (smtp.soverin.net [10.10.4.100]) by soverin.net (Postfix) with ESMTPSA id 4RrxNJ47tfzCw; Thu, 21 Sep 2023 13:40:00 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nlnetlabs.nl; s=soverin; t=1695303600; bh=WbDTYl6AJq+7kFrTvpemSeq74oHQxvrf3NhrN5+iHSA=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=g5vn2YJ1E7nN2hU/pSLw9N5p6svvjX38Dx0Ir+mxcPdGSXDEufuQojfL94EYQ+VWC OAIBMSHB3HMNRGAHRe/i/Vfcv9mUNLn3MEPdMUP/mHsCvUFatWToy2y6YYVR/VpxSV myXE2PV7BFhgWWWWduPkpOvztM9L3ItBtH15m/cgxquMzXagIB+4GC9jiUqqhd0sTz jdKP6uTJDPwtve6cjMoWqSj7RTnkAQSgc32bKt9JJ9djJIIlecvcEUFOCd7HrW1t7a 2rPh2xkPHSof162EYZu34TRSx26+yU0gpzWZRq8HUmbHOWk94fkQd9122RdU/AGwMl XusbN2QEYtJSg==
Date: Thu, 21 Sep 2023 15:40:00 +0200
X-Soverin-Authenticated: true
From: Martin Hoffmann <martin@nlnetlabs.nl>
To: Job Snijders <job=40fastly.com@dmarc.ietf.org>
Cc: Warren Kumari <warren@kumari.net>, SIDR Operations WG <sidrops@ietf.org>, draft-ietf-sidrops-rfc6482bis@ietf.org
Message-ID: <20230921154000.52e6edd6@glaurung.nlnetlabs.nl>
In-Reply-To: <ZQr5X9B3VdoZVsdf@snel>
References: <CAHw9_iKi5FLrrPW2GX0SJLgWq2g802r0JcsFsbgeYnYxfOigVg@mail.gmail.com> <CAMFGGcALstVA=04kZqoVAZanAKDa0rke=QYOyv2LNsWevLWgqg@mail.gmail.com> <CAHw9_iJJwx3R9AiBcmnST7qtdmSM_WMAtVur2RXH=dsZkFscOg@mail.gmail.com> <ZQrNn4mgpA9vJijj@snel> <20230920131316.080d60b0@glaurung.nlnetlabs.nl> <ZQr5X9B3VdoZVsdf@snel>
Organization: NLnet Labs
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/vhNFNWbAojjJZI7ifdzvbathwzc>
Subject: Re: [Sidrops] AD Review of: draft-ietf-sidrops-rfc6482bis - "A Profile for Route Origin Authorizations (ROAs)"
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Sep 2023 13:40:09 -0000

Job Snijders wrote:
> On Wed, Sep 20, 2023 at 01:13:16PM +0200, Martin Hoffmann wrote:
> > 
> > I think it still needs to be specified in the validation section
> > (because that section claims to exhaustively list all condition for
> > a valid ROA) that if any of the requirements given in the Content
> > Type section is not met, validation fails.
> > 
> > This is not obvious to someone with a background in IETF protocols,
> > who would rather be inclined to salvage what’s usable.  
> 
> Did you mean the sentence should be at the bottom of the validation
> section?

Not quite. I think there should be a separate bullet point a la

|  o  The ROA content fully conforms with all requirements laid out in
|     section 4.


  -- Martin

v2.20.3 | Report a Bug | By Email