Re: [Taps] Éric Vyncke's No Objection on draft-ietf-taps-transport-security-11: (with COMMENT)

Benjamin Kaduk <kaduk@mit.edu> Sat, 25 April 2020 21:26 UTC

Return-Path: <kaduk@mit.edu>
X-Original-To: taps@ietfa.amsl.com
Delivered-To: taps@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3ADE73A099C; Sat, 25 Apr 2020 14:26:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nb7pyMxSNW_q; Sat, 25 Apr 2020 14:26:47 -0700 (PDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B9E23A099B; Sat, 25 Apr 2020 14:26:47 -0700 (PDT)
Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 03PLQaYP029720 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 25 Apr 2020 17:26:38 -0400
Date: Sat, 25 Apr 2020 14:26:36 -0700
From: Benjamin Kaduk <kaduk@mit.edu>
To: Tommy Pauly <tpauly=40apple.com@dmarc.ietf.org>
Cc: Éric Vyncke <evyncke@cisco.com>, Philipp Tiesel <philipp@tiesel.net>, taps-chairs@ietf.org, caw@heapingbits.net, draft-ietf-taps-transport-security@ietf.org, The IESG <iesg@ietf.org>, taps@ietf.org
Message-ID: <20200425212636.GL27494@kduck.mit.edu>
References: <158644309093.3622.11128003590990110741@ietfa.amsl.com> <6EB77D3C-E0B2-45C2-A8B5-B7F31EDBC722@apple.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <6EB77D3C-E0B2-45C2-A8B5-B7F31EDBC722@apple.com>
User-Agent: Mutt/1.12.1 (2019-06-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/taps/m5vT-0eis5EHqvPiQv00T2VhXoU>
Subject: Re: [Taps] Éric Vyncke's No Objection on draft-ietf-taps-transport-security-11: (with COMMENT)
X-BeenThere: taps@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IETF Transport Services \(TAPS\) Working Group" <taps.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/taps>, <mailto:taps-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/taps/>
List-Post: <mailto:taps@ietf.org>
List-Help: <mailto:taps-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/taps>, <mailto:taps-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 25 Apr 2020 21:26:49 -0000

On Wed, Apr 22, 2020 at 10:28:18AM -0700, Tommy Pauly wrote:
> Hi Eric,
> 
> Thanks for the review! You can find an updated version of the document here:
> 
> https://ietf-tapswg.github.io/draft-ietf-taps-transport-security/draft-ietf-taps-transport-security.html <https://ietf-tapswg.github.io/draft-ietf-taps-transport-security/draft-ietf-taps-transport-security.html>
> 
> Responses to your specific points inline.
> 
> > On Apr 9, 2020, at 7:38 AM, Éric Vyncke via Datatracker <noreply@ietf.org> wrote:
> > 
> > -- Section 1 --
> > Is there any reason why the integrity property of IPsec AH is not mentioned ?
> > Same also applies in section 2 when "security protocol" is defined.
> 
> Added a note that AH provides integrity.

I note that per
https://mailarchive.ietf.org/arch/msg/ipsec/ykyUCKWzn9i0jBgHKhIVApJPLJk/ we
may not want to be adding new mention of AH.

-Ben