Re: [sipcore] New Version Notification for draft-winterbottom-sipcore-locparam-02.txt

"Olle E. Johansson" <oej@edvina.net> Thu, 26 October 2017 13:14 UTC

Return-Path: <oej@edvina.net>
X-Original-To: sipcore@ietfa.amsl.com
Delivered-To: sipcore@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6598413F588 for <sipcore@ietfa.amsl.com>; Thu, 26 Oct 2017 06:14:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KrLkIuV-GBW2 for <sipcore@ietfa.amsl.com>; Thu, 26 Oct 2017 06:14:05 -0700 (PDT)
Received: from smtp7.webway.se (smtp7.webway.se [212.3.14.205]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 75EA913F589 for <sipcore@ietf.org>; Thu, 26 Oct 2017 06:14:05 -0700 (PDT)
Received: from [192.168.40.79] (h-205-12.A165.corp.bahnhof.se [176.10.205.12]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp7.webway.se (Postfix) with ESMTPSA id DC64F3205; Thu, 26 Oct 2017 15:14:02 +0200 (CEST)
From: "Olle E. Johansson" <oej@edvina.net>
Message-Id: <DFB35273-B79C-4C49-A6E2-880281F870FD@edvina.net>
Content-Type: multipart/alternative; boundary="Apple-Mail=_E9181AD2-DF0C-4C97-A152-691A99958FE3"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Date: Thu, 26 Oct 2017 15:14:02 +0200
In-Reply-To: <728862D5-566F-4A2F-80E6-99F623046F36@edvina.net>
Cc: Olle E Johansson <oej@edvina.net>, bruno.chatras@orange.com, "Jesske, Roland" <R.Jesske@telekom.de>
To: Brian Rosen <br@brianrosen.net>, "sipcore@ietf.org" <sipcore@ietf.org>
References: <150838463846.18684.496033948454208375.idtracker@ietfa.amsl.com> <LEXPR01MB04947E3E8BCB0A5594DC7B13F9470@LEXPR01MB0494.DEUPRD01.PROD.OUTLOOK.DE> <29299_1509013511_59F1B807_29299_392_1_88CAD1D4E8773F42858B58CAA28272A02AF91BFE@OPEXCLILM23.corporate.adroot.infra.ftgroup> <0FA1051A-D2A5-4273-8AF3-B1C9E6543361@brianrosen.net> <728862D5-566F-4A2F-80E6-99F623046F36@edvina.net>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/sipcore/B8bYFU-2Q2IzxzaPRK4WWsY7akA>
Subject: Re: [sipcore] New Version Notification for draft-winterbottom-sipcore-locparam-02.txt
X-BeenThere: sipcore@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: SIP Core Working Group <sipcore.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sipcore>, <mailto:sipcore-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sipcore/>
List-Post: <mailto:sipcore@ietf.org>
List-Help: <mailto:sipcore-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sipcore>, <mailto:sipcore-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Oct 2017 13:14:07 -0000

Went back to the RFC you are updating. The security considerations there are very much out of date with
current IETF practise in my opinion. If you update 6442, the security section would benefit from an update.

Referring to S/MIME (not really implemented much) and SIPS: (which is totally out-of-date) is not acceptable
any more. 

/O

> On 26 Oct 2017, at 15:09, Olle E. Johansson <oej@edvina.net> wrote:
> 
> Some quick comments to version -02:
> 
> in section 4, you refer to “other-loc-src” as a token. That’s not clearly specified. WIll there be a registry for “tokens”?
> I am afraid that this is an opening for private tokens that hinders interoperability.
> 
> In “Privacy considerations” - should you not discuss what happens with my privacy if an entity in the network,
> but not my phone, adds a location?
> 
> In “security considerations” there’s a discussion about a “trusted network” - but that is not defined. What is
> a trusted network? There’s no mention on how to apply trust, privacy, confidentiality.
> 
> There is a typo as well: "when passed to an other domain.”  
> s/an other/another/
> 
> Cheers,
> /O
> _______________________________________________
> sipcore mailing list
> sipcore@ietf.org
> https://www.ietf.org/mailman/listinfo/sipcore