
From nobody Sun Jan  3 09:49:14 2021
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08A3C3A1068 for <netconf@ietfa.amsl.com>; Sun,  3 Jan 2021 09:49:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level: 
X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GBud1_LA0WLV for <netconf@ietfa.amsl.com>; Sun,  3 Jan 2021 09:49:11 -0800 (PST)
Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8DC253A1067 for <netconf@ietf.org>; Sun,  3 Jan 2021 09:49:11 -0800 (PST)
Received: by rfc-editor.org (Postfix, from userid 30) id C46A5F406D1; Sun,  3 Jan 2021 09:49:10 -0800 (PST)
To: evoit@cisco.com, rrahman@cisco.com, einarnn@cisco.com, ludwig@clemm.org, andy@yumaworks.com, warren@kumari.net, rwilton@cisco.com, kent+ietf@watsen.net, mjethanandani@gmail.com
X-PHP-Originating-Script: 1005:errata_mail_lib.php
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: muly_i@rad.com, netconf@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset=UTF-8
Message-Id: <20210103174910.C46A5F406D1@rfc-editor.org>
Date: Sun,  3 Jan 2021 09:49:10 -0800 (PST)
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/8s_OAVaw6vFNowXUS6mpqWhDNNI>
Subject: [netconf] [Editorial Errata Reported] RFC8650 (6379)
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 03 Jan 2021 17:49:13 -0000

The following errata report has been submitted for RFC8650,
"Dynamic Subscription to YANG Events and Datastores over RESTCONF".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid6379

--------------------------------------
Type: Editorial
Reported by: Muly Ilan <muly_i@rad.com>

Section: A.1.1

Original Text
-------------
   Upon receipt of the successful response, the subscriber does a GET to
   the provided URI to start the flow of notification messages.  When
   the publisher receives this, the subscription is moved to the active
   state (c).

   GET /restconf/subscriptions/22

             Figure 5: "establish-subscription" Subsequent POST

Corrected Text
--------------
   Upon receipt of the successful response, the subscriber does a GET to
   the provided URI to start the flow of notification messages.  When
   the publisher receives this, the subscription is moved to the active
   state (c).

   GET /restconf/subscriptions/22

             Figure 5: "establish-subscription" Subsequent GET

Notes
-----
Substitute POST by GET in the figure caption

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC8650 (draft-ietf-netconf-restconf-notif-15)
--------------------------------------
Title               : Dynamic Subscription to YANG Events and Datastores over RESTCONF
Publication Date    : November 2019
Author(s)           : E. Voit, R. Rahman, E. Nilsen-Nygaard, A. Clemm, A. Bierman
Category            : PROPOSED STANDARD
Source              : Network Configuration
Area                : Operations and Management
Stream              : IETF
Verifying Party     : IESG


From nobody Mon Jan  4 07:02:20 2021
Return-Path: <evoit@cisco.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DE013A0DCB for <netconf@ietfa.amsl.com>; Mon,  4 Jan 2021 07:02:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.074
X-Spam-Level: 
X-Spam-Status: No, score=-8.074 tagged_above=-999 required=5 tests=[DKIMWL_WL_MED=-0.373, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Mz76QsEJ; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=wfdUKiA9
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nayXeIHGf8Wr for <netconf@ietfa.amsl.com>; Mon,  4 Jan 2021 07:02:16 -0800 (PST)
Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E9263A0DC9 for <netconf@ietf.org>; Mon,  4 Jan 2021 07:02:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8008; q=dns/txt; s=iport; t=1609772536; x=1610982136; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=zfpRaR3o+QNu7zlcZUcoJRRJHBbV0JLwNXjwUQrRXmg=; b=Mz76QsEJy8DhIB2y2/mJqWc1qotBCxUlLAZf6i+Z73u5lD3KHyZoMhFg HzQbkwee3C8lhgBhAOn6hzYY7NboRl1jiFLyrvVbOi7ckw18dZwU09bHT POAVGZKie9LWmleJn5kZq/EmZCmU7u00KHec+KRuqfNtX+i/LbIt/4hHF o=;
X-Files: smime.p7s : 3975
X-IPAS-Result: =?us-ascii?q?A0ByBACSK/NfkJ1dJa1igliBU1F9LS4vLgqENYNIA41jA?= =?us-ascii?q?48MigGBQoERA1QEBwEBAQoDAQEjCgIEAQGESgKBbwIlNwYOAgMBAQEDAgMBA?= =?us-ascii?q?QEBBQEBAQIBBgQUAQEBAQEBhjgMhXMBAQEDARIRHQEBNwEECwIBCCUdAgICM?= =?us-ascii?q?CUCBAENBQgGFIMEAYF+VwMOEQ8BDqQsAoE8iGl2gTKDBAEBBoUBGIIJBwMGg?= =?us-ascii?q?TiBU4EiijQmG4FBP4ERQ4JWPoEEgwUBEgEjgxY0giyCSGRTgQEWBxRNEUePU?= =?us-ascii?q?SmLdYFumjoKgnaBGINGgmiUNIMpiiuUfJQLnHYZhCQCBAIEBQIOAQEGgWwia?= =?us-ascii?q?XBwFRqDClAXAg2OO4NXhRSFCQE6dDcCBgoBAQMJfIwNAYEQAQE?=
IronPort-PHdr: =?us-ascii?q?9a23=3AM35SHBMWbyErm9IwO24l6mtXPHoupqn0MwgJ65?= =?us-ascii?q?Eul7NJdOG58o//OFDEvK8x3kXHVsDW5/NYjPCQtLrvCiQM4peE5XYFdpEEFx?= =?us-ascii?q?oIkt4fkAFoBsmZQVb6I/jnY21ffoxCWVZp8mv9PR1TH8DzNEfcqTi/4T8OHQ?= =?us-ascii?q?+5MhB6daz5H4fIhJGx0Oa/s5TYfwRPgm+7ZrV/ZBW7pAncrI8Ym4xnf60w0R?= =?us-ascii?q?DO5HBPfrdb?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="5.78,474,1599523200";  d="p7s'?scan'208";a="645452424"
Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 04 Jan 2021 15:02:15 +0000
Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by rcdn-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id 104F2FtI026367 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 4 Jan 2021 15:02:15 GMT
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 4 Jan 2021 09:02:14 -0600
Received: from xhs-rcd-003.cisco.com (173.37.227.248) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 4 Jan 2021 09:02:13 -0600
Received: from NAM04-CO1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 4 Jan 2021 09:02:13 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=AUU2EA+VPy7vC1oCK0UisAwk5CFKZIO97k3EemhjcAZaXLG16R7+wh5twW74ecqVktQt31ehwEVtnx4obkfBwgSIqfd2Qp87SFylyO/q/yf21jfMF19dlHUSMiKXvtQ7IJyA6hbpdYdQCN3atMIRWkyK6666DyNUKvGsWsU6MD3rWkVFiZjK4E7dH3fG5oQ1C081ncZ26yAEeF99N5kMbcQ4/v30IFxrJNPc08ijCsRHEhDmajnr9PnJHqE0hJqxgxPINirCv+WAZeQV0YRaqSw8G9N3/Gpa+ZadPeh8gmSEDhrHq7yvWYYNEq+681KQwmnTgVikQsY6o05Hulj5xA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=No+9GkXYNigYkd+WiHzX77t/JXpIz2R9MIAvuHQjaPg=; b=RYpz9va1JSwlkbTFxEvMYDlQRy0KWXL5jcWi5eLbPDhJ9VXKPd680TBNckPyM5U47TbSDOMRdYCC2+z85xYA+0WAUQ9VEWU3yVfUlmKcVfZkabiO3uKN1ZIpqWmeJudio0ymrdXdNMPtQaInVbr2UWVxhU16GuOjKLTFFXt2n0K/xaR6NmQUjqnD8jA4I9LjL9CAAb9hsDbp1F70d8eIhK/d4yoHGnKCHfwYyKilrSKCt4e9P/Wb60bQINu3PMp4h46UtoOrhmL46kgjBpoO0plvplLD64NDUXFbxFGSPIEVZiHJ5AZkDqZP0WeowK7B9bwD2gna8Q9oT9M9Ppejwg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com;  s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=No+9GkXYNigYkd+WiHzX77t/JXpIz2R9MIAvuHQjaPg=; b=wfdUKiA9ENU8JQ2EedbRaRs8FThMhKp+e/C5Ap5gyc27/c4U4nHYNwTh/35sBK8kS5ZU5/EuDzbsZBoqq4Lpbj0mKhfmQYsOCz8PbrC0RUzWucfr/r8+epS78EAhKLDpK73pdrTSII4wSgjZaF7WMHbnWHSD515MTgO3buZ2BzM=
Received: from MWHSPR01MB303.namprd11.prod.outlook.com (2603:10b6:301:35::39) by BL0PR11MB3090.namprd11.prod.outlook.com (2603:10b6:208:74::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3721.20; Mon, 4 Jan 2021 15:02:12 +0000
Received: from MWHSPR01MB303.namprd11.prod.outlook.com ([fe80::5413:151e:9731:ed90]) by MWHSPR01MB303.namprd11.prod.outlook.com ([fe80::5413:151e:9731:ed90%5]) with mapi id 15.20.3721.024; Mon, 4 Jan 2021 15:02:12 +0000
From: "Eric Voit (evoit)" <evoit@cisco.com>
To: RFC Errata System <rfc-editor@rfc-editor.org>, "Einar Nilsen-Nygaard (einarnn)" <einarnn@cisco.com>, "ludwig@clemm.org" <ludwig@clemm.org>, "andy@yumaworks.com" <andy@yumaworks.com>, "warren@kumari.net" <warren@kumari.net>, "Rob Wilton (rwilton)" <rwilton@cisco.com>, "kent+ietf@watsen.net" <kent+ietf@watsen.net>, "mjethanandani@gmail.com" <mjethanandani@gmail.com>, Reshad Rahman <reshad@yahoo.com>
CC: "muly_i@rad.com" <muly_i@rad.com>, "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [Editorial Errata Reported] RFC8650 (6379)
Thread-Index: AQHW4fjEmNdCq5Qblk2DJYG6ush2/6oXkL8g
Date: Mon, 4 Jan 2021 15:02:12 +0000
Message-ID: <MWHSPR01MB3035BFD62A2E08C188C5406A1D20@MWHSPR01MB303.namprd11.prod.outlook.com>
References: <20210103174910.C46A5F406D1@rfc-editor.org>
In-Reply-To: <20210103174910.C46A5F406D1@rfc-editor.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
authentication-results: rfc-editor.org; dkim=none (message not signed) header.d=none;rfc-editor.org; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [108.18.114.139]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: ca812752-f474-4c1e-3e3d-08d8b0c1b73a
x-ms-traffictypediagnostic: BL0PR11MB3090:
x-ms-exchange-transport-forked: True
x-microsoft-antispam-prvs: <BL0PR11MB3090F9FA7280777989027936A1D20@BL0PR11MB3090.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:1923;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: e79Q3mr/PIc20oDpMsEUGic/x/RBHDSvzOOE1HN0wwVsVbdKKu9osO6tSDFYZg/YIEaP6wdmo2X932BAafoHgP6w4pMsHa5v45D0H4y2fJyuqNpTRYw7LeTkXK/MeGuVufrB9KjnARcYItnMMjR2cP4+DpFY0ljFEVFgwbWxXHc585GxD7L/CR0bxSCmYjoAVVVbLtBXy4PC822PzH+4RluroOwoXXUZGDUiF9d8D4rCaw2Wh90ZvTzk1pWZHj6336Iv7VqyLC76bgo62M1+HsURglPxvBAB1RYAJcQGyh62aeb+ZzaZ0urEeFaG8jcrWbzlkat0FVZ3BdTihIKS6zACbfrlTVv0xrT+DNfljCDA97ZuSHTASPgYP96ah3rLzeGLL2CjkpxJJOQB62ybjYeADfMXGa1GAZEsfq1P4fqNzFZMhcWHVLCVYclSOP1R7xYKL1eJeLq0XYCBPmwyOg==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:MWHSPR01MB303.namprd11.prod.outlook.com; PTR:; CAT:NONE;  SFS:(39860400002)(376002)(136003)(346002)(396003)(366004)(6506007)(83380400001)(2906002)(8936002)(316002)(478600001)(33656002)(110136005)(966005)(54906003)(5660300002)(66476007)(66616009)(66556008)(64756008)(66446008)(186003)(86362001)(66946007)(76116006)(55016002)(9686003)(26005)(52536014)(4326008)(7696005)(8676002)(71200400001)(99936003); DIR:OUT; SFP:1101; 
x-ms-exchange-antispam-messagedata: =?utf-8?B?TXpmT01DdjZaTzNacnMzMWREWlcxUE44bTNCRG83VmJOQzROd0xtZmpOZ0NM?= =?utf-8?B?WWRRU2V5Tk5iSHlWb0dTS0lKaTFoOFc0eXFFdlcwemY4bDhCY0pRRmw4Z09P?= =?utf-8?B?ME9uSkhSODZVd25kaWd5SmpwMEZ6ZFZCVklWVmF6V0JZazRFME4zOVhmekdi?= =?utf-8?B?L3RWWGRxQWZkWjBYa096RkJIa2lKWjlvZHdSdTUzMzh1Q0x6cGllQjRsd242?= =?utf-8?B?dzMrVjBDMzY2MVl2MnBjN0hJcHlwT01iY2ZKTDFTei9vZ1JaczdPT2pYeXBr?= =?utf-8?B?bG9ydXZkVHEwRFNLai81Q1BsTGM3NExKTXc0VU9VNUVmUisyRWhBcTVZTE85?= =?utf-8?B?UWV4TG53T25icEtVUUdyb2NVZ1BnL1lLWlJEZXRBdUt5RUVId3pGQWpaYzRo?= =?utf-8?B?RFZDVHNwQXVHczEwcVZQbGNJbGFoS1NRUTlmOUc0OUl3bmt5WkpHYnpZWnBq?= =?utf-8?B?UDlpbk1paEdFTTV2S0QzWURJK1I0S1lqam1wNnE3L05sTGV5NjFBVUhMRnRG?= =?utf-8?B?ZHJ5NHR5MFFoSkQ3ZG12K2tBNjdpbWhkeFFGNXk0S0RIa3dibm1SODl5MnVy?= =?utf-8?B?OFBJTC9KWHdMREE3OW1OajBXWUxKL1pRUk5lczBONHBNbi9ZQVU2VCt4emZs?= =?utf-8?B?RmY1dldCcnZsSUsxU1FKTnZDRzVjRUpYOURnUFhVeE5yN1RHc1hXR0V0dzRi?= =?utf-8?B?akxmYlpPZ3hZYkFhS0tlYWVDOEM1dWxHN3BjKzIzWFZpcVJ3ZTdjNFc0MWI3?= =?utf-8?B?QkQ1cHFYNmlrQStvNFlFT1VUUFEwemZxREs4QUlabXFzL29DcUpTVzFOejJJ?= =?utf-8?B?ZTdGQ2o1N1VlVXowZDZuSlJnaUxXbUg4RmdBSCtNeHFuS2paWG82bzVPOTRY?= =?utf-8?B?eUszSlhuSUtydlVPbmdWcjIxclR2SDB0eDFFM3J0MkpQb2RodVZtRitkS1dU?= =?utf-8?B?ZXBLL25vZVpVRy9HbGM2WmNrUldNRjN3cFhET0FHaHQyTWxKL1NoUUNhb0Nr?= =?utf-8?B?REVPb29EK0N5ZU9HQlNkK0xWc0RTbFIzOHRud29MdFJiVDVENGg3enVqNUdX?= =?utf-8?B?d2NnakViT0NBRy92L28ydWRYeUF6ZHZqTit0QnhiOHE1ak1Wd1JEVjZidHVT?= =?utf-8?B?cmdvVkVkRmRQd1RlUUxUUlU0cmJkM29Ya2tEVktJb09JQ3NyY1U1bzl1TWEw?= =?utf-8?B?VGMvZHd5RXQ0Z2VyczMzV01LRDA0bFBNSWpEVVc1ajFEYkt6WE56dG1BUmxS?= =?utf-8?B?ak5NSkphOWtrdHpyVjQvV1hhYTl3V0RFdndqdnd0U3ErblEvSndDbUg5NzBn?= =?utf-8?Q?OClr1pVSeshG0=3D?=
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_00BF_01D6E280.A9044950"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MWHSPR01MB303.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ca812752-f474-4c1e-3e3d-08d8b0c1b73a
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Jan 2021 15:02:12.1060 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: gZ26bK8+mmvBWdwjZF1T8OaX2mglDMn6veIcP/kq+dFJE+sj7rQHjZ9mLXKlXkCs
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR11MB3090
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.12, xch-aln-002.cisco.com
X-Outbound-Node: rcdn-core-6.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/25wep6_XI-5BfXiOb32HtiguE64>
Subject: Re: [netconf] [Editorial Errata Reported] RFC8650 (6379)
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Jan 2021 15:02:18 -0000

------=_NextPart_000_00BF_01D6E280.A9044950
Content-Type: text/plain;
	charset="UTF-8"
Content-Transfer-Encoding: 7bit

Adding Reshad's new email.   I think this should be accepted.

Eric

> The following errata report has been submitted for RFC8650, "Dynamic
> Subscription to YANG Events and Datastores over RESTCONF".
>
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid6379
>
> --------------------------------------
> Type: Editorial
> Reported by: Muly Ilan <muly_i@rad.com>
>
> Section: A.1.1
>
> Original Text
> -------------
>    Upon receipt of the successful response, the subscriber does a GET to
>    the provided URI to start the flow of notification messages.  When
>    the publisher receives this, the subscription is moved to the active
>    state (c).
>
>    GET /restconf/subscriptions/22
>
>              Figure 5: "establish-subscription" Subsequent POST
>
> Corrected Text
> --------------
>    Upon receipt of the successful response, the subscriber does a GET to
>    the provided URI to start the flow of notification messages.  When
>    the publisher receives this, the subscription is moved to the active
>    state (c).
>
>    GET /restconf/subscriptions/22
>
>              Figure 5: "establish-subscription" Subsequent GET
>
> Notes
> -----
> Substitute POST by GET in the figure caption
>
> Instructions:
> -------------
> This erratum is currently posted as "Reported". If necessary, please use 
> "Reply
> All" to discuss whether it should be verified or rejected. When a decision 
> is
> reached, the verifying party can log in to change the status and edit the 
> report, if
> necessary.
>
> --------------------------------------
> RFC8650 (draft-ietf-netconf-restconf-notif-15)
> --------------------------------------
> Title               : Dynamic Subscription to YANG Events and Datastores 
> over
> RESTCONF
> Publication Date    : November 2019
> Author(s)           : E. Voit, R. Rahman, E. Nilsen-Nygaard, A. Clemm, A. 
> Bierman
> Category            : PROPOSED STANDARD
> Source              : Network Configuration
> Area                : Operations and Management
> Stream              : IETF
> Verifying Party     : IESG

------=_NextPart_000_00BF_01D6E280.A9044950
Content-Type: application/pkcs7-signature;
	name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
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------=_NextPart_000_00BF_01D6E280.A9044950--


From nobody Mon Jan  4 07:05:44 2021
Return-Path: <reshad@yahoo.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A32853A0DF3 for <netconf@ietfa.amsl.com>; Mon,  4 Jan 2021 07:05:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.198
X-Spam-Level: 
X-Spam-Status: No, score=-0.198 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NTzqrvzgxPFL for <netconf@ietfa.amsl.com>; Mon,  4 Jan 2021 07:05:41 -0800 (PST)
Received: from sonic315-13.consmr.mail.bf2.yahoo.com (sonic315-13.consmr.mail.bf2.yahoo.com [74.6.134.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84F833A0DDF for <netconf@ietf.org>; Mon,  4 Jan 2021 07:05:40 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1609772734; bh=x7tmxs+ui+E5hRIlez84LKy+72VeWBYroUpfKLzust0=; h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:From:Subject; b=KrCm5M5BDQARfX8L4EdygsvUXdCakDGGU4L3VGKBQmlTpdz2i/D3eDUutxR+CoHtdX38m0jsQqTmHH0pJP8j6umXQr6CfGYnU9t22iDo6s8NjaOA/+bj+OyLiWwkvCWC7qOVPu8k1bynXMltuJKZ2GllGH05ns+CoCneTIphZr04gSVWOBZw3M8pTV28CdM7/MMGsk/Rpt0W1WUklvBFl3TjBMTxx9h8ot6WyRoAPbpZZgPQileKPmt7P0ju3wkdYTbOx8yR5Ei2/JOyBz1RDxQShNVU2mfrsRt7O2nCtQFKlKyBwJjBtclM0XYkGF1JgcegI/A9PbdgxWR241jKIA==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048;  t=1609772734; bh=HRt3//bhfjyvXIkU3XkW+U2sYT4r10Ojky/+wEa0ENk=;  h=Date:From:To:Subject:From:Subject; b=A5I5H1dTE0P5hWB4iYijC3GI0kvf5uZVLc9hejE5682dRQ5+KRLZcu7NNeRbuA4Fc8dI+mYlT2+UNaEMnHOUwj7UsveeChdd2NKhVSC589WMWXyKvZ/X6C+Qd0veil+fGBjCTjUqYYQBIVeMf9uLeI/3DM5WeCJlimv0MiYt+NS/k0EINvGqPvTrGbpDsChKSaN0TkQnKCtr1jJmHED+TGwwHp0XpYZhCNcvDYMlucHrTkrQZbXWKxb3UcjaoVkhEDeviLKPo7e8LOnOmbvtYzCdageAiEd7gQ+nvIiaFqVFxP8V7oZbv5JpXpgnBUoqiC6tTYEtjKlvetKm1x+ZEA==
X-YMail-OSG: qPezVEEVM1kxA6WgK2hDMWhlgeNDjGe3lzDlTNdQH3ff1khM1HgUg4mCY4xJBUX YXNTVfwgsY7m0qYpHLoIZzLBZ1tuIgTJpEzJkwdQmI7yFM7ogpw1.UrCv3J0Gxe6hQzOjOyRT0_n p5_V_05J9fPiZ6cwA2XEnt0KsXIpD_zUihSlrOVK5Fzoj3NcEUVYkwJgXH.StA_ggo18t92V8DeS 1vIwA1gw8CCOFtbbRAj30vif4X7ltmc_zQbJdh0DQbRKLRe46Ruy1jVjAxLgYqeLK5b_8wtyAXZe YNdPGq_vw_sfo63BE87R4LXdUIrtaoYn8hov2soSVVdvxSE.7mToAbDEPqEXShR57XMslpw0T1_L Et9_Pp76A9T8jfSZl9bm5DfKiCL0p.Eq_MOUP.FUujyQcwKYSSgVaLfRYNA84d2QlrKG7TNt.atL B0YwtOXPuyMviU0VJKlwTgAKSfBu9pc3E7HmA1SsYO9FghNb_fe2n6GWLh2kfUINmqDQt_RcsSqC fzoDJA6PwxnDUgBksj8810bPnU.OPGBL0hJtUIt_WnTyO7I9_90F2JRKUVUnnNVTJA4w3uH9CRqZ thh9_pbWKdqa8bW6LvL.gMSRa28RylW_6s6fkUJiUNAAzm4B_5nYalUZWXcoAcsNOmRPA6eWmGV8 ijs0UK29QGMwTJAgSK0ogEFY0sqUxqQeFUPkOj3SuhLLUNUi0ZLIy9bclRwbvkM0gkdUXUOeN_KK p712DL5T67LZyt_vUAUTj_NG7vgzr0vR2jl2rZbHlAbsurFp4rd6COHdP24LAI_MpYM.KIv.eMJJ aqh69BkPcclaFx0f5orbpnywJ0wKn7E8Mtg54jTdoykkZVfS8yA.hbqEN17DUih5cWnm3y.ByBt_ 8OHH4CpKjSP3CfSOzqQs.EAmj0lPQ1fIqO96gp8LuStc.c0X7FqntGpYeCInZk3Om7D_91owjN5d UYjyfaaG5E9_YPgjl9Na8rYWIFh0aR3eO.3bxxS9NKkZONU2fLQlYyc3U6bE4qqYJwAGPJ8i1PLZ jTy92PGmjOxmf0y170rnFXmejgRXfIssBMfhz9zxEmBBT27H7uFKz7quGtqhPRLt3tpFi333J.Um MzxXNOoUwES0syEZBFMUyT8Tn57hqLXEtM1it40GlUfzkBYO5cg7B2XFLfT_S.atOthLtIaBUN4A uru7XbP5InbyZSb8QgdgJr4NdE2oO1htCeG2YykC1gwtJOzgMv9kZaVoz3rN5DkdHiQ.7ZFxZrQe yZM2KhWRoVZleOSijf_GL.zquBGJsyHBlq4N41pGZRWL7iDUe22EhPsWJsW.l1GNShlBDathd8vQ lnDG5AdGxBTUVjPd2UHotsCNJ3gJNMzKvZHRMXn_6j5gPOcdWW7nRLP1YMhq0hfBTjKHXEm5ADns 1zB7fvCjLN7YaOHuW4n_qgtDtoSHtq5OIxa9vodkVx54qh4arlAQqjHPWGR7sAioh5_Nur.WPUm4 v7XEYcpZ_p1xL1Jqnz.OokrMvaFweSTIds5UpUIHpTe9iAv_Mh1l1kV4F82XqWtxGkn3FqYUAtF_ wwGJUW0rQ84AWRJ3szIHCRHetL5DktWJj9t3VYYRpqVOW3wO.3kkyv53zOVwGoi91fniV3Re.88e i58kZxlcFbaQWuoWVGFjL6aQIi7ivT7DcosbCBjGClpp_pOs_4wkNOPnu55mvFb79D6kE4YVUTOs 1E.zSqZSg49IbUl5TDri0ptQtnOC9S7SajS0Ed58QDAJes7DzACn4FhFXYdhAdB7ezuiw6SyfieB az.0HBywh6.RnI9gHZPMkmrFJbDYVAgZ9L5.AedpUTxmeqV6ZTjiKXJN73MOQjNmKI4vVFlklVOV qqtaUHD0A3cxr_UHWmS_K8l8CHGLZwt3GMoN5h0tNqrnZ0p5GsHbGc7NRY1M3mXK6d8iCsTjHB5e zRrD05GC_n4lu74mu8I2_rrfk8Jlttu0Nf4_jWoE27yac.rJ7vNKHs6u2rpjl6R.LODv6z84xR3i H.sU3Ow3Ue.uWYBRxHshDtC2nvHjm9ZMt5IdUbV9YBhcSkWsSe1XRlr6MP3Eq2xeYuwaxmtGjCbB MOlmPVNgLpEa6spAoXD3On9yAg1y6p6WyhpQj6aZDYCvOBVh4QwhqOLKY7XkxlXSGB4zQvWKpShG DTzaL8ZQQuzsi.eEV4N0jaOnZGTgMLq.DXTvi66BTARTNF2.6Usne_u4jcMiHC1bw7vYswSlYK6T EUZGJLCwGTgdHt2AZweBXV3AbYaRwh5ONRCVpYv_DaLpnph6YIX_XI7iZFKgrxpRGEfO8f5Ory6j .4gymMgjTVcvnU_Erqz9pMOM6j1GFEYH97S9v1LFQjzKs0lWJTXBk3950MAcHc5qp4_G0yIiQxzR M9anijySDvNxA8t2_pcbJl8w1aOMj7FN.liKnkni1iUljjN9peLAzxMd4YhqCXSzgY3NP5UjBaL6 HlOO0TGYSo7kBT5rUWhid72VvsFEvHSVyY_Bee2IBngeZMYH7JyssKgudGM5btWhQsU1mWJuYrtw CrCza5mEdtjcWDI7Q4CkPgGk2riLDA0QVev4OUEx8yHPjlFJ7TTYSuW_JSHjtlXaCOrb8fkmyoA. zgY1n1GDIA.txPT7zBkNrmMOWJwZd5isQ8vMmS_VKGlWOlorCD5nwh5J_aOLzFSs5PKU-
Received: from sonic.gate.mail.ne1.yahoo.com by sonic315.consmr.mail.bf2.yahoo.com with HTTP; Mon, 4 Jan 2021 15:05:34 +0000
Date: Mon, 4 Jan 2021 15:04:37 +0000 (UTC)
From: Reshad Rahman <reshad@yahoo.com>
Reply-To: Reshad Rahman <reshad@yahoo.com>
To: RFC Errata System <rfc-editor@rfc-editor.org>,  "Einar Nilsen-Nygaard (einarnn)" <einarnn@cisco.com>,  "ludwig@clemm.org" <ludwig@clemm.org>,  "andy@yumaworks.com" <andy@yumaworks.com>,  "warren@kumari.net" <warren@kumari.net>,  "Rob Wilton (rwilton)" <rwilton@cisco.com>,  "kent+ietf@watsen.net" <kent+ietf@watsen.net>,  "mjethanandani@gmail.com" <mjethanandani@gmail.com>,  "Eric Voit (evoit)" <evoit@cisco.com>
Cc: "muly_i@rad.com" <muly_i@rad.com>, "netconf@ietf.org" <netconf@ietf.org>
Message-ID: <1750813163.4213671.1609772677514@mail.yahoo.com>
In-Reply-To: <MWHSPR01MB3035BFD62A2E08C188C5406A1D20@MWHSPR01MB303.namprd11.prod.outlook.com>
References: <20210103174910.C46A5F406D1@rfc-editor.org> <MWHSPR01MB3035BFD62A2E08C188C5406A1D20@MWHSPR01MB303.namprd11.prod.outlook.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;  boundary="----=_Part_4213670_1579854331.1609772677513"
X-Mailer: WebService/1.1.17278 YMailNorrin Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.3 Safari/605.1.15
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/uYl7QkkL3RYr0QN47TmCbSBPbBU>
Subject: Re: [netconf] [Editorial Errata Reported] RFC8650 (6379)
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Jan 2021 15:05:43 -0000

------=_Part_4213670_1579854331.1609772677513
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

 I agree.
    On Monday, January 4, 2021, 10:02:17 AM EST, Eric Voit (evoit) <evoit@c=
isco.com> wrote: =20
=20
 Adding Reshad's new email.=C2=A0 I think this should be accepted.

Eric

> The following errata report has been submitted for RFC8650, "Dynamic
> Subscription to YANG Events and Datastores over RESTCONF".
>
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid6379
>
> --------------------------------------
> Type: Editorial
> Reported by: Muly Ilan <muly_i@rad.com>
>
> Section: A.1.1
>
> Original Text
> -------------
>=C2=A0 =C2=A0 Upon receipt of the successful response, the subscriber does=
 a GET to
>=C2=A0 =C2=A0 the provided URI to start the flow of notification messages.=
=C2=A0 When
>=C2=A0 =C2=A0 the publisher receives this, the subscription is moved to th=
e active
>=C2=A0 =C2=A0 state (c).
>
>=C2=A0 =C2=A0 GET /restconf/subscriptions/22
>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Figure 5: "establish-subs=
cription" Subsequent POST
>
> Corrected Text
> --------------
>=C2=A0 =C2=A0 Upon receipt of the successful response, the subscriber does=
 a GET to
>=C2=A0 =C2=A0 the provided URI to start the flow of notification messages.=
=C2=A0 When
>=C2=A0 =C2=A0 the publisher receives this, the subscription is moved to th=
e active
>=C2=A0 =C2=A0 state (c).
>
>=C2=A0 =C2=A0 GET /restconf/subscriptions/22
>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Figure 5: "establish-subs=
cription" Subsequent GET
>
> Notes
> -----
> Substitute POST by GET in the figure caption
>
> Instructions:
> -------------
> This erratum is currently posted as "Reported". If necessary, please use=
=20
> "Reply
> All" to discuss whether it should be verified or rejected. When a decisio=
n=20
> is
> reached, the verifying party can log in to change the status and edit the=
=20
> report, if
> necessary.
>
> --------------------------------------
> RFC8650 (draft-ietf-netconf-restconf-notif-15)
> --------------------------------------
> Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : Dynamic Subscript=
ion to YANG Events and Datastores=20
> over
> RESTCONF
> Publication Date=C2=A0 =C2=A0 : November 2019
> Author(s)=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : E. Voit, R. Rahman, E. Nils=
en-Nygaard, A. Clemm, A.=20
> Bierman
> Category=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : PROPOSED STANDARD
> Source=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : Network Configur=
ation
> Area=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : Operations =
and Management
> Stream=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : IETF
> Verifying Party=C2=A0 =C2=A0 : IESG
 =20
------=_Part_4213670_1579854331.1609772677513
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<html><head></head><body><div class=3D"ydp16188e6cyahoo-style-wrap" style=
=3D"font-family:courier new, courier, monaco, monospace, sans-serif;font-si=
ze:13px;"><div></div>
        <div dir=3D"ltr" data-setdir=3D"false">I agree.</div><div><br></div=
>
       =20
        </div><div id=3D"ydp51485877yahoo_quoted_9991555557" class=3D"ydp51=
485877yahoo_quoted">
            <div style=3D"font-family:'Helvetica Neue', Helvetica, Arial, s=
ans-serif;font-size:13px;color:#26282a;">
               =20
                <div>
                    On Monday, January 4, 2021, 10:02:17 AM EST, Eric Voit =
(evoit) &lt;evoit@cisco.com&gt; wrote:
                </div>
                <div><br></div>
                <div><br></div>
                <div><div dir=3D"ltr">Adding Reshad's new email.&nbsp;  I t=
hink this should be accepted.<br clear=3D"none"><br clear=3D"none">Eric<div=
 class=3D"ydp51485877yqt8791406192" id=3D"ydp51485877yqtfd05779"><br clear=
=3D"none"><br clear=3D"none">&gt; The following errata report has been subm=
itted for RFC8650, "Dynamic<br clear=3D"none">&gt; Subscription to YANG Eve=
nts and Datastores over RESTCONF".<br clear=3D"none">&gt;<br clear=3D"none"=
>&gt; --------------------------------------<br clear=3D"none">&gt; You may=
 review the report below and at:<br clear=3D"none">&gt; <a shape=3D"rect" h=
ref=3D"https://www.rfc-editor.org/errata/eid6379" rel=3D"nofollow" target=
=3D"_blank">https://www.rfc-editor.org/errata/eid6379</a><br clear=3D"none"=
>&gt;<br clear=3D"none">&gt; --------------------------------------<br clea=
r=3D"none">&gt; Type: Editorial<br clear=3D"none">&gt; Reported by: Muly Il=
an &lt;<a shape=3D"rect" href=3D"mailto:muly_i@rad.com" rel=3D"nofollow" ta=
rget=3D"_blank">muly_i@rad.com</a>&gt;<br clear=3D"none">&gt;<br clear=3D"n=
one">&gt; Section: A.1.1<br clear=3D"none">&gt;<br clear=3D"none">&gt; Orig=
inal Text<br clear=3D"none">&gt; -------------<br clear=3D"none">&gt;&nbsp;=
 &nbsp; Upon receipt of the successful response, the subscriber does a GET =
to<br clear=3D"none">&gt;&nbsp; &nbsp; the provided URI to start the flow o=
f notification messages.&nbsp; When<br clear=3D"none">&gt;&nbsp; &nbsp; the=
 publisher receives this, the subscription is moved to the active<br clear=
=3D"none">&gt;&nbsp; &nbsp; state (c).<br clear=3D"none">&gt;<br clear=3D"n=
one">&gt;&nbsp; &nbsp; GET /restconf/subscriptions/22<br clear=3D"none">&gt=
;<br clear=3D"none">&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Fi=
gure 5: "establish-subscription" Subsequent POST<br clear=3D"none">&gt;<br =
clear=3D"none">&gt; Corrected Text<br clear=3D"none">&gt; --------------<br=
 clear=3D"none">&gt;&nbsp; &nbsp; Upon receipt of the successful response, =
the subscriber does a GET to<br clear=3D"none">&gt;&nbsp; &nbsp; the provid=
ed URI to start the flow of notification messages.&nbsp; When<br clear=3D"n=
one">&gt;&nbsp; &nbsp; the publisher receives this, the subscription is mov=
ed to the active<br clear=3D"none">&gt;&nbsp; &nbsp; state (c).<br clear=3D=
"none">&gt;<br clear=3D"none">&gt;&nbsp; &nbsp; GET /restconf/subscriptions=
/22<br clear=3D"none">&gt;<br clear=3D"none">&gt;&nbsp; &nbsp; &nbsp; &nbsp=
; &nbsp; &nbsp; &nbsp; Figure 5: "establish-subscription" Subsequent GET<br=
 clear=3D"none">&gt;<br clear=3D"none">&gt; Notes<br clear=3D"none">&gt; --=
---<br clear=3D"none">&gt; Substitute POST by GET in the figure caption<br =
clear=3D"none">&gt;<br clear=3D"none">&gt; Instructions:<br clear=3D"none">=
&gt; -------------<br clear=3D"none">&gt; This erratum is currently posted =
as "Reported". If necessary, please use <br clear=3D"none">&gt; "Reply<br c=
lear=3D"none">&gt; All" to discuss whether it should be verified or rejecte=
d. When a decision <br clear=3D"none">&gt; is<br clear=3D"none">&gt; reache=
d, the verifying party can log in to change the status and edit the <br cle=
ar=3D"none">&gt; report, if<br clear=3D"none">&gt; necessary.<br clear=3D"n=
one">&gt;<br clear=3D"none">&gt; --------------------------------------<br =
clear=3D"none">&gt; RFC8650 (draft-ietf-netconf-restconf-notif-15)<br clear=
=3D"none">&gt; --------------------------------------<br clear=3D"none">&gt=
; Title&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  : Dynamic Subscrip=
tion to YANG Events and Datastores <br clear=3D"none">&gt; over<br clear=3D=
"none">&gt; RESTCONF<br clear=3D"none">&gt; Publication Date&nbsp; &nbsp; :=
 November 2019<br clear=3D"none">&gt; Author(s)&nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;  : E. Voit, R. Rahman, E. Nilsen-Nygaard, A. Clemm, A. <br clear=3D"=
none">&gt; Bierman<br clear=3D"none">&gt; Category&nbsp; &nbsp; &nbsp; &nbs=
p; &nbsp; &nbsp; : PROPOSED STANDARD<br clear=3D"none">&gt; Source&nbsp; &n=
bsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : Network Configuration<br clear=3D=
"none">&gt; Area&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : O=
perations and Management<br clear=3D"none">&gt; Stream&nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; : IETF<br clear=3D"none">&gt; Verifying Party&n=
bsp; &nbsp;  : IESG<br clear=3D"none"></div></div></div>
            </div>
        </div></body></html>
------=_Part_4213670_1579854331.1609772677513--


From nobody Mon Jan  4 11:03:18 2021
Return-Path: <alex@futurewei.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 404843A0FCB for <netconf@ietfa.amsl.com>; Mon,  4 Jan 2021 11:03:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.089
X-Spam-Level: 
X-Spam-Status: No, score=-0.089 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H2=-0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=futurewei.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2K6FJxn5UDQr for <netconf@ietfa.amsl.com>; Mon,  4 Jan 2021 11:03:15 -0800 (PST)
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2111.outbound.protection.outlook.com [40.107.236.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FB6F3A0FBD for <netconf@ietf.org>; Mon,  4 Jan 2021 11:03:14 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ihnpBZ7uZzu7NDYx89pmvZ1BxjGhxR/soMhsRb/OkGQ+O1ChH2fOMC/9LVMebxZGa+h7e+mI9KnffZN0UwlLzsng3euizlGD/hnK+ietOMdGm0ZxtyH76bpJwGQK2PPer0f37zq/KVtdAOl7qmBGV0PEYMLFa15sZjKYNdIpYcAYY5aLy5ShP6tv2Py/eYxD7uiOsI7eyOpbYjsFEPYPpKzbZt3V9H82xaxfMLIDL7/rHsDXOQ01iOxquzLnACseuCkpPer0Uyp41zHBNuRpQnVX/NFMnaWaVGrZaxjxVZcsEwF9cDiMGu5De5VVL8SJ77Jdh81enCjHs2tjXOY9tw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=m6ogNDETTy46XPabk9ynMnL5EhdbnUsnm7GmgryWT+8=; b=C3mpsuIZJCpq0M2z8Sdcof0G1mpgP9NABtk3fFMa0+NgBnxWWZQuZbJlkxm4FU7BUbi0s+/GLdB4tRhTASPT45XtRlSKth5v5xLC2YMGm91Xso4ABfZ3/RN+CKDw8FipeGl2tBN+M5fA2iQaSlP58q18bZ2CUkNaglfgvFXKumvAsUtfU9olJwJWrazREGoNk58DqWqBlOiXAZCx237Uj7TYwxVXoDdLdNqfcFc/Xaddn/L00Mo0nX6Krt0h2GCvByn3N8Y1sMRWfV2C7sLJFCzV7ZRjqnqHyn6VqVAUxtl6X8TQLKqnEQQBiFXiy1iDB3enWW2LaHx+iXPUUbrGEQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=futurewei.com; dmarc=pass action=none header.from=futurewei.com; dkim=pass header.d=futurewei.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Futurewei.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=m6ogNDETTy46XPabk9ynMnL5EhdbnUsnm7GmgryWT+8=; b=BgjGJad/kFWrKJ6B/7nNh1VMT5k9Fd3ZWMA5vKXMmLPC18JA1wjdevYiRZUwuuj7TlXr5I3ujHcT7ZjJtfE3Ebwhp+Oeg+9cCD7PNt2ZJcWLJnDxTYaJWDIUaQEs0lHAy6fvmuFCh3OL4Q7wn+87A6ttbbvK9Yeo9dSXclv1sJA=
Received: from BY5PR13MB3793.namprd13.prod.outlook.com (2603:10b6:a03:226::15) by BY5PR13MB3892.namprd13.prod.outlook.com (2603:10b6:a03:226::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3742.2; Mon, 4 Jan 2021 19:03:12 +0000
Received: from BY5PR13MB3793.namprd13.prod.outlook.com ([fe80::81f6:a35d:1051:da32]) by BY5PR13MB3793.namprd13.prod.outlook.com ([fe80::81f6:a35d:1051:da32%7]) with mapi id 15.20.3742.006; Mon, 4 Jan 2021 19:03:11 +0000
From: Alexander Clemm <alex@futurewei.com>
To: Reshad Rahman <reshad@yahoo.com>, RFC Errata System <rfc-editor@rfc-editor.org>, "Einar Nilsen-Nygaard (einarnn)" <einarnn@cisco.com>, "ludwig@clemm.org" <ludwig@clemm.org>, "andy@yumaworks.com" <andy@yumaworks.com>, "warren@kumari.net" <warren@kumari.net>, "Rob Wilton (rwilton)" <rwilton@cisco.com>, "kent+ietf@watsen.net" <kent+ietf@watsen.net>, "mjethanandani@gmail.com" <mjethanandani@gmail.com>, "Eric Voit (evoit)" <evoit@cisco.com>
CC: "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [netconf] [Editorial Errata Reported] RFC8650 (6379)
Thread-Index: AQHW4qqlSSzTe0nbSkS8WME3Tlt8QKoXkICAgABCf1A=
Date: Mon, 4 Jan 2021 19:03:11 +0000
Message-ID: <BY5PR13MB3793BEB508BF330F053952F4DBD20@BY5PR13MB3793.namprd13.prod.outlook.com>
References: <20210103174910.C46A5F406D1@rfc-editor.org> <MWHSPR01MB3035BFD62A2E08C188C5406A1D20@MWHSPR01MB303.namprd11.prod.outlook.com> <1750813163.4213671.1609772677514@mail.yahoo.com>
In-Reply-To: <1750813163.4213671.1609772677514@mail.yahoo.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: yahoo.com; dkim=none (message not signed) header.d=none;yahoo.com; dmarc=none action=none header.from=futurewei.com;
x-originating-ip: [73.189.160.186]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 62f8ec00-49b5-4261-c0ab-08d8b0e361ed
x-ms-traffictypediagnostic: BY5PR13MB3892:
x-microsoft-antispam-prvs: <BY5PR13MB3892BC41BBE174404B202048DBD20@BY5PR13MB3892.namprd13.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:5797;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:BY5PR13MB3793.namprd13.prod.outlook.com; PTR:; CAT:NONE;  SFS:(4636009)(136003)(376002)(396003)(346002)(39840400004)(366004)(2906002)(8936002)(478600001)(53546011)(66446008)(71200400001)(6506007)(26005)(186003)(5660300002)(52536014)(66476007)(66556008)(64756008)(921005)(76116006)(66946007)(9686003)(8676002)(55016002)(86362001)(7696005)(4326008)(166002)(83380400001)(966005)(110136005)(316002)(33656002)(7416002); DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata: =?us-ascii?Q?uLEf6PEe4y4sGGxG5sGPdz79LhDO37fdFqOHks1Dl+rqJt8E9mwrTAWwJ9g/?= =?us-ascii?Q?xBIieTQWaCdTXwr0o7/AYc588HG0NS+kPUOjx5JOZcd2245yNxuccM8NFaDB?= =?us-ascii?Q?r1AZ0ztXBRT+28ofmrS+dbDOybib/5DEMfjjGW8NHfQY9f+kKgZE2Tu5Q4Nz?= =?us-ascii?Q?zfdQLkinToxAaXpe3xU6N74Q2qxzoReYCXdWxjwfiu7SCx8DUl6ihA3YaSW5?= =?us-ascii?Q?RsgTMjv+W8XitaWwDVZrFOCcXaN3mppWMAVgRoiJguGMQwthI5NWXWrYCsnK?= =?us-ascii?Q?wVAb+RD1mz7yF43zgxV8hOcV09OH5rD7geuKApTfOZNzLhwzE6G0ZUI4U4j1?= =?us-ascii?Q?dI1qLaqTH1xFaB2IwvtMQx3oL6KNmzmNqWaFJMzNor+A5dEqvP/NwmN7w1yH?= =?us-ascii?Q?LxFTC90q/h2LsiCfxWcPLWzf0xXobz1cu+ieyZHthzT9rs77mfCJjHZQsvzN?= =?us-ascii?Q?0eJvy32t17RbnQ0uaITivxDdj12dRXeMA1v1a4Wd/r8MFcnWvFreN8M/hKDf?= =?us-ascii?Q?A0lg+g+5y0bbwkMer0vZgjhKa5AqaACFYE7is44NuGLsUBYxO/WVpMTYhloj?= =?us-ascii?Q?czjuKpHv017vTsj/NclHGt6YQXAw1jBD2PN3D3yLEht01cTx0Hhif+Tf1AaI?= =?us-ascii?Q?XwiCGyscDm43OWVaFCZl5ZH99gxAbC+2SISYflVBfGFUeDoO5upKNkwEAGs5?= =?us-ascii?Q?iiwdqDuQ+NiaB4BQxv5jCJNO3wgFzY5/Ih5m1E9AqBmakXXtiLmyCL84U99+?= =?us-ascii?Q?ZAcp9q4a3VXSSD0/uiqSnNSPDFVJAADS5qtBKxSkqgGMoHj8g5NKVZUHEuiq?= =?us-ascii?Q?BBrJxohTEuk300QnM/040npdFPX5aiOcBn4GbM+s3h8O4OGVb90/GeFweAoI?= =?us-ascii?Q?O43mIcIv04edCYwSi7S3zsjo/1ktcjKwo4crJVCleSzxjd593BwdPq75U8gW?= =?us-ascii?Q?MjY3TOF2xTGKyp98WkyrmjSgqG4EIrjg9cTcFlFc/Kw=3D?=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BY5PR13MB3793BEB508BF330F053952F4DBD20BY5PR13MB3793namp_"
MIME-Version: 1.0
X-OriginatorOrg: Futurewei.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BY5PR13MB3793.namprd13.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 62f8ec00-49b5-4261-c0ab-08d8b0e361ed
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Jan 2021 19:03:11.8696 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 0fee8ff2-a3b2-4018-9c75-3a1d5591fedc
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: AG1vHp5szyhKnAHHVMcc4iZ2NmUDwqARL7ih3xrPGcFX1SWkFypSkcDrkWws/v3eq1klSne1R5I0qggbEz92Fw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR13MB3892
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/N3J7jn9_E22eHbO84uwRzlDkt7Y>
Subject: Re: [netconf] [Editorial Errata Reported] RFC8650 (6379)
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Jan 2021 19:03:17 -0000

--_000_BY5PR13MB3793BEB508BF330F053952F4DBD20BY5PR13MB3793namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

+1
--- Alex

From: netconf <netconf-bounces@ietf.org> On Behalf Of Reshad Rahman
Sent: Monday, January 4, 2021 7:05 AM
To: RFC Errata System <rfc-editor@rfc-editor.org>; Einar Nilsen-Nygaard (ei=
narnn) <einarnn@cisco.com>; ludwig@clemm.org; andy@yumaworks.com; warren@ku=
mari.net; Rob Wilton (rwilton) <rwilton@cisco.com>; kent+ietf@watsen.net; m=
jethanandani@gmail.com; Eric Voit (evoit) <evoit@cisco.com>
Cc: netconf@ietf.org
Subject: Re: [netconf] [Editorial Errata Reported] RFC8650 (6379)

I agree.

