[lamps] Paul Wouters' Yes on draft-ietf-lamps-lightweight-cmp-profile-16: (with COMMENT)

Paul Wouters via Datatracker <noreply@ietf.org> Thu, 01 December 2022 14:43 UTC

Return-Path: <noreply@ietf.org>
X-Original-To: spasm@ietf.org
Delivered-To: spasm@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 237E8C14F718; Thu, 1 Dec 2022 06:43:40 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Paul Wouters via Datatracker <noreply@ietf.org>
To: The IESG <iesg@ietf.org>
Cc: draft-ietf-lamps-lightweight-cmp-profile@ietf.org, lamps-chairs@ietf.org, spasm@ietf.org, housley@vigilsec.com, housley@vigilsec.com
X-Test-IDTracker: no
X-IETF-IDTracker: 9.1.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: Paul Wouters <paul.wouters@aiven.io>
Message-ID: <166990582013.51656.10666210150824120190@ietfa.amsl.com>
Date: Thu, 01 Dec 2022 06:43:40 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/NShSbvhP8E6p8N1Z6rhHqUfb2iA>
Subject: [lamps] Paul Wouters' Yes on draft-ietf-lamps-lightweight-cmp-profile-16: (with COMMENT)
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.39
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Dec 2022 14:43:40 -0000

Paul Wouters has entered the following ballot position for
draft-ietf-lamps-lightweight-cmp-profile-16: Yes

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-lamps-lightweight-cmp-profile/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks for this document. It is clear even though it is a tad long :-)
Some minor comments:

   Though CMP is a capable protocol it is so far not used very widely.
   The most important reason appears to be that the protocol offers a
   too large set of features and options.

I would say [citation needed] here...

In section 6:
        HTTP SHOULD be used and CoAP MAY be used

        File-based transfer MAY be used in case offline transfer is required.

I find these different levels of usage odd. Clearly devices have no real choice
here. If they can support HTTP, there is no need for CoAP. If they cannot do
HTTP and therefor can only do CoAP, there is no choice either. If they are
offline, clearly they cannot use anything but file based transfer. I would set
all of these to MAY ?

In section 6.1:

        the recommendations provided in [I-D.ietf-uta-rfc7525bis] SHOULD be
        considered.

"considered" is already a watered down version of "followed". So either use
MUST be considered or "SHOULD be followed" and not "SHOULD be considered"