Re: [stir] Questions about stir-certificates

Paul Kyzivat <pkyzivat@alum.mit.edu> Tue, 31 October 2017 14:44 UTC

Return-Path: <pkyzivat@alum.mit.edu>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2939813F5CB for <stir@ietfa.amsl.com>; Tue, 31 Oct 2017 07:44:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GgRi_R0iGCsI for <stir@ietfa.amsl.com>; Tue, 31 Oct 2017 07:44:51 -0700 (PDT)
Received: from alum-mailsec-scanner-1.mit.edu (alum-mailsec-scanner-1.mit.edu [18.7.68.12]) by ietfa.amsl.com (Postfix) with ESMTP id 9024E13F4FF for <stir@ietf.org>; Tue, 31 Oct 2017 07:44:51 -0700 (PDT)
X-AuditID: 1207440c-7e5ff7000000143e-b4-59f88c5ed5a7
Received: from outgoing-alum.mit.edu (OUTGOING-ALUM.MIT.EDU [18.7.68.33]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by alum-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id 0E.E5.05182.F5C88F95; Tue, 31 Oct 2017 10:44:47 -0400 (EDT)
Received: from PaulKyzivatsMBP.localdomain (c-24-62-227-142.hsd1.ma.comcast.net [24.62.227.142]) (authenticated bits=0) (User authenticated as pkyzivat@ALUM.MIT.EDU) by outgoing-alum.mit.edu (8.13.8/8.12.4) with ESMTP id v9VEij3E007356 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT) for <stir@ietf.org>; Tue, 31 Oct 2017 10:44:46 -0400
To: stir@ietf.org
References: <D60E0087.1EEE44%jon.peterson@neustar.biz> <CABkgnnV41djmwJ2A8WkLv1Qu_zxAKPb8EJnuoFS1Zeog3momyQ@mail.gmail.com> <E4972898-9912-456F-92E5-1A6022B26A85@sn3rd.com> <CABkgnnUNmwT_-atKHzOATOJ4SPhsC1+Gy0Q_6XLtGo7owgE-kQ@mail.gmail.com>
From: Paul Kyzivat <pkyzivat@alum.mit.edu>
Message-ID: <37424273-bd3a-a2d8-856c-44ce58be720f@alum.mit.edu>
Date: Tue, 31 Oct 2017 10:44:45 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:52.0) Gecko/20100101 Thunderbird/52.4.0
MIME-Version: 1.0
In-Reply-To: <CABkgnnUNmwT_-atKHzOATOJ4SPhsC1+Gy0Q_6XLtGo7owgE-kQ@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrKIsWRmVeSWpSXmKPExsUixO6iqJvQ8yPSYN8zXovla7cxOTB6LFny kymAMYrLJiU1J7MstUjfLoEr4+WSQ0wFlwQrvn45y9bAeJS3i5GTQ0LARGJt+1m2LkYuDiGB HUwS83Zfg3K+Mkl8XfyAFaRKWMBU4saZNWwgtoiAoMS9GaeZIIq+M0rs6JjIDJJgE9CSmHPo PwuIzStgL9Hx4zZ7FyMHB4uAqsS5+Y4gYVGBNIk7Mx4yQZQISpyc+QSsnFMgUOLA15tgu5gF zCTmbX7IDGGLS9x6Mp8JwpaXaN46m3kCI/8sJO2zkLTMQtIyC0nLAkaWVYxyiTmlubq5iZk5 xanJusXJiXl5qUW6hnq5mSV6qSmlmxghYcmzg/HbOplDjAIcjEo8vDMSv0cKsSaWFVfmHmKU 5GBSEuXd6QgU4kvKT6nMSCzOiC8qzUktPsQowcGsJMLLXvojUog3JbGyKrUoHyYlzcGiJM6r ukTdT0ggPbEkNTs1tSC1CCYrw8GhJMEb2A3UKFiUmp5akZaZU4KQZuLgBBnOAzS8G6SGt7gg Mbc4Mx0if4rRmKOn58YfJo5nM183MAux5OXnpUqJ814DKRUAKc0ozYObBkstrxjFgZ4T5i0A qeIBpiW4ea+AVjEBrfKSAFtVkoiQkmpgVDt2yWrCplvMVo8+6e9KmH3iTEXsly9VdbPu2177 WMi7dcEqjX0MP+c47Io/baTF5suc9VNVdMen1LpWf9+7MZLZD17XT78u+PmevuyECK7G045u THwn/sceWbg391aRwOfGkFKLRdlHZqtl8OQLnL77v/RYk2BETsVHxcY2wfk3k3QlHHOUlFiK MxINtZiLihMBbuD6bwgDAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/yiKmolWrOz7jmtSdWVmF8vgexQ8>
Subject: Re: [stir] Questions about stir-certificates
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Oct 2017 14:44:53 -0000

On 10/30/17 11:51 PM, Martin Thomson wrote:

>> A couple of things:
>>
>> 1. The count text has not been updated since we added “*" and “#” and I’m thinking that count was only supposed to apply to the parts of the TN that are not related to the “*" and “#”.
>>
>> 2. To answer your question: yes it’s the number plus the next 9 and overflows should be prohibited.
>>
>> How about the following for #2 in s9:
>>
>>   2.  Telephone numbers can be listed in a range (in the
>>        TelephoneNumberRange format), which consists of a starting
>>         telephone number and then an integer count of numbers within the
>>         range, where the valid boundaries of ranges may vary according to
>>         national policies.  count has the following constraints: overflow into
>>         more digits isn’t permitted, e.g., “123” + 100 is not allowed; count
>>         only applies to the telephone number and not to digits associated
>>         with “*” or “#”.
>>
>> In the above I am not sure the words a quite right.
> 
> Does "not to digits associated with “*” or “#”" mean?
> 
> a. a count can't be used with a number that includes either "*" or "#"
> b. a count applies to the numerical value preceding any "*" or "#"
> b. a count applies to the numerical value after the final "*" or "#",
> if any are present
> c. something else
> 
> (a) seems right to me.  I can see a case for describing a range of
> extensions, but it probably makes sense to disavow that use case and
> have the bare number asserted on its own.  Thus, I would say:
> 
>> national policies.  A count is added to the numeric value of the telephone number.  A count cannot cause the telephone number to increase in length, thus "123" + 100 is not valid.  A number that includes "*" or "#" cannot be included in TelephoneNumberRange.
> 
> That suggests a different grammar might be useful, so maybe you really
> do mean b.

+1 to a different grammar, restricting the start for a range to just a 
numeric string, or whatever is intended. And then an explicit generation 
rule for the additional numbers in the range.

What is supposed to be done for variable length numbering schemes?

	Thanks,
	Paul