[trill] Stephen Farrell's No Objection on draft-ietf-trill-channel-tunnel-10: (with COMMENT)
"Stephen Farrell" <stephen.farrell@cs.tcd.ie> Wed, 06 July 2016 15:37 UTC
Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: trill@ietf.org
Delivered-To: trill@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 405F012D1AD; Wed, 6 Jul 2016 08:37:30 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
To: The IESG <iesg@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 6.25.1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20160706153730.26828.14541.idtracker@ietfa.amsl.com>
Date: Wed, 06 Jul 2016 08:37:30 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/trill/IEtg9nLIgjsDk9MaceaE96xmSjQ>
Cc: draft-ietf-trill-channel-tunnel@ietf.org, trill-chairs@ietf.org, shares@ndzh.com, trill@ietf.org
Subject: [trill] Stephen Farrell's No Objection on draft-ietf-trill-channel-tunnel-10: (with COMMENT)
X-BeenThere: trill@ietf.org
X-Mailman-Version: 2.1.17
List-Id: "Developing a hybrid router/bridge." <trill.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trill>, <mailto:trill-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/trill/>
List-Post: <mailto:trill@ietf.org>
List-Help: <mailto:trill-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trill>, <mailto:trill-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Jul 2016 15:37:30 -0000
Stephen Farrell has entered the following ballot position for draft-ietf-trill-channel-tunnel-10: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-trill-channel-tunnel/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- - The write up for this and the other trill docs on this telechat talks about "directory services" but that's not mentioned in any of the drafts. Pointers to RFC7067 would probably have saved me a few minutes:-) - That RFC5869 is not in the downref registry is odd. I'd say we should just add it there. It's true though that I think this seems to be the first stds track doc with it as normative [1] but I figure it's safe to add with no new LC stuff. [1] http://www.arkko.com/tools/allstats/citations-rfc5869.html (Apologies that there's no TLS for [1] :-) - 4.3: Can the verifier deterministically tell from the context that the keyid here refers to the derived key as defined in 4.1 and not to (what I guess is) a "bare" key as per RFC5310? Do you need to say that? - 4.4 or section 7: Do we know that there are no issues with DTLS packets exceeding the MTU but where implementations won't work, perhaps with a cert chain. DTLS does support that, but do implementations that are likely to be used here? If not, maybe a warning is needed. Or, do you need to warn against cert based ciphersuites on the basis that nobody knows what to put in certs for trill? Given that you are (wisely) punting on group communication, maybe you could also say that only PSK ciphersuites are to be used here for now, and then also address cert based ciphersuites when you get around to figuring out group keying? - section 7, 3rd para: I do worry a bit about that, but you've called out the risk I guess. If it were possible to add more guidance as to how to defend in depth that'd be good I guess.
- Re: [trill] Stephen Farrell's No Objection on dra… Stephen Farrell
- Re: [trill] Stephen Farrell's No Objection on dra… Donald Eastlake
- [trill] Stephen Farrell's No Objection on draft-i… Stephen Farrell
- Re: [trill] Stephen Farrell's No Objection on dra… Donald Eastlake