On Monday, January 4, 2021, 10:02:17 AM EST, Eric Voit (evoit) <evoit@cisco=
.com<mailto:evoit@cisco.com>> wrote:


Adding Reshad's new email.  I think this should be accepted.

Eric


> The following errata report has been submitted for RFC8650, "Dynamic
> Subscription to YANG Events and Datastores over RESTCONF".
>
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid6379<https://nam11.safelinks.protect=
ion.outlook.com/?url=3Dhttps%3A%2F%2Fwww.rfc-editor.org%2Ferrata%2Feid6379&=
data=3D04%7C01%7Calex%40futurewei.com%7C345b0c3c7e0e4ccf086c08d8b0c239a8%7C=
0fee8ff2a3b240189c753a1d5591fedc%7C1%7C0%7C637453695550258969%7CUnknown%7CT=
WFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%=
3D%7C1000&sdata=3DsWTYuRsbL%2BOWiCtgBKsXcyhWUNoahYvGGKrBky93y3I%3D&reserved=
=3D0>
>
> --------------------------------------
> Type: Editorial
> Reported by: Muly Ilan <muly_i@rad.com<mailto:muly_i@rad.com>>
>
> Section: A.1.1
>
> Original Text
> -------------
>    Upon receipt of the successful response, the subscriber does a GET to
>    the provided URI to start the flow of notification messages.  When
>    the publisher receives this, the subscription is moved to the active
>    state (c).
>
>    GET /restconf/subscriptions/22
>
>              Figure 5: "establish-subscription" Subsequent POST
>
> Corrected Text
> --------------
>    Upon receipt of the successful response, the subscriber does a GET to
>    the provided URI to start the flow of notification messages.  When
>    the publisher receives this, the subscription is moved to the active
>    state (c).
>
>    GET /restconf/subscriptions/22
>
>              Figure 5: "establish-subscription" Subsequent GET
>
> Notes
> -----
> Substitute POST by GET in the figure caption
>
> Instructions:
> -------------
> This erratum is currently posted as "Reported". If necessary, please use
> "Reply
> All" to discuss whether it should be verified or rejected. When a decisio=
n
> is
> reached, the verifying party can log in to change the status and edit the
> report, if
> necessary.
>
> --------------------------------------
> RFC8650 (draft-ietf-netconf-restconf-notif-15)
> --------------------------------------
> Title              : Dynamic Subscription to YANG Events and Datastores
> over
> RESTCONF
> Publication Date    : November 2019
> Author(s)          : E. Voit, R. Rahman, E. Nilsen-Nygaard, A. Clemm, A.
> Bierman
> Category            : PROPOSED STANDARD
> Source              : Network Configuration
> Area                : Operations and Management
> Stream              : IETF
> Verifying Party    : IESG

--_000_BY5PR13MB3793BEB508BF330F053952F4DBD20BY5PR13MB3793namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Helvetica;
	panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
span.EmailStyle19
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple" style=3D"word-wrap:brea=
k-word">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">+1<o:p></o:p></p>
<p class=3D"MsoNormal">--- Alex<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b>From:</b> netconf &lt;netconf-bounces@ietf.org&gt=
; <b>On Behalf Of
</b>Reshad Rahman<br>
<b>Sent:</b> Monday, January 4, 2021 7:05 AM<br>
<b>To:</b> RFC Errata System &lt;rfc-editor@rfc-editor.org&gt;; Einar Nilse=
n-Nygaard (einarnn) &lt;einarnn@cisco.com&gt;; ludwig@clemm.org; andy@yumaw=
orks.com; warren@kumari.net; Rob Wilton (rwilton) &lt;rwilton@cisco.com&gt;=
; kent+ietf@watsen.net; mjethanandani@gmail.com; Eric
 Voit (evoit) &lt;evoit@cisco.com&gt;<br>
<b>Cc:</b> netconf@ietf.org<br>
<b>Subject:</b> Re: [netconf] [Editorial Errata Reported] RFC8650 (6379)<o:=
p></o:p></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;">I agree.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;Co=
urier New&quot;"><o:p>&nbsp;</o:p></span></p>
</div>
</div>
<div id=3D"ydp51485877yahoo_quoted_9991555557">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;He=
lvetica&quot;,sans-serif;color:#26282A">On Monday, January 4, 2021, 10:02:1=
7 AM EST, Eric Voit (evoit) &lt;<a href=3D"mailto:evoit@cisco.com">evoit@ci=
sco.com</a>&gt; wrote:
<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;He=
lvetica&quot;,sans-serif;color:#26282A"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;He=
lvetica&quot;,sans-serif;color:#26282A"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;He=
lvetica&quot;,sans-serif;color:#26282A">Adding Reshad's new email.&nbsp; I =
think this should be accepted.<br>
<br>
Eric<o:p></o:p></span></p>
<div id=3D"ydp51485877yqtfd05779">
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:&quot;He=
lvetica&quot;,sans-serif;color:#26282A"><br>
<br>
&gt; The following errata report has been submitted for RFC8650, &quot;Dyna=
mic<br>
&gt; Subscription to YANG Events and Datastores over RESTCONF&quot;.<br>
&gt;<br>
&gt; --------------------------------------<br>
&gt; You may review the report below and at:<br>
&gt; <a href=3D"https://nam11.safelinks.protection.outlook.com/?url=3Dhttps=
%3A%2F%2Fwww.rfc-editor.org%2Ferrata%2Feid6379&amp;data=3D04%7C01%7Calex%40=
futurewei.com%7C345b0c3c7e0e4ccf086c08d8b0c239a8%7C0fee8ff2a3b240189c753a1d=
5591fedc%7C1%7C0%7C637453695550258969%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wL=
jAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&amp;sdata=3DsW=
TYuRsbL%2BOWiCtgBKsXcyhWUNoahYvGGKrBky93y3I%3D&amp;reserved=3D0" target=3D"=
_blank">
https://www.rfc-editor.org/errata/eid6379</a><br>
&gt;<br>
&gt; --------------------------------------<br>
&gt; Type: Editorial<br>
&gt; Reported by: Muly Ilan &lt;<a href=3D"mailto:muly_i@rad.com" target=3D=
"_blank">muly_i@rad.com</a>&gt;<br>
&gt;<br>
&gt; Section: A.1.1<br>
&gt;<br>
&gt; Original Text<br>
&gt; -------------<br>
&gt;&nbsp; &nbsp; Upon receipt of the successful response, the subscriber d=
oes a GET to<br>
&gt;&nbsp; &nbsp; the provided URI to start the flow of notification messag=
es.&nbsp; When<br>
&gt;&nbsp; &nbsp; the publisher receives this, the subscription is moved to=
 the active<br>
&gt;&nbsp; &nbsp; state (c).<br>
&gt;<br>
&gt;&nbsp; &nbsp; GET /restconf/subscriptions/22<br>
&gt;<br>
&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Figure 5: &quot;establ=
ish-subscription&quot; Subsequent POST<br>
&gt;<br>
&gt; Corrected Text<br>
&gt; --------------<br>
&gt;&nbsp; &nbsp; Upon receipt of the successful response, the subscriber d=
oes a GET to<br>
&gt;&nbsp; &nbsp; the provided URI to start the flow of notification messag=
es.&nbsp; When<br>
&gt;&nbsp; &nbsp; the publisher receives this, the subscription is moved to=
 the active<br>
&gt;&nbsp; &nbsp; state (c).<br>
&gt;<br>
&gt;&nbsp; &nbsp; GET /restconf/subscriptions/22<br>
&gt;<br>
&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Figure 5: &quot;establ=
ish-subscription&quot; Subsequent GET<br>
&gt;<br>
&gt; Notes<br>
&gt; -----<br>
&gt; Substitute POST by GET in the figure caption<br>
&gt;<br>
&gt; Instructions:<br>
&gt; -------------<br>
&gt; This erratum is currently posted as &quot;Reported&quot;. If necessary=
, please use <br>
&gt; &quot;Reply<br>
&gt; All&quot; to discuss whether it should be verified or rejected. When a=
 decision <br>
&gt; is<br>
&gt; reached, the verifying party can log in to change the status and edit =
the <br>
&gt; report, if<br>
&gt; necessary.<br>
&gt;<br>
&gt; --------------------------------------<br>
&gt; RFC8650 (draft-ietf-netconf-restconf-notif-15)<br>
&gt; --------------------------------------<br>
&gt; Title&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : Dynamic Subscr=
iption to YANG Events and Datastores <br>
&gt; over<br>
&gt; RESTCONF<br>
&gt; Publication Date&nbsp; &nbsp; : November 2019<br>
&gt; Author(s)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : E. Voit, R. Rahman, E. N=
ilsen-Nygaard, A. Clemm, A. <br>
&gt; Bierman<br>
&gt; Category&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : PROPOSED STANDARD<=
br>
&gt; Source&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : Network Confi=
guration<br>
&gt; Area&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : Operatio=
ns and Management<br>
&gt; Stream&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : IETF<br>
&gt; Verifying Party&nbsp; &nbsp; : IESG<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>

--_000_BY5PR13MB3793BEB508BF330F053952F4DBD20BY5PR13MB3793namp_--


From nobody Tue Jan  5 02:06:14 2021
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 955433A09C5; Tue,  5 Jan 2021 02:06:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VZJd2OIxps-Z; Tue,  5 Jan 2021 02:06:07 -0800 (PST)
Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6EF323A09C1; Tue,  5 Jan 2021 02:06:07 -0800 (PST)
Received: by rfc-editor.org (Postfix, from userid 30) id 363FDF40760; Tue,  5 Jan 2021 02:06:05 -0800 (PST)
To: muly_i@rad.com, evoit@cisco.com, rrahman@cisco.com, einarnn@cisco.com, ludwig@clemm.org, andy@yumaworks.com
X-PHP-Originating-Script: 1005:errata_mail_lib.php
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: rwilton@cisco.com, iesg@ietf.org, netconf@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset=UTF-8
Message-Id: <20210105100605.363FDF40760@rfc-editor.org>
Date: Tue,  5 Jan 2021 02:06:05 -0800 (PST)
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/UpAXWxIALSpI6-X0qHgIj-SsNy4>
Subject: [netconf] [Errata Verified] RFC8650 (6379)
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Jan 2021 10:06:09 -0000

The following errata report has been verified for RFC8650,
"Dynamic Subscription to YANG Events and Datastores over RESTCONF". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid6379

--------------------------------------
Status: Verified
Type: Editorial

Reported by: Muly Ilan <muly_i@rad.com>
Date Reported: 2021-01-03
Verified by: Rob Wilton (IESG)

Section: A.1.1

Original Text
-------------
   Upon receipt of the successful response, the subscriber does a GET to
   the provided URI to start the flow of notification messages.  When
   the publisher receives this, the subscription is moved to the active
   state (c).

   GET /restconf/subscriptions/22

             Figure 5: "establish-subscription" Subsequent POST

Corrected Text
--------------
   Upon receipt of the successful response, the subscriber does a GET to
   the provided URI to start the flow of notification messages.  When
   the publisher receives this, the subscription is moved to the active
   state (c).

   GET /restconf/subscriptions/22

             Figure 5: "establish-subscription" Subsequent GET

Notes
-----
Substitute POST by GET in the figure caption

--------------------------------------
RFC8650 (draft-ietf-netconf-restconf-notif-15)
--------------------------------------
Title               : Dynamic Subscription to YANG Events and Datastores over RESTCONF
Publication Date    : November 2019
Author(s)           : E. Voit, R. Rahman, E. Nilsen-Nygaard, A. Clemm, A. Bierman
Category            : PROPOSED STANDARD
Source              : Network Configuration
Area                : Operations and Management
Stream              : IETF
Verifying Party     : IESG


From nobody Tue Jan  5 02:06:50 2021
Return-Path: <rwilton@cisco.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE6B63A09CD for <netconf@ietfa.amsl.com>; Tue,  5 Jan 2021 02:06:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.519
X-Spam-Level: 
X-Spam-Status: No, score=-9.519 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=FGIHKxGG; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=vlkTvQTx
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FD4IW8Z3tV_P for <netconf@ietfa.amsl.com>; Tue,  5 Jan 2021 02:06:46 -0800 (PST)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC4F93A09C1 for <netconf@ietf.org>; Tue,  5 Jan 2021 02:06:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=14496; q=dns/txt; s=iport; t=1609841206; x=1611050806; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=PoqV15OdVPAHUp92oimo2NxlFbJwQ2bSYP33voofiJ4=; b=FGIHKxGGNNaiXhKMv0o1tDJrWgjvBR8IcOH65SmsBNl1gN8dydPZp3wg oG1AaBk4lWKcO2KRdG8+I5K6RuMoHaM8kcuNtm5J+tLqFWHWt59UtFOF0 hZCf01WLto4Woci0Z2JmGf4jHg5dn+akqOT093ITHskeBdIitXXhTCYmP c=;
X-IPAS-Result: =?us-ascii?q?A0DaAgC+N/RfkJBdJa1iHAEBAQEBAQcBARIBAQQEAQFAg?= =?us-ascii?q?U+BIzBRfVsvLgqHfQONZQOCcIcrhHKFD4RzgUKBEQNUCwEBAQ0BASILAgQBA?= =?us-ascii?q?YFsgl4CgW8CJTgTAgMBAQEDAgMBAQEBBQEBAQIBBgQUAQEBAQEBhjgMhXMBA?= =?us-ascii?q?QEDARIbEwEBNwEECwIBCA4DBAEBDhoHIRETAQkIAgQBDQUIGoJ/BAEBgX5XA?= =?us-ascii?q?w4gAQMLo0ICgTyIaXSBNIMEAQEGhQMDCguCEAMGgTiCdYUCgUCDciYbgUE/g?= =?us-ascii?q?RFDglY+gQSBF0IEF4ERARIBIysJgxaCLIFpXyBEU4EBFgcUIisRR4xaCYJwE?= =?us-ascii?q?BmKMIM0iHyQZ1gKgnaJKo0VBoU5gymKK5UDlA6OC45xGYQlAgQCBAUCDgEBB?= =?us-ascii?q?oFtIQ9acHAVGoMKEz0XAg2OIRqDV4UUhQkBOnQCAQEBMgIGCgEBAwl8iyABg?= =?us-ascii?q?RABAQ?=
IronPort-PHdr: =?us-ascii?q?9a23=3AsZnnvhDWg7v2ftEPCb9iUyQJPHJ1sqjoPgMT9p?= =?us-ascii?q?ssgq5PdaLm5Zn5IUjD/qw31g3HQJnG8f9bhuuQuKflCiQM4peE5XYFdpEEFx?= =?us-ascii?q?oIkt4fkAFoBsmZQVb6I/jnY21ffoxCWVZp8mv9PR1TH8DzNFPPvmCo4CEfG1?= =?us-ascii?q?P0Mg8mbujwE5TZ2sKw0e368pbPYgJO0Ty6Z746LBi/oQjL8McMho43IacqwR?= =?us-ascii?q?yPqXxNKOk=3D?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="5.78,476,1599523200";  d="scan'208,217";a="623067801"
Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 05 Jan 2021 10:06:45 +0000
Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by rcdn-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id 105A6jwk008439 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 5 Jan 2021 10:06:45 GMT
Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 5 Jan 2021 04:06:45 -0600
Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 5 Jan 2021 04:06:44 -0600
Received: from NAM04-BN8-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Tue, 5 Jan 2021 04:06:44 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DG2aF50BVSPE6cwsCJo0G2y1Z5WE2qtZkNYBrKuBx2JXoizdNQgKHtzdkEgj4zHbeXu6fbzujNl01Eto8AsNx0Bx7+LHdh8IBtp0u6Kf2ZwNZMLjSTcMoiKPv+mh1Qc3Xn+dKkaUL4b6Ise7BAqD5he9nHj0cfjjVlsFfCnqAkcNzeghBTvIDRWMlqtGWdX13YeXojPmBocwrskIqtPQXdOOPL3pfvRia/kC/9VOs/5cBMY0611xJGF/gB/TbhXiuLehi4pjIyjBT8Q1jFdXJyN2LZ1NW04r2IEUvaqRcWk9WeEywwmDKzkP0loz8ewyguY9N3Y073AkPNEQLlzwuw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JGpUiKDpMo2cvXrctwI/I7nN12tc1pPE+pkPFB/358U=; b=A1rbWQIKzxG8dbgtERTZ3R5w9i9XpDajQ0v0Kii8KsXplfCEA1QhKD1meSad66OQgHmUKLkD6moIUvLXfFwQnzGQXaTAQFnqG7DMoWiuVR/0fVIOI6FKfmK/Bgqi7cdeXQJCreSK/INoAHlr7sA+8d/dhGLycHyhed+Z/0jMQYVKxsvtl6+NKU9izAcL3a1hghrkPEgD51Qb+qfGafU7ZmnBXyY5WzJqaWTqBaGAKcUtJXYmWJ8ZvKWYMIP27s4AniwbkpOKyBcLoEZyVIYozHadiRHWvTYeL2vtscFyGg//bUuzDbHTIJq4mfkjaKC46IxBcOHFpzyJ93PyKLpbhw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com;  s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JGpUiKDpMo2cvXrctwI/I7nN12tc1pPE+pkPFB/358U=; b=vlkTvQTxhmoS3IeswsdsM01CyzYOXjHrDQQPMzpPNBDN0Zcl6tklkaMgJK+4TkyZcnOIFNIhTJj2/IYV6fBw5gsC0SNOYo/+csGme26g7Sh4YkmUQuPmFS7jQOhWZKpmGPmviIm2Z+TyRZjpFQXBGCHXAFN9ajuAucHHduwbV/o=
Received: from MN2PR11MB4366.namprd11.prod.outlook.com (2603:10b6:208:190::17) by MN2PR11MB4477.namprd11.prod.outlook.com (2603:10b6:208:17a::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3721.22; Tue, 5 Jan 2021 10:06:43 +0000
Received: from MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::3c82:1fa3:2b18:3afb]) by MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::3c82:1fa3:2b18:3afb%6]) with mapi id 15.20.3721.024; Tue, 5 Jan 2021 10:06:43 +0000
From: "Rob Wilton (rwilton)" <rwilton@cisco.com>
To: Alexander Clemm <alex@futurewei.com>, Reshad Rahman <reshad@yahoo.com>, RFC Errata System <rfc-editor@rfc-editor.org>, "Einar Nilsen-Nygaard (einarnn)" <einarnn@cisco.com>, "ludwig@clemm.org" <ludwig@clemm.org>, "andy@yumaworks.com" <andy@yumaworks.com>, "warren@kumari.net" <warren@kumari.net>, "kent+ietf@watsen.net" <kent+ietf@watsen.net>, "mjethanandani@gmail.com" <mjethanandani@gmail.com>, "Eric Voit (evoit)" <evoit@cisco.com>
CC: "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [netconf] [Editorial Errata Reported] RFC8650 (6379)
Thread-Index: AQHW4fjEWSao3Uj84EWnw4tI16HYJ6oXkTcAgAAArYCAAEKogIAA/E+Q
Date: Tue, 5 Jan 2021 10:06:43 +0000
Message-ID: <MN2PR11MB4366D5E5806A6AE44CB4F886B5D10@MN2PR11MB4366.namprd11.prod.outlook.com>
References: <20210103174910.C46A5F406D1@rfc-editor.org> <MWHSPR01MB3035BFD62A2E08C188C5406A1D20@MWHSPR01MB303.namprd11.prod.outlook.com> <1750813163.4213671.1609772677514@mail.yahoo.com> <BY5PR13MB3793BEB508BF330F053952F4DBD20@BY5PR13MB3793.namprd13.prod.outlook.com>
In-Reply-To: <BY5PR13MB3793BEB508BF330F053952F4DBD20@BY5PR13MB3793.namprd13.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: futurewei.com; dkim=none (message not signed) header.d=none;futurewei.com; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [82.12.233.180]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: c5cb0b90-06c3-4e42-9b84-08d8b1619a56
x-ms-traffictypediagnostic: MN2PR11MB4477:
x-ms-exchange-transport-forked: True
x-microsoft-antispam-prvs: <MN2PR11MB447707E186C28BADB466F10BB5D10@MN2PR11MB4477.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:6430;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:MN2PR11MB4366.namprd11.prod.outlook.com; PTR:; CAT:NONE;  SFS:(346002)(396003)(39860400002)(376002)(366004)(136003)(64756008)(66556008)(166002)(66946007)(4326008)(53546011)(8676002)(186003)(5660300002)(921005)(66476007)(2906002)(86362001)(6506007)(966005)(110136005)(6636002)(478600001)(26005)(66446008)(52536014)(9686003)(71200400001)(7696005)(55016002)(83380400001)(316002)(8936002)(33656002)(76116006); DIR:OUT; SFP:1101; 
x-ms-exchange-antispam-messagedata: =?us-ascii?Q?hy5njZhDc2Pi/DUtGBpVSzANKpW1kgO+vmXsNlT8x47WkApWX7fGKHeKj+ax?= =?us-ascii?Q?83KlEjW5TdfxeH0gyWYtYwVkx9Lw57knq+QiteNELWCLYtR6BHe0wUzyzVRB?= =?us-ascii?Q?B7PL3cATn6YWmxMMOmifJ3CgHvHeFcEOPORZWFr8cB5f8fjZWRhyRVjnw3Om?= =?us-ascii?Q?gBVDWJ9R9blSFT6OpTfsmlaVXgaYcayV2iYb5wdZQsmHj3ie7sFojzJ9+QYq?= =?us-ascii?Q?j248+fN/JggBc37DrXnq0WkfjHoFWICy+cPByzVbH0LnHmK/+M7xQRWLTRWz?= =?us-ascii?Q?GHnwUEPM48t1oGHhQlNVlvqEPQUpgCJZZlQ5biiiahd/G/N2BvOE90KpcdOl?= =?us-ascii?Q?RcujtSbl3+5AWVtK0JFjSsxHA+4lzDElIPUZaKnDhoIPCAn5gP2MN+xd0n5S?= =?us-ascii?Q?pBR8aPybeYjYC+Xdmi7Wrh753x9Y9oxJD5I0id8q58QB5gExhuTDewq61WNL?= =?us-ascii?Q?V4i1JZmextO8eFYzsLdjBym2NyaeqnGgcGHiy9aEIld7bNsUMkSLaZ+QdogZ?= =?us-ascii?Q?ob+YB4dlVGqcPRpmRTANO1e/BW7z+CenFO+Y6jwrqqqQm7uEz8kvSwczsPST?= =?us-ascii?Q?bYKZxamOdxtYQTXLy+GCO6FlVfmry+UiDHSpFwrOmKEGycyCeIQTLL58tio4?= =?us-ascii?Q?S2jKTEfXcujgYaPUoSRZxscHkCCce6zGGYAFrFJ0gsC7KMUeLOd4BYc+1Drh?= =?us-ascii?Q?ui5KZQfFrUu3CdMzSvSUiqITg7SbH0N/xxlX1kAWvYYlQIRf55IUGe47pagc?= =?us-ascii?Q?q1Lf5ZfUoZhzN8eu0dmbuwHxzPakmZzvZgFD9eEBFXScWWRrThL82HwvgIiR?= =?us-ascii?Q?pZjqThs9dS8ZCQ8g64iQ9LGOgduzbLF+ZRmvEtE8mRd4TQPZIE6fiVJpJM9q?= =?us-ascii?Q?uyncP0RpG3352Pjvv9SggGQOcVWjrBXTZUROmth1x+rJ0SxQVD0cEfyFPTUc?= =?us-ascii?Q?jRsqrZxRraUcz21jG5iUYMzrQIqu++Eg/dqAXyyHpK8=3D?=
Content-Type: multipart/alternative; boundary="_000_MN2PR11MB4366D5E5806A6AE44CB4F886B5D10MN2PR11MB4366namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR11MB4366.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: c5cb0b90-06c3-4e42-9b84-08d8b1619a56
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jan 2021 10:06:43.0657 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 00BRac3nkJA18kEUgBQp7uY+UzMD0wMEXEhLID5ijP++RK7G4RxCGEGT1O3Cw9zawBefqmjZ0MC+LD+jSYYCXA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4477
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.12, xch-aln-002.cisco.com
X-Outbound-Node: rcdn-core-8.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/UDQ4f5_tPebIWrnaT3I22tGBKWg>
Subject: Re: [netconf] [Editorial Errata Reported] RFC8650 (6379)
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Jan 2021 10:06:49 -0000

--_000_MN2PR11MB4366D5E5806A6AE44CB4F886B5D10MN2PR11MB4366namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Thanks all for confirming.  I have verified this errata.

Regards,
Rob


From: Alexander Clemm <alex@futurewei.com>
Sent: 04 January 2021 19:03
To: Reshad Rahman <reshad@yahoo.com>; RFC Errata System <rfc-editor@rfc-edi=
tor.org>; Einar Nilsen-Nygaard (einarnn) <einarnn@cisco.com>; ludwig@clemm.=
org; andy@yumaworks.com; warren@kumari.net; Rob Wilton (rwilton) <rwilton@c=
isco.com>; kent+ietf@watsen.net; mjethanandani@gmail.com; Eric Voit (evoit)=
 <evoit@cisco.com>
Cc: netconf@ietf.org
Subject: RE: [netconf] [Editorial Errata Reported] RFC8650 (6379)

+1
--- Alex

From: netconf <netconf-bounces@ietf.org<mailto:netconf-bounces@ietf.org>> O=
n Behalf Of Reshad Rahman
Sent: Monday, January 4, 2021 7:05 AM
To: RFC Errata System <rfc-editor@rfc-editor.org<mailto:rfc-editor@rfc-edit=
or.org>>; Einar Nilsen-Nygaard (einarnn) <einarnn@cisco.com<mailto:einarnn@=
cisco.com>>; ludwig@clemm.org<mailto:ludwig@clemm.org>; andy@yumaworks.com<=
mailto:andy@yumaworks.com>; warren@kumari.net<mailto:warren@kumari.net>; Ro=
b Wilton (rwilton) <rwilton@cisco.com<mailto:rwilton@cisco.com>>; kent+ietf=
@watsen.net<mailto:kent+ietf@watsen.net>; mjethanandani@gmail.com<mailto:mj=
ethanandani@gmail.com>; Eric Voit (evoit) <evoit@cisco.com<mailto:evoit@cis=
co.com>>
Cc: netconf@ietf.org<mailto:netconf@ietf.org>
Subject: Re: [netconf] [Editorial Errata Reported] RFC8650 (6379)

I agree.

On Monday, January 4, 2021, 10:02:17 AM EST, Eric Voit (evoit) <evoit@cisco=
.com<mailto:evoit@cisco.com>> wrote:


Adding Reshad's new email.  I think this should be accepted.

Eric


> The following errata report has been submitted for RFC8650, "Dynamic
> Subscription to YANG Events and Datastores over RESTCONF".
>
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid6379<https://nam11.safelinks.protect=
ion.outlook.com/?url=3Dhttps%3A%2F%2Fwww.rfc-editor.org%2Ferrata%2Feid6379&=
data=3D04%7C01%7Calex%40futurewei.com%7C345b0c3c7e0e4ccf086c08d8b0c239a8%7C=
0fee8ff2a3b240189c753a1d5591fedc%7C1%7C0%7C637453695550258969%7CUnknown%7CT=
WFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%=
3D%7C1000&sdata=3DsWTYuRsbL%2BOWiCtgBKsXcyhWUNoahYvGGKrBky93y3I%3D&reserved=
=3D0>
>
> --------------------------------------
> Type: Editorial
> Reported by: Muly Ilan <muly_i@rad.com<mailto:muly_i@rad.com>>
>
> Section: A.1.1
>
> Original Text
> -------------
>    Upon receipt of the successful response, the subscriber does a GET to
>    the provided URI to start the flow of notification messages.  When
>    the publisher receives this, the subscription is moved to the active
>    state (c).
>
>    GET /restconf/subscriptions/22
>
>              Figure 5: "establish-subscription" Subsequent POST
>
> Corrected Text
> --------------
>    Upon receipt of the successful response, the subscriber does a GET to
>    the provided URI to start the flow of notification messages.  When
>    the publisher receives this, the subscription is moved to the active
>    state (c).
>
>    GET /restconf/subscriptions/22
>
>              Figure 5: "establish-subscription" Subsequent GET
>
> Notes
> -----
> Substitute POST by GET in the figure caption
>
> Instructions:
> -------------
> This erratum is currently posted as "Reported". If necessary, please use
> "Reply
> All" to discuss whether it should be verified or rejected. When a decisio=
n
> is
> reached, the verifying party can log in to change the status and edit the
> report, if
> necessary.
>
> --------------------------------------
> RFC8650 (draft-ietf-netconf-restconf-notif-15)
> --------------------------------------
> Title              : Dynamic Subscription to YANG Events and Datastores
> over
> RESTCONF
> Publication Date    : November 2019
> Author(s)          : E. Voit, R. Rahman, E. Nilsen-Nygaard, A. Clemm, A.
> Bierman
> Category            : PROPOSED STANDARD
> Source              : Network Configuration
> Area                : Operations and Management
> Stream              : IETF
> Verifying Party    : IESG

--_000_MN2PR11MB4366D5E5806A6AE44CB4F886B5D10MN2PR11MB4366namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Helvetica;
	panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
span.EmailStyle20
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-GB" link=3D"blue" vlink=3D"purple" style=3D"word-wrap:brea=
k-word">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language:EN-US">Thanks al=
l for confirming.&nbsp; I have verified this errata.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language:EN-US"><o:p>&nbs=
p;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language:EN-US">Regards,<=
o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language:EN-US">Rob<o:p><=
/o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language:EN-US"><o:p>&nbs=
p;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language:EN-US"><o:p>&nbs=
p;</o:p></span></p>
<div style=3D"border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm =
4.0pt">
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm =
0cm 0cm">
<p class=3D"MsoNormal"><b><span lang=3D"EN-US">From:</span></b><span lang=
=3D"EN-US"> Alexander Clemm &lt;alex@futurewei.com&gt;
<br>
<b>Sent:</b> 04 January 2021 19:03<br>
<b>To:</b> Reshad Rahman &lt;reshad@yahoo.com&gt;; RFC Errata System &lt;rf=
c-editor@rfc-editor.org&gt;; Einar Nilsen-Nygaard (einarnn) &lt;einarnn@cis=
co.com&gt;; ludwig@clemm.org; andy@yumaworks.com; warren@kumari.net; Rob Wi=
lton (rwilton) &lt;rwilton@cisco.com&gt;; kent+ietf@watsen.net;
 mjethanandani@gmail.com; Eric Voit (evoit) &lt;evoit@cisco.com&gt;<br>
<b>Cc:</b> netconf@ietf.org<br>
<b>Subject:</b> RE: [netconf] [Editorial Errata Reported] RFC8650 (6379)<o:=
p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">+1<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">--- Alex<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm =
0cm 0cm">
<p class=3D"MsoNormal"><b><span lang=3D"EN-US">From:</span></b><span lang=
=3D"EN-US"> netconf &lt;<a href=3D"mailto:netconf-bounces@ietf.org">netconf=
-bounces@ietf.org</a>&gt;
<b>On Behalf Of </b>Reshad Rahman<br>
<b>Sent:</b> Monday, January 4, 2021 7:05 AM<br>
<b>To:</b> RFC Errata System &lt;<a href=3D"mailto:rfc-editor@rfc-editor.or=
g">rfc-editor@rfc-editor.org</a>&gt;; Einar Nilsen-Nygaard (einarnn) &lt;<a=
 href=3D"mailto:einarnn@cisco.com">einarnn@cisco.com</a>&gt;;
<a href=3D"mailto:ludwig@clemm.org">ludwig@clemm.org</a>; <a href=3D"mailto=
:andy@yumaworks.com">
andy@yumaworks.com</a>; <a href=3D"mailto:warren@kumari.net">warren@kumari.=
net</a>; Rob Wilton (rwilton) &lt;<a href=3D"mailto:rwilton@cisco.com">rwil=
ton@cisco.com</a>&gt;;
<a href=3D"mailto:kent+ietf@watsen.net">kent+ietf@watsen.net</a>; <a href=
=3D"mailto:mjethanandani@gmail.com">
mjethanandani@gmail.com</a>; Eric Voit (evoit) &lt;<a href=3D"mailto:evoit@=
cisco.com">evoit@cisco.com</a>&gt;<br>
<b>Cc:</b> <a href=3D"mailto:netconf@ietf.org">netconf@ietf.org</a><br>
<b>Subject:</b> Re: [netconf] [Editorial Errata Reported] RFC8650 (6379)<o:=
p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;">I agree.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-=
family:&quot;Courier New&quot;"><o:p>&nbsp;</o:p></span></p>
</div>
</div>
<div id=3D"ydp51485877yahoo_quoted_9991555557">
<div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-=
family:&quot;Helvetica&quot;,sans-serif;color:#26282A">On Monday, January 4=
, 2021, 10:02:17 AM EST, Eric Voit (evoit) &lt;<a href=3D"mailto:evoit@cisc=
o.com">evoit@cisco.com</a>&gt; wrote:
<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-=
family:&quot;Helvetica&quot;,sans-serif;color:#26282A"><o:p>&nbsp;</o:p></s=
pan></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-=
family:&quot;Helvetica&quot;,sans-serif;color:#26282A"><o:p>&nbsp;</o:p></s=
pan></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-=
family:&quot;Helvetica&quot;,sans-serif;color:#26282A">Adding Reshad's new =
email.&nbsp; I think this should be accepted.<br>
<br>
Eric<o:p></o:p></span></p>
<div id=3D"ydp51485877yqtfd05779">
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-=
family:&quot;Helvetica&quot;,sans-serif;color:#26282A"><br>
<br>
&gt; The following errata report has been submitted for RFC8650, &quot;Dyna=
mic<br>
&gt; Subscription to YANG Events and Datastores over RESTCONF&quot;.<br>
&gt;<br>
&gt; --------------------------------------<br>
&gt; You may review the report below and at:<br>
&gt; <a href=3D"https://nam11.safelinks.protection.outlook.com/?url=3Dhttps=
%3A%2F%2Fwww.rfc-editor.org%2Ferrata%2Feid6379&amp;data=3D04%7C01%7Calex%40=
futurewei.com%7C345b0c3c7e0e4ccf086c08d8b0c239a8%7C0fee8ff2a3b240189c753a1d=
5591fedc%7C1%7C0%7C637453695550258969%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wL=
jAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&amp;sdata=3DsW=
TYuRsbL%2BOWiCtgBKsXcyhWUNoahYvGGKrBky93y3I%3D&amp;reserved=3D0" target=3D"=
_blank">
https://www.rfc-editor.org/errata/eid6379</a><br>
&gt;<br>
&gt; --------------------------------------<br>
&gt; Type: Editorial<br>
&gt; Reported by: Muly Ilan &lt;<a href=3D"mailto:muly_i@rad.com" target=3D=
"_blank">muly_i@rad.com</a>&gt;<br>
&gt;<br>
&gt; Section: A.1.1<br>
&gt;<br>
&gt; Original Text<br>
&gt; -------------<br>
&gt;&nbsp; &nbsp; Upon receipt of the successful response, the subscriber d=
oes a GET to<br>
&gt;&nbsp; &nbsp; the provided URI to start the flow of notification messag=
es.&nbsp; When<br>
&gt;&nbsp; &nbsp; the publisher receives this, the subscription is moved to=
 the active<br>
&gt;&nbsp; &nbsp; state (c).<br>
&gt;<br>
&gt;&nbsp; &nbsp; GET /restconf/subscriptions/22<br>
&gt;<br>
&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Figure 5: &quot;establ=
ish-subscription&quot; Subsequent POST<br>
&gt;<br>
&gt; Corrected Text<br>
&gt; --------------<br>
&gt;&nbsp; &nbsp; Upon receipt of the successful response, the subscriber d=
oes a GET to<br>
&gt;&nbsp; &nbsp; the provided URI to start the flow of notification messag=
es.&nbsp; When<br>
&gt;&nbsp; &nbsp; the publisher receives this, the subscription is moved to=
 the active<br>
&gt;&nbsp; &nbsp; state (c).<br>
&gt;<br>
&gt;&nbsp; &nbsp; GET /restconf/subscriptions/22<br>
&gt;<br>
&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Figure 5: &quot;establ=
ish-subscription&quot; Subsequent GET<br>
&gt;<br>
&gt; Notes<br>
&gt; -----<br>
&gt; Substitute POST by GET in the figure caption<br>
&gt;<br>
&gt; Instructions:<br>
&gt; -------------<br>
&gt; This erratum is currently posted as &quot;Reported&quot;. If necessary=
, please use <br>
&gt; &quot;Reply<br>
&gt; All&quot; to discuss whether it should be verified or rejected. When a=
 decision <br>
&gt; is<br>
&gt; reached, the verifying party can log in to change the status and edit =
the <br>
&gt; report, if<br>
&gt; necessary.<br>
&gt;<br>
&gt; --------------------------------------<br>
&gt; RFC8650 (draft-ietf-netconf-restconf-notif-15)<br>
&gt; --------------------------------------<br>
&gt; Title&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : Dynamic Subscr=
iption to YANG Events and Datastores <br>
&gt; over<br>
&gt; RESTCONF<br>
&gt; Publication Date&nbsp; &nbsp; : November 2019<br>
&gt; Author(s)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : E. Voit, R. Rahman, E. N=
ilsen-Nygaard, A. Clemm, A. <br>
&gt; Bierman<br>
&gt; Category&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : PROPOSED STANDARD<=
br>
&gt; Source&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : Network Confi=
guration<br>
&gt; Area&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : Operatio=
ns and Management<br>
&gt; Stream&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : IETF<br>
&gt; Verifying Party&nbsp; &nbsp; : IESG<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>

