Re: [lamps] Lars Eggert's No Objection on draft-ietf-lamps-crmf-update-algs-05: (with COMMENT)

Russ Housley <housley@vigilsec.com> Tue, 06 April 2021 13:54 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BF823A21DC for <spasm@ietfa.amsl.com>; Tue, 6 Apr 2021 06:54:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UX2hj3sYKx1c for <spasm@ietfa.amsl.com>; Tue, 6 Apr 2021 06:54:38 -0700 (PDT)
Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 293DB3A2218 for <spasm@ietf.org>; Tue, 6 Apr 2021 06:54:32 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 650B9300BD7 for <spasm@ietf.org>; Tue, 6 Apr 2021 09:54:29 -0400 (EDT)
X-Virus-Scanned: amavisd-new at mail.smeinc.net
Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id JQqI5CFxuBga for <spasm@ietf.org>; Tue, 6 Apr 2021 09:54:26 -0400 (EDT)
Received: from [192.168.1.161] (pool-141-156-161-153.washdc.fios.verizon.net [141.156.161.153]) by mail.smeinc.net (Postfix) with ESMTPSA id 5BD58300232; Tue, 6 Apr 2021 09:54:26 -0400 (EDT)
From: Russ Housley <housley@vigilsec.com>
Message-Id: <F4598ED6-65B3-465C-BB1C-3F4BC44C072F@vigilsec.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_1110CB8F-9C32-4D1D-AC97-B95F0925217A"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\))
Date: Tue, 06 Apr 2021 09:54:26 -0400
In-Reply-To: <161770809358.25800.14888091389424761697@ietfa.amsl.com>
Cc: IESG <iesg@ietf.org>, LAMPS <spasm@ietf.org>, Tim Hollebeek <tim.hollebeek@digicert.com>
To: Lars Eggert <lars@eggert.org>
References: <161770809358.25800.14888091389424761697@ietfa.amsl.com>
X-Mailer: Apple Mail (2.3445.104.17)
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/W8Gc3BSw543WIaV9qSaC5_FgPOE>
Subject: Re: [lamps] Lars Eggert's No Objection on draft-ietf-lamps-crmf-update-algs-05: (with COMMENT)
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Apr 2021 13:54:42 -0000

Lars:

> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
> 
> "Copyright Notice", paragraph 1, comment:
> 
> Shouldn't this document use the pre5378Trust200902 boilerplate, since it quotes
> from RFC4211? Or have the authors of RFC4211 given copyright to the Trust?

I was thinking about the NEW text when I chose the boilerplate, but the author of RFC 4211 is not able to give the needed consent, so it it probably safest to changes the boilerplate.

> -------------------------------------------------------------------------------
> All comments below are very minor change suggestions that you may choose to
> incorporate in some way (or ignore), as you see fit. There is no need to let me
> know what you did with these suggestions.
> 
> Section 1, paragraph 3, nit:
> -    *  HMAC-SHA1 [HMAC][SHS] is not boken yet, but there are much
> +    *  HMAC-SHA1 [HMAC][SHS] is not broken yet, but there are much
> +                                     +

Yes, Francesca pointed out this typo.  It has been corrected in my edit buffer.

> The following URLs in the document failed to return content:
> * http://www.ietf.org/internet-drafts/draft-ietf-lamps-cms-aes-gmac-alg-02.txt <http://www.ietf.org/internet-drafts/draft-ietf-lamps-cms-aes-gmac-alg-02.txt>

I newer version is available.  See:
https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-aes-gmac-alg/ <https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-aes-gmac-alg/>

Russ