[lamps] Mohamed Boucadair's No Objection on draft-ietf-lamps-rfc5273bis-08: (with COMMENT)

[Mohamed Boucadair via Datatracker <[e-mail]>]

Mohamed Boucadair has entered the following ballot position for
draft-ietf-lamps-rfc5273bis-08: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-lamps-rfc5273bis/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Hi Joseph and Sean,

Thank you for the effort put into this bis.

I only reviewed the diff between this draft and RFC 5273.

Please find some comments below:

# On the TCP port number

The draft says:
   CMC requires a registered port number to send and receive CMC
   messages over TCP.  The Service Name is "pkix-cmc".  The value of
   this TCP port is 5318.

While RFC5273 says
   The ports in the range of 1-49151
   SHOULD NOT be used.  The port to be used is configured out of band.

I appreciate that the new text is inherited from rfc6402#section-3, but I think
some changes are needed here:

(1) “requires” in the new text suggests that using other port number would
break the protocol. Maybe s/requires/uses

(2) I’m not sure how the SHOULD NOT in 5273 was handled by existing
implementations (e.g., allow to configure a part in that range) or if this was
left to operators. Can we please have an operational considerations section
that discusses this?

That section can also discuss whether support of alternative ports is still an
option + how the selection among the various option is done in practice. Few
sentences would suffice to clarify these. Thanks.

# Use the correct registry name + add an action to update it to refer to this
document:

OLD:
   IANA has assigned a TCP port number in the Registered Port Number
   range for the use of CMC.

NEW:
   IANA has assigned a TCP port number in the “Service Name and Transport
   Protocol Port Number” registry for the use of CMC. The registration should
   be update to:

# Please move [erratum3593] to be listed as informative.

Cheers
Med