--_000_MN2PR11MB4366D5E5806A6AE44CB4F886B5D10MN2PR11MB4366namp_--


From nobody Mon Jan 11 06:48:26 2021
Return-Path: <rwilton@cisco.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1251C3A0E04 for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 06:48:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.619
X-Spam-Level: 
X-Spam-Status: No, score=-9.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=fu4fdHo3; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=kREg9XaR
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e2KgI5hZG6AN for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 06:48:22 -0800 (PST)
Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C44E3A105A for <netconf@ietf.org>; Mon, 11 Jan 2021 06:47:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=18828; q=dns/txt; s=iport; t=1610376470; x=1611586070; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=48NHg+Hu5eNLgIf+sFsfbifweHNn6ixhBprlKAIQGRM=; b=fu4fdHo39WxpwxyNHDE4N2ywi78ycLQQ5p8+K1hxm3zPqB3xyJsR4Ku0 gItWsF9ADlpBinbOxS2MxSUQ8aZN3fYyR/9GjtrPHJz4DXM0gsu0oLFHM PKN0p5i+rLdnWh92yo0YWu0UQBYTvo4aW+ZB3Jv+2RvAqwgZagPPS08aV I=;
X-IPAS-Result: =?us-ascii?q?A0D6AAAzZPxfkIoNJK1iHQEBAQEJARIBBQUBgX4FAQsBg?= =?us-ascii?q?SIwUX1bLy4KhDWDSAONeJQfhHOBQoERA1QLAQEBDQEBLQIEAQGESgIXgVoCJ?= =?us-ascii?q?TcGDgIDAQEBAwIDAQEBAQUBAQECAQYEFAEBAQEBAYY4DIVzAQEBBCMKEwEBO?= =?us-ascii?q?A8CAQgRBAEBKAMCAgIwFAkIAgQBEgiDHgGBflcDLgEDoncCiiV2gTKDBAEBB?= =?us-ascii?q?oUYGIIQCYE4AYJ0gmxOQwGCTINyJhuBQT+BVIIhNT6EJBw0gmI0giyBaV8wl?= =?us-ascii?q?mWHMYwxjzqCBQqCd5wBgymQDo8plBKcayCENQIEAgQFAg4BAQaBbCIsgS1wF?= =?us-ascii?q?TuCaVAXAg2OIRqDV4pYdAI1AgYBCQEBAwl8i04BgRABAQ?=
IronPort-PHdr: =?us-ascii?q?9a23=3AcmQllRIQbjF9hykqZdmcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeGvKk/iljKXIyd4PVB2KLasKHlDGoH55vJ8HUPa4dFWB?= =?us-ascii?q?JNj8IK1xchD8iIBQyeTrbqYiU2Ed4EWApj+He2Yk5SG8f3IVbVpy764TsbAB?= =?us-ascii?q?6qMw1zK6z8EZLTiMLi0ee09tXTbgxEiSD7b6l1KUC9rB7asY8dho4xJw=3D=?= =?us-ascii?q?3D?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="5.79,338,1602547200";  d="scan'208,217";a="626156024"
Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 11 Jan 2021 14:47:49 +0000
Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by alln-core-5.cisco.com (8.15.2/8.15.2) with ESMTPS id 10BElnXm028563 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 11 Jan 2021 14:47:49 GMT
Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 11 Jan 2021 08:47:48 -0600
Received: from xhs-rcd-003.cisco.com (173.37.227.248) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 11 Jan 2021 08:47:48 -0600
Received: from NAM10-BN7-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 11 Jan 2021 08:47:48 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=LyCZymarj/saA5oSnuho5QV8LVwl8QtJ4AMmwY11xBWqKsHi5L0u5z/DsFzCw401VW4nMeLrvRnyplGotOybBuz4k52G79x6kXy4vWoL1wOuv6pU4Uxa18hZL8/mVWSiT9CDU/F3aKxkBgO1yM4aH6JImUBPHZ4ER+YlLYCzBaiEJQgTeJWtCO2YbtKBaD1eSlRWc2MoM7U3eExWk6PTo43kC3j9l9G84C2XakWJy5E0WP+8+w9EHTnWvmf/cvXhv13GHEnKPsl9S0Lakujqve0CGY9uzy106DLw8a1Z8VkLR5z+UkjYlazcrtYu9pQsbZs5pD2i/ocLQRzEqNqM+g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=48NHg+Hu5eNLgIf+sFsfbifweHNn6ixhBprlKAIQGRM=; b=a3DoqF2jkqTo+1GCVxvcq2ck27oCLG3xZun1LEN4TCEvPm4rkmicbN+7bUocbAMHnhuaGIhnF1FdoDXeazIBajFuz+z8S8Gor+O20inAqpgDvAwG/sVoapTBRldO0I2rMQbaGCQ4Sad4rrq1G7fA+vshndFnUTncnIzWgWJuTnAlVZje0SK27U8wxu0o7jaGtKbxgKHvnQonAx7EqIYQBh3DG9vb2XeDTIbnRok7j6Cll8eQP9rK3z02bKvQ7Qpbgx7cUuQYgXd6v2sOYkEhMOnGEWtBCtCyfAehptBJw+q8qv4lrchS4x4zDoMfZmC3CtdjjxX44VjUU+2owqNeuA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com;  s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=48NHg+Hu5eNLgIf+sFsfbifweHNn6ixhBprlKAIQGRM=; b=kREg9XaRhIv8Np7gFGcNjpqcPD0ZNeHJzLfTvu9+zjV6qcGTw9FCHHuJiLwRaKCSIVWdhNTty2WNSlQdHtLK6fmJc5eJ1gZUCLkRuDRI/kRzt47I/dCtD2mVTFc5NT9da8EiOF0ka5J91MAoaKSQpWXMbU4plCqQwNCPApb3X0A=
Received: from MN2PR11MB4366.namprd11.prod.outlook.com (2603:10b6:208:190::17) by MN2PR11MB4600.namprd11.prod.outlook.com (2603:10b6:208:26e::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3742.6; Mon, 11 Jan 2021 14:47:47 +0000
Received: from MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::3c82:1fa3:2b18:3afb]) by MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::3c82:1fa3:2b18:3afb%6]) with mapi id 15.20.3742.012; Mon, 11 Jan 2021 14:47:47 +0000
From: "Rob Wilton (rwilton)" <rwilton@cisco.com>
To: "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>, "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: Clarification on NETCONF edit-config default-operation replace
Thread-Index: AQHV8up3fXrFXOpHlkeLycpqDm3qRahAQ71ggeQjbAA=
Date: Mon, 11 Jan 2021 14:47:47 +0000
Message-ID: <MN2PR11MB4366168CEFD579AF9DF2BF91B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com>
References: <b586413eb1a939e144191c07ea8267843ac092bd.camel@intl.att.com> <DM5PR08MB2633A0708C35C95BBB73B9029BFE0@DM5PR08MB2633.namprd08.prod.outlook.com>
In-Reply-To: <DM5PR08MB2633A0708C35C95BBB73B9029BFE0@DM5PR08MB2633.namprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: nokia.com; dkim=none (message not signed) header.d=none;nokia.com; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [82.12.233.180]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a7c5b6ab-4bd7-4bf6-6dc8-08d8b63fdce3
x-ms-traffictypediagnostic: MN2PR11MB4600:
x-microsoft-antispam-prvs: <MN2PR11MB460037ECC3E047ECCB6ABE80B5AB0@MN2PR11MB4600.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: MR4ATxLaI8FaNiLA9LOAjJItDIHDkFVx/Aai+x5FJz0EEYyPXH4bLWEQHoADqq6lRYvke/NnzOPREpjohtf2r+Ox8HUgHhfv+mCst2mG2XxkB2JQeZADl0ry4O1/dnN6HELLPViJ/jCF4B8xGPT6bj8YJg94FlRtWvkMETaS5h/S7yajFiDjwdKWqFkb2XDlvkKSt9rxCPH/T4PDujP96b8Arj1kJi9xvhjOrHRuxSbtBUAZ7/nsckaJrT2A8LXNfpM5zfwb0nuvzvq1uJ3VeonIYjvb+pncYXFGHy7CCGs1Nad4LidLr0swur2SFSsMRT+eDecehoRmZMTKZ2FgMj8R7FMzlL+OnRzVqY2cKpPkEn2Xb3q3Rws5cTZ+TIYcrGGEs6hwN0Lv8r7tFOfMhQ==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:MN2PR11MB4366.namprd11.prod.outlook.com; PTR:; CAT:NONE;  SFS:(39860400002)(396003)(136003)(376002)(346002)(366004)(478600001)(9686003)(55016002)(5660300002)(33656002)(8676002)(186003)(7696005)(76116006)(110136005)(26005)(66556008)(66446008)(52536014)(71200400001)(53546011)(64756008)(6506007)(296002)(316002)(66476007)(86362001)(8936002)(83380400001)(66946007)(2906002); DIR:OUT; SFP:1101; 
x-ms-exchange-antispam-messagedata: =?utf-8?B?SnpQRU9qLzRqaG4zWTd2RkRFZWpuUnVoQUlRc1hjOE41c3JUSWZMclhMU2xE?= =?utf-8?B?MVhlSUpXSVYydlprT0p1YlN4YS8ySkJ4Yno5VGtHMmR0Y1hPV1hVVFV1czdx?= =?utf-8?B?MEovdXpnMVZXbzE0M3ZSMDBJYWIwT3RIK3NvWGxyTk1HdzRhaG5LMjVoQk1I?= =?utf-8?B?Y0JGektqZExyR2plTmVEaVBzVG1GUnV4b3pTeDk1NTU2NXNQaDJoM3IxTVlP?= =?utf-8?B?ektIaEJwZXp2RjdSbzhNZFZGNVJhVWpnZXZhUi9yM2x5c2tZNTl4eU1wbWJN?= =?utf-8?B?R1hWbVc0NzFtdVB2THoxRjlBRFVDTm9Pc0VnYWhHaUhLUjB2bW9nQWVoWFRs?= =?utf-8?B?N0ZJdVdJazNGWUpCWE5aSkVIVFdRS29oR3hXS05zQVZrVUVGbEJEQVNPdXBo?= =?utf-8?B?K0R5RlBvdXR1a1FDZkdaN284NTVtK1hpM2U4eGN0Qno1UDNZZzZCV3lGS3dy?= =?utf-8?B?THFDTEdKUVUrejBod1o2K0p4UHJQVy9JbHNqQkxjMVV3UmtQck9mRk52RW1y?= =?utf-8?B?TklmZ2ZaZGlycmlpKzQyWEJzOUtUSy80RkJmMHJIZDBwVXhjYmhxby81SG40?= =?utf-8?B?TFJqdG0zd1RFeGJOT2RRSzJ1QnJLT0RqaDBCWVc3VzVhVTFIWTJCTmZOdlQx?= =?utf-8?B?YlBLQ3U4bVYwTnU2eFZjYkFIYndoSUlUREdQM2toZ0hObFIzQjlBWk4xWTJm?= =?utf-8?B?ZzM3aUUrOVcyZXltZHY4c1E3d0dLWjlNU3Aza3FhbDhGRUN4WEx0eXBtNVMv?= =?utf-8?B?SG5uZVVDbVFKZy9ybEZEcW9zaGxyRDdJTFJ6c0tKMUFCNkk4SHNnYXhsRnZK?= =?utf-8?B?T1pEQ3I0QVlhaktzUmYwNXRFK1RjbHRPbFU2M3JPK056TzJOZW8vNHZ6M043?= =?utf-8?B?a3BpMTRUM3dpSW9JNHAwcThlSnhPM3B2RHNmYm5PMVFjOC9pbnRvZksvV0ZZ?= =?utf-8?B?cXVldWNPVGtoL2hVL3pzNS9PdmwraXphZ0dybEJjbmV1dkxrbWR6V25nWTBK?= =?utf-8?B?eUNManJNUWEveHp2aENSYnczTVdYUmVTSEJOWkczY3RvSFpZQVA2endYQXFO?= =?utf-8?B?d29QbTU0aDU3UXBrS21xQTlIUE1pR0NYZ09QeXpMZ2M3TFAxZ01xdUZHZUVy?= =?utf-8?B?aldvTGlRNENhVXdoY2ZBRndiN3BYNTcrRmpaeGU1RXdtY3NJR1R4UGplcnBI?= =?utf-8?B?MTZ2Si9kazdpdVFYVE05MG9HNEtidWZIWUVKSXlqYUZjU2wzNXdRY1ZFdy9n?= =?utf-8?B?THpWdFJsMFptUXhQdjlLeFovZFZRR2NVUFRyR1FXdHNOR1ErUERablc3SmVr?= =?utf-8?Q?BIgZHEI/MDLhI=3D?=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_MN2PR11MB4366168CEFD579AF9DF2BF91B5AB0MN2PR11MB4366namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR11MB4366.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: a7c5b6ab-4bd7-4bf6-6dc8-08d8b63fdce3
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jan 2021 14:47:47.6293 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: U4EkhTkwH0P8yJCQKt4qTBPqa++KYIG6Qxc8IvjTA8F44vdKboxGd5AJgYVfA4LHqEZVISIeIMYA960eMiHzRQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4600
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.13, xch-rcd-003.cisco.com
X-Outbound-Node: alln-core-5.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/Gco8ygL6hcJbd0KBXoS22O2H2P4>
Subject: Re: [netconf] Clarification on NETCONF edit-config default-operation replace
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Jan 2021 14:48:25 -0000

--_000_MN2PR11MB4366168CEFD579AF9DF2BF91B5AB0MN2PR11MB4366namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_MN2PR11MB4366168CEFD579AF9DF2BF91B5AB0MN2PR11MB4366namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_MN2PR11MB4366168CEFD579AF9DF2BF91B5AB0MN2PR11MB4366namp_--


From nobody Mon Jan 11 07:18:34 2021
Return-Path: <andy@yumaworks.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 280393A0EC6 for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 07:18:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.887
X-Spam-Level: 
X-Spam-Status: No, score=-1.887 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nn1pl-vPIsVl for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 07:18:31 -0800 (PST)
Received: from mail-lj1-x22a.google.com (mail-lj1-x22a.google.com [IPv6:2a00:1450:4864:20::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2499B3A0EC0 for <netconf@ietf.org>; Mon, 11 Jan 2021 07:18:25 -0800 (PST)
Received: by mail-lj1-x22a.google.com with SMTP id f17so3977133ljg.12 for <netconf@ietf.org>; Mon, 11 Jan 2021 07:18:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=YL0tqkyUIuGCdwLmNcJ4WiRMbCC0unXcnxgoHxu93DY=; b=oTjt6ZCbMP7fZHwBIcnqLM+jUJWkSCrNPN4mLsSEBhtq2+tC+4p0XP4VN67997uZ52 EV2TI5Tt9dIISkkjDcjrfvJjBJYrsJGtOfxQxoy/imZr/A0pboJvEPF+WXhbH5LVjXRJ bm57+GtwfuGCeTNw6+6yfsXMFDyLVEc32j/8tfI/MkeFmrlRx3BsgBHMj/9vUUQo3rs9 zSZ/IluFcRRblDgHKoWFyZekmBGmYQA8WUUBK+qZi2anMUd0ihjysIlBICaFFzwpfKGa UcAgpWIP3Ox0xXBnTOosvPRqn9lczG6ToFs5VPJRteXar33dxbdTocWABwewf85Xa2tQ bS/w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=YL0tqkyUIuGCdwLmNcJ4WiRMbCC0unXcnxgoHxu93DY=; b=nAJIK9WYNyUIvY2K8rH4XQ+hkXngbwltErgD2M9R9tQ64y1huTZD8lN1+KndcPgcJf yn7bWcJAlsYAB1Ge8LeodnFgyY5lMT+wuSk7cQUb8JidcXFkUMBKPUQFPehtQDm0wRYA T/+hJ+RDXl1M+eU3Hsa+qZ2qe9oiHzjr70wEhjRC+zkRFSwN8P8+uBY8q06A7AImqzeB oXAj4ZDuo65CgIc1TTz/FUc61VJmpdb1B/EKN2JkuOUEKQBHgunIEMLXXNnPMEDA+2C3 ZNJ31ww59Wmf2wgi9jX9ynY/5eDpnYGAbn1QIeAUXu/EbAw9JiAHva/51eH1iUAr2ejQ hfLA==
X-Gm-Message-State: AOAM531Ku57CXzKwoUa2sRQ3DprJ68wrCLQJ2Cr52r79UgowY2j/SEd1 SOjFR5ZBzXcB/stH2tuO/ok7uYVmmnfUubLk611XBQ==
X-Google-Smtp-Source: ABdhPJyo37Dn6GR+bl+yO8f5BeKC5ysWO3gpxi0locH3m90TPPskSbe+P3BIHbVgwBKS39yT51lQEFYrIXVMutY1gsU=
X-Received: by 2002:a2e:98cc:: with SMTP id s12mr8003353ljj.325.1610378303887;  Mon, 11 Jan 2021 07:18:23 -0800 (PST)
MIME-Version: 1.0
References: <b586413eb1a939e144191c07ea8267843ac092bd.camel@intl.att.com> <DM5PR08MB2633A0708C35C95BBB73B9029BFE0@DM5PR08MB2633.namprd08.prod.outlook.com> <MN2PR11MB4366168CEFD579AF9DF2BF91B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com>
In-Reply-To: <MN2PR11MB4366168CEFD579AF9DF2BF91B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com>
From: Andy Bierman <andy@yumaworks.com>
Date: Mon, 11 Jan 2021 07:18:13 -0800
Message-ID: <CABCOCHRK7G7GL7BWeGqjPnWzOMEJx-kVj=G1SR7SUyV1R1iGQQ@mail.gmail.com>
To: "Rob Wilton (rwilton)" <rwilton=40cisco.com@dmarc.ietf.org>
Cc: "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>, "netconf@ietf.org" <netconf@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000c1efca05b8a16a2f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/yvFGbH1mi6HUgWy2_GMl27E226c>
Subject: Re: [netconf] Clarification on NETCONF edit-config default-operation replace
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Jan 2021 15:18:33 -0000

--000000000000c1efca05b8a16a2f
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, Jan 11, 2021 at 6:48 AM Rob Wilton (rwilton) <rwilton=3D
40cisco.com@dmarc.ietf.org> wrote:

> Sorry, digging up an old thread here.
>
>
>
> I agree with the outcome of the referenced thread, but I wonder whether i=
t
> wouldn=E2=80=99t be helpful to have an errata to clarify the NETCONF RFC,=
 at least
> so that we fix this text in future?
>
>
>
> One of my colleagues read the NETCONF RFC and took =E2=80=9Cdefault-opera=
tion
> replace=E2=80=9D to be equivalent to a copy-config operation.  I also not=
e that
> some of the references on the web seem to the describe the wrong behaviou=
r.
>
>
>
> Specifically, I wonder whether we should change:
>
>
>
>          replace:  The configuration data in the <config> parameter
>
>             completely replaces the configuration in the target
>
>             datastore.  This is useful for loading previously saved
>
>             configuration data.
>
>
>
> to:
>
>
>
>          replace:  The configuration data in the <config> parameter
>
>             replaces the related configuration in the target
>
>             datastore.
>
>
>


No this should not be changed.
It has been in use for  about a decade.
You propose to remove the only way to replace the entire config and make a
huge NBC-change
to provide a redundant mechanism instead.

Regards,
> Rob
>

Andy


>
>
>
>
> *From:* netconf <netconf-bounces@ietf.org> *On Behalf Of *Sterne, Jason
> (Nokia - CA/Ottawa)
> *Sent:* 09 March 2020 13:20
> *To:* Ivory, William <william.ivory@intl.att.com>; netconf@ietf.org
> *Subject:* Re: [netconf] Clarification on NETCONF edit-config
> default-operation replace
>
>
>
> Hello William,
>
>
>
> There was a discussion about this on the list a few years ago.  See the
> thread with subject:
>
>
>
> Clarification request for NETCONF edit-config default-operation replace
>
>
>
> An edit-config can't be used as a replacement for a full "replace at root=
"
> of the entire config like a copy-config.
>
>
>
> Jason
>
>
>
> *From:* netconf <netconf-bounces@ietf.org> *On Behalf Of *Ivory, William
> *Sent:* Thursday, March 5, 2020 7:35 AM
> *To:* netconf@ietf.org
> *Subject:* [netconf] Clarification on NETCONF edit-config
> default-operation replace
>
>
>
> Hi,
>
>
>
> I'd appreciate clarification on the following NETCONF operations relating
> to copy-config and edit-config:
>
>
>
> My understanding is as follows:
>
>
>
> - <copy-config> completely replaces any existing configuration
>
>
>
> - <edit-config> with operation:replace attribute will replace any existin=
g
> configuration with new configuration for nodes specified inside the
> <config> operation. The attribute may be at any level in the request, and
> applies only to the node specified and nodes under that node.
>
>
>
> Where I'm not clear is the <edit-config> operation with the
> default-operation parameter set to replace. RFC 6241 section 7.2 states:
>
>
>
>          replace:  The configuration data in the <config> parameter
>
>             completely replaces the configuration in the target
>
>             datastore.  This is useful for loading previously saved
>
>             configuration data.
>
>
>
> Does this mean that this is the equivalent of the <copy-config> operation=
,
> ie ALL existing configuration should be removed, even if there is no
> explicit replacement in the new <config> section?
>
>
>
> Thanks,
>
>
>
> William
>
>
>
> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf
>

--000000000000c1efca05b8a16a2f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Mon, Jan 11, 2021 at 6:48 AM Rob W=
ilton (rwilton) &lt;rwilton=3D<a href=3D"mailto:40cisco.com@dmarc.ietf.org"=
>40cisco.com@dmarc.ietf.org</a>&gt; wrote:<br></div><blockquote class=3D"gm=
ail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,=
204,204);padding-left:1ex">





<div lang=3D"EN-GB" style=3D"overflow-wrap: break-word;">
<div class=3D"gmail-m_-724265613862137036WordSection1">
<p class=3D"MsoNormal"><span>Sorry, digging up an old thread here.<u></u><u=
></u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span>I agree with the outcome of the referenced thr=
ead, but I wonder whether it wouldn=E2=80=99t be helpful to have an errata =
to clarify the NETCONF RFC, at least so that we fix this text in future?<u>=
</u><u></u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span>One of my colleagues read the NETCONF RFC and =
took =E2=80=9Cdefault-operation replace=E2=80=9D to be equivalent to a copy=
-config operation.=C2=A0 I also note that some of the references on the web=
 seem to the describe
 the wrong behaviour.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span>Specifically, I wonder whether we should chang=
e:<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =
replace:=C2=A0 The configuration data in the &lt;config&gt; parameter<u></u=
><u></u></span></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 completely replaces the configuration in the target<u></=
u><u></u></span></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 datastore.=C2=A0 This is useful for loading previously s=
aved<u></u><u></u></span></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 configuration data.<u></u><u></u></span></pre>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span>to:<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =
replace:=C2=A0 The configuration data in the &lt;config&gt; parameter<u></u=
><u></u></span></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 replaces the related configuration in the target<u></u><=
u></u></span></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 datastore.<u></u><u></u></span></pre>
<p class=3D"MsoNormal"><span><u></u>=C2=A0</span></p></div></div></blockquo=
te><div><br></div><div><br></div><div>No this should not be changed.</div><=
div>It has been in use for=C2=A0 about a decade.</div><div>You propose to r=
emove the only way to replace the entire config and make a huge NBC-change<=
/div><div>to provide a redundant mechanism instead.</div><div><br></div><bl=
ockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-lef=
t:1px solid rgb(204,204,204);padding-left:1ex"><div lang=3D"EN-GB" style=3D=
"overflow-wrap: break-word;"><div class=3D"gmail-m_-724265613862137036WordS=
ection1"><p class=3D"MsoNormal"><span><u></u></span></p>
<p class=3D"MsoNormal"><span>Regards,<br>
Rob</span></p></div></div></blockquote><div><br></div><div>Andy</div><div>=
=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0=
.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang=3D"=
EN-GB" style=3D"overflow-wrap: break-word;"><div class=3D"gmail-m_-72426561=
3862137036WordSection1"><p class=3D"MsoNormal"><span><u></u><u></u></span><=
/p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<div style=3D"border-top:none;border-right:none;border-bottom:none;border-l=
eft:1.5pt solid blue;padding:0cm 0cm 0cm 4pt">
<div>
<div style=3D"border-right:none;border-bottom:none;border-left:none;border-=
top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class=3D"MsoNormal"><b><span lang=3D"EN-US">From:</span></b><span lang=
=3D"EN-US"> netconf &lt;<a href=3D"mailto:netconf-bounces@ietf.org" target=
=3D"_blank">netconf-bounces@ietf.org</a>&gt;
<b>On Behalf Of </b>Sterne, Jason (Nokia - CA/Ottawa)<br>
<b>Sent:</b> 09 March 2020 13:20<br>
<b>To:</b> Ivory, William &lt;<a href=3D"mailto:william.ivory@intl.att.com"=
 target=3D"_blank">william.ivory@intl.att.com</a>&gt;; <a href=3D"mailto:ne=
tconf@ietf.org" target=3D"_blank">netconf@ietf.org</a><br>
<b>Subject:</b> Re: [netconf] Clarification on NETCONF edit-config default-=
operation replace<u></u><u></u></span></p>
</div>
</div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Hello William,<u></u><u></u></s=
pan></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">There was a discussion about th=
is on the list a few years ago.=C2=A0 See the thread with subject:<u></u><u=
></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Clarification request for NETCO=
NF edit-config default-operation replace<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">An edit-config can&#39;t be use=
d as a replacement for a full &quot;replace at root&quot; of the entire con=
fig like a copy-config.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Jason<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
<div style=3D"border-top:none;border-right:none;border-bottom:none;border-l=
eft:1.5pt solid blue;padding:0cm 0cm 0cm 4pt">
<div>
<div style=3D"border-right:none;border-bottom:none;border-left:none;border-=
top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class=3D"MsoNormal"><b><span lang=3D"EN-US">From:</span></b><span lang=
=3D"EN-US"> netconf &lt;<a href=3D"mailto:netconf-bounces@ietf.org" target=
=3D"_blank">netconf-bounces@ietf.org</a>&gt;
<b>On Behalf Of </b>Ivory, William<br>
<b>Sent:</b> Thursday, March 5, 2020 7:35 AM<br>
<b>To:</b> <a href=3D"mailto:netconf@ietf.org" target=3D"_blank">netconf@ie=
tf.org</a><br>
<b>Subject:</b> [netconf] Clarification on NETCONF edit-config default-oper=
ation replace<u></u><u></u></span></p>
</div>
</div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Hi,<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">I&#39;d appreciate clarificatio=
n on the following NETCONF operations relating to copy-config and edit-conf=
ig:<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">My understanding is as follows:=
<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">- &lt;copy-config&gt; completel=
y replaces any existing configuration<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">- &lt;edit-config&gt; with oper=
ation:replace attribute will replace any existing configuration with new co=
nfiguration for nodes specified inside the &lt;config&gt; operation. The at=
tribute may be at any level in the request, and
 applies only to the node specified and nodes under that node.<u></u><u></u=
></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Where I&#39;m not clear is the =
&lt;edit-config&gt; operation with the default-operation parameter set to r=
eplace. RFC 6241 section 7.2 states:<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
</div>
<div>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =
replace:=C2=A0 The configuration data in the &lt;config&gt; parameter<u></u=
><u></u></span></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 completely replaces the configuration in the target<u></=
u><u></u></span></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 datastore.=C2=A0 This is useful for loading previously s=
aved<u></u><u></u></span></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 configuration data.<u></u><u></u></span></pre>
<pre><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></pre>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Does this mean that this is the=
 equivalent of the &lt;copy-config&gt; operation, ie ALL existing configura=
tion should be removed, even if there is no explicit replacement in the new=
 &lt;config&gt; section?<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Thanks,<u></u><u></u></span></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">William<u></u><u></u></span></p=
>
</div>
<pre><span lang=3D"EN-CA"><u></u>=C2=A0<u></u></span></pre>
</div>
</div>
</div>
</div>
</div>

_______________________________________________<br>
netconf mailing list<br>
<a href=3D"mailto:netconf@ietf.org" target=3D"_blank">netconf@ietf.org</a><=
br>
<a href=3D"https://www.ietf.org/mailman/listinfo/netconf" rel=3D"noreferrer=
" target=3D"_blank">https://www.ietf.org/mailman/listinfo/netconf</a><br>
</blockquote></div></div>

--000000000000c1efca05b8a16a2f--


From nobody Mon Jan 11 07:33:54 2021
Return-Path: <rwilton@cisco.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46A663A0F35 for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 07:33:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.6
X-Spam-Level: 
X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Y1zrErCR; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=bp0MBgar
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dLTsZn6GiZ5L for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 07:33:49 -0800 (PST)
Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 239113A0F2F for <netconf@ietf.org>; Mon, 11 Jan 2021 07:33:49 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=29616; q=dns/txt; s=iport; t=1610379229; x=1611588829; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=asZb6tEFKm3LG8+edSnERlC0KgPXyhrFxKvj1CYLVp0=; b=Y1zrErCRGQe/61OU3W9GeNi5WM16dxv5sszKv6nneHzg9msJEC2EdEBl eHi3pxMiNIOxv+uqpFGNUOeeD2DCE7WAM/L21iaLjhnU/voFS1Ng6ad5X CzJusW5GplGu9nade8PAIDUp8b8mEjWmI0N1ev29o5LUywuPAuxLR36NU w=;
X-IPAS-Result: =?us-ascii?q?A0A5AAB8bfxfkIoNJK1iGwEBAQEBAQEBBQEBARIBAQEDA?= =?us-ascii?q?wEBAYF+AwEBAQsBgSIwUX1bLy4KhDWDSAONdAOZEoFCgREDVAsBAQENAQEYA?= =?us-ascii?q?QwIAgQBAYQGRAIXgVoCJTcGDgIDAQEBAwIDAQEBAQUBAQECAQYEFAEBAQEBA?= =?us-ascii?q?YY4DIVzAQEBBAEBIQoTAQEsCwEPAgEIEQQBASEHAwICAiULFAkIAgQOBQiDH?= =?us-ascii?q?gGBflcDLgEDC6JfAooldoEygwQBAQaFFxiCEAMGgTgBgnSCbE5DAYY+JhuBQ?= =?us-ascii?q?T+BVIIhNT6CXQEBAoFDHCsJgmI0giyBaV8BL0FGW3wjk2SHMYwxjzqCBQqCd?= =?us-ascii?q?4krklaDKZAOjymfKJFVIIQ1AgQCBAUCDgEBBoFsIiyBLXAVO4I1AQEyUBcCD?= =?us-ascii?q?Y4hGoNXhRSFRHQCNQIGAQkBAQMJfItOAYEQAQE?=
IronPort-PHdr: =?us-ascii?q?9a23=3A+bKXvh0mSLmYBxD7smDT+zVfbzU7u7jyIg8e44?= =?us-ascii?q?YmjLQLaKm44pD+JxWFv6d8kVrAQoLB6OkCgO3T4OjsWm0FtJCGtn1KMJlBTA?= =?us-ascii?q?QMhshemQs8SNWEBkv2IL+PDWQ6Ec1OWUUj8yS9Nk5YS9fjYlTNpWex9ngZHR?= =?us-ascii?q?CsfQZwL/7+T4jVicn/3uuu+prVNgNPgjf1Yb57IBis6wvLscxDiop5IaF3wR?= =?us-ascii?q?zM8XY=3D?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="5.79,338,1602547200";  d="scan'208,217";a="646221938"
Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 11 Jan 2021 15:33:48 +0000
Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-5.cisco.com (8.15.2/8.15.2) with ESMTPS id 10BFXl8v021927 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 11 Jan 2021 15:33:47 GMT
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 11 Jan 2021 09:33:47 -0600
Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 11 Jan 2021 09:33:47 -0600
Received: from NAM12-MW2-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 11 Jan 2021 09:33:47 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=h+dsq8skQIdsjPcX5o80MqfblPaVAllhDfvkUil5ivfHTXG0jLL/Aoem6t8/t8OzBk+tXo8SNa70usIX5A2DdqOAN8/vhmf2UCTBjJRsduMjhM9c1zf8OTws29bpg/fEZwbTx14/CnkeutQZtz5XnAfWiDXzfhn/q5jxc7JgXUV3Exvreba3Fk3Hma6/VH6U+NqjnrpTLu6rxdGNXFvHDw1ZopRTWJr0o2DrdFY2DuTj+/LHpNBr3kbwKYl/t0ASpHAjKGOEHch9dWg9vHyVPjMNUE5fIwD8dKhJvTs0R8Ve5EiZlmM8pdyUSFv5chSdl+12ez53paUY5Umao8P1Lg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=asZb6tEFKm3LG8+edSnERlC0KgPXyhrFxKvj1CYLVp0=; b=iAbgceQgHOzN2SQlpqI183BKQc/OsTdZFEkoTvwr4DSPwPUs9ZNPfNUp2N4UIsu/gevhxdwE3w0Nc8CR282QwQjXA3aDzY6e2jHBY/A9cvfxoHyJL6vGTAZ+e/eyBH1ooyu31+eCG0s1i/uKRY7TJk8SnrKHVMBa8Ynbac7vhnjmKHxj/B0vvLO8MODWGJyr9TI3vZy3yrplsDtikM+uFcMwmA8uhFfkneMi/tLa4Ey8mZDBvVlpBpcriGMMCWLh0Ygbl1DihyIW6WorqAEEe9ONNtMdl7koqkGa0RxoC4wHsEDoePKsgWsje4xlh+NYqJyD0k2k3Wd7W6LYwAyTyA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com;  s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=asZb6tEFKm3LG8+edSnERlC0KgPXyhrFxKvj1CYLVp0=; b=bp0MBgarC3lkOkGC+qehzq7QPk5mNz0oL6iIDRFnGtl3tTX3w1M8b1Mmy9PsEkHdRIYUhj4yg8rYYdqjOXS1wbMcKEX4hUpE92X+Fciahy2dbEs/wenoimI/SmV4l3bWxKV/jPVmds539bvi6WqOd4axoIA5c/2dAvPGR5J0VDc=
Received: from MN2PR11MB4366.namprd11.prod.outlook.com (2603:10b6:208:190::17) by MN2PR11MB4239.namprd11.prod.outlook.com (2603:10b6:208:192::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3742.6; Mon, 11 Jan 2021 15:33:45 +0000
Received: from MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::3c82:1fa3:2b18:3afb]) by MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::3c82:1fa3:2b18:3afb%6]) with mapi id 15.20.3742.012; Mon, 11 Jan 2021 15:33:45 +0000
From: "Rob Wilton (rwilton)" <rwilton@cisco.com>
To: Andy Bierman <andy@yumaworks.com>
CC: "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>, "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [netconf] Clarification on NETCONF edit-config default-operation replace
Thread-Index: AQHV8up3fXrFXOpHlkeLycpqDm3qRahAQ71ggeQjbACAAAz2gIAAAbbA
Date: Mon, 11 Jan 2021 15:33:45 +0000
Message-ID: <MN2PR11MB4366B35776E0E9641E7BBCD1B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com>
References: <b586413eb1a939e144191c07ea8267843ac092bd.camel@intl.att.com> <DM5PR08MB2633A0708C35C95BBB73B9029BFE0@DM5PR08MB2633.namprd08.prod.outlook.com> <MN2PR11MB4366168CEFD579AF9DF2BF91B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com> <CABCOCHRK7G7GL7BWeGqjPnWzOMEJx-kVj=G1SR7SUyV1R1iGQQ@mail.gmail.com>
In-Reply-To: <CABCOCHRK7G7GL7BWeGqjPnWzOMEJx-kVj=G1SR7SUyV1R1iGQQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: yumaworks.com; dkim=none (message not signed) header.d=none;yumaworks.com; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [82.12.233.180]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: b9baef5f-3114-4186-62bb-08d8b64648d9
x-ms-traffictypediagnostic: MN2PR11MB4239:
x-microsoft-antispam-prvs: <MN2PR11MB423947C6A304295D4C4424E0B5AB0@MN2PR11MB4239.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 8R2QoD6lbG7FLFgphRofdAl4bZAE0h/tuHfuSYqSTUvoOu2oQpMDI9wTeI2d20FfXt3gKtJfAogO+Omw2ExfbhelEw69JP0GCis2YtoikxvPfa2g73ZRcbYiazxXqhfqQ2KR5/GiAMLdvhdeWLCHGdEGsZTRLunET4Uxgoj6agckcbGGcy6d+qiG6sgKqyoXwzxfyZRumWZkViOiAUAnZuF/FrE8smGe2zYMWhWp2LldG0jv+S5gBisdwzzEd/2/vVwHppjg9peQOByJZJs6yNzJ1TEtQObLclYcwE7N/SliYLUjPiKjzoIF4g3xVW2NbG88sTCuvquNcq4LV+KZWy661aRmS0xR3DFMXPHa2qy50BV0d+18vtrDIjGnFX0MIVa1VxLuOYCGVq2GTwLm9od4jFQ3//1VE+TGge9IAp0+x3KxgOjDvaju0bY0ceO2FkIsoN/hMlHoU+aG/odzWQ==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:MN2PR11MB4366.namprd11.prod.outlook.com; PTR:; CAT:NONE;  SFS:(136003)(39860400002)(346002)(396003)(366004)(376002)(86362001)(76116006)(33656002)(5660300002)(53546011)(66556008)(66476007)(26005)(186003)(6506007)(7696005)(66446008)(166002)(2906002)(64756008)(83380400001)(478600001)(54906003)(6916009)(966005)(66946007)(9686003)(9326002)(55016002)(4326008)(8936002)(71200400001)(316002)(52536014)(8676002); DIR:OUT; SFP:1101; 
x-ms-exchange-antispam-messagedata: =?utf-8?B?Tm9uRC9IRmhwWThTMHcxUEUycGRPcEpaWnROTmR3OWxlOVl4OHlmTUZ2bm5R?= =?utf-8?B?aUl1TWNHc1l4ZmgyQlBHNXcxRHdsNjdzYTIxZThlTVpYN21QUUM4OUl5WWlE?= =?utf-8?B?NzhpU2ZUSXBnc25jYnp6MUFOMUtCR3ptMTBhVkpqbXpBVGFNbU96U2RUbkNs?= =?utf-8?B?TDFHMUlDTkZ1emV1S3dsWndxSVpQejFDeHNKYjg5YlNPK3RLOURKdkhSMTBI?= =?utf-8?B?aVVCVGJVKzl6ZGlBcmxUS0pPUWFKZXFQdHdyckhMVVdpYVVmRkZGS0RzMzBm?= =?utf-8?B?KzlQOGdyNG8rVjA4YUNpdnhRbTVtYmZmR3FFcG1XSTVaZE1laXExbnV2Tk1i?= =?utf-8?B?UkwxOG1QTTJqQUYwYmxNMmtoOEZMcGV0UGpHVmpIN3dxQUNnZ1RCeUQvSjg1?= =?utf-8?B?V2FSZWcvSlhHdnBVUjNkYXZzUnQwRWttQ2hFcng0aHUzM3E1VDEzS1RKTzQ2?= =?utf-8?B?OXB6OVVqYWlWeFkwUmNsQmxhc0NJeUFQVmxROVB1THhNU2Zta2lmc3dNQUd2?= =?utf-8?B?WHk5TGlUUVZwcEYyZlFSWHQzWTc5eE0vU3o4MlZPOXBIT1lySEhvbFR5U2pB?= =?utf-8?B?aTArSnV6RU53eWU0VjgzWXFBOWxWYVgwK096dzdUdTA5amRFMzR1alhXdmdi?= =?utf-8?B?U2NNOEduRVJaQzIxSEVZSHRmdCtDaU9RdVc3TGRqMkg1RS9wd0lCb0ZxWGRi?= =?utf-8?B?Z0hUcXVDa29JM1dOdGNjNVlkOE9OMW4vYmVQVE10bjdjczZuRVpJcTFlUkpw?= =?utf-8?B?Zk01Z3hCV1REV3FkcVZOWVJReDVDQU5kUFJzRm03WmJ6YjBSY1lBcDRwME1w?= =?utf-8?B?akZ4YnV6ci9kc3ZwWkJacUI1Sms2TmozVmZ2TGhJdXAzOEMxODM0TG1JL3Iv?= =?utf-8?B?MWFya29YMS8wdUM0N2EvSXpjVlhYYS9CemF3K1RrOFRCVk5qV0lmMmFoWG45?= =?utf-8?B?cUwrZWJIZThrZVNTVWNIcCtIRXFsakhudGFTQ3lMeldCTmJOaWJmbjBsUHZK?= =?utf-8?B?bk5lT0NsOFIyZmxJRXBmdmo5WFJxcjl2U1VzWTZ4aXZDUjhWWHlhR1JqTXhY?= =?utf-8?B?ZUhialROblpJbGVNNWdGSzg5UE5oeXo0cy9LRTNZNFQ4M3VIZkJPODJQb0FP?= =?utf-8?B?b21BSGdPUC9oVFI3cCt1NFhqOCtlMGltcDdRMmZQR2JtSHJiK0V0bmJubnMy?= =?utf-8?B?eVVsUW5WRXM5MUR4eUlSQW5aOTdLaElDbjg0NTdZZkVWbEhGazZneEJpSmhW?= =?utf-8?B?WnpaN2c2TVlrNjBTWDFBVEUyWnlMRUR4YnN2VXhGeGtLVzNjNkJacWl1U29X?= =?utf-8?Q?CPr9K9oyGoTOY=3D?=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_MN2PR11MB4366B35776E0E9641E7BBCD1B5AB0MN2PR11MB4366namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR11MB4366.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: b9baef5f-3114-4186-62bb-08d8b64648d9
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jan 2021 15:33:45.7458 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 7zeDkR79E08vOhsYFPRH/vesnM3HH+YAb5165TtcUuwfd4lpuPKTqxzJWt9LuvDEZqws5vWEauEwq/0yBNmfqQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4239
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.11, xch-rcd-001.cisco.com
X-Outbound-Node: alln-core-5.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/LBiScMH5IruNl45I-CtDDJb8UiY>
Subject: Re: [netconf] Clarification on NETCONF edit-config default-operation replace
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Jan 2021 15:33:52 -0000

--_000_MN2PR11MB4366B35776E0E9641E7BBCD1B5AB0MN2PR11MB4366namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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==

--_000_MN2PR11MB4366B35776E0E9641E7BBCD1B5AB0MN2PR11MB4366namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_MN2PR11MB4366B35776E0E9641E7BBCD1B5AB0MN2PR11MB4366namp_--


From nobody Mon Jan 11 07:53:18 2021
Return-Path: <andy@yumaworks.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A81B83A0FC7 for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 07:53:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.887
X-Spam-Level: 
X-Spam-Status: No, score=-1.887 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 75yk_EIMzfLM for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 07:53:14 -0800 (PST)
Received: from mail-lj1-x230.google.com (mail-lj1-x230.google.com [IPv6:2a00:1450:4864:20::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4EF093A0FC4 for <netconf@ietf.org>; Mon, 11 Jan 2021 07:53:14 -0800 (PST)
Received: by mail-lj1-x230.google.com with SMTP id w26so3959742ljo.4 for <netconf@ietf.org>; Mon, 11 Jan 2021 07:53:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Pdv/otlbYDOnCl784ne8bM7W4hBBsEKDEL32hwoatyI=; b=Kre9KBt/WG90HtKTftVRh+YcaCKHSwmChw8KYjgLXzD0ySxUmvAJCgECbi3R91trtX zdjrcbfXosh/BamlfCFpSFMkJZnLUgIO0zVHrYGuHA2a1BjXiREPKsTkx7N4aQj2lTUq Qya01pKiE6CBTS/LqJidyfWcyiPbuXlP/H4yDjLfGc1+J/pbn2BTOJIV3AjW5Jo9Vrlm bkMFx19MN40I3qztNpqfOHXhxw1mKxkjpcy33ShU2jbzsWQ3M5UkqD3GmXqDalSbt9/d fVcYHBiVnlW/i71dzuKbUdP4jqTvAwX3vPllQYo+ldTJah4EC7LU3SlV/aeg9csQpKWK XUwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Pdv/otlbYDOnCl784ne8bM7W4hBBsEKDEL32hwoatyI=; b=AN20TyIjGfeLdSlI+lb1vPHt9q3dKo+jSwJqukMQfTA/o/+NUzG9XZYoMqWsw03YFW 21boTJCRUTxLp6wZumUrfRBRF4Y8QFsVmYOa3ApQIxVYJz86bf7ajT/I9KHWUY2eP0Qb Nn0WSKfHRQiWK+20R25KSjR5gKBSXmsWLjAsYxMLlZ0QQSXrm2GRsul0dYjyTzCCwe3q As6KC879sQreR70SNseW/xapbeVwzCNRF2m0uvdki08XRMUNF/Q5/oTYlMlF9eKh7QU/ UiND4zdNAjiHcq9hVFlDTY/HWywyNkrgC5S8pMnh6Z5/n12jytWh5dx/n9fPhC5EQI8B y2LA==
X-Gm-Message-State: AOAM532vLZSL61JJ7XeTanqsMqYZz8YFEtFgix0J9kbUsotel6sAuBBu aBINAJHL6kIVybMFzZQTHnJchS1RK9JJ4I0hg1JHyQ==
X-Google-Smtp-Source: ABdhPJxxmzF9LZyfIGZidhf9w2LJ11jWcksgxl/jjvYNmiciHSvF3p/t8wJU2oTzXdmNSC7sPiGuE+q9li4C8zalNeY=
X-Received: by 2002:a2e:9a84:: with SMTP id p4mr68130lji.160.1610380392463; Mon, 11 Jan 2021 07:53:12 -0800 (PST)
MIME-Version: 1.0
References: <b586413eb1a939e144191c07ea8267843ac092bd.camel@intl.att.com> <DM5PR08MB2633A0708C35C95BBB73B9029BFE0@DM5PR08MB2633.namprd08.prod.outlook.com> <MN2PR11MB4366168CEFD579AF9DF2BF91B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com> <CABCOCHRK7G7GL7BWeGqjPnWzOMEJx-kVj=G1SR7SUyV1R1iGQQ@mail.gmail.com> <MN2PR11MB4366B35776E0E9641E7BBCD1B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com>
In-Reply-To: <MN2PR11MB4366B35776E0E9641E7BBCD1B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com>
From: Andy Bierman <andy@yumaworks.com>
Date: Mon, 11 Jan 2021 07:53:01 -0800
Message-ID: <CABCOCHSViunYXjMwsrp0Rhh+qtEt2KGreJ7ji73h=KWco1dWiw@mail.gmail.com>
To: "Rob Wilton (rwilton)" <rwilton@cisco.com>
Cc: "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>, "netconf@ietf.org" <netconf@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000003f10db05b8a1e74b"
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/xxHCMpAhK5EkKDY5vtOrUMJo18o>
Subject: Re: [netconf] Clarification on NETCONF edit-config default-operation replace
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Jan 2021 15:53:17 -0000

--0000000000003f10db05b8a1e74b
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, Jan 11, 2021 at 7:33 AM Rob Wilton (rwilton) <rwilton@cisco.com>
wrote:

> Hi Andy,
>
>
>
> Perhaps we are crossing wires here.
>
>
>
> I=E2=80=99m not trying to change the behaviour, just trying to ensure tha=
t the
> spec describes the behaviour unambiguously.  My proposed text was intende=
d
> to clarify the behaviour to be consistent with Jason=E2=80=99s statement =
below and
> the conclusion of this thread:
> https://mailarchive.ietf.org/arch/msg/netconf/DTPlkJf4enKNHXkBWn49np2e-8c=
/
>
>
>
> Are you disagreeing with Jason=E2=80=99s statement =E2=80=9CAn edit-confi=
g can't be used
> as a replacement for a full "replace at root" of the entire config like a
> copy-config=E2=80=9D or the prior conclusion to the linked thread above?
>
>
>

No.

I guess the wording in both cases is not correct.
There is a description of the operation attribute in sec 7.2 (not very
good, but normative).
The default-operation text should just say that "merge" or "replace" is the
assigned value of
the operation when the attribute is not present in the representation of
the data node.
The value "none" indicates that no operation is assigned if the attribute
is not present.




