[sidr] Request for adoption as a WG itm

2009-10-29 Thread Terry Manderson
Chairs, The authors of draft-manderson-sidr-usecases-01.txt would like to request that this ID be adopted as a WG item. We acknowledge that there is a lot of work yet to be done on this document however we believe that the areas to be completed should come at the direction of the work group based

Re: [sidr] Request for WGLC

2009-10-29 Thread John G. Scudder
Ross, On Oct 29, 2009, at 12:50 AM, Ross Callon wrote: ... Thus I don't think that it is true that "an Informative document, strictly speaking, can't conflict with a Standards Track document". Makes sense; I shouldn't have said otherwise. Let me try a different tack and simply ask why draft-

Re: [sidr] sidr-arch-09 refresh cycle time

2009-10-29 Thread Robert Kisteleki
Randy Bush wrote: folk going down this rathole might consider two things rpki-rtr suggests that the number of global fetchers will be radically lest than the number of global asns there might be ca chain depth of 3-6 for which a 24 hour cycle would mean a three day delay, making operato

Re: [sidr] sidr-arch-09 refresh cycle time

2009-10-29 Thread Randy Bush
> Randy, could you elaborate in which case does this transitive property > apply, that makes something longer to propagate on a deeper hierarchy? Is it > rekey, re-issue, revocation, or some kind or relying party check? as ggm said, probably better than i can, a week or two after philly. if we

Re: [sidr] sidr-arch-09 refresh cycle time

2009-10-29 Thread Randy Bush
sorry. late here. > as ggm said, probably better than i can, a week or two after philly. > > if we have a parent-child chain of length L and each runs as a batch at > some time interval T, then the mean time to propagate is (T/2)*(N-1) s/N/L/ randy _

Re: [sidr] sidr-arch-09 refresh cycle time

2009-10-29 Thread Robert Kisteleki
Randy Bush wrote: Randy, could you elaborate in which case does this transitive property apply, that makes something longer to propagate on a deeper hierarchy? Is it rekey, re-issue, revocation, or some kind or relying party check? as ggm said, probably better than i can, a week or two after p

Re: [sidr] Request for Last Call on draft-ietf-sidr-rescerts-provisioning-05

2009-10-29 Thread Sandra Murphy
On Thu, 29 Oct 2009, Byron Ellacott wrote: Randy, On 28/10/2009, at 11:30 AM, Randy Bush wrote: naming of actors in this document still assumes that ISPs are the children. children might be RIRs (parent IANA), or end sites (parent ISPs or owning non-end user sites (e.g. business subsidiari

Re: [sidr] Request for Last Call on draft-ietf-sidr-rescerts-provisioning-05

2009-10-29 Thread Sandra Murphy
My apologies - in watching the discussion about this draft I missed the fact that I did not issue the last call. coming right up. --Sandy On Wed, 28 Oct 2009, Byron Ellacott wrote: Sandy, with your WG chair hat on, could you please issue a WG Last Call on the following document: draft-ietf

[sidr] Working Group Last Call - draft-ietf-sidr-rescerts-provisioning-05.txt

2009-10-29 Thread Sandra Murphy
This WG chair has received a Working Group Last Call request from an author of A Protocol for Provisioning Resource Certificates draft-ietf-sidr-rescerts-provisioning-05.txt which has an intended status of Standard Track. All versions, past and present, are available at

Re: [sidr] Working Group Last Call - draft-ietf-sidr-arch-09.txt

2009-10-29 Thread Randy Bush
> I believe the document needs to have the 3 hour time cycle removed, > and some form of operational guidelines placed in a distinct document > (whether 3 hours, or some other time, is up to that document) i suspect it belongs in the CP, but am not sure. randy

Re: [sidr] sidr-arch-09 refresh cycle time

2009-10-29 Thread Randy Bush
> That is only true if the thing you're propagating has to travel hop by > hop to the bottom of the hierarchy. So the question still stands: what > is this "thing" that you think propagates slowly, and why does it have > to propagate hop by hop? incorrect or missing cert high in chain which needs

Re: [sidr] Request for Last Call on draft-ietf-sidr-rescerts-provisioning-05

2009-10-29 Thread Byron Ellacott
On 30/10/2009, at 12:50 AM, Sandra Murphy wrote: On Thu, 29 Oct 2009, Byron Ellacott wrote: On 28/10/2009, at 11:30 AM, Randy Bush wrote: naming of actors in this document still assumes that ISPs are the children. children might be RIRs (parent IANA), or end sites (parent ISPs or owning

Re: [sidr] Request for Last Call on draft-ietf-sidr-rescerts-provisioning-05

2009-10-29 Thread Randy Bush
> Would a global replace of "ISP" with "subject" and "IR" with "issuer" > be a sufficient resolution of this discussion? makes sense to me, especially in the two level case. when you get to three or more, you may want grandchild/grandparent etc. the key point is that it is turtles all the way

Re: [sidr] Working Group Last Call - draft-ietf-sidr-rescerts-provisioning-05.txt

2009-10-29 Thread Terry Manderson
Oppose.. Firstly, my initial observation is that the 'XML in ANS1 in CMS (signed)' transported in mutually validated and authenticated(*) HTTPS/TLS sessions appears somewhat weighty to cover MiTM/Repla given other parts of the entire RPKI system don't seem to have been given the same attention and

Re: [sidr] draft-pmohapat-sidr-pfx-validate-03.txt as SIDR WG document

2009-10-29 Thread Terry Manderson
I feel unable to say either way at present. The IPR disclosure at https://datatracker.ietf.org/ipr/1028/ highlights the US Patent Application Serial No. 12/243,767. In searching for this, at the USPTO I cannot find any relevant documents with that serial. I did try searching for "Cisco" as the n

Re: [sidr] draft-pmohapat-sidr-pfx-validate-03.txt as SIDR WG document

2009-10-29 Thread Robert Loomans
Terry Manderson wrote: > I feel unable to say either way at present. > ... > > A direct link to the Patent Application would be appreciated! Ditto. I'm reluctant to take any stance on this draft without more information on what the patent claims. Additionally, I'd like to see a clear statement

Re: [sidr] Request for WGLC

2009-10-29 Thread Robert Loomans
Randy Bush wrote: >> draft-ietf-sidr-roa-validation-03.txt > > i object to last call on this. there is a conflicting draft, and one > not by a wg co-chair. As I understand it the WGLC for draft-ietf-sidr-roa-validation should be evaluated on the draft's own merits: If there are specific conflic