> Regards,
>
> Rob
>

Andy


>
>
>
>
> *From:* Andy Bierman <andy@yumaworks.com>
> *Sent:* 11 January 2021 15:18
> *To:* Rob Wilton (rwilton) <rwilton@cisco.com>
> *Cc:* Sterne, Jason (Nokia - CA/Ottawa) <jason.sterne@nokia.com>;
> netconf@ietf.org
> *Subject:* Re: [netconf] Clarification on NETCONF edit-config
> default-operation replace
>
>
>
>
>
>
>
> On Mon, Jan 11, 2021 at 6:48 AM Rob Wilton (rwilton) <rwilton=3D
> 40cisco.com@dmarc.ietf.org> wrote:
>
> Sorry, digging up an old thread here.
>
>
>
> I agree with the outcome of the referenced thread, but I wonder whether i=
t
> wouldn=E2=80=99t be helpful to have an errata to clarify the NETCONF RFC,=
 at least
> so that we fix this text in future?
>
>
>
> One of my colleagues read the NETCONF RFC and took =E2=80=9Cdefault-opera=
tion
> replace=E2=80=9D to be equivalent to a copy-config operation.  I also not=
e that
> some of the references on the web seem to the describe the wrong behaviou=
r.
>
>
>
> Specifically, I wonder whether we should change:
>
>
>
>          replace:  The configuration data in the <config> parameter
>
>             completely replaces the configuration in the target
>
>             datastore.  This is useful for loading previously saved
>
>             configuration data.
>
>
>
> to:
>
>
>
>          replace:  The configuration data in the <config> parameter
>
>             replaces the related configuration in the target
>
>             datastore.
>
>
>
>
>
>
>
> No this should not be changed.
>
> It has been in use for  about a decade.
>
> You propose to remove the only way to replace the entire config and make =
a
> huge NBC-change
>
> to provide a redundant mechanism instead.
>
>
>
> Regards,
> Rob
>
>
>
> Andy
>
>
>
>
>
>
>
> *From:* netconf <netconf-bounces@ietf.org> *On Behalf Of *Sterne, Jason
> (Nokia - CA/Ottawa)
> *Sent:* 09 March 2020 13:20
> *To:* Ivory, William <william.ivory@intl.att.com>; netconf@ietf.org
> *Subject:* Re: [netconf] Clarification on NETCONF edit-config
> default-operation replace
>
>
>
> Hello William,
>
>
>
> There was a discussion about this on the list a few years ago.  See the
> thread with subject:
>
>
>
> Clarification request for NETCONF edit-config default-operation replace
>
>
>
> An edit-config can't be used as a replacement for a full "replace at root=
"
> of the entire config like a copy-config.
>
>
>
> Jason
>
>
>
> *From:* netconf <netconf-bounces@ietf.org> *On Behalf Of *Ivory, William
> *Sent:* Thursday, March 5, 2020 7:35 AM
> *To:* netconf@ietf.org
> *Subject:* [netconf] Clarification on NETCONF edit-config
> default-operation replace
>
>
>
> Hi,
>
>
>
> I'd appreciate clarification on the following NETCONF operations relating
> to copy-config and edit-config:
>
>
>
> My understanding is as follows:
>
>
>
> - <copy-config> completely replaces any existing configuration
>
>
>
> - <edit-config> with operation:replace attribute will replace any existin=
g
> configuration with new configuration for nodes specified inside the
> <config> operation. The attribute may be at any level in the request, and
> applies only to the node specified and nodes under that node.
>
>
>
> Where I'm not clear is the <edit-config> operation with the
> default-operation parameter set to replace. RFC 6241 section 7.2 states:
>
>
>
>          replace:  The configuration data in the <config> parameter
>
>             completely replaces the configuration in the target
>
>             datastore.  This is useful for loading previously saved
>
>             configuration data.
>
>
>
> Does this mean that this is the equivalent of the <copy-config> operation=
,
> ie ALL existing configuration should be removed, even if there is no
> explicit replacement in the new <config> section?
>
>
>
> Thanks,
>
>
>
> William
>
>
>
> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf
>
>

--0000000000003f10db05b8a1e74b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Mon, Jan 11, 2021 at 7:33 AM Rob W=
ilton (rwilton) &lt;<a href=3D"mailto:rwilton@cisco.com">rwilton@cisco.com<=
/a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0=
px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">





<div lang=3D"EN-GB" style=3D"overflow-wrap: break-word;">
<div class=3D"gmail-m_9119271492954373461WordSection1">
<p class=3D"MsoNormal"><span>Hi Andy,<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span>Perhaps we are crossing wires here.<u></u><u><=
/u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span>I=E2=80=99m not trying to change the behaviour=
, just trying to ensure that the spec describes the behaviour unambiguously=
.=C2=A0 My proposed text was intended to clarify the behaviour to be consis=
tent with Jason=E2=80=99s
 statement below and the conclusion of this thread: <a href=3D"https://mail=
archive.ietf.org/arch/msg/netconf/DTPlkJf4enKNHXkBWn49np2e-8c/" target=3D"_=
blank">
https://mailarchive.ietf.org/arch/msg/netconf/DTPlkJf4enKNHXkBWn49np2e-8c/<=
/a><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span>Are you disagreeing with Jason=E2=80=99s state=
ment =E2=80=9C</span><span lang=3D"EN-CA">An edit-config can&#39;t be used =
as a replacement for a full &quot;replace at root&quot; of the entire confi=
g like a copy-config=E2=80=9D or the prior
 conclusion to the linked thread above? <u></u><u></u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0</span></p></div></div></blockquo=
te><div><br></div><div>No.</div><div><br></div><div>I guess the wording in =
both cases is not correct.</div><div>There is a description of the operatio=
n attribute in sec 7.2 (not very good, but normative).</div><div>The defaul=
t-operation text should just say that &quot;merge&quot; or &quot;replace&qu=
ot; is the assigned value of</div><div>the operation when the attribute is =
not present in the representation of the data node.</div><div>The value &qu=
ot;none&quot; indicates that no operation is assigned if the attribute is n=
ot present.</div><div><br></div><div><br></div><div>=C2=A0</div><blockquote=
 class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px so=
lid rgb(204,204,204);padding-left:1ex"><div lang=3D"EN-GB" style=3D"overflo=
w-wrap: break-word;"><div class=3D"gmail-m_9119271492954373461WordSection1"=
><p class=3D"MsoNormal"><span><u></u></span></p>
<p class=3D"MsoNormal"><span>Regards,<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span>Rob</span></p></div></div></blockquote><div><b=
r></div><div>Andy</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);pad=
ding-left:1ex"><div lang=3D"EN-GB" style=3D"overflow-wrap: break-word;"><di=
v class=3D"gmail-m_9119271492954373461WordSection1"><p class=3D"MsoNormal">=
<span><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span><u></u>=C2=A0<u></u></span></p>
<div style=3D"border-top:none;border-right:none;border-bottom:none;border-l=
eft:1.5pt solid blue;padding:0cm 0cm 0cm 4pt">
<div>
<div style=3D"border-right:none;border-bottom:none;border-left:none;border-=
top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class=3D"MsoNormal"><b><span lang=3D"EN-US">From:</span></b><span lang=
=3D"EN-US"> Andy Bierman &lt;<a href=3D"mailto:andy@yumaworks.com" target=
=3D"_blank">andy@yumaworks.com</a>&gt;
<br>
<b>Sent:</b> 11 January 2021 15:18<br>
<b>To:</b> Rob Wilton (rwilton) &lt;<a href=3D"mailto:rwilton@cisco.com" ta=
rget=3D"_blank">rwilton@cisco.com</a>&gt;<br>
<b>Cc:</b> Sterne, Jason (Nokia - CA/Ottawa) &lt;<a href=3D"mailto:jason.st=
erne@nokia.com" target=3D"_blank">jason.sterne@nokia.com</a>&gt;; <a href=
=3D"mailto:netconf@ietf.org" target=3D"_blank">netconf@ietf.org</a><br>
<b>Subject:</b> Re: [netconf] Clarification on NETCONF edit-config default-=
operation replace<u></u><u></u></span></p>
</div>
</div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<div>
<p class=3D"MsoNormal">On Mon, Jan 11, 2021 at 6:48 AM Rob Wilton (rwilton)=
 &lt;rwilton=3D<a href=3D"mailto:40cisco.com@dmarc.ietf.org" target=3D"_bla=
nk">40cisco.com@dmarc.ietf.org</a>&gt; wrote:<u></u><u></u></p>
</div>
<blockquote style=3D"border-top:none;border-right:none;border-bottom:none;b=
order-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4=
.8pt;margin-right:0cm">
<div>
<div>
<p class=3D"MsoNormal">Sorry, digging up an old thread here.<u></u><u></u><=
/p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">I agree with the outcome of the referenced thread, b=
ut I wonder whether it wouldn=E2=80=99t be helpful to have an errata to cla=
rify the NETCONF RFC, at least so that we fix this text in
 future?<u></u><u></u></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">One of my colleagues read the NETCONF RFC and took =
=E2=80=9Cdefault-operation replace=E2=80=9D to be equivalent to a copy-conf=
ig operation.=C2=A0 I also note that some of the references on the web seem
 to the describe the wrong behaviour.<u></u><u></u></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">Specifically, I wonder whether we should change:<u><=
/u><u></u></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =
replace:=C2=A0 The configuration data in the &lt;config&gt; parameter</span=
><u></u><u></u></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 completely replaces the configuration in the target</spa=
n><u></u><u></u></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 datastore.=C2=A0 This is useful for loading previously s=
aved</span><u></u><u></u></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 configuration data.</span><u></u><u></u></pre>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">to:<u></u><u></u></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =
replace:=C2=A0 The configuration data in the &lt;config&gt; parameter</span=
><u></u><u></u></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 replaces the related configuration in the target</span><=
u></u><u></u></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 datastore.</span><u></u><u></u></pre>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">No this should not be changed.<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal">It has been in use for=C2=A0 about a decade.<u></u><=
u></u></p>
</div>
<div>
<p class=3D"MsoNormal">You propose to remove the only way to replace the en=
tire config and make a huge NBC-change<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal">to provide a redundant mechanism instead.<u></u><u><=
/u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<blockquote style=3D"border-top:none;border-right:none;border-bottom:none;b=
order-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4=
.8pt;margin-right:0cm">
<div>
<div>
<p class=3D"MsoNormal">Regards,<br>
Rob<u></u><u></u></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">Andy<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
</div>
<blockquote style=3D"border-top:none;border-right:none;border-bottom:none;b=
order-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4=
.8pt;margin-right:0cm">
<div>
<div>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<div style=3D"border-top:none;border-right:none;border-bottom:none;border-l=
eft:1.5pt solid blue;padding:0cm 0cm 0cm 4pt">
<div>
<div style=3D"border-right:none;border-bottom:none;border-left:none;border-=
top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class=3D"MsoNormal"><b><span lang=3D"EN-US">From:</span></b><span lang=
=3D"EN-US"> netconf &lt;<a href=3D"mailto:netconf-bounces@ietf.org" target=
=3D"_blank">netconf-bounces@ietf.org</a>&gt;
<b>On Behalf Of </b>Sterne, Jason (Nokia - CA/Ottawa)<br>
<b>Sent:</b> 09 March 2020 13:20<br>
<b>To:</b> Ivory, William &lt;<a href=3D"mailto:william.ivory@intl.att.com"=
 target=3D"_blank">william.ivory@intl.att.com</a>&gt;;
<a href=3D"mailto:netconf@ietf.org" target=3D"_blank">netconf@ietf.org</a><=
br>
<b>Subject:</b> Re: [netconf] Clarification on NETCONF edit-config default-=
operation replace</span><u></u><u></u></p>
</div>
</div>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Hello William,</span><u></u><u>=
</u></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">There was a discussion about th=
is on the list a few years ago.=C2=A0 See the thread with subject:</span><u=
></u><u></u></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Clarification request for NETCO=
NF edit-config default-operation replace</span><u></u><u></u></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">An edit-config can&#39;t be use=
d as a replacement for a full &quot;replace at root&quot; of the entire con=
fig like a copy-config.</span><u></u><u></u></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Jason</span><u></u><u></u></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
<div style=3D"border-top:none;border-right:none;border-bottom:none;border-l=
eft:1.5pt solid blue;padding:0cm 0cm 0cm 4pt">
<div>
<div style=3D"border-right:none;border-bottom:none;border-left:none;border-=
top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class=3D"MsoNormal"><b><span lang=3D"EN-US">From:</span></b><span lang=
=3D"EN-US"> netconf &lt;<a href=3D"mailto:netconf-bounces@ietf.org" target=
=3D"_blank">netconf-bounces@ietf.org</a>&gt;
<b>On Behalf Of </b>Ivory, William<br>
<b>Sent:</b> Thursday, March 5, 2020 7:35 AM<br>
<b>To:</b> <a href=3D"mailto:netconf@ietf.org" target=3D"_blank">netconf@ie=
tf.org</a><br>
<b>Subject:</b> [netconf] Clarification on NETCONF edit-config default-oper=
ation replace</span><u></u><u></u></p>
</div>
</div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Hi,</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">I&#39;d appreciate clarificatio=
n on the following NETCONF operations relating to copy-config and edit-conf=
ig:</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">My understanding is as follows:=
</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">- &lt;copy-config&gt; completel=
y replaces any existing configuration</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">- &lt;edit-config&gt; with oper=
ation:replace attribute will replace any existing configuration with new co=
nfiguration for nodes specified inside the &lt;config&gt; operation.
 The attribute may be at any level in the request, and applies only to the =
node specified and nodes under that node.</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Where I&#39;m not clear is the =
&lt;edit-config&gt; operation with the default-operation parameter set to r=
eplace. RFC 6241 section 7.2 states:</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
</div>
<div>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =
replace:=C2=A0 The configuration data in the &lt;config&gt; parameter</span=
><u></u><u></u></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 completely replaces the configuration in the target</spa=
n><u></u><u></u></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 datastore.=C2=A0 This is useful for loading previously s=
aved</span><u></u><u></u></pre>
<pre><span lang=3D"EN-CA">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 configuration data.</span><u></u><u></u></pre>
<pre><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></pre>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Does this mean that this is the=
 equivalent of the &lt;copy-config&gt; operation, ie ALL existing configura=
tion should be removed, even if there is no explicit replacement
 in the new &lt;config&gt; section?</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">Thanks,</span><u></u><u></u></p=
>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-CA">William</span><u></u><u></u></p=
>
</div>
<pre><span lang=3D"EN-CA">=C2=A0</span><u></u><u></u></pre>
</div>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal">_______________________________________________<br>
netconf mailing list<br>
<a href=3D"mailto:netconf@ietf.org" target=3D"_blank">netconf@ietf.org</a><=
br>
<a href=3D"https://www.ietf.org/mailman/listinfo/netconf" target=3D"_blank"=
>https://www.ietf.org/mailman/listinfo/netconf</a><u></u><u></u></p>
</blockquote>
</div>
</div>
</div>
</div>
</div>

</blockquote></div></div>

--0000000000003f10db05b8a1e74b--


From nobody Mon Jan 11 09:43:38 2021
Return-Path: <01000176f28bbe25-64dc8d99-c769-4ff9-8b40-772c4ad11b0b-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C52DA3A1125 for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 09:43:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.916
X-Spam-Level: 
X-Spam-Status: No, score=-1.916 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Yir9S-A79cS for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 09:43:34 -0800 (PST)
Received: from a8-83.smtp-out.amazonses.com (a8-83.smtp-out.amazonses.com [54.240.8.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 777953A1124 for <netconf@ietf.org>; Mon, 11 Jan 2021 09:43:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1610387013; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=8L1CEeuVVvteCDZFmRcBYkq3txsDYJ5GSo8czHHvQow=; b=N2ESrfGa9R7aYTHJUAA7ZWnYdI21CpYxJjkcEThWtWL5UmUHQXSzxokGvR4Z0R7i Ic62VgyJetQ5mmtgntc6i+jY9b60MHbzcTK/eSoyGTIkqhOoPp1nw/C3jX1sRIHN8Ze dL+qMVHWcBe8Z7/ANrTKQ/joFSr60yj8K6y/JSTk=
From: Kent Watsen <kent@watsen.net>
Message-ID: <01000176f28bbe25-64dc8d99-c769-4ff9-8b40-772c4ad11b0b-000000@email.amazonses.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_3624BB97-AA42-4FC3-97D7-690EEDBDBEC7"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Date: Mon, 11 Jan 2021 17:43:33 +0000
In-Reply-To: <CABCOCHSViunYXjMwsrp0Rhh+qtEt2KGreJ7ji73h=KWco1dWiw@mail.gmail.com>
Cc: "Rob Wilton (rwilton)" <rwilton@cisco.com>, "netconf@ietf.org" <netconf@ietf.org>
To: Andy Bierman <andy@yumaworks.com>
References: <b586413eb1a939e144191c07ea8267843ac092bd.camel@intl.att.com> <DM5PR08MB2633A0708C35C95BBB73B9029BFE0@DM5PR08MB2633.namprd08.prod.outlook.com> <MN2PR11MB4366168CEFD579AF9DF2BF91B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com> <CABCOCHRK7G7GL7BWeGqjPnWzOMEJx-kVj=G1SR7SUyV1R1iGQQ@mail.gmail.com> <MN2PR11MB4366B35776E0E9641E7BBCD1B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com> <CABCOCHSViunYXjMwsrp0Rhh+qtEt2KGreJ7ji73h=KWco1dWiw@mail.gmail.com>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.11-54.240.8.83
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/CXazx_Xa8XjWve3s7-P1PfzI-yA>
Subject: Re: [netconf] Clarification on NETCONF edit-config default-operation replace
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Jan 2021 17:43:36 -0000

--Apple-Mail=_3624BB97-AA42-4FC3-97D7-690EEDBDBEC7
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On Jan 11, 2021, at 10:53 AM, Andy Bierman <andy@yumaworks.com> wrote:
>=20
> I guess the wording in both cases is not correct.
> There is a description of the operation attribute in sec 7.2 (not very =
good, but normative).
> The default-operation text should just say that "merge" or "replace" =
is the assigned value of
> the operation when the attribute is not present in the representation =
of the data node.
> The value "none" indicates that no operation is assigned if the =
attribute is not present.

Agreed.

It seems odd that the "default-operation=E2=80=9D section provides =
(redundant) behavioral descriptions, rather than pointing to the =
descriptions provided in the =E2=80=9Coperation=E2=80=9D section above.

Nit: replace "no operation=E2=80=9D with "no default operation" in =
Andy=E2=80=99s last sentence.

K.


--Apple-Mail=_3624BB97-AA42-4FC3-97D7-690EEDBDBEC7
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><br =
class=3D""><div><br class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D"">On Jan 11, 2021, at 10:53 AM, Andy Bierman &lt;<a =
href=3D"mailto:andy@yumaworks.com" class=3D"">andy@yumaworks.com</a>&gt; =
wrote:</div><br class=3D"Apple-interchange-newline"><div class=3D""><div =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
14px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none;" class=3D"">I =
guess the wording in both cases is not correct.</div><div =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
14px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none;" class=3D"">There =
is a description of the operation attribute in sec 7.2 (not very good, =
but normative).</div><div style=3D"caret-color: rgb(0, 0, 0); =
font-family: Helvetica; font-size: 14px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D"">The default-operation text should =
just say that "merge" or "replace" is the assigned value of</div><div =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
14px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none;" class=3D"">the =
operation when the attribute is not present in the representation of the =
data node.</div><div style=3D"caret-color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D"">The value "none" indicates that no operation is =
assigned if the attribute is not present.</div></div></blockquote><br =
class=3D""></div><div>Agreed.</div><div><br class=3D""></div><div>It =
seems odd that the "default-operation=E2=80=9D section provides =
(redundant) behavioral descriptions, rather than pointing to the =
descriptions provided in the =E2=80=9Coperation=E2=80=9D section =
above.</div><div class=3D""><br class=3D""></div>Nit:<span =
style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" =
class=3D"">&nbsp;replace "no operation=E2=80=9D with "no default =
operation" in Andy=E2=80=99s last sentence.</span><div class=3D""><font =
color=3D"#000000" class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" =
class=3D""><br class=3D""></span></font><div class=3D"">K.</div><div =
class=3D""><br class=3D""></div></div></body></html>=

--Apple-Mail=_3624BB97-AA42-4FC3-97D7-690EEDBDBEC7--


From nobody Mon Jan 11 10:17:26 2021
Return-Path: <andy@yumaworks.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6DF53A1119 for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 10:17:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.887
X-Spam-Level: 
X-Spam-Status: No, score=-1.887 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BhoxbikGCVUF for <netconf@ietfa.amsl.com>; Mon, 11 Jan 2021 10:17:23 -0800 (PST)
Received: from mail-lj1-x231.google.com (mail-lj1-x231.google.com [IPv6:2a00:1450:4864:20::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A49AA3A111A for <netconf@ietf.org>; Mon, 11 Jan 2021 10:17:22 -0800 (PST)
Received: by mail-lj1-x231.google.com with SMTP id x23so223380lji.7 for <netconf@ietf.org>; Mon, 11 Jan 2021 10:17:22 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=RX3eZvvZFHbxg0n9vE/oJlv/Rvv/yXBzDMKLBnxOpXA=; b=SCJkzLulr/J5ZI9WwPAbPiKMpf6YXq2QE6dz04Kvihh0xmBwnrDTNH3Vzm0vtC0Tau OCfCjK0Ex4wTvE8NV6U5/hUTakKGhJRkEhxvfCBJfFsxnYRoxHmC+1+ygZayl9Le9eqm pYOWcXqYq/LP301fEil+jizvfFilUrNdTcGrfZJP0YWXuPrBh/zNzgqVOhfFInbQZi+U HgFmjduhn4kkVgx9NEpv38Hv9LTUJu2unxtOkJUgUenQRTRaezPCs51aXJxv3ds1Mn7O ofgdlS52UELdlHVhF0a89e7C+Fr48Jenz7lTJrKotD0ZAbVFhwCGRNm7iPdqIcCuJP0c GIdw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=RX3eZvvZFHbxg0n9vE/oJlv/Rvv/yXBzDMKLBnxOpXA=; b=Ji8aBBAevPV3LUoxIrM+jNHQG6COkyQbVDXHKgQPxu38hp++e878OmNs5ZXkBJtGtH b3Nuz5/eZ0AMGw3AjfxhHoFwEE28rsd31s8wsILqOAlt5TNebvot7P0aeI5P8ZYsqxmx puqbJHpOw0UICfJb48X732RByNeRsP5WV9BfwqZqyHDBRxnQ89Gcv3NISleOF3ZancZ6 AhfceQ/SDF6k/GksLg0hxbIQNhNj2nbf/U0zgqSyRITw27utaHgyoG42qwOivfWraTvq Yh5X9IY2zsa3ZbI9nVKEfvKtbGJzxaDdq8hBxrjG1kF6tWyVpHf3RpE35ehSoVjQaLsn 8pQg==
X-Gm-Message-State: AOAM533jQxq3THdATzH4wwk4gan9rjoLIS2wJQKP+sWJy1FIV7oTLptZ OyftAgNrPTXfL22QTqzCx24Iz4eXAMHQmB4LRcrkLw==
X-Google-Smtp-Source: ABdhPJwoQw9Vl47TLxBrgmBEi/xtusretgfnfHYdSVwzHTc3V6ruwlW1PAhqOlHojuJ5oQFyotujR6vzN4+H9FKWle4=
X-Received: by 2002:a05:651c:1342:: with SMTP id j2mr324143ljb.91.1610389040330;  Mon, 11 Jan 2021 10:17:20 -0800 (PST)
MIME-Version: 1.0
References: <b586413eb1a939e144191c07ea8267843ac092bd.camel@intl.att.com> <DM5PR08MB2633A0708C35C95BBB73B9029BFE0@DM5PR08MB2633.namprd08.prod.outlook.com> <MN2PR11MB4366168CEFD579AF9DF2BF91B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com> <CABCOCHRK7G7GL7BWeGqjPnWzOMEJx-kVj=G1SR7SUyV1R1iGQQ@mail.gmail.com> <MN2PR11MB4366B35776E0E9641E7BBCD1B5AB0@MN2PR11MB4366.namprd11.prod.outlook.com> <CABCOCHSViunYXjMwsrp0Rhh+qtEt2KGreJ7ji73h=KWco1dWiw@mail.gmail.com> <01000176f28bbe25-64dc8d99-c769-4ff9-8b40-772c4ad11b0b-000000@email.amazonses.com>
In-Reply-To: <01000176f28bbe25-64dc8d99-c769-4ff9-8b40-772c4ad11b0b-000000@email.amazonses.com>
From: Andy Bierman <andy@yumaworks.com>
Date: Mon, 11 Jan 2021 10:17:09 -0800
Message-ID: <CABCOCHSt=soOO1tev7P6xXvaxMkKdkQKYGAFw77HkmVaCZ_Yig@mail.gmail.com>
To: Kent Watsen <kent@watsen.net>
Cc: "Rob Wilton (rwilton)" <rwilton@cisco.com>, "netconf@ietf.org" <netconf@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000b3111e05b8a3ea2d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/qo_m7e_6zV0PN6-vN5tSUFXaHPs>
Subject: Re: [netconf] Clarification on NETCONF edit-config default-operation replace
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Jan 2021 18:17:25 -0000

--000000000000b3111e05b8a3ea2d
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, Jan 11, 2021 at 9:43 AM Kent Watsen <kent@watsen.net> wrote:

>
>
> On Jan 11, 2021, at 10:53 AM, Andy Bierman <andy@yumaworks.com> wrote:
>
> I guess the wording in both cases is not correct.
> There is a description of the operation attribute in sec 7.2 (not very
> good, but normative).
> The default-operation text should just say that "merge" or "replace" is
> the assigned value of
> the operation when the attribute is not present in the representation of
> the data node.
> The value "none" indicates that no operation is assigned if the attribute
> is not present.
>
>
> Agreed.
>
> It seems odd that the "default-operation=E2=80=9D section provides (redun=
dant)
> behavioral descriptions, rather than pointing to the descriptions provide=
d
> in the =E2=80=9Coperation=E2=80=9D section above.
>
> Nit: replace "no operation=E2=80=9D with "no default operation" in Andy=
=E2=80=99s last
> sentence.
>

No -- default-operation=3D"none" means there is no operation on that node.
If so, it must exist already (or be an NP-container).

The algorithm is really:

        Start: effective-operation =3D none
        Setting effective-operation for a node in the config
(hierarchically)
        (1) explicit: if operation attribute is present, then use that
        (2) parent: if parent node has an effective-operation set, then use
that
        (3) default: if default-operation=3Dmerge or replace, use that
        (4) else effective-operation =3D none

The RFC is silent about multiple (possibly conflicting) operations within
the same subtree.


> K.
>
>
Andy

--000000000000b3111e05b8a3ea2d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Mon, Jan 11, 2021 at 9:43 AM Kent =
Watsen &lt;<a href=3D"mailto:kent@watsen.net">kent@watsen.net</a>&gt; wrote=
:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.=
8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style=3D"=
overflow-wrap: break-word;"><br><div><br><blockquote type=3D"cite"><div>On =
Jan 11, 2021, at 10:53 AM, Andy Bierman &lt;<a href=3D"mailto:andy@yumawork=
s.com" target=3D"_blank">andy@yumaworks.com</a>&gt; wrote:</div><br><div><d=
iv style=3D"font-family:Helvetica;font-size:14px;font-style:normal;font-var=
iant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;=
text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;tex=
t-decoration:none">I guess the wording in both cases is not correct.</div><=
div style=3D"font-family:Helvetica;font-size:14px;font-style:normal;font-va=
riant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start=
;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;te=
xt-decoration:none">There is a description of the operation attribute in se=
c 7.2 (not very good, but normative).</div><div style=3D"font-family:Helvet=
ica;font-size:14px;font-style:normal;font-variant-caps:normal;font-weight:n=
ormal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform=
:none;white-space:normal;word-spacing:0px;text-decoration:none">The default=
-operation text should just say that &quot;merge&quot; or &quot;replace&quo=
t; is the assigned value of</div><div style=3D"font-family:Helvetica;font-s=
ize:14px;font-style:normal;font-variant-caps:normal;font-weight:normal;lett=
er-spacing:normal;text-align:start;text-indent:0px;text-transform:none;whit=
e-space:normal;word-spacing:0px;text-decoration:none">the operation when th=
e attribute is not present in the representation of the data node.</div><di=
v style=3D"font-family:Helvetica;font-size:14px;font-style:normal;font-vari=
ant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;t=
ext-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text=
-decoration:none">The value &quot;none&quot; indicates that no operation is=
 assigned if the attribute is not present.</div></div></blockquote><br></di=
v><div>Agreed.</div><div><br></div><div>It seems odd that the &quot;default=
-operation=E2=80=9D section provides (redundant) behavioral descriptions, r=
ather than pointing to the descriptions provided in the =E2=80=9Coperation=
=E2=80=9D section above.</div><div><br></div>Nit:<span style=3D"color:rgb(0=
,0,0)">=C2=A0replace &quot;no operation=E2=80=9D with &quot;no default oper=
ation&quot; in Andy=E2=80=99s last sentence.</span></div></blockquote><div>=
<br></div><div>No -- default-operation=3D&quot;none&quot; means there is no=
 operation on that node.</div><div>If so, it must exist already (or be an N=
P-container).</div><div><br></div><div>The algorithm is really:</div><div><=
br></div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 Start: effective-operation =3D no=
ne</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 Setting effective-operation for a =
node in the config (hierarchically)</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 (=
1) explicit: if operation attribute is present, then use that</div><div>=C2=
=A0 =C2=A0 =C2=A0 =C2=A0 (2) parent: if parent node has an effective-operat=
ion=C2=A0set, then use that</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 (3) defau=
lt: if default-operation=3Dmerge or replace, use that</div><div>=C2=A0 =C2=
=A0 =C2=A0 =C2=A0 (4) else effective-operation =3D none</div><div><br></div=
><div>The RFC is silent about multiple (possibly conflicting) operations wi=
thin the same subtree.</div><div><br></div><blockquote class=3D"gmail_quote=
" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);=
padding-left:1ex"><div style=3D"overflow-wrap: break-word;"><div><font colo=
r=3D"#000000"><span><br></span></font><div>K.</div><div><br></div></div></d=
iv></blockquote><div><br></div><div>Andy</div><div>=C2=A0</div></div></div>

--000000000000b3111e05b8a3ea2d--


From nobody Mon Jan 11 15:00:52 2021
Return-Path: <mjethanandani@gmail.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A9B73A14FD; Mon, 11 Jan 2021 15:00:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level: 
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eWJyPSxopRNQ; Mon, 11 Jan 2021 15:00:48 -0800 (PST)
Received: from mail-pj1-x102c.google.com (mail-pj1-x102c.google.com [IPv6:2607:f8b0:4864:20::102c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 244C63A14FC; Mon, 11 Jan 2021 15:00:48 -0800 (PST)
Received: by mail-pj1-x102c.google.com with SMTP id v1so433583pjr.2; Mon, 11 Jan 2021 15:00:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=from:mime-version:subject:message-id:date:cc:to; bh=hC/4xpRFV2WmE36U9scsa73enis958b/02ly7CvEf4o=; b=dpo0KhVsVsRp9UnhNg+4CqZsnmM6YRp734vLz5y1U94oqcBuhhTWJ8B7pPy297sYxU FaaCrpJI7tXqF+DrPjbAj1JLlTD0+knZgc92dv3VDECIRABDNkXIoVLUEZvFpjUEO7DM EdIElamxA/tjbtWwLywvuXMT8+SDQfVQ+3DT/FF/rw4tx7yAN8RXRHZngMN19Aiytdkd YOOaT4wJ+ryDcsSms4DUpMabaYyfEONAQHN2SUlPNzcU8XCrFpR8wVHivdSHl9szRbmL 36ItfMJJjO9mWPF5l1+nkUIIfDTXZlRUff4WVr/r6pM0S3Flpb/G4Q2Awfztn5d+Qt+o asgA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:message-id:date:cc:to; bh=hC/4xpRFV2WmE36U9scsa73enis958b/02ly7CvEf4o=; b=pHvlNIXiO7VDEc67aIkxGUUcY77pLzFnH+kPuGPcs7d4XFIi72dnZa98hMVG0MOo6+ HbJP92gLCJtGvoM8QXOUW61O83gx2zw2+H49npdmvcl5fFUqryHOw3nYNMDkRHbOmMrW ZE83m3FJ9tE2LH8jCotc0QvvBAP0kmIqOYNvCKo+J/pY1GyWLyo9I40YqoXe+CUIton/ oIzcIxYrm0jmbsoJJ6+9jBDJiZawTrl6BdglqIZj2iAWpbOslcOD0/9w+uMf5PXCpr1A KIuzI+XLJ1Lc5GywLrRTr8Q3VM3haiKh80sHR6DwDnD0sXeidgbfPMHkhoeZ+vgQa047 0+iA==
X-Gm-Message-State: AOAM531gg/KjNrxAuHaKr/V/L5uEQc7BIK8Cq2bC6gr574wPiC4C0hX7 K7JaZLQNjHRzysVd6L/DPSPfNnCp97DutA==
X-Google-Smtp-Source: ABdhPJwugZsZjK7Kn5b/YlS6eExW59QmwaARzoslW/2owS296t7WyKqTFxk5EtXd7DtoPOERnFVZ7w==
X-Received: by 2002:a17:90b:4014:: with SMTP id ie20mr1149632pjb.95.1610406047362;  Mon, 11 Jan 2021 15:00:47 -0800 (PST)
Received: from ?IPv6:2601:647:5600:5020:e175:6fe0:4eec:fb3f? ([2601:647:5600:5020:e175:6fe0:4eec:fb3f]) by smtp.gmail.com with ESMTPSA id q206sm704062pfc.161.2021.01.11.15.00.46 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 11 Jan 2021 15:00:46 -0800 (PST)
From: Mahesh Jethanandani <mjethanandani@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_7F5D51E9-3B47-4626-8596-8D46F8520DA0"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\))
Message-Id: <EF435A72-83FD-4D80-BF68-00628571F63C@gmail.com>
Date: Mon, 11 Jan 2021 15:00:45 -0800
Cc: netconf-chairs <netconf-chairs@ietf.org>
To: Netconf <netconf@ietf.org>
X-Mailer: Apple Mail (2.3608.120.23.2.4)
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/LPZ0v2V9eAZoT2k5q-do3MYqInA>
Subject: [netconf] WGLC on SZTP CSR draft
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Jan 2021 23:00:50 -0000

--Apple-Mail=_7F5D51E9-3B47-4626-8596-8D46F8520DA0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

We are starting a 2 week WGLC for draft-ietf-netconf-sztp-csr which is =
at version -01.

https://datatracker.ietf.org/doc/draft-ietf-netconf-sztp-csr/

Please respond on this thread indicating your support or concerns about =
why this document should/should not be adopted.

We are particularly interested in statement of the form:

- I have reviewed the draft and found no issues.=20
- I have reviewed the draft and found the following issues =E2=80=A6

This WGLC will conclude on Monday, January 25. An IPR call has already =
been issued separately.

Thank you.

Mahesh & Kent (as co-chairs)







--Apple-Mail=_7F5D51E9-3B47-4626-8596-8D46F8520DA0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">We =
are starting a 2 week WGLC for draft-ietf-netconf-sztp-csr which is at =
version -01.<div class=3D""><br class=3D""></div><div class=3D""><a =
href=3D"https://datatracker.ietf.org/doc/draft-ietf-netconf-sztp-csr/" =
class=3D"">https://datatracker.ietf.org/doc/draft-ietf-netconf-sztp-csr/</=
a></div><div class=3D""><br class=3D""></div><div class=3D"">Please =
respond on this thread indicating your support or concerns about why =
this document should/should not be adopted.</div><div class=3D""><br =
class=3D""></div><div class=3D"">We are particularly interested in =
statement of the form:</div><div class=3D""><br class=3D""></div><div =
class=3D"">- I have reviewed the draft and found no =
issues.&nbsp;</div><div class=3D"">- I have reviewed the draft and found =
the following issues =E2=80=A6</div><div class=3D""><br =
class=3D""></div><div class=3D"">This WGLC will conclude on Monday, =
January 25. An IPR call has already been issued separately.</div><div =
class=3D""><br class=3D""></div><div class=3D"">Thank you.<br =
class=3D""><div class=3D""><br class=3D""><div class=3D"">
<div dir=3D"auto" style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, =
0); letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: =
break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" =
class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: =
break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" =
class=3D""><div class=3D"">Mahesh &amp; Kent (as =
co-chairs)</div></div></div></div></div></div><div class=3D""><div =
dir=3D"auto" style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); =
letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: =
break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" =
class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: =
break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" =
class=3D""><br class=3D""><div class=3D""><br class=3D""></div></div><br =
class=3D"Apple-interchange-newline"></div><br =
class=3D"Apple-interchange-newline"><br =
class=3D"Apple-interchange-newline">
</div>
<br class=3D""></body></html>=

--Apple-Mail=_7F5D51E9-3B47-4626-8596-8D46F8520DA0--


From nobody Tue Jan 12 04:13:29 2021
Return-Path: <noreply@ietf.org>
X-Original-To: netconf@ietf.org
Delivered-To: netconf@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D6DC3A11DB; Tue, 12 Jan 2021 04:13:22 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: =?utf-8?q?J=C3=BCrgen_Sch=C3=B6nw=C3=A4lder_via_Datatracker?= <noreply@ietf.org>
To: <yang-doctors@ietf.org>
Cc: draft-ietf-netconf-crypto-types.all@ietf.org, last-call@ietf.org, netconf@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 7.24.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <161045360252.14510.16755799701987783827@ietfa.amsl.com>
Reply-To: =?utf-8?b?SsO8cmdlbiBTY2jDtm53w6RsZGVy?= <j.schoenwaelder@jacobs-university.de>
Date: Tue, 12 Jan 2021 04:13:22 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/m-Xf4eZVDZ3uRA8N9ivkjcuM7bc>
Subject: [netconf] Yangdoctors last call review of draft-ietf-netconf-crypto-types-18
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Jan 2021 12:13:23 -0000

Reviewer: Jürgen Schönwälder
Review result: Ready with Issues

The crypto modules aim at providing a flexible reusable infrastructure
of groupings for modeling cryptographic keys and related concepts. The
flexibility of the definitions provided of course comes with a certain
amount of complexity.

>From a YANG perspective, draft-ietf-netconf-crypto-types-18.txt is in
a good and close to publish state (a couple of minor issues left).  I
also tried to understand what is being modeled here and hence I also
have some questions concerning the concepts modeled and I hope these
are easy to answer/resolve as well.

- I have compiled the YANG modules using yanglint 0.16.105.

- s/ietf-crypt-types/ietf-crypto-types/

- Does it make sense to have a new notation like

      |  The diagram above uses syntax that is similar to but not
      |  defined in [RFC8340].

  or shall this simply become regular text?

- "Identities use to specify uncommon formats are enabled [...]" is
  this correct or should it be "used to specify"?

- Second bullet 2.1.4.1:

  Perhaps change
  
  [...] specified by the "format" identity Section 2.1.2 associated [...]

  to
  
  [...] specified by the "format" identity (see Section 2.1.2) associated [...]

  What is 'encoded in the format specified by the "format" identity' I
  assume this refers to the key value that is encrypted and stored in
  encrypted-value, no?

- Same bullet in 2.1.4.1:

      The "encrypted-value" node is the key, encrypted by the key
      referenced by the "encrypted-by" node, encoded in the format
      specified by the "format" identity Section 2.1.2 associated with
      the ancestor node using this grouping.

  Do I understand correctly that the encrypted-value always holds an
  encrypted key? If so, a better name for the leaf would perhaps have
  been encrypted-key and for the grouping encrypted-key-grouping. I
  assume you did not pick this name since you wanted to use
  encrypted-key for other purposes? This makes sense and may have led
  to encrypted-key-value-grouping, in the sense of an encrypted
  'key-value'? For the definition of the grouping, does it actually
  matter that the value encrypted is a key? Or would it make sense to
  rename the grouping to encrypted-value-grouping and then the second
  bullet becomes:

      The "encrypted-value" node holds the value, encrypted by the key
      referenced by the "encrypted-by" node, encoded in the format
      specified by the "format" identity (see Section 2.1.2) associated with
      the ancestor node using this grouping.

  Looking at the definition of encrypted-key-value-grouping, it seems
  that the name encrypted-value-grouping would actually be more
  appropriate, there is nothing in the definition that says that the
  value must be a key for something.

  And is it "the" ancestor node or "an" ancestor node? Perhaps the
  possible confusion here is that ancestor node may mean different
  things, schema tree versus data tree. What about this?

      The "encrypted-value" node holds the value, encrypted by the key
      referenced by the "encrypted-by" node, encoded in the format
      specified by the "format" identity (see Section 2.1.2) associated with
      the ancestor data node of the data node using this grouping.

  Hm. Did I reverse engineer this correctly?

- In 2.1.4.2 last item, where do I see that the encrypted-password
  node is encoded using the CMS EnvelopedData structure? There is no
  "format" identity here, so this is hard coded to always have the CMS
  EnvelopedData structure (or is it CMS EncryptedData structure, see
  below)? OK, if I lookup the definition, it seems to use a hardcoded
  format.

- Always use cleartext instead plain-text? I understand that some
  people make a distinction between plain text, plaintext, and
  cleartext. Does this document do that? I do not think so, and if so,
  we may reduce confusion by picking just one term. On the other hand,
  if there is a distinction made, then the document should perhaps be
  explicit about it somewhere and define how these terms are used.

- The example in section 2.2 is helpful and much appreciated.

- s/confugration/configuration/

- The encrypted-password description says that it uses a" CMS
  EnvelopedData structure, per Section 8 in RFC 5652, encoded using
  ASN.1 distinguished encoding rules (DER)". However, section 8 of RFC
  5652 defined EncryptedData and not EnvelopedData. So what is the
  intention here?

- Following up on the previous point, it seems that the EncryptedData
  format does not introduce a salt, i.e., if the same password is used
  multiple times and they are all protected by the same key, then this
  is visible since the encrypted formats will all be the same as well.
  Is this something to be concerned about? Well, this is not really
  a yang-doctor question...

- The encrypted-one-symmetric-key-format again refers to the
  EnvelopedData per Section 8 in RFC 5652 but section 8 only defines
  EncryptedData. So either the type name is wrong or the reference is
  wrong.

- The encrypted-password container description refers to the
  EnvelopedData and either the reference to section 8 is wrong or it
  should be EncryptedData (see above). Is it OK to have a fixed
  encrypted password format? Perhaps it is, I am just checking. (The
  password leaf in RFC 7317 uses the ianach:crypt-hash format, i.e.,
  it is somewhat extensible but then this module may target different
  use cases as it deals with encrypted passwords instead of hashed
  passwords.)

- I wonder why this is a SHOULD and not a MUST:

           "Identifies the symmetric key's format.  Implementations
            SHOULD ensure that the incoming symmetric key value is
            encoded in the specified format.";

  This statement shows up several times when the key-format identities
  are used. I wonder what this means to an implementer. If I receive a
  key format (say one-symmetric-key-format) and a corresponding blob
  of data, do I have to decode this to see whether the format works
  out? If later the key-format is changed to something else (lets say
  octet-string-key-format), do I reject such a change or is it OK as
  long as the binary data I have would be a valid value given the new
  format? Perhaps this is implementation specific? Well, since we deal
  with keys, ...

- The definitions of the features symmetric-key-encryption and
  private-key-encryption have copy and paste text from the definition
  of the feature password-encryption. I think they need to be changed
  to:

     feature symmetric-key-encryption {
       description
         "Indicates that the server supports encryption of
          symmetric keys.";
     }

     feature private-key-encryption {
       description
         "Indicates that the server supports encryption of
 	  private keys.";
     }

- If I have a 'octet-string-key-format' key and I use it to create an
  encrypted key. How do I know which crypto algorithm is used? I have
  not digged into it, but do the various CMS structures provide this
  information somewhere? In the case of asymmetric keys, the format
  gives a hint whether I am dealing with RSA keys or EC keys. For
  symmetric keys, I am not sure in call cases how the algorithm is
  determined.

- The asymmetric-key-pair-with-certs-grouping descriptions talk about
  'IDevID' and 'LDevID' and 'TPM-protected asymmetric keys'. This
  seems to call for additional references to explain what these are.

- s/is was unclear/it was unclear/

- RFC 8407 suggests that the XML registry Registrant Contact is:

  Registrant Contact: The IESG.

  This does not seem to be handled in a consistent manner if I look at
  recent RFCs but I think the idea was to give the responsibility to
  the IESG, assuming the IESG is a more stable entity than WGs.





From nobody Tue Jan 12 10:41:25 2021
Return-Path: <noreply@ietf.org>
X-Original-To: netconf@ietf.org
Delivered-To: netconf@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 851163A11BD; Tue, 12 Jan 2021 10:41:12 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: =?utf-8?q?J=C3=BCrgen_Sch=C3=B6nw=C3=A4lder_via_Datatracker?= <noreply@ietf.org>
To: <yang-doctors@ietf.org>
Cc: draft-ietf-netconf-trust-anchors.all@ietf.org, last-call@ietf.org, netconf@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 7.24.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <161047687248.13931.17900123352005904827@ietfa.amsl.com>
Reply-To: =?utf-8?b?SsO8cmdlbiBTY2jDtm53w6RsZGVy?= <j.schoenwaelder@jacobs-university.de>
Date: Tue, 12 Jan 2021 10:41:12 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/EfqniUNAZfdJn7QbUCzokmHiy4Q>
Subject: [netconf] Yangdoctors last call review of draft-ietf-netconf-trust-anchors-13
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Jan 2021 18:41:19 -0000

Reviewer: Jürgen Schönwälder
Review result: Ready with Issues

The crypto modules aim at providing a flexible reusable infrastructure
of groupings for modeling cryptographic keys and related concepts. The
flexibility of the definitions provided of course comes with a certain
amount of complexity.

>From a YANG perspective, draft-ietf-netconf-trust-anchors-13.txt is in
a good and close to publish state (a couple of minor issues left).  I
also tried to understand what is being modeled here and hence I also
have some questions concerning the concepts modeled and I hope these
are easy to answer/resolve as well.

- I have compiled the YANG modules using yanglint 0.16.105.

- The prefix 'ts' is rather short, the set of two letter prefixes is
  rather small limited. This comment also applies to the other
  documents, crypto-types uses 'ct. Perhaps this is not a problem
  since collisions can be handled but if we go for rather short
  prefixes, we will have to exercise the collision resolution. (I see
  that 'ct' has already been used by ietf-complex-types, RFC 6095.) A
  possible alternative could be to use sec-ct, sec-ts, sec-ks, ...).

  RFC 8407 provides the following guidelines (Section 4.2):

   Prefix values SHOULD be short but are also likely to be unique.
   Prefix values SHOULD NOT conflict with known modules that have been
   previously published.

  Well, having short and terse prefixes is actually nice and enhancing
  programmer readability.

- s/is defines a truststore/defines a truststore/

- s/to be grouped references/to be grouped and referenced/

- In 2.2.1, I was not sure what CA certificates are and what EE
  certificates are. I then tried to guess EE = end entity cert, but
  this does not explain CA since the term used in crypto types is
  trust anchor cert. The description in the XML clarified that my
  guess was kind of correct. Perhaps explain upfront what these
  acronyms mean? Or perhaps the acronyms can be avoided by simply
  spelling things out? They do not appear to be used frequently.

- s/<!-- Entity Certs/<!-- End Entity Certs/

- s/(Section 2.1.3.2), groupings/(Section 2.1.3.2) groupings/

- Is the feature truststore-supported really needed? Does the YANG
  library not already provide the information whether a module has
  been implemented or just imported to access type and grouping
  definitions?

- In the YANG module, you seem to use Truststore to refer to
  /ts:truststore but in the surrounding text you also use just
  truststore. I am not sure it is necessary to have the capitalized
  version but if people think its necessary, it makes sense to define
  the difference and to make sure the proper capitalization is used
  throughout the document. (If it is necessary somewhere to be
  explicit, I would rather use /ts:truststore but that may be my
  subjective preference. Well, I started to use 'central truststore'
  below, not sure this is better as the term also would benefit from
  being defined.)

- Does it make sense to be explicit about the fact that the cert/key
  references are all weak references in the sense that they can exist
  without the corresponding cert/key being present? In other words, in
  order to safely delete a cert/key, one would have to check that
  there are no dangling references left (which is difficult in case
  references are scattered over multiple (proprietary) data models).
  For YANG savvy people this may be obvious since there is no
  require-instance statement in the leafref type definition but not
  every implementer may recall this - and it would be good to document
  that using weak references was an explicit design decision and not
  an oversight.

- Does it make sense to spell out that using the grouping in other
  YANG modules requires to define additional reference types since the
  ones provided by this modules only work for the central truststore
  store? And this as a consequence may require multiple leafs to refer
  to keys that exist in different truststores, i.e., having multiple
  truststores is possible but comes with a cost.

- Would it make sense to add to all three documents an objectives
  section that summarizes the design objectives? For this module,
  a starting point might be this:

  2.1.  Objectives

  The design of the truststore data model was guided by the following
  design objectives:

  - provide a central truststore for storing keys or certificates
  - provide support for storing named bags of keys or certificates
  - provide types that can be used to reference keys or certificates
    stored in the central truststore
  - protect the truststore using suitable access control definitions
  - provide groupings that support locally configured keys or
    certificates or references to key or certificate bags in the
    central truststore
  - provide groupings that can be used to instantiate truststores
    in other data models (but this requires to introduce additional
    types to reference keys or certificates)

  I do not know whether this list is complete but I find it usually
  helpful to have the design objectives spelled out.

- Section 3 talks about populating <running> with built-in trust
  anchors.

   In order for the built-in trust anchors to be referenced by
   configuration, the referenced certificates MUST first be copied into
   <running>.  The certificates SHOULD be copied into <running> using
   the same "key" values, so that the server can bind them to the built-
   in entries.

  Is the idea that this copy operation is an explicit management
  operation or can implementations populate <running> with this
  data automatically?

- Section 4.2 says:

   This module does not define any RPCs, actions, or notifications, and
   thus the security consideration for such is not provided here.

  Well, the module actually instantiates certificate-expiration
  notifications.

- Registrant Contact: should be changed to the IESG.




From nobody Tue Jan 12 11:02:11 2021
Return-Path: <jason.sterne@nokia.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A6C83A1028 for <netconf@ietfa.amsl.com>; Tue, 12 Jan 2021 11:02:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.151
X-Spam-Level: 
X-Spam-Status: No, score=-2.151 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.25, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wBxzdxZiL80p for <netconf@ietfa.amsl.com>; Tue, 12 Jan 2021 11:02:08 -0800 (PST)
Received: from NAM10-BN7-obe.outbound.protection.outlook.com (mail-bn7nam10on2126.outbound.protection.outlook.com [40.107.92.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1844B3A1027 for <netconf@ietf.org>; Tue, 12 Jan 2021 11:02:07 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gQpg6m5o6FpcMqJY6cY7xNhbPIpcnsIYK/F797SjlyWzgvPZLgelHOC0/gSnCYAuEyhF7VNGUh9saIatOpNhcktiGB/crtr3pwvztkADvNdPgBgHdFoiDRnPdO3+V5gJNZMPK/RueJ2ctyQ0shtSo8BjBwhrr/a6Zb0GwrPHVVHb0SoEMKXxttO50s3ezXnvir9tVr8pMP3RZwKL0GiTjZ+WWeWSLHf8miu36egtUt5mJxlmVF9N0vmxYY6U2weoWfWicT4VV7kkpKmZpDoZkoiXTcp5ciIbVeFa4UTnJ0DV9i3nmXAqgamSFxAr3N/AY9zOyV5OuSRp+jaizKpWgw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UhUdDwXkpBrukB10T5s86erKygq7ajQuQXI3F23VpjU=; b=Sul/qZa5VikQtO185N+JjzydHRol4+HlezUb1Ge1h9SoOyF9j3RAgeJQvTMgbDdRR1w+e0/yEn9VUn8G7UsvItRQeCkwAemwRnSIx/ejsBhu2TyiVjLwnRt1CSivkqdnU91I2CRWZSQRxiZDoztUNCAKC8Gztc47au8bL6foVerVs0pBADu1hitmEF9OqXh41IdaSskbQY/Mm1R1wxaNtEIimsYbAn1h10cN+3+qE436zdIF+N+iX6I0siMpipQh1GiNmAw9eAsIJNF2OCprnC8b1QRNA26kTelZiOqAt6aZi+j06vyf3vajo3N+ignGeLJObGKoWlJwwgN4jgxXcA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia.com; dmarc=pass action=none header.from=nokia.com; dkim=pass header.d=nokia.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com;  s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UhUdDwXkpBrukB10T5s86erKygq7ajQuQXI3F23VpjU=; b=uOvKDYuHgk/7ZjU1AK/zhU69iJlMY5u4WMAwX7fos5MpZggK7Z3RRHjlwIog7Ts6TX2hzdNFJSyy9mDhKYHMiSUpa44x54bt1Fnr6KJAikAKsG3NqOxDf0tqzizi/buSZxpPPpseRk+I3qWs+tWKj7PqozR8ds7nyBiQmxsRtgU=
Received: from DM6PR08MB5084.namprd08.prod.outlook.com (2603:10b6:5:41::29) by DM5PR08MB2378.namprd08.prod.outlook.com (2603:10b6:3:72::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3742.6; Tue, 12 Jan 2021 19:02:04 +0000
Received: from DM6PR08MB5084.namprd08.prod.outlook.com ([fe80::e9d5:c438:1c73:8ca3]) by DM6PR08MB5084.namprd08.prod.outlook.com ([fe80::e9d5:c438:1c73:8ca3%5]) with mapi id 15.20.3742.012; Tue, 12 Jan 2021 19:02:04 +0000
From: "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>
To: Netconf <netconf@ietf.org>
Thread-Topic: built-in trust anchors
Thread-Index: AdbpFFL2IioTw935RTC9hP47Cn7q7Q==
Date: Tue, 12 Jan 2021 19:02:04 +0000
Message-ID: <DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0@DM6PR08MB5084.namprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=nokia.com;
x-originating-ip: [2607:fea8:e324:8d00:f965:4ae3:4b56:123b]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: 43637d24-54b5-4b51-acc3-08d8b72c8d13
x-ms-traffictypediagnostic: DM5PR08MB2378:
x-microsoft-antispam-prvs: <DM5PR08MB23780C36E0C85120BD360E299BAA0@DM5PR08MB2378.namprd08.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 6Jfdpp1Z+17wePyBLjCGB7/BhcXnBHclxupTyU2bahDGq4UC+fUulslOcb3P+3gQ5rMMFiF3Ncs8QjJI9ZG52UK/SpSLc3WzqHGN5PvRXi2m5oHnvNNJLLdLMAxfvjEP91AdpXG4S9XxcrOeUEDMuTji2SBap4t/ARX2RsoDrXUYAr8o37Pc6yF1MdmhLIWnf/B2BHOgnBC3dEe+rZQ3T+eTyq5tVy6mtCfznubonYqc5qZ0gGomXmajZ0yNLe7CEGYIwVHWrSlCgv02M0EVdynC6fZJ72alfcPAwOazfsb9NDcQuc05x6Wy7QW9hDgwvEsEnTcMYyZ2nFWGjNSvVXRdbnTdpMsjD00mHbbx+gU5/1E33Qi4HRsBdY156WAWB90HvPwbgLyOi4QV+qZQFg==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:DM6PR08MB5084.namprd08.prod.outlook.com; PTR:; CAT:NONE;  SFS:(4636009)(39860400002)(366004)(136003)(396003)(346002)(376002)(52536014)(6916009)(66946007)(5660300002)(316002)(76116006)(7696005)(83380400001)(66446008)(186003)(9686003)(8936002)(8676002)(478600001)(64756008)(86362001)(55016002)(66556008)(2906002)(71200400001)(6506007)(66476007)(33656002)(3480700007); DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata: =?us-ascii?Q?q2qd7H90tl33wlWiee0dE51gbpQm078n4T6C6aPJa/feujXNwkX8kIz80IUs?= =?us-ascii?Q?EEo4AisN7qsl3kKio40VmXyUkF6xo3vF+kfhc4H2rCx/6uqTPZ5HTho2su4B?= =?us-ascii?Q?gnVTv++tQJu4lqK93aAyUlRLgK3CBOWU9I6Imn9BB6Ykz03vTxpDkCT9rdfs?= =?us-ascii?Q?xnnSrUVg/Z4ebkmZ50VJz5ra2N1k91wHug+nRyNkbsIQsWUQNbQsCQ4dfV0F?= =?us-ascii?Q?w7DDVpHQz9lImaqPJreLRVGhbtgjCo1i6aE7lGvQ7KnGvjfLvqGZxmQqQBzy?= =?us-ascii?Q?nV2GUJkPnhaCQrg2/K5xrpdj+nXSLFwr3TQPKYg/eNU1MxfKUGqq3A1qK05S?= =?us-ascii?Q?9EJRfHCC6h4QiVLKb2nEfmKY9rlAvZj0NYVsNdsygW39FXRH8z+cHOm7984d?= =?us-ascii?Q?8ozPxw3VdmThcIn2FQqNrTHYjf5XGf9duD1LZweNcnhc0e4VxNtEIbuO5aMB?= =?us-ascii?Q?ew2munrsW+V+JoGhGLqVRhWZGt5Tf+3ZE5HtjtkYCJoG3FDIJ9+TeOdnKxVv?= =?us-ascii?Q?qfHlIuM7vA+/eVSIU6rGkv0aUvB7Mr+JJZ+TkEb44+7q2tgjl0vcy37tfats?= =?us-ascii?Q?weAj9OD3KkothBY4yECGA7ZntLzWumRrX2187NnEBlI4AAI/okmfVr1iL5xu?= =?us-ascii?Q?7kJMtCj1vdeT3du81mP1iDHrvrkcIi6NDa/l/+oNAnlKGIX+OEOc2j9D/9Oj?= =?us-ascii?Q?/+2drCPzT/pAhhR14SanQ7UDEM8b0sJvREd4baP+XdoZvyOUG28J6YMfD2gA?= =?us-ascii?Q?hkn8/9XdBsRg3D+ejmCz+LiDj44rCs4tpqzVQMSgoFdb6N8xV6HEFyhFlLr7?= =?us-ascii?Q?YsEZlyGgiMV4BFzsjB/Jknlafb1DFPnof4gDxcr/zj9f6O8fWEjyGVPdIW/V?= =?us-ascii?Q?Ph/qj2m4KevTUoiSRD2FPKjoCQnIjybZ1i3J04iXK0QYqDMNOwWJTi2aW3Im?= =?us-ascii?Q?1lnKymGyQue44d19C+Ar8j/TaVSLIVnjl/Feo43QIuA6NBc7Uu4m5BzxiTTk?= =?us-ascii?Q?xIMttDhHaHMEYQIaye1iBn+/3tP+ssVUmiM+y2XT2+kXDzeGCI4ogU+XGdnv?= =?us-ascii?Q?/iTQD09G?=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0DM6PR08MB5084namp_"
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DM6PR08MB5084.namprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 43637d24-54b5-4b51-acc3-08d8b72c8d13
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jan 2021 19:02:04.5776 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: pfk4sdJK+Z60KMSzfLTkHXHsb5jSOw92bCOLrxv73kqqtaDZOUBCfSX12gOui23JbPGpFGyDVOHqQKd2iMJ1ew==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR08MB2378
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/i4kTGseYl3BpTtb31NWbb593knA>
Subject: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Jan 2021 19:02:10 -0000

--_000_DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0DM6PR08MB5084namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi all,

I noticed Jurgen's comment about built-in trust anchors in his YANG doctor =
review of trust-anchors-13. I wanted to pull that out into a dedicated thre=
ad/discussion here.

Jurgen:


- Section 3 talks about populating <running> with built-in trust

  anchors.



   In order for the built-in trust anchors to be referenced by

   configuration, the referenced certificates MUST first be copied into

   <running>.  The certificates SHOULD be copied into <running> using

   the same "key" values, so that the server can bind them to the built-

   in entries.



  Is the idea that this copy operation is an explicit management

  operation or can implementations populate <running> with this

  data automatically?

I suppose a server *could* populate this in running as part of a built-in s=
tartup datastore in the absence of a startup datastore (i.e. as contents of=
 a RFC8808 factory default). But I assume it is desirable to be able to del=
ete the running copy of a built-in item. So the system would have to avoid =
populating these unless it is loading the factory default.

But even if the system can populate these, we'd also want the client/user t=
o be able to explicitly populate them as well (i.e. in case they delete one=
 from running, and want to add it back in to reference it).

In either case (system population of running, or client population of runni=
ng), do we really need to put the contents of the bag or the cert into runn=
ing?  Or is populating the list key enough since the operational copy shows=
 what contents are in use for that list entry?

Jason

--_000_DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0DM6PR08MB5084namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" xmlns:m=3D"http://schema=
s.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html=
40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
	{mso-style-priority:99;
	mso-style-link:"Plain Text Char";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.PlainTextChar
	{mso-style-name:"Plain Text Char";
	mso-style-priority:99;
	mso-style-link:"Plain Text";
	font-family:"Calibri",sans-serif;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-CA" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span lang=3D"EN-US">Hi all,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">I noticed Jurgen's comment abou=
t built-in trust anchors in his YANG doctor review of trust-anchors-13. I w=
anted to pull that out into a dedicated thread/discussion here.<o:p></o:p><=
/span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Jurgen:<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt">- Section 3 talks ab=
out populating &lt;running&gt; with built-in trust<o:p></o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt">&nbsp; anchors.<o:p>=
</o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><o:p>&nbsp;</o:p></p=
>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt">&nbsp;&nbsp; In orde=
r for the built-in trust anchors to be referenced by<o:p></o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt">&nbsp;&nbsp; configu=
ration, the referenced certificates MUST first be copied into<o:p></o:p></p=
>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt">&nbsp;&nbsp; &lt;run=
ning&gt;.&nbsp; The certificates SHOULD be copied into &lt;running&gt; usin=
g<o:p></o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt">&nbsp;&nbsp; the sam=
e &quot;key&quot; values, so that the server can bind them to the built-<o:=
p></o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt">&nbsp;&nbsp; in entr=
ies.<o:p></o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><o:p>&nbsp;</o:p></p=
>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt">&nbsp; Is the idea t=
hat this copy operation is an explicit management<o:p></o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt">&nbsp; operation or =
can implementations populate &lt;running&gt; with this<o:p></o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt">&nbsp; data automati=
cally?<o:p></o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">I suppose a server *<b>could</b=
>* populate this in running as part of a built-in startup datastore in the =
absence of a startup datastore (i.e. as contents of a RFC8808 factory defau=
lt). But I assume it is desirable to
 be able to delete the running copy of a built-in item. So the system would=
 have to avoid populating these unless it is loading the factory default.<o=
:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">But even if the system can popu=
late these, we'd also want the client/user to be able to explicitly populat=
e them as well (i.e. in case they delete one from running, and want to add =
it back in to reference it).
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">In either case (system populati=
on of running, or client population of running), do we really need to put t=
he contents of the bag or the cert into running?&nbsp; Or is populating the=
 list key enough since the operational copy
 shows what contents are in use for that list entry?<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Jason<o:p></o:p></span></p>
</div>
</body>
</html>

--_000_DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0DM6PR08MB5084namp_--


From nobody Tue Jan 12 11:59:59 2021
Return-Path: <j.schoenwaelder@jacobs-university.de>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B353A3A1124 for <netconf@ietfa.amsl.com>; Tue, 12 Jan 2021 11:59:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1OmI-F2m77oD for <netconf@ietfa.amsl.com>; Tue, 12 Jan 2021 11:59:55 -0800 (PST)
Received: from atlas5.jacobs-university.de (atlas5.jacobs-university.de [212.201.44.20]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53B1E3A1123 for <netconf@ietf.org>; Tue, 12 Jan 2021 11:59:54 -0800 (PST)
Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas5.jacobs-university.de (Postfix) with ESMTP id 23E28670; Tue, 12 Jan 2021 20:59:53 +0100 (CET)
X-Virus-Scanned: amavisd-new at jacobs-university.de
Received: from atlas5.jacobs-university.de ([10.70.0.198]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10032) with ESMTP id PunA56Q4rdUm; Tue, 12 Jan 2021 20:59:52 +0100 (CET)
Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "DFN-Verein Global Issuing CA" (verified OK)) by atlas5.jacobs-university.de (Postfix) with ESMTPS; Tue, 12 Jan 2021 20:59:52 +0100 (CET)
Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by hermes.jacobs-university.de (Postfix) with ESMTP id 9F78320156; Tue, 12 Jan 2021 20:59:52 +0100 (CET)
X-Virus-Scanned: amavisd-new at jacobs-university.de
Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10028) with ESMTP id gp47Erx2ZABy; Tue, 12 Jan 2021 20:59:52 +0100 (CET)
Received: from localhost (anna.jacobs.jacobs-university.de [10.50.218.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by hermes.jacobs-university.de (Postfix) with ESMTPS id F0C5620154; Tue, 12 Jan 2021 20:59:51 +0100 (CET)
Date: Tue, 12 Jan 2021 20:59:51 +0100
From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
To: "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>
Cc: Netconf <netconf@ietf.org>
Message-ID: <20210112195951.oi7dlnnqpda7wavm@anna.jacobs.jacobs-university.de>
Reply-To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
Mail-Followup-To: "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>, Netconf <netconf@ietf.org>
References: <DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0@DM6PR08MB5084.namprd08.prod.outlook.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0@DM6PR08MB5084.namprd08.prod.outlook.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/iHI3S3UeaAPBdmL94FvBQtRp3KU>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Jan 2021 19:59:58 -0000

Jason,

since the leafref typedefs are weak references that do not require
that the certs/keys exist (there is no 'require-instance true'), it
may be OK to not have the certs/keys in <running> in terms of validity
of the <running> datastore.

Oops, I had to reread RFC 7950 (section 9.9.3): if require-instance is
not present, it defaults to true, so my review comment about weak
references is incorrect, these are actually strong references and
hence there is the need to copy what is referenced. Setting
require-instance to false may resolve this (but we loose the ability
to catch references to certs/keys that do not exist).

/js

On Tue, Jan 12, 2021 at 07:02:04PM +0000, Sterne, Jason (Nokia - CA/Ottawa) wrote:
> Hi all,
> 
> I noticed Jurgen's comment about built-in trust anchors in his YANG doctor review of trust-anchors-13. I wanted to pull that out into a dedicated thread/discussion here.
> 
> Jurgen:
> 
> 
> - Section 3 talks about populating <running> with built-in trust
> 
>   anchors.
> 
> 
> 
>    In order for the built-in trust anchors to be referenced by
> 
>    configuration, the referenced certificates MUST first be copied into
> 
>    <running>.  The certificates SHOULD be copied into <running> using
> 
>    the same "key" values, so that the server can bind them to the built-
> 
>    in entries.
> 
> 
> 
>   Is the idea that this copy operation is an explicit management
> 
>   operation or can implementations populate <running> with this
> 
>   data automatically?
> 
> I suppose a server *could* populate this in running as part of a built-in startup datastore in the absence of a startup datastore (i.e. as contents of a RFC8808 factory default). But I assume it is desirable to be able to delete the running copy of a built-in item. So the system would have to avoid populating these unless it is loading the factory default.
> 
> But even if the system can populate these, we'd also want the client/user to be able to explicitly populate them as well (i.e. in case they delete one from running, and want to add it back in to reference it).
> 
> In either case (system population of running, or client population of running), do we really need to put the contents of the bag or the cert into running?  Or is populating the list key enough since the operational copy shows what contents are in use for that list entry?
> 
> Jason

> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf


-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>


From nobody Tue Jan 12 14:59:34 2021
Return-Path: <jason.sterne@nokia.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 214193A1373 for <netconf@ietfa.amsl.com>; Tue, 12 Jan 2021 14:59:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.151
X-Spam-Level: 
X-Spam-Status: No, score=-2.151 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.25, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6V1rcpI9ROdm for <netconf@ietfa.amsl.com>; Tue, 12 Jan 2021 14:59:31 -0800 (PST)
Received: from NAM10-BN7-obe.outbound.protection.outlook.com (mail-bn7nam10on2132.outbound.protection.outlook.com [40.107.92.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E5A03A136C for <netconf@ietf.org>; Tue, 12 Jan 2021 14:59:30 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hUxVPnUCEvxcVG6jPr4DCfSAN6PGRY/ASIWeeIxvGuQVreHeTnBey/Dp8u6+QFsW4yklXXO6yd7Ql+IAiCPhkGaiiidfY+BhQqq36wb63Xhxa0shMroLgx0qRwJdPLf6NEfy5vEuexyKd2iLu0pDAeZKJMGzSDV7cumjIIlGCxiTx4wgnc7FHxiatCoTmyX28W9pGgPx5CwuLVl91qPkLt7LEspyD4FA0ZG7eD5DUkUTwKyqHXK/xvuBTGimNd7LxuDNdjUHQ9DRo8ZJa+9hVnvSb44iS4oRdwX0BeLIQOnWgX1CYFRxdv441TlOvazVNQ2uTMaig+kerNecDVEu8w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MuNhft9+tA0ul53guen7wFb7JKfaUpqtqm9aqIXKKjY=; b=CO2wTAMPYQ1lDEz2bwfU1iP12VYIL4DhjQr6r600fTblS+HPSMygnidB+F61V2c1smsR2/DpwP8vGWQq5BKXDQww3LppiBX1GafHaXCJ17I6oH33iash+evT+tLc6w7X2CYh4Sqz2VwxiK7eLMldmZUbNBwtMJhkH1QLN4QBN4Qe+/1v4p7M4Qexcod78GHevDaov3Ps8MLglKT7htI8NmuRdSSVkRCKzb4sy2WoYxwfgdD80b0OyAys1H0gS6t/ETb2qDRSCLNt4f5IDpJdDVVf64N66NXf1U28LDZEBCznRiAUbK08/K6wLxVGdLtops2Xb9zLIUDkrG8qo+ZVFQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia.com; dmarc=pass action=none header.from=nokia.com; dkim=pass header.d=nokia.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com;  s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MuNhft9+tA0ul53guen7wFb7JKfaUpqtqm9aqIXKKjY=; b=M+NVk4IJ3KSvKrB/4aztllmn+gVFB20AHZ3YML6P39KvW5s1HtYwN2XAvS1QG57OVimtSLuU24V+ZkTbPmi/hyt2ebLK86feOSjbuXRbQhpKHNVgCld4Q9d6I+OKbYTXhQNHjZNugyHPcXH+EeHWB4Epy0JMVAlr5ertdpOfn2s=
Received: from DM6PR08MB5084.namprd08.prod.outlook.com (2603:10b6:5:41::29) by DM5PR08MB3324.namprd08.prod.outlook.com (2603:10b6:4:65::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3742.12; Tue, 12 Jan 2021 22:59:28 +0000
Received: from DM6PR08MB5084.namprd08.prod.outlook.com ([fe80::e9d5:c438:1c73:8ca3]) by DM6PR08MB5084.namprd08.prod.outlook.com ([fe80::e9d5:c438:1c73:8ca3%5]) with mapi id 15.20.3742.012; Tue, 12 Jan 2021 22:59:28 +0000
From: "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>
To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
CC: Netconf <netconf@ietf.org>
Thread-Topic: [netconf] built-in trust anchors
Thread-Index: AdbpFFL2IioTw935RTC9hP47Cn7q7QACSnGAAAYuKwA=
Date: Tue, 12 Jan 2021 22:59:28 +0000
Message-ID: <DM6PR08MB5084ED69870DF456DA8F1A509BAA0@DM6PR08MB5084.namprd08.prod.outlook.com>
References: <DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0@DM6PR08MB5084.namprd08.prod.outlook.com> <20210112195951.oi7dlnnqpda7wavm@anna.jacobs.jacobs-university.de>
In-Reply-To: <20210112195951.oi7dlnnqpda7wavm@anna.jacobs.jacobs-university.de>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: jacobs-university.de; dkim=none (message not signed) header.d=none;jacobs-university.de; dmarc=none action=none header.from=nokia.com;
x-originating-ip: [2607:fea8:e324:8d00:f965:4ae3:4b56:123b]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: 0f665033-31ec-4573-76ed-08d8b74db704
x-ms-traffictypediagnostic: DM5PR08MB3324:
x-microsoft-antispam-prvs: <DM5PR08MB3324C9F7493E84C77E50B2C79BAA0@DM5PR08MB3324.namprd08.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:DM6PR08MB5084.namprd08.prod.outlook.com; PTR:; CAT:NONE;  SFS:(4636009)(366004)(376002)(396003)(346002)(39860400002)(136003)(4326008)(8676002)(33656002)(316002)(7696005)(66476007)(55016002)(2906002)(53546011)(83080400002)(86362001)(186003)(6506007)(83380400001)(9686003)(71200400001)(8936002)(966005)(478600001)(5660300002)(52536014)(66556008)(66946007)(76116006)(64756008)(66446008)(6916009); DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata: =?us-ascii?Q?SE2t42sq352rK4Lb/6tYB95X/lnLYmmFHPn3unIgEwNJjk1W6I2LIQqT4DVO?= =?us-ascii?Q?fSv7h3fcUn8/vvI+BNvTWGcx5uB+L+qrHOT6f6mlpZSK8I5ifITHuIRzZ6qc?= =?us-ascii?Q?0Ys3gczqMeIq0FiDyQ4ZlIxBwuALkidh/4T0lH819g7xB3nXkCkCa/UvDTyN?= =?us-ascii?Q?gAzjqYIeZgmOrr5Kf6M4CPhjiVY5GdTzfjJIiDbWJURAnUaH9GLBIu0YIDiM?= =?us-ascii?Q?VLDsj9JdfqxB+41QyZa4DpjDUwq2vFWbGlYYb4eqQrjeZgt0o9H8B0C523b/?= =?us-ascii?Q?7nK1PwzEb9D4fsIzRTQQr17EbBqrFh7eUvIj2mZdDHegK4R1RqSa5/OBr0Yi?= =?us-ascii?Q?5bHqWn72iLEbX980MNRqLyQRgjCpZ5/DPjHKXy0bDDl8zfFqrYQdf835CjfJ?= =?us-ascii?Q?4pmd7e0x6SOoPKV6/Uc3+bqPoTDWBMjBjA9S17/oK3DUDbwhHB6yCiuiszRo?= =?us-ascii?Q?5DxdjVJQSTXb/pGsZow1Xsi/7oXv72qiqzqHHixosLVexd8Bz40j+SEwcqX9?= =?us-ascii?Q?QEyQkgPY8bzOjMpUX5GC6l+bbkKLFd6SsggJOVKLIRg2PwJ+F/nDra3AsKyh?= =?us-ascii?Q?lbojOyrnEcSwQhbRnjBlSRb9bgx8thOr1rY785QuWEC8jUlnEGz/0SqwsbSO?= =?us-ascii?Q?Vb6WOpax6l0ospxdTJZsyYEYJdv4i3XZSaQKOrvKxrUTMPys9Cm4o8vJAuPO?= =?us-ascii?Q?sudh11Pra6SlPid8X4LBI+VNRpSylt3IcYsi8q97j5SHZsfBVLZ4PGKMoZcd?= =?us-ascii?Q?Xq7dNc8yzMyInmS9AvYQ3tHQqJLJCUJ1dAMV2jQHqKrQVQDUsCqMDF4MK2iT?= =?us-ascii?Q?KdQdVLCA0quC4oAPjNDghxtEipy7zb03AzNH0diKoh9H/BSHggxI0L2eaNEP?= =?us-ascii?Q?LqMb0Sg6k29ZOZlekWy9jBj+JyoZlFlO3A2UcDpFZcfG/Riny7lABhVa918v?= =?us-ascii?Q?xwhXV2DtbhBvLoyUyTL+t9bosmM3sCfDOCDNXed7ISgaf7L6xh7LU9R24hSe?= =?us-ascii?Q?SG3cJ8PwG2hsrPza5o0nixZeRT3zTQwY6CYCcKA2ofTlYEHNVVU7fhWoYtGK?= =?us-ascii?Q?GGtoLfDE?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DM6PR08MB5084.namprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 0f665033-31ec-4573-76ed-08d8b74db704
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jan 2021 22:59:28.3163 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: NIuwoCYz2ZHu7jrphMFskBk3Ik8r1j28uLWP2HbWfUjuk7HgHCW6uNxSyxJucAuDSTxpSOrjx/0dQuQMXeoVig==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR08MB3324
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/G88WsVwJturKIAcXdmK89hz8VnA>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Jan 2021 22:59:33 -0000

Yes - adding require-instance false would eliminate the issue about built-i=
n anchors in <running>. But there are useful advantages to keeping require-=
instance true. I don't have a strong feeling though one way or the other.

But assuming we keep require-instance true then the question still remains =
of how built-in items get into <running> (and are they deletable, and do we=
 only need keys in running, etc).

Jason

> -----Original Message-----
> From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
> Sent: Tuesday, January 12, 2021 3:00 PM
> To: Sterne, Jason (Nokia - CA/Ottawa) <jason.sterne@nokia.com>
> Cc: Netconf <netconf@ietf.org>
> Subject: Re: [netconf] built-in trust anchors
>=20
> Jason,
>=20
> since the leafref typedefs are weak references that do not require
> that the certs/keys exist (there is no 'require-instance true'), it
> may be OK to not have the certs/keys in <running> in terms of validity
> of the <running> datastore.
>=20
> Oops, I had to reread RFC 7950 (section 9.9.3): if require-instance is
> not present, it defaults to true, so my review comment about weak
> references is incorrect, these are actually strong references and
> hence there is the need to copy what is referenced. Setting
> require-instance to false may resolve this (but we loose the ability
> to catch references to certs/keys that do not exist).
>=20
> /js
>=20
> On Tue, Jan 12, 2021 at 07:02:04PM +0000, Sterne, Jason (Nokia - CA/Ottaw=
a)
> wrote:
> > Hi all,
> >
> > I noticed Jurgen's comment about built-in trust anchors in his YANG doc=
tor
> review of trust-anchors-13. I wanted to pull that out into a dedicated
> thread/discussion here.
> >
> > Jurgen:
> >
> >
> > - Section 3 talks about populating <running> with built-in trust
> >
> >   anchors.
> >
> >
> >
> >    In order for the built-in trust anchors to be referenced by
> >
> >    configuration, the referenced certificates MUST first be copied into
> >
> >    <running>.  The certificates SHOULD be copied into <running> using
> >
> >    the same "key" values, so that the server can bind them to the built=
-
> >
> >    in entries.
> >
> >
> >
> >   Is the idea that this copy operation is an explicit management
> >
> >   operation or can implementations populate <running> with this
> >
> >   data automatically?
> >
> > I suppose a server *could* populate this in running as part of a built-=
in
> startup datastore in the absence of a startup datastore (i.e. as contents=
 of a
> RFC8808 factory default). But I assume it is desirable to be able to dele=
te the
> running copy of a built-in item. So the system would have to avoid popula=
ting
> these unless it is loading the factory default.
> >
> > But even if the system can populate these, we'd also want the client/us=
er
> to be able to explicitly populate them as well (i.e. in case they delete =
one
> from running, and want to add it back in to reference it).
> >
> > In either case (system population of running, or client population of
> running), do we really need to put the contents of the bag or the cert in=
to
> running?  Or is populating the list key enough since the operational copy
> shows what contents are in use for that list entry?
> >
> > Jason
>=20
> > _______________________________________________
> > netconf mailing list
> > netconf@ietf.org
> > https://www.ietf.org/mailman/listinfo/netconf
>=20
>=20
> --
> Juergen Schoenwaelder           Jacobs University Bremen gGmbH
> Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
> Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>


From nobody Tue Jan 12 17:15:35 2021
Return-Path: <bill.wu@huawei.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE5E53A1542; Tue, 12 Jan 2021 17:15:32 -0800 (PST)
X-Quarantine-ID: <0v7690H3V19v>
X-Virus-Scanned: amavisd-new at amsl.com
X-Amavis-Alert: BAD HEADER SECTION, Improper folded header field made up entirely of whitespace (char 20 hex): References: ...AA0@DM6PR08MB5084.namprd08.prod.outlook.com> 
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0v7690H3V19v; Tue, 12 Jan 2021 17:15:31 -0800 (PST)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E48613A1540; Tue, 12 Jan 2021 17:15:30 -0800 (PST)
Received: from fraeml745-chm.china.huawei.com (unknown [172.18.147.200]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4DFqDZ4FVkz67b2m; Wed, 13 Jan 2021 09:12:30 +0800 (CST)
Received: from fraeml745-chm.china.huawei.com (10.206.15.226) by fraeml745-chm.china.huawei.com (10.206.15.226) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Wed, 13 Jan 2021 02:15:28 +0100
Received: from DGGEML422-HUB.china.huawei.com (10.1.199.39) by fraeml745-chm.china.huawei.com (10.206.15.226) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.1.2106.2 via Frontend Transport; Wed, 13 Jan 2021 02:15:28 +0100
Received: from DGGEML531-MBS.china.huawei.com ([169.254.5.18]) by dggeml422-hub.china.huawei.com ([10.1.199.39]) with mapi id 14.03.0509.000; Wed, 13 Jan 2021 09:15:19 +0800
From: Qin Wu <bill.wu@huawei.com>
To: "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>, Netconf <netconf@ietf.org>
CC: "draft-ma-netconf-with-system@ietf.org" <draft-ma-netconf-with-system@ietf.org>
Thread-Topic: built-in trust anchors
Thread-Index: AdbpR3BVyU6dINBtRDqjLKPEfMuxVgAAD8+Q
Date: Wed, 13 Jan 2021 01:15:19 +0000
Message-ID: <B8F9A780D330094D99AF023C5877DABAADCD04AA@dggeml531-mbs.china.huawei.com>
References: <DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0@DM6PR08MB5084.namprd08.prod.outlook.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.136.101.103]
Content-Type: multipart/alternative; boundary="_000_B8F9A780D330094D99AF023C5877DABAADCD04AAdggeml531mbschi_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/OK5b_ET42qvJWRouSj8NarvuQIM>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 01:15:33 -0000

--_000_B8F9A780D330094D99AF023C5877DABAADCD04AAdggeml531mbschi_
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
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--_000_B8F9A780D330094D99AF023C5877DABAADCD04AAdggeml531mbschi_
Content-Type: text/html; charset="gb2312"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dgb2312">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:=CB=CE=CC=E5;
	panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:"\@=CB=CE=CC=E5";
	panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
	{font-family:=CE=A2=C8=ED=D1=C5=BA=DA;
	panose-1:2 11 5 3 2 2 4 2 2 4;}
@font-face
	{font-family:"\@=CE=A2=C8=ED=D1=C5=BA=DA";
	panose-1:2 11 5 3 2 2 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
	{mso-style-priority:99;
	mso-style-link:"=B4=BF=CE=C4=B1=BE Char";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
span.Char
	{mso-style-name:"=B4=BF=CE=C4=B1=BE Char";
	mso-style-priority:99;
	mso-style-link:=B4=BF=CE=C4=B1=BE;
	font-family:=CB=CE=CC=E5;
	mso-fareast-language:EN-US;}
span.EmailStyle19
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
p.PlainText, li.PlainText, div.PlainText
	{mso-style-name:"Plain Text";
	mso-style-link:"Plain Text Char";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
span.PlainTextChar
	{mso-style-name:"Plain Text Char";
	mso-style-priority:99;
	mso-style-link:"Plain Text";
	font-family:"Calibri",sans-serif;}
span.EmailStyle22
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"ZH-CN" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><b><span style=3D"font-family:&quot;=CE=A2=C8=ED=D1=
=C5=BA=DA&quot;,sans-serif;mso-fareast-language:ZH-CN">=B7=A2=BC=FE=C8=CB<s=
pan lang=3D"EN-US">:</span></span></b><span lang=3D"EN-US" style=3D"font-fa=
mily:&quot;=CE=A2=C8=ED=D1=C5=BA=DA&quot;,sans-serif;mso-fareast-language:Z=
H-CN"> netconf [mailto:netconf-bounces@ietf.org]
</span><b><span style=3D"font-family:&quot;=CE=A2=C8=ED=D1=C5=BA=DA&quot;,s=
ans-serif;mso-fareast-language:ZH-CN">=B4=FA=B1=ED
</span></b><span lang=3D"EN-US" style=3D"font-family:&quot;=CE=A2=C8=ED=D1=
=C5=BA=DA&quot;,sans-serif;mso-fareast-language:ZH-CN">Sterne, Jason (Nokia=
 - CA/Ottawa)<br>
</span><b><span style=3D"font-family:&quot;=CE=A2=C8=ED=D1=C5=BA=DA&quot;,s=
ans-serif;mso-fareast-language:ZH-CN">=B7=A2=CB=CD=CA=B1=BC=E4<span lang=3D=
"EN-US">:</span></span></b><span lang=3D"EN-US" style=3D"font-family:&quot;=
=CE=A2=C8=ED=D1=C5=BA=DA&quot;,sans-serif;mso-fareast-language:ZH-CN"> 2021=
</span><span style=3D"font-family:&quot;=CE=A2=C8=ED=D1=C5=BA=DA&quot;,sans=
-serif;mso-fareast-language:ZH-CN">=C4=EA<span lang=3D"EN-US">1</span>=D4=
=C2<span lang=3D"EN-US">13</span>=C8=D5<span lang=3D"EN-US">
 3:02<br>
</span><b>=CA=D5=BC=FE=C8=CB<span lang=3D"EN-US">:</span></b><span lang=3D"=
EN-US"> Netconf &lt;netconf@ietf.org&gt;<br>
</span><b>=D6=F7=CC=E2<span lang=3D"EN-US">:</span></b><span lang=3D"EN-US"=
> [netconf] built-in trust anchors<o:p></o:p></span></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Hi all,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">I noticed Jurgen's comment abou=
t built-in trust anchors in his YANG doctor review of trust-anchors-13. I w=
anted to pull that out into a dedicated thread/discussion here.<o:p></o:p><=
/span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Jurgen:<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>- Section 3 talks about populating &lt;running&gt; with built-in trust<o:p=
></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp; anchors.<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp;&nbsp; In order for the built-in trust anchors to be referenced by<o=
:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp;&nbsp; configuration, the referenced certificates MUST first be copi=
ed into<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp;&nbsp; &lt;running&gt;.&nbsp; The certificates SHOULD be copied into=
 &lt;running&gt; using<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp;&nbsp; the same &quot;key&quot; values, so that the server can bind =
them to the built-<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp;&nbsp; in entries.<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp; Is the idea that this copy operation is an explicit management<o:p>=
</o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp; operation or can implementations populate &lt;running&gt; with this=
<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp; data automatically?<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">I suppose a server *<b>could</b=
>* populate this in running as part of a built-in startup datastore in the =
absence of a startup datastore (i.e. as contents of a RFC8808 factory defau=
lt). But I assume it is desirable to
 be able to delete the running copy of a built-in item. So the system would=
 have to avoid populating these unless it is loading the factory default.<o=
:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"mso-fareast-language:Z=
H-CN"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"mso-fareast-language:Z=
H-CN">[Qin]:Interesting discussion, either loading the factory default from=
 factory datastore or define a new system datastore, I think both can enabl=
e the server to populate the data automatically,
 one of individual draft in NETCONF (draft-ma-netconf-with-system) seems to=
 target to address this issue, i.e., avoid duplicated data items to be crea=
ted in the running, I have copied this email to the author of draft-ma-netc=
onf-with-system for their feedback.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"mso-fareast-language:Z=
H-CN"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">But even if the system can popu=
late these, we'd also want the client/user to be able to explicitly populat=
e them as well (i.e. in case they delete one from running, and want to add =
it back in to reference it).
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"color:#1F497D"><o:p>&n=
bsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"mso-fareast-language:Z=
H-CN">[Qin]: See details in draft-ma-netconf-with-system. It helps define c=
onsistent behavior for system data handling, just like what RFC6243 did.<o:=
p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"mso-fareast-language:Z=
H-CN"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">In either case (system populati=
on of running, or client population of running), do we really need to put t=
he contents of the bag or the cert into running?&nbsp; Or is populating the=
 list key enough since the operational copy
 shows what contents are in use for that list entry?<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Jason<o:p></o:p></span></p>
</div>
</body>
</html>

--_000_B8F9A780D330094D99AF023C5877DABAADCD04AAdggeml531mbschi_--


From nobody Tue Jan 12 17:24:49 2021
Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E79AA3A07E2; Tue, 12 Jan 2021 17:24:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level: 
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nGj5lwt4qIAx; Tue, 12 Jan 2021 17:24:45 -0800 (PST)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 65B573A046B; Tue, 12 Jan 2021 17:24:44 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 91EFB38982; Tue, 12 Jan 2021 20:26:13 -0500 (EST)
Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 2UEtQkuwWY3q; Tue, 12 Jan 2021 20:26:13 -0500 (EST)
Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 2A0273897F; Tue, 12 Jan 2021 20:26:13 -0500 (EST)
Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id B35701F9; Tue, 12 Jan 2021 20:24:42 -0500 (EST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: =?us-ascii?Q?=3D=3Futf-8=3Fb=3FSsO8cmdlbiBTY2jDtm53w6RsZGVy=3F=3D?= <j.schoenwaelder@jacobs-university.de>
cc: yang-doctors@ietf.org, last-call@ietf.org, netconf@ietf.org, draft-ietf-netconf-trust-anchors.all@ietf.org
In-Reply-To: <161047687248.13931.17900123352005904827@ietfa.amsl.com>
References: <161047687248.13931.17900123352005904827@ietfa.amsl.com>
X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature"
Date: Tue, 12 Jan 2021 20:24:42 -0500
Message-ID: <22275.1610501082@localhost>
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/kR6AamgwEiqvRMPSfrnK4NDbuz8>
Subject: Re: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-trust-anchors-13
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 01:24:47 -0000

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


J=C3=BCrgen Sch=C3=B6nw=C3=A4lder via Datatracker wrote:
    > - In 2.2.1, I was not sure what CA certificates are and what EE
    > certificates are. I then tried to guess EE =3D end entity cert, but
    > this does not explain CA since the term used in crypto types is
    > trust anchor cert. The description in the XML clarified that my
    > guess was kind of correct. Perhaps explain upfront what these
    > acronyms mean? Or perhaps the acronyms can be avoided by simply
    > spelling things out? They do not appear to be used frequently.

    > - s/<!-- Entity Certs/<!-- End Entity Certs/

"End Entity" goes back to RFC2510, and I don't think it's defined in any of
our documents.  I was expecting to see it in RFC4949 or RFC5280, but it's
used in 5280, but not defined.
I guess it comes from X509.v3, which is still behind the stupid paywall.

The term EE/End Entity is in my opinion a great term, but it also took me
awhile to learn it.

=2D-
Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 I=C3=B8T consulti=
ng )
           Sandelman Software Works Inc, Ottawa and Worldwide





--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl/+S9oACgkQgItw+93Q
3WVnuQgAtSh5WqSUlJ41rx77fXBYmAtRIkRX/v+u5kd3ZvYdIWHjYjM0gy5OZh3j
WdOC30Js3iZxHbgvS5p+nzW9GOyEbaGheyYbyLnSw9kz2iqWMYKkp+4YuL2CmrzR
/F3k0Yw8Ibf1cIa0r8+mZ554kvYp4iHsI5+wjfYu6eJ2JPGWdcEpFzre6WCwE+53
3e1cXlZ538Fy4/+WidbTNeKpv0LjbSPSfnwNOQmkaBIcm7ZSHKIRtpPpVeB13KI7
n9WC8B4piF31qphiuQQY5c0nvujgI2rB95lbWZgxARFgstAsEQm84TQ0wSRmJ+99
3SImIlByKAF3k3wG5VC/XZeotEoEUg==
=qs/B
-----END PGP SIGNATURE-----
--=-=-=--


From nobody Tue Jan 12 18:57:45 2021
Return-Path: <session-request@ietf.org>
X-Original-To: netconf@ietf.org
Delivered-To: netconf@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B0ECF3A097E; Tue, 12 Jan 2021 18:57:43 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: IETF Meeting Session Request Tool <session-request@ietf.org>
To: <session-request@ietf.org>
Cc: mjethanandani@gmail.com, netconf-chairs@ietf.org, netconf@ietf.org, rwilton@cisco.com
X-Test-IDTracker: no
X-IETF-IDTracker: 7.24.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <161050666318.19791.8765094876164572596@ietfa.amsl.com>
Date: Tue, 12 Jan 2021 18:57:43 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/x_ouOc4_rquuBZe1CVd8Q4LZbG4>
Subject: [netconf] netconf - New Meeting Session Request for IETF 110
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 02:57:44 -0000

A new meeting session request has just been submitted by Mahesh Jethanandani, a Chair of the netconf working group.


---------------------------------------------------------
Working Group Name: Network Configuration
Area Name: Operations and Management Area
Session Requester: Mahesh Jethanandani


Number of Sessions: 1
Length of Session(s):  2 Hours
Number of Attendees: 65
Conflicts to Avoid: 
 Chair Conflict: netmod tcpm idr
 Technology Overlap: opsarea opsawg






People who must be present:
  Mahesh Jethanandani
  Kent Watsen
  Robert Wilton

Resources Requested:

Special Requests:
  Afternoon sessions are preferred.
---------------------------------------------------------



From nobody Wed Jan 13 00:23:32 2021
Return-Path: <mbj+ietf@4668.se>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B38A3A10A7 for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 00:23:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.123
X-Spam-Level: 
X-Spam-Status: No, score=-0.123 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, PDS_NAKED_TO_NUMERO=1.997, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=4668.se header.b=cXfdWpzl; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=E7z5OHRI
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XpLDofX2mLuo for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 00:23:29 -0800 (PST)
Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3843C3A10A6 for <netconf@ietf.org>; Wed, 13 Jan 2021 00:23:29 -0800 (PST)
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 58DA35C0449; Wed, 13 Jan 2021 03:23:28 -0500 (EST)
Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Wed, 13 Jan 2021 03:23:28 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=4668.se; h=date :message-id:to:cc:subject:from:in-reply-to:references :mime-version:content-type:content-transfer-encoding; s=fm3; bh= LJoBc5MDUI08qU9NcgfvsjRhO55on5lsdQ/A0UnxwOc=; b=cXfdWpzlEU8ikIAu dJmWiqoFFF4S8WjH/E5vM7RTqKG+IklVpwrCxlW9nNyUt6cl0Jh/klVBL9kgZ/31 N8fnAjV1k3E4EB197guQLq4n16nEwHPkfW4X2BIuXCpQo7G9nEqeFHhVOzyNvNKp KKMhBgkJfzJdflY7p8EuZKo2qbs6rHy+7eouKm5wo/mIkWxu6Qto7kOlDQyc7hmq 97g6pEMZu5dVvq+dPJkieKZgBCgcYEQOCibR9LPe/ilkJIwka3MeIIjvsUHqpm8s s8v+Nbz/vW448sofg89fUWOp6RKPdrWPtcu3J0NRO5/grnwLZ0jxAyG/aWfvjSmQ cAIfWQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=LJoBc5MDUI08qU9NcgfvsjRhO55on5lsdQ/A0Unxw Oc=; b=E7z5OHRIg6aUfRY5AuuYl5JwjMAzZr1o1iUzOztGrjv4eyWa2Ilp3GhNG aEibuxQWPuHVh//3VBFyqN9GrpG8bn8RD5sD9vFtL/3p2Fc1sQTM925fnyytSF5D 4XWOBljWQqd/tYeDy20aC7hNLe+FVAf3x6FdYOzi7Mgsk6Xa9FwRYJYCIQDMBAci TuBEo4fK3E2Ig7/F7CVX1qprEcU+tQrdDEXI/sF6N3mSM5Cw2ig3DepibodvwIn1 3ENLuH/bCXCG5xUX6+Sq2iIbWBfkL53fijnR4cChktprw3g6xb7UB6EyXOYm3/lc bwg4kufeyDLHTr+SSJjRiEqLBfpZw==
X-ME-Sender: <xms:_63-X9fqBH__t7BSKTewYnj5sigj7vwbZ4I1Ha0GwgOm1Q2bwnAVzw> <xme:_63-X7NDP7gOlkP-T3iG08LYz5hIRSe0srsVW3e89tBA9iEp6ehgPv3Xsf3UdLP-0 NeC7PeaF5gorcx2Sxo>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedukedrtddugdduvddtucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffkffvuffhjghfofggtgfgsehtje ertdertddvnecuhfhrohhmpeforghrthhinhcuuehjnphrkhhluhhnugcuoehmsghjodhi vghtfhesgeeiieekrdhsvgeqnecuggftrfgrthhtvghrnhepffehudffhfevleevvdejie ffudfftdehvdehteehtdetleelkeekffejtdfhtdefnecuffhomhgrihhnpehivghtfhdr ohhrghdpjhgrtghosghsqdhunhhivhgvrhhsihhthidruggvnecukfhppeduheekrdduje egrdegrddvudehnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhf rhhomhepmhgsjhdoihgvthhfseegieeikedrshgv
X-ME-Proxy: <xmx:_63-X2j9JuQGVnN7cg85dpQZNWiNWdYNsC1blEZO8TbYXpb5j5Dtpg> <xmx:_63-X2_BCD03m4UDlmJjIz-bgnNZTqFtI15oGmECyLNiPcnDqaA9bQ> <xmx:_63-X5vaG6uk140V0-6ZSezlvwA7UqiUcN20tRqPm6SkekfP-c-OzQ> <xmx:AK7-X31fvwD8pMkmCWU_QxNxdyiXu2N-Ybcc3kGX2CXZeLxTTCqcdg>
Received: from localhost (unknown [158.174.4.215]) by mail.messagingengine.com (Postfix) with ESMTPA id F14B024005A; Wed, 13 Jan 2021 03:23:26 -0500 (EST)
Date: Wed, 13 Jan 2021 09:23:25 +0100 (CET)
Message-Id: <20210113.092325.468429939674786955.id@4668.se>
To: jason.sterne@nokia.com
Cc: j.schoenwaelder@jacobs-university.de, netconf@ietf.org
From: Martin =?iso-8859-1?Q?Bj=F6rklund?= <mbj+ietf@4668.se>
In-Reply-To: <DM6PR08MB5084ED69870DF456DA8F1A509BAA0@DM6PR08MB5084.namprd08.prod.outlook.com>
References: <DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0@DM6PR08MB5084.namprd08.prod.outlook.com> <20210112195951.oi7dlnnqpda7wavm@anna.jacobs.jacobs-university.de> <DM6PR08MB5084ED69870DF456DA8F1A509BAA0@DM6PR08MB5084.namprd08.prod.outlook.com>
X-Mailer: Mew version 6.8 on Emacs 26.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/Exnd-Fw4osPvW58ScPwFFqgjii0>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 08:23:31 -0000

Hi,

"Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com> wrote:
> Yes - adding require-instance false would eliminate the issue about
> built-in anchors in <running>. But there are useful advantages to
> keeping require-instance true. I don't have a strong feeling though
> one way or the other.

The current text has this:

   A server MUST reject attempts to modify any aspect of built-in trust
   anchors, both the certificates themselves and the bags that contain
   them.  That these certificates are "configured" in <running> is an
   illusion, as they are strictly a read-only subset of that which must
   already exist in <operational>.

This is really weird special handling of some config in <running>,
which goes against the idea that the client(s) "own" the contents of
<running>.

It is also not clear what happens if the set of built-in trust anchors
are changed during a software upgrade.  Will they be removed from
<running> automatically?  If so, <running> may become invalid with
dangling refrences.  If they are not removed, they will be stuck
there, since a client can't remove them.

I agree that strong references are preferred in most situations, but
in this case I think a weak reference is the best solution.  It has
it's own set of problems that must be solved though, specifically what
happens if the target doesn't exist.

> But assuming we keep require-instance true then the question still
> remains of how built-in items get into <running> (and are they
> deletable, and do we only need keys in running, etc).

I think these lists have some mandatory elements, which means that you
can't just copy the keys.


/martin



> 
> Jason
> 
> > -----Original Message-----
> > From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
> > Sent: Tuesday, January 12, 2021 3:00 PM
> > To: Sterne, Jason (Nokia - CA/Ottawa) <jason.sterne@nokia.com>
> > Cc: Netconf <netconf@ietf.org>
> > Subject: Re: [netconf] built-in trust anchors
> > 
> > Jason,
> > 
> > since the leafref typedefs are weak references that do not require
> > that the certs/keys exist (there is no 'require-instance true'), it
> > may be OK to not have the certs/keys in <running> in terms of validity
> > of the <running> datastore.
> > 
> > Oops, I had to reread RFC 7950 (section 9.9.3): if require-instance is
> > not present, it defaults to true, so my review comment about weak
> > references is incorrect, these are actually strong references and
> > hence there is the need to copy what is referenced. Setting
> > require-instance to false may resolve this (but we loose the ability
> > to catch references to certs/keys that do not exist).
> > 
> > /js
> > 
> > On Tue, Jan 12, 2021 at 07:02:04PM +0000, Sterne, Jason (Nokia -
> > CA/Ottawa)
> > wrote:
> > > Hi all,
> > >
> > > I noticed Jurgen's comment about built-in trust anchors in his YANG
> > > doctor
> > review of trust-anchors-13. I wanted to pull that out into a dedicated
> > thread/discussion here.
> > >
> > > Jurgen:
> > >
> > >
> > > - Section 3 talks about populating <running> with built-in trust
> > >
> > >   anchors.
> > >
> > >
> > >
> > >    In order for the built-in trust anchors to be referenced by
> > >
> > >    configuration, the referenced certificates MUST first be copied into
> > >
> > >    <running>.  The certificates SHOULD be copied into <running> using
> > >
> > >    the same "key" values, so that the server can bind them to the built-
> > >
> > >    in entries.
> > >
> > >
> > >
> > >   Is the idea that this copy operation is an explicit management
> > >
> > >   operation or can implementations populate <running> with this
> > >
> > >   data automatically?
> > >
> > > I suppose a server *could* populate this in running as part of a
> > > built-in
> > startup datastore in the absence of a startup datastore (i.e. as
> > contents of a
> > RFC8808 factory default). But I assume it is desirable to be able to
> > delete the
> > running copy of a built-in item. So the system would have to avoid
> > populating
> > these unless it is loading the factory default.
> > >
> > > But even if the system can populate these, we'd also want the
> > > client/user
> > to be able to explicitly populate them as well (i.e. in case they
> > delete one
> > from running, and want to add it back in to reference it).
> > >
> > > In either case (system population of running, or client population of
> > running), do we really need to put the contents of the bag or the cert
> > into
> > running?  Or is populating the list key enough since the operational
> > copy
> > shows what contents are in use for that list entry?
> > >
> > > Jason
> > 
> > > _______________________________________________
> > > netconf mailing list
> > > netconf@ietf.org
> > > https://www.ietf.org/mailman/listinfo/netconf
> > 
> > 
> > --
> > Juergen Schoenwaelder           Jacobs University Bremen gGmbH
> > Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
> > Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>
> 
> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf


From nobody Wed Jan 13 00:29:27 2021
Return-Path: <j.schoenwaelder@jacobs-university.de>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFA573A10B7 for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 00:29:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gxt7UdJJmf5Y for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 00:29:22 -0800 (PST)
Received: from atlas5.jacobs-university.de (atlas5.jacobs-university.de [212.201.44.20]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D31473A10B1 for <netconf@ietf.org>; Wed, 13 Jan 2021 00:29:21 -0800 (PST)
Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas5.jacobs-university.de (Postfix) with ESMTP id 172C8670; Wed, 13 Jan 2021 09:29:20 +0100 (CET)
X-Virus-Scanned: amavisd-new at jacobs-university.de
Received: from atlas5.jacobs-university.de ([10.70.0.198]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10032) with ESMTP id z5XYna5AIQv0; Wed, 13 Jan 2021 09:29:19 +0100 (CET)
Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "DFN-Verein Global Issuing CA" (verified OK)) by atlas5.jacobs-university.de (Postfix) with ESMTPS; Wed, 13 Jan 2021 09:29:19 +0100 (CET)
Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by hermes.jacobs-university.de (Postfix) with ESMTP id B56C920156; Wed, 13 Jan 2021 09:29:19 +0100 (CET)
X-Virus-Scanned: amavisd-new at jacobs-university.de
Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10028) with ESMTP id eqR6x9V9qEE3; Wed, 13 Jan 2021 09:29:19 +0100 (CET)
Received: from localhost (anna.jacobs.jacobs-university.de [10.50.218.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by hermes.jacobs-university.de (Postfix) with ESMTPS id 1F2A220154; Wed, 13 Jan 2021 09:29:19 +0100 (CET)
Date: Wed, 13 Jan 2021 09:29:18 +0100
From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
To: "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>
Cc: Netconf <netconf@ietf.org>
Message-ID: <20210113082918.zy4m4wtltstrs64h@anna.jacobs.jacobs-university.de>
Reply-To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
Mail-Followup-To: "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>, Netconf <netconf@ietf.org>
References: <DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0@DM6PR08MB5084.namprd08.prod.outlook.com> <20210112195951.oi7dlnnqpda7wavm@anna.jacobs.jacobs-university.de> <DM6PR08MB5084ED69870DF456DA8F1A509BAA0@DM6PR08MB5084.namprd08.prod.outlook.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <DM6PR08MB5084ED69870DF456DA8F1A509BAA0@DM6PR08MB5084.namprd08.prod.outlook.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/nNivhpnHU9Z5_d9ZlaQRFN-ZzoA>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 08:29:25 -0000

After sleeping over it, I think a device should ship with the keys
listed in whatever is the equivalent of the factory default, i.e.,
they are initially in <running>. Deleting them should be possible with
the effect that no config can refer to these keys anymore (assuming
strong references). Putting the keys back into running makes them
available for config again.

I would be in favour to just have the names in runnning, not the
key/cert details. This avoids issues with entries that do not match,
and this then resembles hidden keys, for which details are also not
known in <running>. In fact, <hidden> keys likely have the same
property that they exist in the system (or a TPM), i.e., they are not
config that can be arbitrary changed. I would assume that the same
rules apply, if you delete a hidden key from <running>, it can't be
referenced and used anymore. Perhaps the discussion in the I-D should
be expanded to cover hidden keys as well.

I also expect that these special keys may be part of the firmware,
i.e., they may change with firmware updates. This can lead to stale
special keys that do not exist anymore in the firmware and new keys
that exist in the firmware but must be (manually) added to <running>
in order to use them.

/js

On Tue, Jan 12, 2021 at 10:59:28PM +0000, Sterne, Jason (Nokia - CA/Ottawa) wrote:
> Yes - adding require-instance false would eliminate the issue about built-in anchors in <running>. But there are useful advantages to keeping require-instance true. I don't have a strong feeling though one way or the other.
> 
> But assuming we keep require-instance true then the question still remains of how built-in items get into <running> (and are they deletable, and do we only need keys in running, etc).
> 
> Jason
> 
> > -----Original Message-----
> > From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
> > Sent: Tuesday, January 12, 2021 3:00 PM
> > To: Sterne, Jason (Nokia - CA/Ottawa) <jason.sterne@nokia.com>
> > Cc: Netconf <netconf@ietf.org>
> > Subject: Re: [netconf] built-in trust anchors
> > 
> > Jason,
> > 
> > since the leafref typedefs are weak references that do not require
> > that the certs/keys exist (there is no 'require-instance true'), it
> > may be OK to not have the certs/keys in <running> in terms of validity
> > of the <running> datastore.
> > 
> > Oops, I had to reread RFC 7950 (section 9.9.3): if require-instance is
> > not present, it defaults to true, so my review comment about weak
> > references is incorrect, these are actually strong references and
> > hence there is the need to copy what is referenced. Setting
> > require-instance to false may resolve this (but we loose the ability
> > to catch references to certs/keys that do not exist).
> > 
> > /js
> > 
> > On Tue, Jan 12, 2021 at 07:02:04PM +0000, Sterne, Jason (Nokia - CA/Ottawa)
> > wrote:
> > > Hi all,
> > >
> > > I noticed Jurgen's comment about built-in trust anchors in his YANG doctor
> > review of trust-anchors-13. I wanted to pull that out into a dedicated
> > thread/discussion here.
> > >
> > > Jurgen:
> > >
> > >
> > > - Section 3 talks about populating <running> with built-in trust
> > >
> > >   anchors.
> > >
> > >
> > >
> > >    In order for the built-in trust anchors to be referenced by
> > >
> > >    configuration, the referenced certificates MUST first be copied into
> > >
> > >    <running>.  The certificates SHOULD be copied into <running> using
> > >
> > >    the same "key" values, so that the server can bind them to the built-
> > >
> > >    in entries.
> > >
> > >
> > >
> > >   Is the idea that this copy operation is an explicit management
> > >
> > >   operation or can implementations populate <running> with this
> > >
> > >   data automatically?
> > >
> > > I suppose a server *could* populate this in running as part of a built-in
> > startup datastore in the absence of a startup datastore (i.e. as contents of a
> > RFC8808 factory default). But I assume it is desirable to be able to delete the
> > running copy of a built-in item. So the system would have to avoid populating
> > these unless it is loading the factory default.
> > >
> > > But even if the system can populate these, we'd also want the client/user
> > to be able to explicitly populate them as well (i.e. in case they delete one
> > from running, and want to add it back in to reference it).
> > >
> > > In either case (system population of running, or client population of
> > running), do we really need to put the contents of the bag or the cert into
> > running?  Or is populating the list key enough since the operational copy
> > shows what contents are in use for that list entry?
> > >
> > > Jason
> > 
> > > _______________________________________________
> > > netconf mailing list
> > > netconf@ietf.org
> > > https://www.ietf.org/mailman/listinfo/netconf
> > 
> > 
> > --
> > Juergen Schoenwaelder           Jacobs University Bremen gGmbH
> > Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
> > Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>


From nobody Wed Jan 13 02:56:34 2021
Return-Path: <ietfc@btconnect.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAE3D3A00D2; Wed, 13 Jan 2021 02:56:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bCilOgalemSQ; Wed, 13 Jan 2021 02:56:26 -0800 (PST)
Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2120.outbound.protection.outlook.com [40.107.20.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92B383A00F7; Wed, 13 Jan 2021 02:56:25 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CQab1znfXihGGe6SJZE93BLEjQ7AiFHfIjihBa2JOqyZz3Klndx7LCUQrwHlv/q++9spdI0dPYeoAoBv48cUul1iHrjaOVPOOke7P4rSro7CBJ9myPFI4hDo4qGqgL+HbcEyXYwOLY4rxbonot+mYwxC12t58erMq6eXEkUXCKn68Smsmw9M07HStB+F52NtOSkNttiESKzFnzQszRsTRj8OVQOY/8lBbYIYEZa8uGE0gIb1n6bSkecrgXIohna4gHRikNOL/aTPzZ+/Jzs6YY6z1ZXp1aHJQrVqigG1kH89gxuHFvC4k6Sx42PQrV/jTteHLqu6zGhvIITacTtgMw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=l9+kk0RQzAVo1HCA/OAsQq72YEuOMjvvqjegzd8KDiA=; b=Dd3yuRlbP7Ar9s2aA0Tzl/3aNIW1JhKddrfpKotKiuKE5T8PlFnsofPGtqCEL+2v6MtNbdvj+pW7rDmDRaQ1iJd/8PHUuloVkFV9osdIenI+/IcFbaqYv11sUz5Ytt3Jn2cmhTKHp4YGsvthN+QkxtnMibp+jY7EbdwDUciTwVSsyudBSe97+Tc9LKvnBG1LKPJexnCFf8oS31dBJCBC8U+rYbfvgWlrAU8Pfqb47RZ9+n5x6cpdBMo5QKUX8ePAwOdP2vQV/eM7cGWerC/vq+cVBMggKjUvkoc8LFE1QiUuXQBJKdpYHKo0Tl9yx2b8P5IA8noOOMmskTvnd2KUNA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=l9+kk0RQzAVo1HCA/OAsQq72YEuOMjvvqjegzd8KDiA=; b=R9XEvSI/07l5NHuLOeybF/wWSMeMnZjMJEsPTl0NQczUvdJi7HoB6oVdXdvVDgTrvSgIXxmhrD+UGjzie9B+CqMKPvSNnwrdbMcIaRenbsTWequRlhIr2hW0Pas7etQ2xt4mUVlAB5+YHJ9lem85GLsrS031nlLpaik1svXf4Zo=
Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AM6PR07MB6167.eurprd07.prod.outlook.com (2603:10a6:20b:65::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3763.2; Wed, 13 Jan 2021 10:56:23 +0000
Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::6d46:4f3c:643:4849]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::6d46:4f3c:643:4849%5]) with mapi id 15.20.3763.009; Wed, 13 Jan 2021 10:56:23 +0000
From: tom petch <ietfc@btconnect.com>
To: "yang-doctors@ietf.org" <yang-doctors@ietf.org>, =?iso-8859-1?Q?J=FCrgen_Sch=F6nw=E4lder?= <j.schoenwaelder@jacobs-university.de>
CC: "netconf@ietf.org" <netconf@ietf.org>, "draft-ietf-netconf-trust-anchors.all@ietf.org" <draft-ietf-netconf-trust-anchors.all@ietf.org>
Thread-Topic: Short prefix Re: [netconf] Yangdoctors last call review of draft-ietf-netconf-trust-anchors-13
Thread-Index: AQHW6RLOA86IN18iz0WS1xfHTKbb6aolYga9
Date: Wed, 13 Jan 2021 10:56:23 +0000
Message-ID: <AM7PR07MB624869BD8D84682C7C090CECA0A90@AM7PR07MB6248.eurprd07.prod.outlook.com>
References: <161047687248.13931.17900123352005904827@ietfa.amsl.com>
In-Reply-To: <161047687248.13931.17900123352005904827@ietfa.amsl.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=btconnect.com;
x-originating-ip: [86.146.121.140]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 6affe13f-5cd6-4f90-a9c2-08d8b7b1ddf8
x-ms-traffictypediagnostic: AM6PR07MB6167:
x-microsoft-antispam-prvs: <AM6PR07MB6167680B78D5EA4C2490C0C8A0A90@AM6PR07MB6167.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8273;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE;  SFS:(396003)(136003)(366004)(376002)(39860400002)(346002)(8936002)(110136005)(52536014)(2906002)(86362001)(54906003)(186003)(83380400001)(8676002)(26005)(6506007)(71200400001)(5660300002)(66946007)(55016002)(76116006)(66574015)(4326008)(66476007)(66556008)(64756008)(66446008)(9686003)(478600001)(316002)(91956017)(33656002)(7696005)(19607625011); DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata: =?iso-8859-1?Q?HWwgurli0T2oCWMIrZ4pD6pAJfJjK0EDwU6J7mbUCc72KnOklheRsXY/ld?= =?iso-8859-1?Q?1Fo2f+FVeGmMtqcmBnR0T4UVHGU4XjhukZy4RYxxU3VJjXXePerLT2rKpZ?= =?iso-8859-1?Q?Vg1AoYQatka6Q+VIExpaQoQ4/u21FztWkwy283agQU2NtgNOxLG4qYzbzR?= =?iso-8859-1?Q?W8DTKWHjoX58zQNFITPYbRy73xDtJJuVHB8/399kk8SGun2m2hrBvzR1x9?= =?iso-8859-1?Q?DrC9dBUzhRt5kB8NuDMcty4z8SocbjM0ByG8uP/LBjRu4qvn2NMZ3QpecJ?= =?iso-8859-1?Q?z2STmiH++1HNCb2oEMVmZ89/6b8jUylzXffRQXqThwXmpmJRkVILgD/J26?= =?iso-8859-1?Q?37906jp2BlAZlY9PEsusfsu7MFPD04JozfYztxmVAuwCOnpk0qhLkT+mLE?= =?iso-8859-1?Q?Zz4UWgU3E+L/3uteVkShb7kCERjsuQ73h6/ODBnYWpBdwtq2eFyz3GyWQs?= =?iso-8859-1?Q?jf+THKna+QITvTAcBye5NK67tVGUC//783DO2km29I3VDJu6BfdrCkPp1A?= =?iso-8859-1?Q?b3jfun5ilc40blhsKaZiZSzVrbqSA2XlKuZxg1NBxnWd6CUT3kkW4Zede2?= =?iso-8859-1?Q?u2NckEpdmoPpcrr2M2Ubxc3Firk0A1PB/ZxM5lNS6a8BHYZH0nR/cCdhFN?= =?iso-8859-1?Q?kEasLicpUr6UcWADQ8FW7e/2U+4mCasN66ikCW+19R0l8KS+4pxNU3H5ij?= =?iso-8859-1?Q?jmMDp7gpHOEtGG00BPWfZBVvGXEkkn4sn0sKpHX+I0Mtuq/f1O4gDFQK0S?= =?iso-8859-1?Q?+x8jhQB70PU+lxUgi5yUfoMISX/8uOlgzQV+xiL7QkNc9mQuTLrnuNZPUA?= =?iso-8859-1?Q?/SZAR3ufYM3Z4UMdpaqjsLBdaut7FLSE91XN3ox+mG+mgrDjLVUQBMumaF?= =?iso-8859-1?Q?vwWxjpk2XHlSr1YTzD8X8P2RBn3t5LCh4zdIcTTIz4H9CjS6Z8gSlCCz3l?= =?iso-8859-1?Q?Jk6lV3j7a2S9LCjBxnZOekqn/uWzQHmtJPBq+EYw1INpd4pY3kynp8cRwB?= =?iso-8859-1?Q?AfJoCF5CJfsReKrqw=3D?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: btconnect.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 6affe13f-5cd6-4f90-a9c2-08d8b7b1ddf8
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jan 2021 10:56:23.2627 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: TnR/ujiJmB3Bbm/hOEKN7nvfrav9JMZtCGsP+ISihdgCVFVKQvvp0FGnFlW/mt4iJ2BBDoVnGD+aKyfcI/B86Q==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR07MB6167
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/9E_e6rBsWzHTW4ozDbEFvjlU0UA>
Subject: [netconf] Short prefix Re: Yangdoctors last call review of draft-ietf-netconf-trust-anchors-13
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 10:56:29 -0000

From: netconf <netconf-bounces@ietf.org> on behalf of J=FCrgen Sch=F6nw=E4l=
der via Datatracker <noreply@ietf.org>=0A=
Sent: 12 January 2021 18:41=0A=
Cc: last-call@ietf.org; netconf@ietf.org; draft-ietf-netconf-trust-anchors.=
all@ietf.org=0A=
Subject: [netconf] Yangdoctors last call review of draft-ietf-netconf-trust=
-anchors-13=0A=
=0A=
Reviewer: J=FCrgen Sch=F6nw=E4lder=0A=
Review result: Ready with Issues=0A=
=0A=
The crypto modules aim at providing a flexible reusable infrastructure=0A=
of groupings for modeling cryptographic keys and related concepts. The=0A=
flexibility of the definitions provided of course comes with a certain=0A=
amount of complexity.=0A=
=0A=
>From a YANG perspective, draft-ietf-netconf-trust-anchors-13.txt is in=0A=
a good and close to publish state (a couple of minor issues left).  I=0A=
also tried to understand what is being modeled here and hence I also=0A=
have some questions concerning the concepts modeled and I hope these=0A=
are easy to answer/resolve as well.=0A=
=0A=
- I have compiled the YANG modules using yanglint 0.16.105.=0A=
=0A=
- The prefix 'ts' is rather short, the set of two letter prefixes is=0A=
  rather small limited. This comment also applies to the other=0A=
  documents, crypto-types uses 'ct. Perhaps this is not a problem=0A=
  since collisions can be handled but if we go for rather short=0A=
  prefixes, we will have to exercise the collision resolution. (I see=0A=
  that 'ct' has already been used by ietf-complex-types, RFC 6095.) A=0A=
  possible alternative could be to use sec-ct, sec-ts, sec-ks, ...).=0A=
=0A=
<tp>=0A=
I agree that two letter prefixes should be used sparingly, for widely deplo=
yed modules; interfaces is a good example.=0A=
=0A=
There is a bmwg module =0A=
draft-vassilev-bmwg-network-interconnect-tester  =0A=
which uses ta and tg;  I think that this is not a good example=0A=
=0A=
Tom Petch=0A=
=0A=
  RFC 8407 provides the following guidelines (Section 4.2):=0A=
=0A=
   Prefix values SHOULD be short but are also likely to be unique.=0A=
   Prefix values SHOULD NOT conflict with known modules that have been=0A=
   previously published.=0A=
=0A=
  Well, having short and terse prefixes is actually nice and enhancing=0A=
  programmer readability.=0A=
=0A=
- s/is defines a truststore/defines a truststore/=0A=
=0A=
- s/to be grouped references/to be grouped and referenced/=0A=
=0A=
- In 2.2.1, I was not sure what CA certificates are and what EE=0A=
  certificates are. I then tried to guess EE =3D end entity cert, but=0A=
  this does not explain CA since the term used in crypto types is=0A=
  trust anchor cert. The description in the XML clarified that my=0A=
  guess was kind of correct. Perhaps explain upfront what these=0A=
  acronyms mean? Or perhaps the acronyms can be avoided by simply=0A=
  spelling things out? They do not appear to be used frequently.=0A=
=0A=
- s/<!-- Entity Certs/<!-- End Entity Certs/=0A=
=0A=
- s/(Section 2.1.3.2), groupings/(Section 2.1.3.2) groupings/=0A=
=0A=
- Is the feature truststore-supported really needed? Does the YANG=0A=
  library not already provide the information whether a module has=0A=
  been implemented or just imported to access type and grouping=0A=
  definitions?=0A=
=0A=
- In the YANG module, you seem to use Truststore to refer to=0A=
  /ts:truststore but in the surrounding text you also use just=0A=
  truststore. I am not sure it is necessary to have the capitalized=0A=
  version but if people think its necessary, it makes sense to define=0A=
  the difference and to make sure the proper capitalization is used=0A=
  throughout the document. (If it is necessary somewhere to be=0A=
  explicit, I would rather use /ts:truststore but that may be my=0A=
  subjective preference. Well, I started to use 'central truststore'=0A=
  below, not sure this is better as the term also would benefit from=0A=
  being defined.)=0A=
=0A=
- Does it make sense to be explicit about the fact that the cert/key=0A=
  references are all weak references in the sense that they can exist=0A=
  without the corresponding cert/key being present? In other words, in=0A=
  order to safely delete a cert/key, one would have to check that=0A=
  there are no dangling references left (which is difficult in case=0A=
  references are scattered over multiple (proprietary) data models).=0A=
  For YANG savvy people this may be obvious since there is no=0A=
  require-instance statement in the leafref type definition but not=0A=
  every implementer may recall this - and it would be good to document=0A=
  that using weak references was an explicit design decision and not=0A=
  an oversight.=0A=
=0A=
- Does it make sense to spell out that using the grouping in other=0A=
  YANG modules requires to define additional reference types since the=0A=
  ones provided by this modules only work for the central truststore=0A=
  store? And this as a consequence may require multiple leafs to refer=0A=
  to keys that exist in different truststores, i.e., having multiple=0A=
  truststores is possible but comes with a cost.=0A=
=0A=
- Would it make sense to add to all three documents an objectives=0A=
  section that summarizes the design objectives? For this module,=0A=
  a starting point might be this:=0A=
=0A=
  2.1.  Objectives=0A=
=0A=
  The design of the truststore data model was guided by the following=0A=
  design objectives:=0A=
=0A=
  - provide a central truststore for storing keys or certificates=0A=
  - provide support for storing named bags of keys or certificates=0A=
  - provide types that can be used to reference keys or certificates=0A=
    stored in the central truststore=0A=
  - protect the truststore using suitable access control definitions=0A=
  - provide groupings that support locally configured keys or=0A=
    certificates or references to key or certificate bags in the=0A=
    central truststore=0A=
  - provide groupings that can be used to instantiate truststores=0A=
    in other data models (but this requires to introduce additional=0A=
    types to reference keys or certificates)=0A=
=0A=
  I do not know whether this list is complete but I find it usually=0A=
  helpful to have the design objectives spelled out.=0A=
=0A=
- Section 3 talks about populating <running> with built-in trust=0A=
  anchors.=0A=
=0A=
   In order for the built-in trust anchors to be referenced by=0A=
   configuration, the referenced certificates MUST first be copied into=0A=
   <running>.  The certificates SHOULD be copied into <running> using=0A=
   the same "key" values, so that the server can bind them to the built-=0A=
   in entries.=0A=
=0A=
  Is the idea that this copy operation is an explicit management=0A=
  operation or can implementations populate <running> with this=0A=
  data automatically?=0A=
=0A=
- Section 4.2 says:=0A=
=0A=
   This module does not define any RPCs, actions, or notifications, and=0A=
   thus the security consideration for such is not provided here.=0A=
=0A=
  Well, the module actually instantiates certificate-expiration=0A=
  notifications.=0A=
=0A=
- Registrant Contact: should be changed to the IESG.=0A=
=0A=
=0A=
=0A=
_______________________________________________=0A=
netconf mailing list=0A=
netconf@ietf.org=0A=
https://www.ietf.org/mailman/listinfo/netconf=0A=


From nobody Wed Jan 13 03:27:04 2021
Return-Path: <mbj+ietf@4668.se>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 602313A09DE for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 03:27:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.123
X-Spam-Level: 
X-Spam-Status: No, score=-0.123 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, PDS_NAKED_TO_NUMERO=1.997, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=4668.se header.b=PNKpDKD4; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=o20BJGGy
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0DHykyuii8Cg for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 03:26:59 -0800 (PST)
Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 858E13A09D7 for <netconf@ietf.org>; Wed, 13 Jan 2021 03:26:59 -0800 (PST)
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id C81335C00AB; Wed, 13 Jan 2021 06:26:58 -0500 (EST)
Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Wed, 13 Jan 2021 06:26:58 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=4668.se; h=date :message-id:to:cc:subject:from:in-reply-to:references :mime-version:content-type:content-transfer-encoding; s=fm3; bh= 43WVD4mG1925f33uapGheNQuThf0+mUzkMjaA8MdT+0=; b=PNKpDKD4pKJXRhsM uTvgnc3gV85arXtN84Vb4CWeU1bnI3/XAxbPeXlt5C/G6MBi0uBrSjZ/QBRyDHvC FHx51kHiG/m2z7gOSDCU/kR7z3uFkeSpxxIPriIs8mSNzN5FFXEMlQVqli+II000 VQ38GISltL5nqi719tSu6ir8Jr8GWlS6R1zBSF5yK0z/bIqwECv9AqcD82pcN2hV +8zA9puqXAOYvjXGPnet2vcjp7UuyGsjibuvDapYof64ly3by514fKECzWBQ9ja7 Ji5fAHSDnmCJ8+9jsDlbGBew8fAsVz2MHmmWhXtTY3bsyRRpz2g9VmJATBHtjufy Ld1eBA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=43WVD4mG1925f33uapGheNQuThf0+mUzkMjaA8MdT +0=; b=o20BJGGyEH+/NdB/9Kn5tzkm6iB98tgPQDCRr+lDcDPXIV+XyrX54iNK8 AMCrpFqjP4ncb77p3Mnp6tC8ugaVHzhslEGRv1x5xk/Pawht1jAIkWMOvxGAHQnT DAdykzHb9Aa+Xgnyk2WdkdIV3byXiHjP4YMLR2a6OaaCsLU6sGr1n0L0huZsdJ86 vydjUP9CILoGpLmVxCF+MkX2m0sMIKbu1Up8y4VTnCvZvdXNXTu+zCr4PRhr01Tr VhbS7YGOfqCvMDDRLLPQ/3G1fbb2YS1Ztd3PN7x6dsQqtXairt9DeCAAYYGD6XKr BD57aDJyJlgL2ZO0+9LMKu+wwVrNQ==
X-ME-Sender: <xms:Atn-X53ST19yKOYHssLLf__cKP2K6IyZTQRnOmal7EbaPx4rrtdAfw> <xme:Atn-XwHX5-KE9sO32FO2vuA53cSFzRy0IOhzaHQllAhW3UsMUgDwm_UKSn7kU0oY2 NdtDYg7aiA_Xwo0nMs>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedukedrtdefgddvkecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepfffkvffuhfgjfhfogggtgfesthejre dtredtvdenucfhrhhomhepofgrrhhtihhnuceujhpnrhhklhhunhguuceomhgsjhdoihgv thhfseegieeikedrshgvqeenucggtffrrghtthgvrhhnpedtgefgtdduudejkeelvedvie dvveehieegfeefteefgfeffeekheffvdefveffgfenucfkphepudehkedrudejgedrgedr vdduheenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpe hmsghjodhivghtfhesgeeiieekrdhsvg
X-ME-Proxy: <xmx:Atn-X57JLfJVccBQ-lCoRu5CpfG5A9uwCdkipLCBb-N3SwwED9ysag> <xmx:Atn-X204LmdEmUZYXISZrtsxSCXIK3E8jQ08votbsJI06Mn_PD2H_A> <xmx:Atn-X8G4HzyR1e0vwqWvc_XjaB96BWhyQLxI9aEyL6SCURHOQGg5LQ> <xmx:Atn-X3M8Qxa5OJscI5bKb6xLOWx5DvKYjCCzk1IPWvqWrW6Ah1P74Q>
Received: from localhost (unknown [158.174.4.215]) by mail.messagingengine.com (Postfix) with ESMTPA id A625A240065; Wed, 13 Jan 2021 06:26:57 -0500 (EST)
Date: Wed, 13 Jan 2021 12:26:55 +0100 (CET)
Message-Id: <20210113.122655.1074482340604641202.id@4668.se>
To: j.schoenwaelder@jacobs-university.de
Cc: jason.sterne@nokia.com, netconf@ietf.org
From: Martin =?iso-8859-1?Q?Bj=F6rklund?= <mbj+ietf@4668.se>
In-Reply-To: <20210113082918.zy4m4wtltstrs64h@anna.jacobs.jacobs-university.de>
References: <20210112195951.oi7dlnnqpda7wavm@anna.jacobs.jacobs-university.de> <DM6PR08MB5084ED69870DF456DA8F1A509BAA0@DM6PR08MB5084.namprd08.prod.outlook.com> <20210113082918.zy4m4wtltstrs64h@anna.jacobs.jacobs-university.de>
X-Mailer: Mew version 6.8 on Emacs 26.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/QHGfhwuZZeq4ndFYBw1ZwH33iUk>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 11:27:02 -0000

Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de> wrote:
> After sleeping over it, I think a device should ship with the keys
> listed in whatever is the equivalent of the factory default, i.e.,
> they are initially in <running>. Deleting them should be possible with
> the effect that no config can refer to these keys anymore (assuming
> strong references). Putting the keys back into running makes them
> available for config again.

This could work, but see below.

> I would be in favour to just have the names in runnning, not the
> key/cert details. This avoids issues with entries that do not match,
> and this then resembles hidden keys, for which details are also not
> known in <running>. In fact, <hidden> keys likely have the same
> property that they exist in the system (or a TPM), i.e., they are not
> config that can be arbitrary changed. I would assume that the same
> rules apply, if you delete a hidden key from <running>, it can't be
> referenced and used anymore. Perhaps the discussion in the I-D should
> be expanded to cover hidden keys as well.

I like the symmetry w/ hidden keys.  I assume that these entries would
be explicitly marked in the config as being "built-in" or "hidden".

> I also expect that these special keys may be part of the firmware,
> i.e., they may change with firmware updates. This can lead to stale
> special keys that do not exist anymore in the firmware and new keys
> that exist in the firmware but must be (manually) added to <running>
> in order to use them.

So then the question is what happens if a key is removed from the
firmware, but it exists (with just the name) in the config, and some
part of the config reference it?

I think that this leads to the same problem as a weak leafref would
do, so either solution would work.


/martin


> 
> /js
> 
> On Tue, Jan 12, 2021 at 10:59:28PM +0000, Sterne, Jason (Nokia - CA/Ottawa) wrote:
> > Yes - adding require-instance false would eliminate the issue about built-in anchors in <running>. But there are useful advantages to keeping require-instance true. I don't have a strong feeling though one way or the other.
> > 
> > But assuming we keep require-instance true then the question still remains of how built-in items get into <running> (and are they deletable, and do we only need keys in running, etc).
> > 
> > Jason
> > 
> > > -----Original Message-----
> > > From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
> > > Sent: Tuesday, January 12, 2021 3:00 PM
> > > To: Sterne, Jason (Nokia - CA/Ottawa) <jason.sterne@nokia.com>
> > > Cc: Netconf <netconf@ietf.org>
> > > Subject: Re: [netconf] built-in trust anchors
> > > 
> > > Jason,
> > > 
> > > since the leafref typedefs are weak references that do not require
> > > that the certs/keys exist (there is no 'require-instance true'), it
> > > may be OK to not have the certs/keys in <running> in terms of validity
> > > of the <running> datastore.
> > > 
> > > Oops, I had to reread RFC 7950 (section 9.9.3): if require-instance is
> > > not present, it defaults to true, so my review comment about weak
> > > references is incorrect, these are actually strong references and
> > > hence there is the need to copy what is referenced. Setting
> > > require-instance to false may resolve this (but we loose the ability
> > > to catch references to certs/keys that do not exist).
> > > 
> > > /js
> > > 
> > > On Tue, Jan 12, 2021 at 07:02:04PM +0000, Sterne, Jason (Nokia - CA/Ottawa)
> > > wrote:
> > > > Hi all,
> > > >
> > > > I noticed Jurgen's comment about built-in trust anchors in his YANG doctor
> > > review of trust-anchors-13. I wanted to pull that out into a dedicated
> > > thread/discussion here.
> > > >
> > > > Jurgen:
> > > >
> > > >
> > > > - Section 3 talks about populating <running> with built-in trust
> > > >
> > > >   anchors.
> > > >
> > > >
> > > >
> > > >    In order for the built-in trust anchors to be referenced by
> > > >
> > > >    configuration, the referenced certificates MUST first be copied into
> > > >
> > > >    <running>.  The certificates SHOULD be copied into <running> using
> > > >
> > > >    the same "key" values, so that the server can bind them to the built-
> > > >
> > > >    in entries.
> > > >
> > > >
> > > >
> > > >   Is the idea that this copy operation is an explicit management
> > > >
> > > >   operation or can implementations populate <running> with this
> > > >
> > > >   data automatically?
> > > >
> > > > I suppose a server *could* populate this in running as part of a built-in
> > > startup datastore in the absence of a startup datastore (i.e. as contents of a
> > > RFC8808 factory default). But I assume it is desirable to be able to delete the
> > > running copy of a built-in item. So the system would have to avoid populating
> > > these unless it is loading the factory default.
> > > >
> > > > But even if the system can populate these, we'd also want the client/user
> > > to be able to explicitly populate them as well (i.e. in case they delete one
> > > from running, and want to add it back in to reference it).
> > > >
> > > > In either case (system population of running, or client population of
> > > running), do we really need to put the contents of the bag or the cert into
> > > running?  Or is populating the list key enough since the operational copy
> > > shows what contents are in use for that list entry?
> > > >
> > > > Jason
> > > 
> > > > _______________________________________________
> > > > netconf mailing list
> > > > netconf@ietf.org
> > > > https://www.ietf.org/mailman/listinfo/netconf
> > > 
> > > 
> > > --
> > > Juergen Schoenwaelder           Jacobs University Bremen gGmbH
> > > Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
> > > Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>
> 
> -- 
> Juergen Schoenwaelder           Jacobs University Bremen gGmbH
> Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
> Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>
> 
> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf


From nobody Wed Jan 13 04:55:08 2021
Return-Path: <ietfc@btconnect.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06AD73A0CF5; Wed, 13 Jan 2021 04:55:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id imknCSOO0AEg; Wed, 13 Jan 2021 04:54:59 -0800 (PST)
Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40126.outbound.protection.outlook.com [40.107.4.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2239F3A0CF2; Wed, 13 Jan 2021 04:54:57 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=I6stOD1NnmVMAGf8//lGLWsRMGNZNNawxng1S61Rypg24YQdYsDQrs1gTqegww9hD84LXK2Tsq5ZxMCqW2MRMjUP/tQFzoGgQBLKPxpFo33Ft2zlsMbqFAzth9ZaD+ciejKwmVpVMGk5iCcmMHttaJxlHO8UBrC99vq6uTzgdEmuFUduavL7szfTk4XPnRoKM1VWMK8rFY50zlwpOdQal0LxJUP9+Q0Q9y8PzCnTiSxlrxk8g9LoXMLYfviA4UbKU/Dox/WS/nCRh+wpJDjb3wQtlFCDcVtazH3lDpmYnwcRAtRYuBbegBUKPBo4O1Mnnfe+xmq77a74m7iGgEMVng==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dA0gLORJorClnjI0MoO9YwBUkFacZ3LgvO5cuiBhOr4=; b=hhjRKpMTaH8wn5gkSlarZJ7gPzdpplQTsK0XSKm/5uz0+Ltm7zwNEPQwEg2WBjYhY2ht7Xb495rsTm4OFNmlcgrk1N/0k1FeY9l/+XAOqES4GEoklccpLY/uafEwJlRwCER/ES2Nknjwu6sQnb/if5y4Y3ixPp1N53Z8DqxYYfy6MZrbs28//31S4VLposjhNiGOz8TNqIw+b5dLC+QZenGSsTaeKypPfWEBS6OZMYEX3BZBqEiasUtiq+VjWPE4i1s/6Q5p+rtHiNO+4bWXhbfhaOOr9FviDI3pqy1XhBCL5pO6w5vEkQhcPJnMyX2mlwqsqJVWTP23IkBRKFarZA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dA0gLORJorClnjI0MoO9YwBUkFacZ3LgvO5cuiBhOr4=; b=faTN0UrIlmM/TtXTXppnX7viO4Bj/hTOTfD72vn19LZtFfUbeR30xBwv1oQ8n3BQehIS4rPKlhX+g2Wn5vgSoZ4ZpBtg/jxcAzRvfIxen7lMf4QDhqKu8pGxKvDEegw6NVrWWNPRA8gv548HSXR99qR/qoj+yoIJOXENYarWE40=
Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AM7PR07MB6946.eurprd07.prod.outlook.com (2603:10a6:20b:1b8::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3763.2; Wed, 13 Jan 2021 12:54:55 +0000
Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::6d46:4f3c:643:4849]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::6d46:4f3c:643:4849%5]) with mapi id 15.20.3763.009; Wed, 13 Jan 2021 12:54:55 +0000
From: tom petch <ietfc@btconnect.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>, =?iso-8859-1?Q?J=FCrgen_Sch=F6nw=E4lder?= <j.schoenwaelder@jacobs-university.de>
CC: "yang-doctors@ietf.org" <yang-doctors@ietf.org>, "netconf@ietf.org" <netconf@ietf.org>, "draft-ietf-netconf-trust-anchors.all@ietf.org" <draft-ietf-netconf-trust-anchors.all@ietf.org>
Thread-Topic: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-trust-anchors-13
Thread-Index: AQHW6UrnLVZ7LqdzE0eXiHa2CK+LLKolgllF
Date: Wed, 13 Jan 2021 12:54:55 +0000
Message-ID: <AM7PR07MB6248C1350BA7F52C08BE1C9DA0A90@AM7PR07MB6248.eurprd07.prod.outlook.com>
References: <161047687248.13931.17900123352005904827@ietfa.amsl.com>, <22275.1610501082@localhost>
In-Reply-To: <22275.1610501082@localhost>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=btconnect.com; 
x-originating-ip: [86.146.121.140]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 9ed12dd0-75a0-4da8-fdf3-08d8b7c26d3e
x-ms-traffictypediagnostic: AM7PR07MB6946:
x-microsoft-antispam-prvs: <AM7PR07MB6946505C9C700ADA88540DCDA0A90@AM7PR07MB6946.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:5797;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: MdiLUiIb/uc8CML74WWZ46woSOqR18VaOjBfbI4k6w6iViOzizcstW818I2vHHAMT7fhL6Y5uBZkwrPrDI6837gRff8yTl0cl2KXlHywaLDvRHhVy3qdt7oLWCFEAuE2LxhU17ZjMs6a1ZcOXHielU5E60Gzxf/LGycMxmATFj/fU4uIJ2KWCbs5omki8f+4vu4JzMn5/ra9hVOoAhpEGReovr4C293bolFDyjMLLyyNYcdsciGkhrXG1AKalBYLqbnL2s1iWyqpqhQ2Fc2rWDCRZZvDYi1TgiU15uAQgj4ti6ehoGMqbEyYBgJnsP8s9gMB57mT8cbDN1KK5hO45zcowH8VRORqcZypaJ114NKnQ7IgCM1X1TJhBWvwNGEWVR+cnej30o2HAjyhk18llLZmJAEnvwAfQ3twGGTwTWiRGLy8sWLwkNDeOe3b26BU
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE;  SFS:(346002)(376002)(136003)(366004)(396003)(39860400002)(86362001)(26005)(8676002)(66476007)(110136005)(4744005)(6506007)(316002)(9686003)(76116006)(55016002)(7696005)(66556008)(5660300002)(66446008)(54906003)(33656002)(66946007)(52536014)(478600001)(4326008)(8936002)(2906002)(186003)(71200400001)(91956017)(64756008)(19607625011); DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata: =?iso-8859-1?Q?Al5e/iZa6+JLZSD7VmJC/mV7pCnnUUS2md2AJNsKzI//5Ydebwa8Uzg1Xa?= =?iso-8859-1?Q?1/YpFbyHdvIXkfWQZ9Rq9fgtb34LvtQpSL1xkL4jXK6sN+APrh59cP3xJe?= =?iso-8859-1?Q?TpbxuSIq+rMDwa3KkCJFsuo5VAB/w3/nHFxiIAytkmP6A6kERu92kS37H0?= =?iso-8859-1?Q?l9PKrT92e97TQ/FbtJXlVGcMm3l6MIVQRsWNljytXb3Ua3D0pS0AMgLsqj?= =?iso-8859-1?Q?K29ZmaeqYkEdYQ4k0RVuUm0uVidfjSQcmBh0hY3QaDmIOdBd65MedzVWcV?= =?iso-8859-1?Q?HaJ0zBS6XrJ3yjRjCZfQcQkYreZ8D+OHL/nbCSdRj2cROUNW/2wt4xb0ct?= =?iso-8859-1?Q?rJczr7b2AVFDeyYAVr1MQENOlJkMC/4oICzNRtshZPH0m13ZvpYGABwCVp?= =?iso-8859-1?Q?q9JnkEyNDaTgCOXE5reViB5NNsAvnookqkBWtL/3Ptrpf2YM9CGc+H8xsz?= =?iso-8859-1?Q?vpC0x26sa4LzzryRFjEtKcCJq5nMNEkpDxP/QnIilHHs6S/NrquUFBqyKL?= =?iso-8859-1?Q?UEqP9ms7ByiVPpVgsmTiGkJwPVrXoF1Pi/FSD81+7A2Wuy1pGyufAZ/Vbm?= =?iso-8859-1?Q?9ytqfJLJ1NskvHPuZPhNc6RDMQ2E3IktTD2dzacRXAvjKkX8OQetWBsbIq?= =?iso-8859-1?Q?NGO3G0u0t927SGYKcjPGkf2i8F6wfim9FFF7BNtbrlntIrnJipR8NdCa1I?= =?iso-8859-1?Q?y1JtvZ0M/lFmYykuUVxaV0XYrMKoRJ1CMDO5Zx2pWUI2MlXJGJ6FYZiRfQ?= =?iso-8859-1?Q?biNSqosmY+cYGWikIUqV5KB9dIK80rdujg1dk69emEMXA3tzQzPD18QVUJ?= =?iso-8859-1?Q?dumV1T1xr5t/kArN3UjMYH7vvlnfo4tp5pNszQv0PernYygBvkA8KcKmIw?= =?iso-8859-1?Q?Q3tfmRv7oTu4UwZQ1ER2MBsa28DX3ZcoesHFuYXvt3G6BkPD9ZfNGjjCz+?= =?iso-8859-1?Q?R8LNu3C2g4q88rm6jbwfyVJFY0PAtx4CrKifUw8He2XTDTzK44LSj7x48j?= =?iso-8859-1?Q?0ehpQlKhXsyichuRc=3D?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: btconnect.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 9ed12dd0-75a0-4da8-fdf3-08d8b7c26d3e
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jan 2021 12:54:55.6342 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: czjpgvqJDV3ImGRb0k68uy3E2knQixH89G5byqvNHGFOXDgvhGKz0ZhPEl+2C1oCAKZhA0YGC2EsX7PpZYG+AA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR07MB6946
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/2NB7uwXBySO8UNKMgg4G_SisKs4>
Subject: Re: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-trust-anchors-13
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 12:55:02 -0000

From: netconf <netconf-bounces@ietf.org> on behalf of Michael Richardson <m=
cr+ietf@sandelman.ca>=0A=
Sent: 13 January 2021 01:24=0A=
=0A=
J=FCrgen Sch=F6nw=E4lder via Datatracker wrote:=0A=
    > - In 2.2.1, I was not sure what CA certificates are and what EE=0A=
    > certificates are. I then tried to guess EE =3D end entity cert, but=
=0A=
    > this does not explain CA since the term used in crypto types is=0A=
    > trust anchor cert. The description in the XML clarified that my=0A=
    > guess was kind of correct. Perhaps explain upfront what these=0A=
    > acronyms mean? Or perhaps the acronyms can be avoided by simply=0A=
    > spelling things out? They do not appear to be used frequently.=0A=
=0A=
    > - s/<!-- Entity Certs/<!-- End Entity Certs/=0A=
=0A=
"End Entity" goes back to RFC2510, and I don't think it's defined in any of=
=0A=
our documents.  I was expecting to see it in RFC4949 or RFC5280, but it's=
=0A=
used in 5280, but not defined.=0A=
I guess it comes from X509.v3, which is still behind the stupid paywall.=0A=
=0A=
The term EE/End Entity is in my opinion a great term, but it also took me=
=0A=
awhile to learn it.=0A=
=0A=
<tp>=0A=
End Entity has been around TLS since at least RFC5246.=0A=
=0A=
Tom Petch=0A=
=0A=
=0A=
--=0A=
Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 I=F8T consulting =
)=0A=
           Sandelman Software Works Inc, Ottawa and Worldwide=0A=
=0A=
=0A=
=0A=
=0A=


From nobody Wed Jan 13 05:15:02 2021
Return-Path: <maqiufang1@huawei.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 256793A0D6D; Wed, 13 Jan 2021 05:15:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ThGh0ID4R0rT; Wed, 13 Jan 2021 05:14:57 -0800 (PST)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C5133A0C2E; Wed, 13 Jan 2021 05:14:57 -0800 (PST)
Received: from fraeml742-chm.china.huawei.com (unknown [172.18.147.200]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4DG7Bf5K5rz67ZxP; Wed, 13 Jan 2021 21:11:54 +0800 (CST)
Received: from dggeme719-chm.china.huawei.com (10.1.199.115) by fraeml742-chm.china.huawei.com (10.206.15.223) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2106.2; Wed, 13 Jan 2021 14:14:52 +0100
Received: from dggeme770-chm.china.huawei.com (10.3.19.116) by dggeme719-chm.china.huawei.com (10.1.199.115) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2106.2; Wed, 13 Jan 2021 21:14:50 +0800
Received: from dggeme770-chm.china.huawei.com ([10.8.68.58]) by dggeme770-chm.china.huawei.com ([10.8.68.58]) with mapi id 15.01.2106.002; Wed, 13 Jan 2021 21:14:51 +0800
From: "maqiufang (A)" <maqiufang1@huawei.com>
To: Qin Wu <bill.wu@huawei.com>, "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>, Netconf <netconf@ietf.org>
CC: "draft-ma-netconf-with-system@ietf.org" <draft-ma-netconf-with-system@ietf.org>
Thread-Topic: built-in trust anchors
Thread-Index: AdbpFFL2IioTw935RTC9hP47Cn7q7QAAD8+QACZAphA=
Date: Wed, 13 Jan 2021 13:14:50 +0000
Message-ID: <beee731475d94261b495c7e1bc3357fa@huawei.com>
References: <DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0@DM6PR08MB5084.namprd08.prod.outlook.com> <B8F9A780D330094D99AF023C5877DABAADCD04AA@dggeml531-mbs.china.huawei.com>
In-Reply-To: <B8F9A780D330094D99AF023C5877DABAADCD04AA@dggeml531-mbs.china.huawei.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.136.100.25]
Content-Type: multipart/alternative; boundary="_000_beee731475d94261b495c7e1bc3357fahuaweicom_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/U7HDJ9W3QmnZ3XUUqGrjBf7q30g>
Subject: [netconf] =?gb2312?b?tPC4tDogYnVpbHQtaW4gdHJ1c3QgYW5jaG9ycw==?=
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 13:15:00 -0000

--_000_beee731475d94261b495c7e1bc3357fahuaweicom_
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64

SGkgLCBRaW4sDQoNClRoYW5rcyBmb3IgYnJpbmdpbmcgdXAgdGhpcyB0b3BpYy4NCllvdSBhcmUg
cmlnaHQsIHRoZSBtZWNoYW5pc20gZGVmaW5lZCBpbiBvdXIgZHJhZnQgYWltcyBhdCBzb2x2aW5n
IHRoaXMgaXNzdWUuDQpXZSBwcm9wb3NlZCBhICJzeXN0ZW0iIGRhdGFzdG9yZSwgIGFuZCAgdGhl
cmUgYXJlIHR3byBzeXN0ZW0gY29uZmlndXJhdGlvbiBkYXRhIGhhbmRsaW5nIGJhc2ljIG1vZGVz
LiBPbmUgaXMgYXV0b21hdGljYWxseSAgbG9hZGluZyBzeXN0ZW0gaW50byBydW5uaW5nLA0KVGhl
IG90aGVyIGlzIHRoZSBjbGllbnQgZXhwbGljaXRseSBwb3B1bGF0ZXMgcnVubmluZyB3aXRoIHN5
c3RlbSBjb25maWd1cmF0aW9uLg0KSXQgYWxsb3dzIHRoZSBjbGllbnQgdG8gaWRlbnRpZnkgaG93
IHN5c3RlbSBjb25maWd1cmF0aW9uIGFyZSBwcm9jZXNzZWQgYnkgdGhlIHNlcnZlciwgYW5kIGFs
c28gZGVmaW5lIGEgbmV3IG1lY2hhbmlzbSBmb3IgY2xpZW50IGNvbnRyb2wgb2Ygc2VydmVyIHBy
b2Nlc3Npbmcgb2Ygc3lzdGVtIGNvbmZpZ3VyYXRpb24gZGF0YS4NCg0KQW55IHN1Z2dlc3Rpb25z
IGFuZCBjb21tZW50cyB3b3VsZCBiZSBncmVhdGx5IGFwcHJlY2lhdGVkLg0KDQpRaXVmYW5nIE1h
DQoNCg0Kt6K8/sjLOiBRaW4gV3UNCreiy83KsbzkOiAyMDIxxOox1MIxM8jVIDk6MTUNCsrVvP7I
yzogU3Rlcm5lLCBKYXNvbiAoTm9raWEgLSBDQS9PdHRhd2EpIDxqYXNvbi5zdGVybmVAbm9raWEu
Y29tPjsgTmV0Y29uZiA8bmV0Y29uZkBpZXRmLm9yZz4NCrOty806IGRyYWZ0LW1hLW5ldGNvbmYt
d2l0aC1zeXN0ZW1AaWV0Zi5vcmcNCtb3zOI6IFJFOiBidWlsdC1pbiB0cnVzdCBhbmNob3JzDQoN
CreivP7IyzogbmV0Y29uZiBbbWFpbHRvOm5ldGNvbmYtYm91bmNlc0BpZXRmLm9yZ10gtPqx7SBT
dGVybmUsIEphc29uIChOb2tpYSAtIENBL090dGF3YSkNCreiy83KsbzkOiAyMDIxxOox1MIxM8jV
IDM6MDINCsrVvP7IyzogTmV0Y29uZiA8bmV0Y29uZkBpZXRmLm9yZzxtYWlsdG86bmV0Y29uZkBp
ZXRmLm9yZz4+DQrW98ziOiBbbmV0Y29uZl0gYnVpbHQtaW4gdHJ1c3QgYW5jaG9ycw0KDQpIaSBh
bGwsDQoNCkkgbm90aWNlZCBKdXJnZW4ncyBjb21tZW50IGFib3V0IGJ1aWx0LWluIHRydXN0IGFu
Y2hvcnMgaW4gaGlzIFlBTkcgZG9jdG9yIHJldmlldyBvZiB0cnVzdC1hbmNob3JzLTEzLiBJIHdh
bnRlZCB0byBwdWxsIHRoYXQgb3V0IGludG8gYSBkZWRpY2F0ZWQgdGhyZWFkL2Rpc2N1c3Npb24g
aGVyZS4NCg0KSnVyZ2VuOg0KDQoNCi0gU2VjdGlvbiAzIHRhbGtzIGFib3V0IHBvcHVsYXRpbmcg
PHJ1bm5pbmc+IHdpdGggYnVpbHQtaW4gdHJ1c3QNCg0KICBhbmNob3JzLg0KDQoNCg0KICAgSW4g
b3JkZXIgZm9yIHRoZSBidWlsdC1pbiB0cnVzdCBhbmNob3JzIHRvIGJlIHJlZmVyZW5jZWQgYnkN
Cg0KICAgY29uZmlndXJhdGlvbiwgdGhlIHJlZmVyZW5jZWQgY2VydGlmaWNhdGVzIE1VU1QgZmly
c3QgYmUgY29waWVkIGludG8NCg0KICAgPHJ1bm5pbmc+LiAgVGhlIGNlcnRpZmljYXRlcyBTSE9V
TEQgYmUgY29waWVkIGludG8gPHJ1bm5pbmc+IHVzaW5nDQoNCiAgIHRoZSBzYW1lICJrZXkiIHZh
bHVlcywgc28gdGhhdCB0aGUgc2VydmVyIGNhbiBiaW5kIHRoZW0gdG8gdGhlIGJ1aWx0LQ0KDQog
ICBpbiBlbnRyaWVzLg0KDQoNCg0KICBJcyB0aGUgaWRlYSB0aGF0IHRoaXMgY29weSBvcGVyYXRp
b24gaXMgYW4gZXhwbGljaXQgbWFuYWdlbWVudA0KDQogIG9wZXJhdGlvbiBvciBjYW4gaW1wbGVt
ZW50YXRpb25zIHBvcHVsYXRlIDxydW5uaW5nPiB3aXRoIHRoaXMNCg0KICBkYXRhIGF1dG9tYXRp
Y2FsbHk/DQoNCkkgc3VwcG9zZSBhIHNlcnZlciAqY291bGQqIHBvcHVsYXRlIHRoaXMgaW4gcnVu
bmluZyBhcyBwYXJ0IG9mIGEgYnVpbHQtaW4gc3RhcnR1cCBkYXRhc3RvcmUgaW4gdGhlIGFic2Vu
Y2Ugb2YgYSBzdGFydHVwIGRhdGFzdG9yZSAoaS5lLiBhcyBjb250ZW50cyBvZiBhIFJGQzg4MDgg
ZmFjdG9yeSBkZWZhdWx0KS4gQnV0IEkgYXNzdW1lIGl0IGlzIGRlc2lyYWJsZSB0byBiZSBhYmxl
IHRvIGRlbGV0ZSB0aGUgcnVubmluZyBjb3B5IG9mIGEgYnVpbHQtaW4gaXRlbS4gU28gdGhlIHN5
c3RlbSB3b3VsZCBoYXZlIHRvIGF2b2lkIHBvcHVsYXRpbmcgdGhlc2UgdW5sZXNzIGl0IGlzIGxv
YWRpbmcgdGhlIGZhY3RvcnkgZGVmYXVsdC4NCg0KW1Fpbl06SW50ZXJlc3RpbmcgZGlzY3Vzc2lv
biwgZWl0aGVyIGxvYWRpbmcgdGhlIGZhY3RvcnkgZGVmYXVsdCBmcm9tIGZhY3RvcnkgZGF0YXN0
b3JlIG9yIGRlZmluZSBhIG5ldyBzeXN0ZW0gZGF0YXN0b3JlLCBJIHRoaW5rIGJvdGggY2FuIGVu
YWJsZSB0aGUgc2VydmVyIHRvIHBvcHVsYXRlIHRoZSBkYXRhIGF1dG9tYXRpY2FsbHksIG9uZSBv
ZiBpbmRpdmlkdWFsIGRyYWZ0IGluIE5FVENPTkYgKGRyYWZ0LW1hLW5ldGNvbmYtd2l0aC1zeXN0
ZW0pIHNlZW1zIHRvIHRhcmdldCB0byBhZGRyZXNzIHRoaXMgaXNzdWUsIGkuZS4sIGF2b2lkIGR1
cGxpY2F0ZWQgZGF0YSBpdGVtcyB0byBiZSBjcmVhdGVkIGluIHRoZSBydW5uaW5nLCBJIGhhdmUg
Y29waWVkIHRoaXMgZW1haWwgdG8gdGhlIGF1dGhvciBvZiBkcmFmdC1tYS1uZXRjb25mLXdpdGgt
c3lzdGVtIGZvciB0aGVpciBmZWVkYmFjay4NCg0KQnV0IGV2ZW4gaWYgdGhlIHN5c3RlbSBjYW4g
cG9wdWxhdGUgdGhlc2UsIHdlJ2QgYWxzbyB3YW50IHRoZSBjbGllbnQvdXNlciB0byBiZSBhYmxl
IHRvIGV4cGxpY2l0bHkgcG9wdWxhdGUgdGhlbSBhcyB3ZWxsIChpLmUuIGluIGNhc2UgdGhleSBk
ZWxldGUgb25lIGZyb20gcnVubmluZywgYW5kIHdhbnQgdG8gYWRkIGl0IGJhY2sgaW4gdG8gcmVm
ZXJlbmNlIGl0KS4NCg0KW1Fpbl06IFNlZSBkZXRhaWxzIGluIGRyYWZ0LW1hLW5ldGNvbmYtd2l0
aC1zeXN0ZW0uIEl0IGhlbHBzIGRlZmluZSBjb25zaXN0ZW50IGJlaGF2aW9yIGZvciBzeXN0ZW0g
ZGF0YSBoYW5kbGluZywganVzdCBsaWtlIHdoYXQgUkZDNjI0MyBkaWQuDQoNCkluIGVpdGhlciBj
YXNlIChzeXN0ZW0gcG9wdWxhdGlvbiBvZiBydW5uaW5nLCBvciBjbGllbnQgcG9wdWxhdGlvbiBv
ZiBydW5uaW5nKSwgZG8gd2UgcmVhbGx5IG5lZWQgdG8gcHV0IHRoZSBjb250ZW50cyBvZiB0aGUg
YmFnIG9yIHRoZSBjZXJ0IGludG8gcnVubmluZz8gIE9yIGlzIHBvcHVsYXRpbmcgdGhlIGxpc3Qg
a2V5IGVub3VnaCBzaW5jZSB0aGUgb3BlcmF0aW9uYWwgY29weSBzaG93cyB3aGF0IGNvbnRlbnRz
IGFyZSBpbiB1c2UgZm9yIHRoYXQgbGlzdCBlbnRyeT8NCg0KSmFzb24NCg==

--_000_beee731475d94261b495c7e1bc3357fahuaweicom_
Content-Type: text/html; charset="gb2312"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m=3D"http://sc=
hemas.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-=
html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dgb2312">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:=CB=CE=CC=E5;
	panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:=CE=A2=C8=ED=D1=C5=BA=DA;
	panose-1:2 11 5 3 2 2 4 2 2 4;}
@font-face
	{font-family:"\@=CE=A2=C8=ED=D1=C5=BA=DA";
	panose-1:2 11 5 3 2 2 4 2 2 4;}
@font-face
	{font-family:"\@=CB=CE=CC=E5";
	panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
	{mso-style-priority:99;
	mso-style-link:"=B4=BF=CE=C4=B1=BE Char";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
span.Char
	{mso-style-name:"=B4=BF=CE=C4=B1=BE Char";
	mso-style-priority:99;
	mso-style-link:=B4=BF=CE=C4=B1=BE;
	font-family:=CB=CE=CC=E5;
	mso-fareast-language:EN-US;}
span.PlainTextChar
	{mso-style-name:"Plain Text Char";
	mso-style-priority:99;
	mso-style-link:"Plain Text";
	font-family:"Calibri",sans-serif;}
p.PlainText, li.PlainText, div.PlainText
	{mso-style-name:"Plain Text";
	mso-style-link:"Plain Text Char";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
span.EmailStyle21
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.EmailStyle22
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:#1F497D;}
span.EmailStyle23
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN">Hi , Qin,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN">Thanks for bringing up this topic.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN">You are right, the mechanism defined in our draft aims at solving this=
 issue.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN">We proposed a &quot;system&quot; datastore,&nbsp; and&nbsp; there are =
two system configuration data handling basic modes. One is</span>
<span style=3D"color:#1F497D;mso-fareast-language:ZH-CN">automatically &nbs=
p;loading system into running,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN">The other is the client explicitly populates running with system confi=
guration.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN">It allows the client to identify how system configuration are processe=
d by the server, and also define a new mechanism for client control of serv=
er processing of system configuration
 data.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN">Any suggestions and comments would be greatly appreciated.<o:p></o:p><=
/span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN">&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN">Qiufang Ma<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D;mso-fareast-language:ZH=
-CN"><o:p>&nbsp;</o:p></span></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm =
0cm 0cm">
<p class=3D"MsoNormal"><b><span lang=3D"ZH-CN" style=3D"font-family:&quot;=
=CE=A2=C8=ED=D1=C5=BA=DA&quot;,sans-serif;mso-fareast-language:ZH-CN">=B7=
=A2=BC=FE=C8=CB</span></b><b><span style=3D"font-family:&quot;=CE=A2=C8=ED=
=D1=C5=BA=DA&quot;,sans-serif;mso-fareast-language:ZH-CN">:</span></b><span=
 style=3D"font-family:&quot;=CE=A2=C8=ED=D1=C5=BA=DA&quot;,sans-serif;mso-f=
areast-language:ZH-CN">
 Qin Wu <br>
<b><span lang=3D"ZH-CN">=B7=A2=CB=CD=CA=B1=BC=E4</span>:</b> 2021<span lang=
=3D"ZH-CN">=C4=EA</span>1<span lang=3D"ZH-CN">=D4=C2</span>13<span lang=3D"=
ZH-CN">=C8=D5</span> 9:15<br>
<b><span lang=3D"ZH-CN">=CA=D5=BC=FE=C8=CB</span>:</b> Sterne, Jason (Nokia=
 - CA/Ottawa) &lt;jason.sterne@nokia.com&gt;; Netconf &lt;netconf@ietf.org&=
gt;<br>
<b><span lang=3D"ZH-CN">=B3=AD=CB=CD</span>:</b> draft-ma-netconf-with-syst=
em@ietf.org<br>
<b><span lang=3D"ZH-CN">=D6=F7=CC=E2</span>:</b> RE: built-in trust anchors=
<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><b><span lang=3D"ZH-CN" style=3D"font-family:&quot;=
=CE=A2=C8=ED=D1=C5=BA=DA&quot;,sans-serif;mso-fareast-language:ZH-CN">=B7=
=A2=BC=FE=C8=CB</span></b><b><span style=3D"font-family:&quot;=CE=A2=C8=ED=
=D1=C5=BA=DA&quot;,sans-serif;mso-fareast-language:ZH-CN">:</span></b><span=
 style=3D"font-family:&quot;=CE=A2=C8=ED=D1=C5=BA=DA&quot;,sans-serif;mso-f=
areast-language:ZH-CN">
 netconf [<a href=3D"mailto:netconf-bounces@ietf.org">mailto:netconf-bounce=
s@ietf.org</a>]
<b><span lang=3D"ZH-CN">=B4=FA=B1=ED </span></b>Sterne, Jason (Nokia - CA/O=
ttawa)<br>
<b><span lang=3D"ZH-CN">=B7=A2=CB=CD=CA=B1=BC=E4</span>:</b> 2021<span lang=
=3D"ZH-CN">=C4=EA</span>1<span lang=3D"ZH-CN">=D4=C2</span>13<span lang=3D"=
ZH-CN">=C8=D5</span> 3:02<br>
<b><span lang=3D"ZH-CN">=CA=D5=BC=FE=C8=CB</span>:</b> Netconf &lt;<a href=
=3D"mailto:netconf@ietf.org">netconf@ietf.org</a>&gt;<br>
<b><span lang=3D"ZH-CN">=D6=F7=CC=E2</span>:</b> [netconf] built-in trust a=
nchors<o:p></o:p></span></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Hi all,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">I noticed Jurgen's comment about built-in trust anch=
ors in his YANG doctor review of trust-anchors-13. I wanted to pull that ou=
t into a dedicated thread/discussion here.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Jurgen:<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>- Section 3 talks about populating &lt;running&gt; with built-in trust<o:p=
></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp; anchors.<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp;&nbsp; In order for the built-in trust anchors to be referenced by<o=
:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp;&nbsp; configuration, the referenced certificates MUST first be copi=
ed into<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp;&nbsp; &lt;running&gt;.&nbsp; The certificates SHOULD be copied into=
 &lt;running&gt; using<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp;&nbsp; the same &quot;key&quot; values, so that the server can bind =
them to the built-<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp;&nbsp; in entries.<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp; Is the idea that this copy operation is an explicit management<o:p>=
</o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp; operation or can implementations populate &lt;running&gt; with this=
<o:p></o:p></span></p>
<p class=3D"MsoPlainText" style=3D"margin-left:36.0pt"><span lang=3D"EN-CA"=
>&nbsp; data automatically?<o:p></o:p></span></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">I suppose a server *<b>could</b>* populate this in r=
unning as part of a built-in startup datastore in the absence of a startup =
datastore (i.e. as contents of a RFC8808 factory default). But I assume it =
is desirable to be able to delete
 the running copy of a built-in item. So the system would have to avoid pop=
ulating these unless it is loading the factory default.<o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language:ZH-CN"><o:p>&nbs=
p;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language:ZH-CN">[Qin]:Int=
eresting discussion, either loading the factory default from factory datast=
ore or define a new system datastore, I think both can enable the server to=
 populate the data automatically, one
 of individual draft in NETCONF (draft-ma-netconf-with-system) seems to tar=
get to address this issue, i.e., avoid duplicated data items to be created =
in the running, I have copied this email to the author of draft-ma-netconf-=
with-system for their feedback.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language:ZH-CN"><o:p>&nbs=
p;</o:p></span></p>
<p class=3D"MsoNormal">But even if the system can populate these, we'd also=
 want the client/user to be able to explicitly populate them as well (i.e. =
in case they delete one from running, and want to add it back in to referen=
ce it).
<o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p>&nbsp;</o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language:ZH-CN">[Qin]: Se=
e details in draft-ma-netconf-with-system. It helps define consistent behav=
ior for system data handling, just like what RFC6243 did.<o:p></o:p></span>=
</p>
<p class=3D"MsoNormal"><span style=3D"mso-fareast-language:ZH-CN"><o:p>&nbs=
p;</o:p></span></p>
<p class=3D"MsoNormal">In either case (system population of running, or cli=
ent population of running), do we really need to put the contents of the ba=
g or the cert into running?&nbsp; Or is populating the list key enough sinc=
e the operational copy shows what contents
 are in use for that list entry?<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Jason<o:p></o:p></p>
</div>
</body>
</html>

--_000_beee731475d94261b495c7e1bc3357fahuaweicom_--


From nobody Wed Jan 13 05:17:15 2021
Return-Path: <j.schoenwaelder@jacobs-university.de>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4754C3A0D78; Wed, 13 Jan 2021 05:17:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sr_pbebxBD28; Wed, 13 Jan 2021 05:17:12 -0800 (PST)
Received: from atlas5.jacobs-university.de (atlas5.jacobs-university.de [212.201.44.20]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D661F3A0D70; Wed, 13 Jan 2021 05:17:11 -0800 (PST)
Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas5.jacobs-university.de (Postfix) with ESMTP id 123BD670; Wed, 13 Jan 2021 14:17:09 +0100 (CET)
X-Virus-Scanned: amavisd-new at jacobs-university.de
Received: from atlas5.jacobs-university.de ([10.70.0.198]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10032) with ESMTP id 2pePKPDaHdbr; Wed, 13 Jan 2021 14:17:09 +0100 (CET)
Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "DFN-Verein Global Issuing CA" (verified OK)) by atlas5.jacobs-university.de (Postfix) with ESMTPS; Wed, 13 Jan 2021 14:17:09 +0100 (CET)
Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by hermes.jacobs-university.de (Postfix) with ESMTP id 8CB9D20166; Wed, 13 Jan 2021 14:17:09 +0100 (CET)
X-Virus-Scanned: amavisd-new at jacobs-university.de
Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10028) with ESMTP id 6blcjKJs-8DP; Wed, 13 Jan 2021 14:17:09 +0100 (CET)
Received: from localhost (anna.jacobs.jacobs-university.de [10.50.218.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by hermes.jacobs-university.de (Postfix) with ESMTPS id EB03A20164; Wed, 13 Jan 2021 14:17:08 +0100 (CET)
Date: Wed, 13 Jan 2021 14:17:08 +0100
From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
To: tom petch <ietfc@btconnect.com>
Cc: Michael Richardson <mcr+ietf@sandelman.ca>, "yang-doctors@ietf.org" <yang-doctors@ietf.org>, "netconf@ietf.org" <netconf@ietf.org>, "draft-ietf-netconf-trust-anchors.all@ietf.org" <draft-ietf-netconf-trust-anchors.all@ietf.org>
Message-ID: <20210113131708.pkjh6rhbak2xnxlr@anna.jacobs.jacobs-university.de>
Reply-To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
Mail-Followup-To: tom petch <ietfc@btconnect.com>, Michael Richardson <mcr+ietf@sandelman.ca>, "yang-doctors@ietf.org" <yang-doctors@ietf.org>, "netconf@ietf.org" <netconf@ietf.org>, "draft-ietf-netconf-trust-anchors.all@ietf.org" <draft-ietf-netconf-trust-anchors.all@ietf.org>
References: <161047687248.13931.17900123352005904827@ietfa.amsl.com> <22275.1610501082@localhost> <AM7PR07MB6248C1350BA7F52C08BE1C9DA0A90@AM7PR07MB6248.eurprd07.prod.outlook.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
In-Reply-To: <AM7PR07MB6248C1350BA7F52C08BE1C9DA0A90@AM7PR07MB6248.eurprd07.prod.outlook.com>
X-Clacks-Overhead: GNU Terry Pratchett
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/HF5STMrS4x7HMkJF1IMgD0UatUM>
Subject: Re: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-trust-anchors-13
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 13:17:14 -0000

To clarify my comment: I was confused by the acronyms that were never
expanded, not by the expanded terms themselves. In other words, this
is mostly an editorial nit to get fixed.

/js

On Wed, Jan 13, 2021 at 12:54:55PM +0000, tom petch wrote:
> From: netconf <netconf-bounces@ietf.org> on behalf of Michael Richardso=
n <mcr+ietf@sandelman.ca>
> Sent: 13 January 2021 01:24
>=20
> J=FCrgen Sch=F6nw=E4lder via Datatracker wrote:
>     > - In 2.2.1, I was not sure what CA certificates are and what EE
>     > certificates are. I then tried to guess EE =3D end entity cert, b=
ut
>     > this does not explain CA since the term used in crypto types is
>     > trust anchor cert. The description in the XML clarified that my
>     > guess was kind of correct. Perhaps explain upfront what these
>     > acronyms mean? Or perhaps the acronyms can be avoided by simply
>     > spelling things out? They do not appear to be used frequently.
>=20
>     > - s/<!-- Entity Certs/<!-- End Entity Certs/
>=20
> "End Entity" goes back to RFC2510, and I don't think it's defined in an=
y of
> our documents.  I was expecting to see it in RFC4949 or RFC5280, but it=
's
> used in 5280, but not defined.
> I guess it comes from X509.v3, which is still behind the stupid paywall=
.
>=20
> The term EE/End Entity is in my opinion a great term, but it also took =
me
> awhile to learn it.
>=20
> <tp>
> End Entity has been around TLS since at least RFC5246.
>=20
> Tom Petch
>=20
>=20
> --
> Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 I=F8T consult=
ing )
>            Sandelman Software Works Inc, Ottawa and Worldwide
>=20
>=20
>=20
>=20

--=20
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>


From nobody Wed Jan 13 05:22:43 2021
Return-Path: <maqiufang1@huawei.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0A0B3A0DEB for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 05:22:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K1xD95ENh3MD for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 05:22:38 -0800 (PST)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 824C33A0DD5 for <netconf@ietf.org>; Wed, 13 Jan 2021 05:22:38 -0800 (PST)
Received: from fraeml741-chm.china.huawei.com (unknown [172.18.147.200]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4DG7LS2GMQz67ZlJ; Wed, 13 Jan 2021 21:18:40 +0800 (CST)
Received: from dggeme717-chm.china.huawei.com (10.1.199.113) by fraeml741-chm.china.huawei.com (10.206.15.222) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2106.2; Wed, 13 Jan 2021 14:22:33 +0100
Received: from dggeme770-chm.china.huawei.com (10.3.19.116) by dggeme717-chm.china.huawei.com (10.1.199.113) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2106.2; Wed, 13 Jan 2021 21:22:32 +0800
Received: from dggeme770-chm.china.huawei.com ([10.8.68.58]) by dggeme770-chm.china.huawei.com ([10.8.68.58]) with mapi id 15.01.2106.002; Wed, 13 Jan 2021 21:22:31 +0800
From: "maqiufang (A)" <maqiufang1@huawei.com>
To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>, "Sterne, Jason (Nokia - CA/Ottawa)" <jason.sterne@nokia.com>
CC: Netconf <netconf@ietf.org>
Thread-Topic: [netconf] built-in trust anchors
Thread-Index: AdbpFFL2IioTw935RTC9hP47Cn7q7f//jDeAgAAyLwCAAJ82AP//KLkQ
Date: Wed, 13 Jan 2021 13:22:31 +0000
Message-ID: <599db28d34d0403d91dd17753b15b243@huawei.com>
References: <DM6PR08MB5084E8CF8D3D4D0E77C841CD9BAA0@DM6PR08MB5084.namprd08.prod.outlook.com> <20210112195951.oi7dlnnqpda7wavm@anna.jacobs.jacobs-university.de> <DM6PR08MB5084ED69870DF456DA8F1A509BAA0@DM6PR08MB5084.namprd08.prod.outlook.com> <20210113082918.zy4m4wtltstrs64h@anna.jacobs.jacobs-university.de>
In-Reply-To: <20210113082918.zy4m4wtltstrs64h@anna.jacobs.jacobs-university.de>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.136.100.25]
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/qzJ2p0Ozzqz62JM6bwyakKnjdYU>
Subject: [netconf] =?gb2312?b?tPC4tDogIGJ1aWx0LWluIHRydXN0IGFuY2hvcnM=?=
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 13:22:42 -0000
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From nobody Wed Jan 13 07:09:43 2021
Return-Path: <j.schoenwaelder@jacobs-university.de>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF1813A10FF for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 07:09:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ai9DAs0WK0pQ for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 07:09:39 -0800 (PST)
Received: from atlas5.jacobs-university.de (atlas5.jacobs-university.de [212.201.44.20]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 166943A10FA for <netconf@ietf.org>; Wed, 13 Jan 2021 07:09:38 -0800 (PST)
Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by atlas5.jacobs-university.de (Postfix) with ESMTP id 725EE670; Wed, 13 Jan 2021 16:09:37 +0100 (CET)
X-Virus-Scanned: amavisd-new at jacobs-university.de
Received: from atlas5.jacobs-university.de ([10.70.0.198]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10032) with ESMTP id M3Ne2z3I0g30; Wed, 13 Jan 2021 16:09:37 +0100 (CET)
Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "hermes.jacobs-university.de", Issuer "DFN-Verein Global Issuing CA" (verified OK)) by atlas5.jacobs-university.de (Postfix) with ESMTPS; Wed, 13 Jan 2021 16:09:37 +0100 (CET)
Received: from localhost (demetrius5.irc-it.jacobs-university.de [10.70.0.222]) by hermes.jacobs-university.de (Postfix) with ESMTP id 204C320156; Wed, 13 Jan 2021 16:09:37 +0100 (CET)
X-Virus-Scanned: amavisd-new at jacobs-university.de
Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius5.jacobs-university.de [10.70.0.222]) (amavisd-new, port 10028) with ESMTP id g48p5UXh5SSR; Wed, 13 Jan 2021 16:09:36 +0100 (CET)
Received: from localhost (anna.jacobs.jacobs-university.de [10.50.218.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by hermes.jacobs-university.de (Postfix) with ESMTPS id 7C10F20154; Wed, 13 Jan 2021 16:09:34 +0100 (CET)
Date: Wed, 13 Jan 2021 16:09:34 +0100
From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
To: Martin =?utf-8?Q?Bj=C3=B6rklund?= <mbj+ietf@4668.se>
Cc: jason.sterne@nokia.com, netconf@ietf.org
Message-ID: <20210113150934.pg7ptdm5ljfuuhpp@anna.jacobs.jacobs-university.de>
Reply-To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
Mail-Followup-To: Martin =?utf-8?Q?Bj=C3=B6rklund?= <mbj+ietf@4668.se>, jason.sterne@nokia.com, netconf@ietf.org
References: <20210112195951.oi7dlnnqpda7wavm@anna.jacobs.jacobs-university.de> <DM6PR08MB5084ED69870DF456DA8F1A509BAA0@DM6PR08MB5084.namprd08.prod.outlook.com> <20210113082918.zy4m4wtltstrs64h@anna.jacobs.jacobs-university.de> <20210113.122655.1074482340604641202.id@4668.se>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
In-Reply-To: <20210113.122655.1074482340604641202.id@4668.se>
X-Clacks-Overhead: GNU Terry Pratchett
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/TOxBg4zBwYfOO2FQi9yWv6yRDjE>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 15:09:42 -0000

On Wed, Jan 13, 2021 at 12:26:55PM +0100, Martin Bj=F6rklund wrote:
> Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de> wrote:
> > After sleeping over it, I think a device should ship with the keys
> > listed in whatever is the equivalent of the factory default, i.e.,
> > they are initially in <running>. Deleting them should be possible wit=
h
> > the effect that no config can refer to these keys anymore (assuming
> > strong references). Putting the keys back into running makes them
> > available for config again.
>=20
> This could work, but see below.
>=20
> > I would be in favour to just have the names in runnning, not the
> > key/cert details. This avoids issues with entries that do not match,
> > and this then resembles hidden keys, for which details are also not
> > known in <running>. In fact, <hidden> keys likely have the same
> > property that they exist in the system (or a TPM), i.e., they are not
> > config that can be arbitrary changed. I would assume that the same
> > rules apply, if you delete a hidden key from <running>, it can't be
> > referenced and used anymore. Perhaps the discussion in the I-D should
> > be expanded to cover hidden keys as well.
>=20
> I like the symmetry w/ hidden keys.  I assume that these entries would
> be explicitly marked in the config as being "built-in" or "hidden".
>=20
> > I also expect that these special keys may be part of the firmware,
> > i.e., they may change with firmware updates. This can lead to stale
> > special keys that do not exist anymore in the firmware and new keys
> > that exist in the firmware but must be (manually) added to <running>
> > in order to use them.
>=20
> So then the question is what happens if a key is removed from the
> firmware, but it exists (with just the name) in the config, and some
> part of the config reference it?
>=20
> I think that this leads to the same problem as a weak leafref would
> do, so either solution would work.
>

You will have a reference to a key that is not usable, which means you
get runtime failures (as you would get with certs that have expired or
other issues). Note that this is only becoming a problem if the
firmware update renames keys/certs. If the update only ships a new
keys/certs but keeps the names consistent, things will continue to
work. I can't tell whether this brittleness is something to be
concerned about or whether it falls into the usual 'things may go
wrong after an update' bag of surprises.

/js

--=20
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>


From nobody Wed Jan 13 08:30:44 2021
Return-Path: <01000176fc95b165-e1e7254b-3895-4267-8470-854552276315-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0DF693A11A7 for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 08:30:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.915
X-Spam-Level: 
X-Spam-Status: No, score=-1.915 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sxwf3BkJhrUi for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 08:30:39 -0800 (PST)
Received: from a8-83.smtp-out.amazonses.com (a8-83.smtp-out.amazonses.com [54.240.8.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24D2A3A11A3 for <netconf@ietf.org>; Wed, 13 Jan 2021 08:30:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1610555438; h=From:Content-Type:Mime-Version:Subject:Date:References:To:In-Reply-To:Message-Id:Feedback-ID; bh=VVkYqW66JICDMDJr8LpM47ojPRoHInJCZForOVc5G08=; b=Q3Rt901bchV5zlPLA0XTGHFsOOxK2aLL1YeBnU7xnB/mp0wGgiozTtIkUjg+cZVu KHLRFWMOMHMVh/I0RgFQ4mJHrK4HliS8HeH3/+HawOfkUn1Fo3WTHlQrTa+vciGOTtP 5ak//+wiV79bPQPI/qwPMDVaAbl48nn6PhsOmG2s=
From: Kent Watsen <kent+ietf@watsen.net>
Content-Type: multipart/alternative; boundary="Apple-Mail=_96A736DE-CECF-491B-9A23-4A4DB7881931"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Date: Wed, 13 Jan 2021 16:30:37 +0000
References: <20210112195951.oi7dlnnqpda7wavm@anna.jacobs.jacobs-university.de> <DM6PR08MB5084ED69870DF456DA8F1A509BAA0@DM6PR08MB5084.namprd08.prod.outlook.com> <20210113082918.zy4m4wtltstrs64h@anna.jacobs.jacobs-university.de> <20210113.122655.1074482340604641202.id@4668.se> <20210113150934.pg7ptdm5ljfuuhpp@anna.jacobs.jacobs-university.de>
To: "netconf@ietf.org" <netconf@ietf.org>
In-Reply-To: <20210113150934.pg7ptdm5ljfuuhpp@anna.jacobs.jacobs-university.de>
Message-ID: <01000176fc95b165-e1e7254b-3895-4267-8470-854552276315-000000@email.amazonses.com>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.13-54.240.8.83
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/KyBc4e4hLfZVsuJ9nk4qleXCYnI>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2021 16:30:42 -0000

--Apple-Mail=_96A736DE-CECF-491B-9A23-4A4DB7881931
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

[Top-posting as this is a response to the entire thread, sans =
draft-ma-netconf-with-system, which I haven=E2=80=99t looked at yet].

Having "instance-required false=E2=80=9D was an idea from before, but it =
didn=E2=80=99t make sense to disable validation for the 99% use-case to =
enable a 1% use-case.  There will only ever be a few built-in keys/certs =
(typically at most just one of each, to enable bootstrapping), whereas =
potentially many keys/certs will be configured over time (for normal =
ops).

Hiding all the descendent nodes except =E2=80=9Cname=E2=80=9D for =
built-in keys/certs doesn=E2=80=99t work because the pubkey/cert is =
needed in order to encrypt data that only a device can decrypt, as =
needed to support RMA scenarios (see =
https://tools.ietf.org/html/draft-ietf-netconf-keystore-20#section-4.3 =
<https://tools.ietf.org/html/draft-ietf-netconf-keystore-20#section-4.3> =
starting with the 4th paragraph).

The built-in keys/certs are envisioned to be forever; they never expire =
nor are affected by firmware updates.  For the example of a list of =
public CAs (trust anchors such as Verisign, RSA, etc.), these SHOULD be =
in <startup> and admins SHOULD be allowed (NACM permitting) to =
add/remove entries.

I agree that the =E2=80=9Cillusion=E2=80=9D text Martin quoted is "weird =
special handling=E2=80=9D, but this was the best that could be =
envisioned after several tries.  You might recall there were two or =
three other variations (inc. the "instance-required false=E2=80=9D =
mentioned above) that we tried before landing on this approach.

K.


> On Jan 13, 2021, at 10:09 AM, Juergen Schoenwaelder =
<j.schoenwaelder@jacobs-university.de> wrote:
>=20
> On Wed, Jan 13, 2021 at 12:26:55PM +0100, Martin Bj=C3=B6rklund wrote:
>> Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de> wrote:
>>> After sleeping over it, I think a device should ship with the keys
>>> listed in whatever is the equivalent of the factory default, i.e.,
>>> they are initially in <running>. Deleting them should be possible =
with
>>> the effect that no config can refer to these keys anymore (assuming
>>> strong references). Putting the keys back into running makes them
>>> available for config again.
>>=20
>> This could work, but see below.
>>=20
>>> I would be in favour to just have the names in runnning, not the
>>> key/cert details. This avoids issues with entries that do not match,
>>> and this then resembles hidden keys, for which details are also not
>>> known in <running>. In fact, <hidden> keys likely have the same
>>> property that they exist in the system (or a TPM), i.e., they are =
not
>>> config that can be arbitrary changed. I would assume that the same
>>> rules apply, if you delete a hidden key from <running>, it can't be
>>> referenced and used anymore. Perhaps the discussion in the I-D =
should
>>> be expanded to cover hidden keys as well.
>>=20
>> I like the symmetry w/ hidden keys.  I assume that these entries =
would
>> be explicitly marked in the config as being "built-in" or "hidden".
>>=20
>>> I also expect that these special keys may be part of the firmware,
>>> i.e., they may change with firmware updates. This can lead to stale
>>> special keys that do not exist anymore in the firmware and new keys
>>> that exist in the firmware but must be (manually) added to <running>
>>> in order to use them.
>>=20
>> So then the question is what happens if a key is removed from the
>> firmware, but it exists (with just the name) in the config, and some
>> part of the config reference it?
>>=20
>> I think that this leads to the same problem as a weak leafref would
>> do, so either solution would work.
>>=20
>=20
> You will have a reference to a key that is not usable, which means you
> get runtime failures (as you would get with certs that have expired or
> other issues). Note that this is only becoming a problem if the
> firmware update renames keys/certs. If the update only ships a new
> keys/certs but keeps the names consistent, things will continue to
> work. I can't tell whether this brittleness is something to be
> concerned about or whether it falls into the usual 'things may go
> wrong after an update' bag of surprises.
>=20
> /js
>=20
> --=20
> Juergen Schoenwaelder           Jacobs University Bremen gGmbH
> Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
> Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>
>=20
> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf


--Apple-Mail=_96A736DE-CECF-491B-9A23-4A4DB7881931
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><div =
class=3D"">[Top-posting as this is a response to the entire thread, =
sans&nbsp;draft-ma-netconf-with-system, which I haven=E2=80=99t looked =
at yet].</div><div class=3D""><br class=3D""></div><div class=3D"">Having =
"instance-required false=E2=80=9D was an idea from before, but it =
didn=E2=80=99t make sense to disable validation for the 99% use-case to =
enable a 1% use-case. &nbsp;There will only ever be a few built-in =
keys/certs (<span style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, =
0);" class=3D"">typically at most just one of each,&nbsp;</span>to =
enable bootstrapping), whereas potentially many keys/certs will be =
configured over time (for normal ops).</div><div class=3D""><br =
class=3D""></div><div class=3D"">Hiding all the descendent nodes except =
=E2=80=9Cname=E2=80=9D for built-in keys/certs doesn=E2=80=99t work =
because the pubkey/cert is needed in order to encrypt data that only a =
device can decrypt, as needed to support RMA scenarios (see&nbsp;<a =
href=3D"https://tools.ietf.org/html/draft-ietf-netconf-keystore-20#section=
-4.3" =
class=3D"">https://tools.ietf.org/html/draft-ietf-netconf-keystore-20#sect=
ion-4.3</a>&nbsp;starting with the 4th paragraph).</div><div =
class=3D""><br class=3D""></div><div class=3D"">The built-in keys/certs =
are envisioned to be forever; they never expire nor are affected by =
firmware updates. &nbsp;For the example of a list of public CAs (trust =
anchors such as Verisign, RSA, etc.), these SHOULD be in &lt;startup&gt; =
and admins SHOULD be allowed (NACM permitting) to add/remove =
entries.</div><div class=3D""><br class=3D""></div><div class=3D"">I =
agree that the =E2=80=9Cillusion=E2=80=9D text Martin quoted is "weird =
special handling=E2=80=9D, but this was the best that could be =
envisioned after several tries. &nbsp;You might recall there were two or =
three other variations (inc. the&nbsp;<span style=3D"caret-color: rgb(0, =
0, 0); color: rgb(0, 0, 0);" class=3D"">"instance-required =
false=E2=80=9D</span><span style=3D"caret-color: rgb(0, 0, 0); color: =
rgb(0, 0, 0);" class=3D"">&nbsp;mentioned above)</span>&nbsp;that we =
tried before landing on this approach.</div><div class=3D""><br =
class=3D""></div><div class=3D"">K.</div><div class=3D""><br =
class=3D""></div><div><br class=3D""><blockquote type=3D"cite" =
class=3D""><div class=3D"">On Jan 13, 2021, at 10:09 AM, Juergen =
Schoenwaelder &lt;<a href=3D"mailto:j.schoenwaelder@jacobs-university.de" =
class=3D"">j.schoenwaelder@jacobs-university.de</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><div class=3D"">On =
Wed, Jan 13, 2021 at 12:26:55PM +0100, Martin Bj=C3=B6rklund wrote:<br =
class=3D""><blockquote type=3D"cite" class=3D"">Juergen Schoenwaelder =
&lt;<a href=3D"mailto:j.schoenwaelder@jacobs-university.de" =
class=3D"">j.schoenwaelder@jacobs-university.de</a>&gt; wrote:<br =
class=3D""><blockquote type=3D"cite" class=3D"">After sleeping over it, =
I think a device should ship with the keys<br class=3D"">listed in =
whatever is the equivalent of the factory default, i.e.,<br =
class=3D"">they are initially in &lt;running&gt;. Deleting them should =
be possible with<br class=3D"">the effect that no config can refer to =
these keys anymore (assuming<br class=3D"">strong references). Putting =
the keys back into running makes them<br class=3D"">available for config =
again.<br class=3D""></blockquote><br class=3D"">This could work, but =
see below.<br class=3D""><br class=3D""><blockquote type=3D"cite" =
class=3D"">I would be in favour to just have the names in runnning, not =
the<br class=3D"">key/cert details. This avoids issues with entries that =
do not match,<br class=3D"">and this then resembles hidden keys, for =
which details are also not<br class=3D"">known in &lt;running&gt;. In =
fact, &lt;hidden&gt; keys likely have the same<br class=3D"">property =
that they exist in the system (or a TPM), i.e., they are not<br =
class=3D"">config that can be arbitrary changed. I would assume that the =
same<br class=3D"">rules apply, if you delete a hidden key from =
&lt;running&gt;, it can't be<br class=3D"">referenced and used anymore. =
Perhaps the discussion in the I-D should<br class=3D"">be expanded to =
cover hidden keys as well.<br class=3D""></blockquote><br class=3D"">I =
like the symmetry w/ hidden keys. &nbsp;I assume that these entries =
would<br class=3D"">be explicitly marked in the config as being =
"built-in" or "hidden".<br class=3D""><br class=3D""><blockquote =
type=3D"cite" class=3D"">I also expect that these special keys may be =
part of the firmware,<br class=3D"">i.e., they may change with firmware =
updates. This can lead to stale<br class=3D"">special keys that do not =
exist anymore in the firmware and new keys<br class=3D"">that exist in =
the firmware but must be (manually) added to &lt;running&gt;<br =
class=3D"">in order to use them.<br class=3D""></blockquote><br =
class=3D"">So then the question is what happens if a key is removed from =
the<br class=3D"">firmware, but it exists (with just the name) in the =
config, and some<br class=3D"">part of the config reference it?<br =
class=3D""><br class=3D"">I think that this leads to the same problem as =
a weak leafref would<br class=3D"">do, so either solution would work.<br =
class=3D""><br class=3D""></blockquote><br class=3D"">You will have a =
reference to a key that is not usable, which means you<br class=3D"">get =
runtime failures (as you would get with certs that have expired or<br =
class=3D"">other issues). Note that this is only becoming a problem if =
the<br class=3D"">firmware update renames keys/certs. If the update only =
ships a new<br class=3D"">keys/certs but keeps the names consistent, =
things will continue to<br class=3D"">work. I can't tell whether this =
brittleness is something to be<br class=3D"">concerned about or whether =
it falls into the usual 'things may go<br class=3D"">wrong after an =
update' bag of surprises.<br class=3D""><br class=3D"">/js<br =
class=3D""><br class=3D"">-- <br class=3D"">Juergen Schoenwaelder =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Jacobs =
University Bremen gGmbH<br class=3D"">Phone: +49 421 200 3587 =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Campus Ring 1 | 28759 =
Bremen | Germany<br class=3D"">Fax: &nbsp;&nbsp;+49 421 200 3103 =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;<a =
href=3D"https://www.jacobs-university.de/" =
class=3D"">https://www.jacobs-university.de/</a>&gt;<br class=3D""><br =
class=3D"">_______________________________________________<br =
class=3D"">netconf mailing list<br class=3D""><a =
href=3D"mailto:netconf@ietf.org" class=3D"">netconf@ietf.org</a><br =
class=3D"">https://www.ietf.org/mailman/listinfo/netconf<br =
class=3D""></div></div></blockquote></div><br class=3D""></body></html>=

--Apple-Mail=_96A736DE-CECF-491B-9A23-4A4DB7881931--


From nobody Wed Jan 13 23:30:01 2021
Return-Path: <hrogge@gmail.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D5EE3A11F8 for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 23:29:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level: 
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hDHAe4z35EsQ for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 23:29:58 -0800 (PST)
Received: from mail-lf1-x136.google.com (mail-lf1-x136.google.com [IPv6:2a00:1450:4864:20::136]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E18F3A11F7 for <netconf@ietf.org>; Wed, 13 Jan 2021 23:29:57 -0800 (PST)
Received: by mail-lf1-x136.google.com with SMTP id s26so6632816lfc.8 for <netconf@ietf.org>; Wed, 13 Jan 2021 23:29:57 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:from:date:message-id:subject:to:cc; bh=gCzkoWE703pf4Zqib0Va7PGrTG90EDZEtPHtABRVkQg=; b=fLNVMDSrE4KVygWQVP5KLE8ps/p3K7JTY4WplpM5n1bvqJRnLPFiNZwvGRsRtoehxN NmnvR9zfwEeXnjZJXkWAKJZCu51OSpq+I0e5CT++WVraxsbs39hqAsI51uF3EvgZ7fEW 5/JFUA47KcOqruMo+DsOYVqq5i8lCYUfwuRK2GkrBb4PEjnr6sWPG4O9ZTWxhT8m1cz9 P7SioW5L2IC5CmaefbOf3nScb37/Uup09dnZO8MBf4fB8TWYUuTgWiLz2T2baiYiaFsy mgYTc7ofZijs3VqKRgqL7vK6FYQj8c2SRKy+QmitJHJKldgwEnchwJa69vft2E9a8Ek0 M6tQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=gCzkoWE703pf4Zqib0Va7PGrTG90EDZEtPHtABRVkQg=; b=rIKX3/y0AGMFbMzs/nFjxZvDMCjnpH4KY3GpFs1QNIP28iwgZBIQkD15EYeYZjDKWC 4BajpGlK6kuKLx7y2lJNAzWXAD9VnXgPsLxG2JmJYOZycLnBY9Sue3/Ojcw1jT3BOC9V 9NTJVSVTo3z8lw8Pq82wW5ObdagGTTnmPCKrIMmHifUiShHq5Di0MIfif4Xs/zOUFDeO siz6nztPEq5AxDsJZsLEkEbo2hV48KYL4w3zilNdL5HJ7mAbzrgsF720Tfp/KirA5iGa Okw0uwINAFlUoM82uUuHzhavizsyOI5wD3lXk71kKNne7G4DQnawsI4V4zVxowPTmPX/ xpAg==
X-Gm-Message-State: AOAM531kz+Q8iGH6O4hF6r+at2atNGz5rrsE/BjdJ6A/PKyM6a5oje0N gmXYWyBRhabYUTcCkhX2HngRt2j+ER8Uc9ClmfsxMrGOGRk=
X-Google-Smtp-Source: ABdhPJwv7OzhyUiMLg8wpOy39NF0/e2S39/2aAXBg3lhogFsGEle38Sv29aI8JYst10oBDYS3CzaYy4s4IAzPngg5Z8=
X-Received: by 2002:a19:7407:: with SMTP id v7mr2937861lfe.430.1610609395176;  Wed, 13 Jan 2021 23:29:55 -0800 (PST)
MIME-Version: 1.0
From: Henning Rogge <hrogge@gmail.com>
Date: Thu, 14 Jan 2021 08:29:29 +0100
Message-ID: <CAGnRvuqe9iAbkgxak7m8c4UDGEVjmDif0ri5MpeQDm3KcG0viA@mail.gmail.com>
To: Netconf <netconf@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/T7cRAVGFzT05F3PtmXwezIh1uhU>
Subject: [netconf] netconf-https-notif-draft HTTP "pipelining"
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2021 07:29:59 -0000

Hi,

I had a longer discussion with Kent Watsen yesterday and he asked me
to get the questions about the netconf-https-notif-draft to the
mailing list:

In section 1.5.1 the draft talks about "pipelining" of messages. Is
this meant equivalent to "HTTP 1.1 pipelining" or is this just a
technique unique to the draft? If this is not something reused from
HTTP, maybe there should be some advice on how this interacts with
normal HTTP server/client code.

Also the example in 1.5.1 seems to contradict each other.

The overview (page 5) shows the Publisher sending HTTPS POST message
once for each notification (which I think is important because the URL
is part of the context of the message)... but the content description
(page 6) does only show a single POST with multiple responses. Same is
true for chapter 8.3.

Henning Rogge


From nobody Wed Jan 13 23:46:01 2021
Return-Path: <hrogge@gmail.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 067ED3A1217 for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 23:46:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level: 
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GchvwOboA2h5 for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 23:45:59 -0800 (PST)
Received: from mail-lj1-x22c.google.com (mail-lj1-x22c.google.com [IPv6:2a00:1450:4864:20::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95AE53A1216 for <netconf@ietf.org>; Wed, 13 Jan 2021 23:45:59 -0800 (PST)
Received: by mail-lj1-x22c.google.com with SMTP id e7so5366300ljg.10 for <netconf@ietf.org>; Wed, 13 Jan 2021 23:45:59 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:from:date:message-id:subject:to:cc; bh=bUXid5zvsyKUxRAJbIm0N/DRUvDAXhMV/GQh1vnymw0=; b=I101FPifH1b58NsXIf0IZmx12mFjN51OpgTdpZzuYFyTP197ZeXKdO8hZQt5FG0+im fQjNU+u+J0K+aD6l8tQtUOwyFkEQskZ7of4cz5zprXowyvqn5EAYhM3jLNQCUKFnBJ5y iMNqZ3C7dsdUlQt9sSUfYyjy44uxa8ADRrwx64v9sWj8o2PScNNvGPMmEJxk4RcHn/6+ igCNqXj/B6ECqU95N59gUloZsZ1AOqQu6Qeo3uexsi7Om7ccPXXEzyyXV3El6gd46r6W m4c+YRkyFQQwzAlBRAeK5OJsOShuP/6KDf/EPQ6p7QZsYy6UAMpfKWi+FwI6olxMvurO pF+g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=bUXid5zvsyKUxRAJbIm0N/DRUvDAXhMV/GQh1vnymw0=; b=ZMYmIHVPPdV3a7mcrCUBAnLH1gM0yzh7iXUL9vOzjeryMtU/qLyuEHViIrU2odlzm2 MwdIKOh2A5agsHQj9jZSeOgI+om22ImhG6gOFLtGcfOaihc0o3UBzNzuYzuFYd5HsD75 9wAF03pYNJjqcYE3OKlmnUEPJ48s63CEFGPgZOmqs+EAxYoae54kFbfv4JXyica5teCs nuDhG3rPP1joX6JuU4Z0RaZicTBypbAKHLBNnpsoRxcDNIs5nV/STjUx9cy5dkyRxclH NatrU9qKI0mEVLWbSm5vaVr8mINeOMzmSC3vu2GMBB4/kTX2iwFkdD0NF4tEwuQvz6n6 8KwQ==
X-Gm-Message-State: AOAM532EBCX94/Au2GjKvidYfJweaAkSy3LhB5JSN1YzN1LybowFxvkn xWyTw7cAMlCgQrGAlLPlgMCwPWLZGMxkrlZXbr5AwpJycQ6M7w==
X-Google-Smtp-Source: ABdhPJyiVnNFu3KdlS5iIo5OwrolboUb50HvenXdizfUlHXJO2XArmJKQD4hjcIsB/FlTfD5MJ7bWMVUkIXYLB/cJok=
X-Received: by 2002:a2e:908:: with SMTP id 8mr2614807ljj.52.1610610357191; Wed, 13 Jan 2021 23:45:57 -0800 (PST)
MIME-Version: 1.0
From: Henning Rogge <hrogge@gmail.com>
Date: Thu, 14 Jan 2021 08:45:31 +0100
Message-ID: <CAGnRvuoQ1DR8et6BVL6FSwM=m-6z+3+ujVoY2mx5e7mrvhO22A@mail.gmail.com>
To: Netconf <netconf@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/904eXBOpUJRsZqOpbRi_3525rqU>
Subject: [netconf] Clarification about RFC8040 plain PATCH operation
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2021 07:46:01 -0000

Hi,

I have trouble making sure I get the meaning of the RFC8040 plain
Patch operation right... mostly because of the (potential) double
meaning of the word "merge".

Is the plain patch operation meant as a shallow merge or a deep merge?

Here is my attempt as an example with a PATCH operation of the node "rootC".

YANG context:
container rootC {
        container partA {
                leaf leafA1 {
                        type string;
                }
                leaf leafA2 {
                        type string;
                }
        }
        container partB {
                leaf leafB1 {
                        type string;
                }
                leaf leafB2 {
                        type string;
                }
        }
}

Datastore content before the PATCH operation:
{
        "ns:rootC": {
                "partA": {
                          "leafA1": "A1",
                          "leafA2": "A2"
                },
                "partB": {
                          "leafB1": "B1",
                          "leafB2": "B2"
                }
        }
}

Simple Patch Body:
{
        "ns:rootC": {
                "partA": {
                          "leafA1": "newA1",
                }
        }
}

Datastore content after PATCH with "shallow" merge:
{
        "ns:rootC": {
                "partA": {
                          "leafA1": "newA1",
                },
                "partB": {
                          "leafB1": "B1",
                          "leafB2": "B2"
                }
        }
}

Datastore content after PATCH with "deep/recursive" merge:
{
        "ns:rootC": {
                "partA": {
                          "leafA1": "newA1",
                          "leafA2": "A2"
               },
                "partB": {
                          "leafB1": "B1",
                          "leafB2": "B2"
                }
        }
}

With a shallow merge, the merging is only done for the
root-container... with the deep merge the server has to recursively go
down each patched container.

Henning Rogge


From nobody Wed Jan 13 23:46:29 2021
Return-Path: <mbj+ietf@4668.se>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D87A3A1217 for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 23:46:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.123
X-Spam-Level: 
X-Spam-Status: No, score=-0.123 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, PDS_NAKED_TO_NUMERO=1.997, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=4668.se header.b=qQ/yULEo; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=PtB7zvJ+
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m13u1BJ1YeoZ for <netconf@ietfa.amsl.com>; Wed, 13 Jan 2021 23:46:25 -0800 (PST)
Received: from wout4-smtp.messagingengine.com (wout4-smtp.messagingengine.com [64.147.123.20]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A33D73A1216 for <netconf@ietf.org>; Wed, 13 Jan 2021 23:46:25 -0800 (PST)
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id C52411362; Thu, 14 Jan 2021 02:46:23 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Thu, 14 Jan 2021 02:46:23 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=4668.se; h=date :message-id:to:cc:subject:from:in-reply-to:references :mime-version:content-type:content-transfer-encoding; s=fm3; bh= uNBZEnFuD+tRzFeAYAd3Qz3n9Gcr0hUVJ99OD7aI7o4=; b=qQ/yULEoX5k7srxw riYGQFa8SIRL2ryX5dZEqOr7Oa0sSG+JXUyNKWgvCgJXs7gZ+tET2Z5x9ZyiatBl NvAHu4Ex41sQ2Q1Oya16E4aZd3OelLm3lC/MS61GIXRNNA8FeR07N4GfBP/nktFG nKH4e9420ssEtDJkVw/PZjfg5xDjx+gSxn414CC0mDEX9F7iwKjSz485udcgj2TZ mxm8wSLF0PRLkMXg6v+ufcsmPdXa0ZFiw2WAk71pWwDoZwBpD2LfeAliQskVDU// rmA2SROJz04tE2VN/IZRXYdkM2SGM6BfikBIcRnFfB8wJDbBW92o8iRfocWjxRI4 ojbs4A==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=uNBZEnFuD+tRzFeAYAd3Qz3n9Gcr0hUVJ99OD7aI7 o4=; b=PtB7zvJ+xBqRCsgUHMQh3RLNC133xGK5dPp1Sd7VkNWu3SK7UaGQHAtyy rtEAHJN0cx6686KsEQ5vTs7kQ8MSEtqmcrxZepFmW5XUULKltdgWR+74z4q5RdiG Q/OVtFdEfOMFv698R1aJQnJivyMBqk6f10aPVv8YI/LUGUuHqNJMyyDIxyAcDQaf BqbFsL8f2f9FjmU+p5/NUxfiG3vrwJlrbG4qG57wPbNWVVEBxYRbnm2zn6H0ThKU 6napFV/si5X26csqU6EXZdV/I6CKHXAp0cHN1aZJkxnIH2qDyX5S7n4FpGDatjJI PPwKmNMQHX9g6PYHCZZ0eDbYX9x5Q==
X-ME-Sender: <xms:z_b_Xxyb1C4UYoiXbBYnUwQZMg6sp7CgqBUppuFpNcYtEJa8RbkwKw> <xme:z_b_XxRPp4HbUVk3jaIuXKTAZfxEg2rlywmgBzi0S_f7u7ftl6TH34ZgUKFUIKw9V 8f1TwHvQIqONLQ_CcE>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedukedrtdeggdduudduucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffkffvuffhjghfofggtgfgsehtsg ertdertdejnecuhfhrohhmpeforghrthhinhcuuehjnphrkhhluhhnugcuoehmsghjodhi vghtfhesgeeiieekrdhsvgeqnecuggftrfgrthhtvghrnhepfeeiueeuleejueevjedtke fhvdegfedtjeekfeefieehveejheehueeijeethefhnecuffhomhgrihhnpehivghtfhdr ohhrghdpjhgrtghosghsqdhunhhivhgvrhhsihhthidruggvnecukfhppeduheekrdduje egrdegrddvudehnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhf rhhomhepmhgsjhdoihgvthhfseegieeikedrshgv
X-ME-Proxy: <xmx:z_b_X7X7GLsg5-fawODjLUI4I4cPQyu1PFkGJ_v92zjfkvwjaF6v9A> <xmx:z_b_Xzg2h2FFGKK0HdBfQE-YKaWgZ1_2TIX9zUvyi4gX6nKDL8pXbA> <xmx:z_b_XzAqLMkGDEVodUtK7PxMO3dNYIXtCyTd_YyNmCF2X_7zOmbOKw> <xmx:z_b_X2_QVurpl36GskZfuOgLwfLsToc9F_wQBlNIy7Wv1QJRjopxDw>
Received: from localhost (unknown [158.174.4.215]) by mail.messagingengine.com (Postfix) with ESMTPA id B1C231080059; Thu, 14 Jan 2021 02:46:22 -0500 (EST)
Date: Thu, 14 Jan 2021 08:46:21 +0100 (CET)
Message-Id: <20210114.084621.1561500589637511150.id@4668.se>
To: kent+ietf@watsen.net
Cc: netconf@ietf.org
From: Martin =?iso-8859-1?Q?Bj=F6rklund?= <mbj+ietf@4668.se>
In-Reply-To: <01000176fc95b165-e1e7254b-3895-4267-8470-854552276315-000000@email.amazonses.com>
References: <20210113.122655.1074482340604641202.id@4668.se> <20210113150934.pg7ptdm5ljfuuhpp@anna.jacobs.jacobs-university.de> <01000176fc95b165-e1e7254b-3895-4267-8470-854552276315-000000@email.amazonses.com>
X-Mailer: Mew version 6.8 on Emacs 26.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=utf-8
Content-Transfer-Encoding: base64
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/F1I2vlOrJ76CrTqXgMZOdfgF_6I>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2021 07:46:27 -0000
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From nobody Thu Jan 14 00:12:20 2021
Return-Path: <sven.wisotzky@nokia.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B0C33A124D for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 00:12:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.151
X-Spam-Level: 
X-Spam-Status: No, score=-2.151 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.25, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U_zTTFLLb7Wm for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 00:12:16 -0800 (PST)
Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2097.outbound.protection.outlook.com [40.107.20.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B96863A124F for <netconf@ietf.org>; Thu, 14 Jan 2021 00:12:16 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ZJrLseMqcFAmSozI/rpPzq+Pbqxqb8/Dy2TiR+MzhaJYMkqOr+h/QnFtbF71X/j6NB556fYeAcZncr5zfMbwJ3bNQH2jPtWv0ddNs4qRNTvgVTG4+y8YWilq1aOXCjYTmzyCTJfuT+ipT5AQzTNwiR6C/Jh6pwiGpW/WMWNC+d6Ct46UprGkpJseV5Y1NzlyswlliXCX5wo8j3SikxhmJT5yIzDSpvs8n3ggD8Rnh2k241523GdDH+JuRHa0gy0RW0ljJUpgUCK0K4S4MzLDd2DMyg/aHBDsZVAJsuXNdaLKJUFV2mBpblLi2MIYj6EWftkpg7G5wszKK9DM29EQ/Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XT+PB+KTsBLuDwJErwQb+xkbu4w0C8hyKCbcWDnPHh0=; b=NxkZOaUw/HLUh06DwfHlVG3NUW9c7fwx31Puq8ZZM/XyX3bEH8k1tympyXmsHDi9Vl1c/0qHzwKum+j3znY0xgN6G9dGhl74rrlFXv4GG3AGDGrl+mMYopnjxiAFU0Dx5n/CXES37jht5HpE0mXDXlUjyQT3pMocX2YnaozLOIKCw7V9drSq+X/81R0x27yoomVJiaeX/TCG0V8hXRyfBCYFlAPMrqSjYipv8Zqfs+Kak0EoJ3apCGL6Is6D7D91tEhgxi4Kp6ONrLLIg9gqxUkvmgRUfDUrSic7S/cKl3aa7EeF+frwboE/66245EEe4UhMDWxeED/ePkeOZ3F3Hw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia.com; dmarc=pass action=none header.from=nokia.com; dkim=pass header.d=nokia.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com;  s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XT+PB+KTsBLuDwJErwQb+xkbu4w0C8hyKCbcWDnPHh0=; b=omKGajJonAKCx9lTxw+z2p1ZN95fw4UsdoK01yBjLzmX1lPNZeeFXJQUpjhcJAOo8Ui5bKJdKFnQR5pja/VnWWaBaaxnb5IwzTG35be4RCt+e7CtU1/lBfEsTTOd+a8RHPeQQ1GNRbooXF/B3Yv4CuFfz55Q728ljFlqrJ65pFM=
Received: from (2603:10a6:20b:242::23) by AM0PR07MB5603.eurprd07.prod.outlook.com (2603:10a6:208:100::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3784.4; Thu, 14 Jan 2021 08:12:12 +0000
Received: from AM8PR07MB7604.eurprd07.prod.outlook.com ([fe80::241d:9675:d367:8bf3]) by AM8PR07MB7604.eurprd07.prod.outlook.com ([fe80::241d:9675:d367:8bf3%6]) with mapi id 15.20.3784.006; Thu, 14 Jan 2021 08:12:12 +0000
From: "Wisotzky, Sven (Nokia - DE/Stuttgart)" <sven.wisotzky@nokia.com>
To: Henning Rogge <hrogge@gmail.com>, Netconf <netconf@ietf.org>
Thread-Topic: [netconf] Clarification about RFC8040 plain PATCH operation
Thread-Index: AQHW6klVce2EfFMPTEOeHeMqrpUmO6om1hwA
Date: Thu, 14 Jan 2021 08:12:12 +0000
Message-ID: <B1959BA6-D265-41F9-B8B7-5B3013724051@nokia.com>
References: <CAGnRvuoQ1DR8et6BVL6FSwM=m-6z+3+ujVoY2mx5e7mrvhO22A@mail.gmail.com>
In-Reply-To: <CAGnRvuoQ1DR8et6BVL6FSwM=m-6z+3+ujVoY2mx5e7mrvhO22A@mail.gmail.com>
Accept-Language: de-DE, en-US
Content-Language: en-GB
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/16.44.20121301
authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=nokia.com;
x-originating-ip: [178.1.13.149]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: 50b638cf-37cf-4f23-7722-08d8b86418c4
x-ms-traffictypediagnostic: AM0PR07MB5603:
x-microsoft-antispam-prvs: <AM0PR07MB5603CEC8D34BFC936DB7C97BE9A80@AM0PR07MB5603.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:7691;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:AM8PR07MB7604.eurprd07.prod.outlook.com; PTR:; CAT:NONE;  SFS:(4636009)(136003)(396003)(376002)(346002)(39860400002)(366004)(76116006)(91956017)(8936002)(6506007)(66476007)(71200400001)(26005)(2616005)(8676002)(186003)(2906002)(33656002)(66946007)(316002)(83380400001)(86362001)(6512007)(6486002)(478600001)(5660300002)(66446008)(966005)(66556008)(64756008)(110136005)(36756003)(45980500001); DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata: =?utf-8?B?dTdTcWxkdkFzNkhJZjNNTzlnSnhtSmZrQUI2QnhrWUIzZlVYSW5mRnlVVExS?= =?utf-8?B?NkVwUllJZm1VR3FDdHlLREYyS2VTbzMyQldUbk1iMytoS3pFSFMxSkh4OGUx?= =?utf-8?B?Z2xDY2N6Qm9ub2NyaVFCQjNOYWVlMGxwK0NpQ2M1Znd6amhTelczbjNud0Js?= =?utf-8?B?R2lHVFBPbVovcXZFRVdtU1d2WlhlZU4xdUZWVlFZY2MyQzdkZWlDZmpzSG1q?= =?utf-8?B?ODJoQ2pzYlVQV3pNUmpUeEVxZFNrSmdsaXUweTlyTTdKYTMwdGUvU2RXdG10?= =?utf-8?B?RFpucEswUU1OZjN5cENXWGR6MGRJQndUVU9oaTU3ZkdGM0pVUHMxWHN4c2ZW?= =?utf-8?B?SzhiaEl5aWdwb25ZcjFEcmlvNUsyTkFxN2F6WHBNbTZWY3p1K25MeVI3TU5t?= =?utf-8?B?RXJOVE1HN3hGT3ZlL1U5MGFObU5PdUFHTWZXVUY0VzhnYlFsQVhnWVZxTkdQ?= =?utf-8?B?WFY4cnZ0ZjEzVnYvYm05UE1mNjAya0UrUEF1UTUxOXA3Z1pYN3F0TzN3Rmxx?= =?utf-8?B?TGNTZmdYUWdWcVJDVDZYc1JNMklIaUgvNzhzSHIzYTBGbmR6MnFydVJVYVVK?= =?utf-8?B?VmZzNnFHNkdrLzYrMEEvdUNCMEpaK3pZT3RYZXEvb3BiZ2xYdnBrdU5ybzVa?= =?utf-8?B?TUhFbHBRVlNVREVVWkRDY0ZXOXRNcFZzak1wL01tbnQvRmxzMjI2dndIb1Az?= =?utf-8?B?bUxzN1U1ZkwvdGZVcndOcDltWC83Q0lWS2JjM3NuZU5DNzdTUC92RmVQUy8r?= =?utf-8?B?bUFHMUZEcDd4YUdudjlJK1JwQzFBdmhpM05yVGVKZXlEWTJldSs1OFJMVXVu?= =?utf-8?B?WTFRQUxGUUNRcVpQZE8xbnlOVlZ0b2hTTGFId1JDMUt3SUZUMFRmUzRxQ3p2?= =?utf-8?B?d3RiUjkwdE9zbUJBek9tcE1WVXArOW1oVC8xaFQ5Mjd3UjcrbVBoRlVlUE5C?= =?utf-8?B?VkgzNCsrQ3NSK3AycmJZM01ycWNGYi9oa1dWNDB5cTljem1qWm51K3V2eWxI?= =?utf-8?B?OXVDa2d0NERHWDgzOElzbWRpZWprUG16ZkNLczQzdExpbklMYTRIZjJ0Yndo?= =?utf-8?B?QTcvRXRKRDF6aFgrUE5rQk03dEo3Y2Rib2pQcU5nWm5GbDBhMENoN28zVEd0?= =?utf-8?B?bTFYV3FsZGsrRVpQdnppd0lGeUYrR2FmVGJvd1pqVU1jS3FRdjZhTEJzMXBp?= =?utf-8?B?dzEzWlkzc3V1ZG93MTFtZ3dtbk05Sk10MGZDdGVHbUdYVXZhbE5WdElKL2Yr?= =?utf-8?B?L1Y1OTlRVGIrMVpKTzA0eXN0MmEvd0lMTDRrVlc5NDFRQnRjeEFWSWNaODNr?= =?utf-8?Q?BLIGH0F6O7AeuJqB30uEQyFIHqv/pjMkMd?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-ID: <350DED652AC0F84BA21B5B7FA06891A4@eurprd07.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM8PR07MB7604.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 50b638cf-37cf-4f23-7722-08d8b86418c4
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Jan 2021 08:12:12.3867 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: +Jx8SgeqTYdyQTXM/hcUeD+ycPr6bLNXFCGfXpUovZ2219AqVi0nQNzmFrcYD3LNTN2ZQvqVUGJsp73ktgoEFA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR07MB5603
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/5FERLJT5hoJwmCrCPmlXhm7BMSI>
Subject: Re: [netconf] Clarification about RFC8040 plain PATCH operation
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2021 08:12:18 -0000
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From nobody Thu Jan 14 03:49:56 2021
Return-Path: <ietfc@btconnect.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 800543A145E for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 03:49:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uSnZDfyPYQfc for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 03:49:52 -0800 (PST)
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80122.outbound.protection.outlook.com [40.107.8.122]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28FA23A13ED for <netconf@ietf.org>; Thu, 14 Jan 2021 03:49:51 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=RfEmfayZTM1ehddH/GHzCdbjd9k0/S8yuuQabu1ERXPE4xlz0n7zHl56uNeXNRzKi1z5q3tE2JNOICfFnkB4jsnHzYrJ9K6rB+bAjv0e2IBQlovwLdY7NmvNVWJj6/gous/jeQPhHR+i6qzOXBn0FTwB2uV2aA2NG0gXFWvbRPs0sALzp6XA5ozb0YEX+ipa2MDvpBrfkVpexU1f2WTiumZlo2omhUCQon1EC6s6PJLx8wEgp8oT+fUo726am6HJlKf3x+30NnQLLqPv+/nYxRskP53+gLZwtBYVvDT27bWJKBz5R5AlShh4b4sx6YXr64YWSwvYW57Wxho4zu1ucw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=X6cxaVbn28ETDSkOA1MY25fknC4Nf9LS2/ak7piNDKY=; b=MmUiP0gV6UNTykPGH4g6pzTc3prcVZnseEazpFiAqGnIy0YNzPSad1BUKwKslvIAyNhoSq3AcyKDj+T/U+lioDEYPE7y/YnRsaIR/eI4sqdjnkodfEgTJLqjAzS3PXNYj06NNETO8RyVCtkUZEY1ts445UAuWt0MJnQGNkjXM/K/BMY3lC/xDBFerXCzt5lP3/utSXab3rXi7GWfdv7BwXFLktbslZxQkX0AsTLd8nTGgIQgy6k3n0WEoFpQAo7EQF67T+ZJYJuyKZKQVlpXtvQGVXzW27vFkYmBa9UHoWbq+1EX8HAGbCU7s3o9tYYSqRNvKmzKH12NqNh5z3McJg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=X6cxaVbn28ETDSkOA1MY25fknC4Nf9LS2/ak7piNDKY=; b=Fm47AHZ2fUfR8v+xm2dHmnOZsRQx3uXxv25ijnhleo4/D9sH7XzTV1j92eRvhQPK1F74EHEB4/cEiCyoSxdDKwimzFu+pLmqP6qP7K1FLo/PBn3/imDyi5ssEWw0vIJnuQOvvalLC09FIAaLsoDNX1GiC8wzDwgm2OSlvyX5Ml4=
Received: from (2603:10a6:20b:134::11) by AM7PR07MB6325.eurprd07.prod.outlook.com (2603:10a6:20b:13e::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3784.4; Thu, 14 Jan 2021 11:49:42 +0000
Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::6d46:4f3c:643:4849]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::6d46:4f3c:643:4849%5]) with mapi id 15.20.3763.009; Thu, 14 Jan 2021 11:49:42 +0000
From: tom petch <ietfc@btconnect.com>
To: Kent Watsen <kent+ietf@watsen.net>, "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [netconf] built-in trust anchors
Thread-Index: AdbpFFL2IioTw935RTC9hP47Cn7q7QACSnGAAAYuKwAAE/5wAAAN/Yv/AALRw4AAKEkU+g==
Date: Thu, 14 Jan 2021 11:49:42 +0000
Message-ID: <AM7PR07MB624827F7CCED289056F991FBA0A80@AM7PR07MB6248.eurprd07.prod.outlook.com>
References: <20210112195951.oi7dlnnqpda7wavm@anna.jacobs.jacobs-university.de> <DM6PR08MB5084ED69870DF456DA8F1A509BAA0@DM6PR08MB5084.namprd08.prod.outlook.com> <20210113082918.zy4m4wtltstrs64h@anna.jacobs.jacobs-university.de> <20210113.122655.1074482340604641202.id@4668.se> <20210113150934.pg7ptdm5ljfuuhpp@anna.jacobs.jacobs-university.de>, <01000176fc95b165-e1e7254b-3895-4267-8470-854552276315-000000@email.amazonses.com>
In-Reply-To: <01000176fc95b165-e1e7254b-3895-4267-8470-854552276315-000000@email.amazonses.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=btconnect.com;
x-originating-ip: [86.146.121.140]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: aabaf339-9428-4de2-1b4f-08d8b8827b18
x-ms-traffictypediagnostic: AM7PR07MB6325:
x-microsoft-antispam-prvs: <AM7PR07MB63253A6837FD71653C452621A0A80@AM7PR07MB6325.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE;  SFS:(39860400002)(136003)(396003)(366004)(376002)(346002)(76116006)(6506007)(53546011)(478600001)(66946007)(2906002)(9686003)(66574015)(83380400001)(110136005)(26005)(91956017)(66476007)(316002)(71200400001)(55016002)(7696005)(45080400002)(5660300002)(33656002)(8676002)(64756008)(52536014)(966005)(186003)(83080400002)(66446008)(86362001)(8936002)(66556008); DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata: =?Windows-1252?Q?emT9Uu/+1ilP0iI80RAMO3P3ciN5Uho5EO+e5NeLmPbHXnNZ6nYXsTrA?= =?Windows-1252?Q?CDiMBpOxyIHb4xJqBcEPcu2njq86lybY6ccICYhV5/5s/mS5iZSs1qm6?= =?Windows-1252?Q?QpbRjptKGWNFNs/NbTvnIu9IvRGSdUWj6rF2zPcPTNKEMz/2Pi5UyFTV?= =?Windows-1252?Q?7X02+r36zCjVeqjDJVrG35o03m0whlCi9WUgq9nlsE9Rod837H+54cUH?= =?Windows-1252?Q?8mYpOGG7dPaYJIbX++MB60YA5XiSfSy9CT7mgSiqW1zzVGAdp8ZS/vBQ?= =?Windows-1252?Q?F/pBpgfGeJhJbQzVe4eWoc6PvuKyJsrjZNl+CIuDcwrKg3fiaxU+yVbg?= =?Windows-1252?Q?zV2ZL8ShWYgcXFpVYyVTt346mWjfOUgVRI/qJzyCpODK4wHsejbrjVCm?= =?Windows-1252?Q?OoBjwEi3Aghs7y8wZ7p/rmqS94BM6sZk0XPvG+lvvPl0JKgxzkCHdQaE?= =?Windows-1252?Q?WJuekni9rsf0JTCFx/9JmKOPjgE0SE79sna6Ov1+cxjZWYSxa7BL70oB?= =?Windows-1252?Q?x9BEzGz8JLKPYi1jNRPSffyA2aaQ4DMBc7/2j5f1dI3P4TM1mUCwSggn?= =?Windows-1252?Q?fVBRK/xnhSZY6YLWJMZec4jOGFeeBwYXT6AWuHR7zv6+G8eLXf9m6+w7?= =?Windows-1252?Q?hAk0hMYQwfAFuoQM/XMIVlBnm0jD6COawivWf2806q+F+o0W/7PaaAyr?= =?Windows-1252?Q?4Ia/R2GorxUSb7FlJ90tmcEVIvvula7GwKHgp/smQcAtmek+4+z8Q5lW?= =?Windows-1252?Q?K7P48CDqSe0aep7u3eYhxUVyPviTwhil98uBIPzDuCESqR3teUOqsfLg?= =?Windows-1252?Q?xMr3hHEtyUjeu6N3sD9J3luWpjBlGIGOpt/tjMXSXqHENSIrHTnX2QBz?= =?Windows-1252?Q?gM6RUbaUHAgMLpyS2e/cOzoR5IhaPu5osxxa3JLz0yUzm+xeE2ofruks?= =?Windows-1252?Q?wMdpw4pVqQwvP/yxQXQaeOv+3JDaxWJHHPLQmJlJDyTnhsNYaWrVZOVp?= =?Windows-1252?Q?H2LXmxC4Ic/pDAkPwbGWlrdCecVCIWbvFtUAJ32NYUKW2UWZTbk=3D?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: btconnect.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: aabaf339-9428-4de2-1b4f-08d8b8827b18
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Jan 2021 11:49:42.2565 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Ut9LT4fUZ4mzmQrONnvQd79blfV5I6mryQ3Wa9OQtE/GxVIP/1xjqpAjTKRcddwZlN4wS9i/4fPN0hCc5wWxww==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR07MB6325
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/mhT6l5U81M9xML8OrpEsFnIttgo>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2021 11:49:55 -0000

From: netconf <netconf-bounces@ietf.org> on behalf of Kent Watsen <kent+iet=
f@watsen.net>=0A=
Sent: 13 January 2021 16:30=0A=
[Top-posting as this is a response to the entire thread, sans draft-ma-netc=
onf-with-system, which I haven=92t looked at yet].=0A=
=0A=
Having "instance-required false=94 was an idea from before, but it didn=92t=
 make sense to disable validation for the 99% use-case to enable a 1% use-c=
ase.  There will only ever be a few built-in keys/certs (typically at most =
just one of each, to enable bootstrapping), whereas potentially many keys/c=
erts will be configured over time (for normal ops).=0A=
=0A=
<tp>=0A=
depends where you are.  For me, the great advance in Internet security was =
when Microsoft built in the certificates I needed to access sites securely,=
 in the shrink-wrapped software.  I do not know how many there are but it i=
s now rare for me to need to add one.=0A=
=0A=
By contrast other certificates are ephemeral, used for a session and then d=
iscarded.=0A=
=0A=
I can guess the model you have in mind but suspect that it is not the commo=
n one when looking at security across the Internet as a whole.=0A=
=0A=
Tom Petch=0A=
=0A=
Hiding all the descendent nodes except =93name=94 for built-in keys/certs d=
oesn=92t work because the pubkey/cert is needed in order to encrypt data th=
at only a device can decrypt, as needed to support RMA scenarios (see https=
://tools.ietf.org/html/draft-ietf-netconf-keystore-20#section-4.3 starting =
with the 4th paragraph).=0A=
=0A=
The built-in keys/certs are envisioned to be forever; they never expire nor=
 are affected by firmware updates.  For the example of a list of public CAs=
 (trust anchors such as Verisign, RSA, etc.), these SHOULD be in <startup> =
and admins SHOULD be allowed (NACM permitting) to add/remove entries.=0A=
=0A=
I agree that the =93illusion=94 text Martin quoted is "weird special handli=
ng=94, but this was the best that could be envisioned after several tries. =
 You might recall there were two or three other variations (inc. the "insta=
nce-required false=94 mentioned above) that we tried before landing on this=
 approach.=0A=
=0A=
K.=0A=
=0A=
=0A=
On Jan 13, 2021, at 10:09 AM, Juergen Schoenwaelder <j.schoenwaelder@jacobs=
-university.de<mailto:j.schoenwaelder@jacobs-university.de>> wrote:=0A=
=0A=
On Wed, Jan 13, 2021 at 12:26:55PM +0100, Martin Bj=F6rklund wrote:=0A=
Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de<mailto:j.schoen=
waelder@jacobs-university.de>> wrote:=0A=
After sleeping over it, I think a device should ship with the keys=0A=
listed in whatever is the equivalent of the factory default, i.e.,=0A=
they are initially in <running>. Deleting them should be possible with=0A=
the effect that no config can refer to these keys anymore (assuming=0A=
strong references). Putting the keys back into running makes them=0A=
available for config again.=0A=
=0A=
This could work, but see below.=0A=
=0A=
I would be in favour to just have the names in runnning, not the=0A=
key/cert details. This avoids issues with entries that do not match,=0A=
and this then resembles hidden keys, for which details are also not=0A=
known in <running>. In fact, <hidden> keys likely have the same=0A=
property that they exist in the system (or a TPM), i.e., they are not=0A=
config that can be arbitrary changed. I would assume that the same=0A=
rules apply, if you delete a hidden key from <running>, it can't be=0A=
referenced and used anymore. Perhaps the discussion in the I-D should=0A=
be expanded to cover hidden keys as well.=0A=
=0A=
I like the symmetry w/ hidden keys.  I assume that these entries would=0A=
be explicitly marked in the config as being "built-in" or "hidden".=0A=
=0A=
I also expect that these special keys may be part of the firmware,=0A=
i.e., they may change with firmware updates. This can lead to stale=0A=
special keys that do not exist anymore in the firmware and new keys=0A=
that exist in the firmware but must be (manually) added to <running>=0A=
in order to use them.=0A=
=0A=
So then the question is what happens if a key is removed from the=0A=
firmware, but it exists (with just the name) in the config, and some=0A=
part of the config reference it?=0A=
=0A=
I think that this leads to the same problem as a weak leafref would=0A=
do, so either solution would work.=0A=
=0A=
=0A=
You will have a reference to a key that is not usable, which means you=0A=
get runtime failures (as you would get with certs that have expired or=0A=
other issues). Note that this is only becoming a problem if the=0A=
firmware update renames keys/certs. If the update only ships a new=0A=
keys/certs but keeps the names consistent, things will continue to=0A=
work. I can't tell whether this brittleness is something to be=0A=
concerned about or whether it falls into the usual 'things may go=0A=
wrong after an update' bag of surprises.=0A=
=0A=
/js=0A=
=0A=
--=0A=
Juergen Schoenwaelder           Jacobs University Bremen gGmbH=0A=
Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany=0A=
Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>=0A=
=0A=
_______________________________________________=0A=
netconf mailing list=0A=
netconf@ietf.org<mailto:netconf@ietf.org>=0A=
https://www.ietf.org/mailman/listinfo/netconf=0A=
=0A=


From nobody Thu Jan 14 05:12:24 2021
Return-Path: <rwilton@cisco.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C1AC3A0D08; Thu, 14 Jan 2021 05:12:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.601
X-Spam-Level: 
X-Spam-Status: No, score=-9.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=gCeQH2YT; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=BzaurJ+Z
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DVuqmFO-Js-6; Thu, 14 Jan 2021 05:12:17 -0800 (PST)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB4623A1338; Thu, 14 Jan 2021 05:12:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=642; q=dns/txt; s=iport; t=1610629937; x=1611839537; h=from:to:subject:date:message-id: content-transfer-encoding:mime-version; bh=47RzKdrKgX1r/m9tFYiVn54i0ucKpzQb3/+K0cRvAzY=; b=gCeQH2YTF52peRnyt2TEhpTwu5WCJQHe5FGOFxml+Y3bB8iDyZ+km7U2 ZhF29RxMGW91RYpsIpBMTjV0lDzc3JdRGAcApcf2utpnU4EDoTu8WaHjq wbQINwDE5SE6bjuU0ks4feuBVkvv6ICkT4gCyKaU/l+MV22IOnT+VvtCG 4=;
X-IPAS-Result: =?us-ascii?q?A0BABACsQABgkIENJK1iHgEBCxIMQIFEC4FTUX1bLy8Kh?= =?us-ascii?q?30Di2iCF5kVgS6BJQNUCwEBAQ0BASMKAgQBAYRKAoFtAiU2Bw4CAwEBAQMCA?= =?us-ascii?q?wEBAQEFAQEBAgEGBBQBAQEBAQGGOAyGNAYBATgRAT5CJgEEARqDHgGCVQMuA?= =?us-ascii?q?QMLpEACiiV0gTSDBAEBBoE3AoN4GIIQAwaBOIJ1imQbgUE/gRFDgxSCXQEBA?= =?us-ascii?q?4Feg0qCLIMdCwRRAlAxYDC4eQqCd4kukluDGBKKL5UMAZQYixqRXRyENgIEA?= =?us-ascii?q?gQFAg4BAQaBXQsmgVlwFYMkUBcCDY4hGoNXhRSFRHQ3AgYKAQEDCXyMSgGBE?= =?us-ascii?q?AEB?=
IronPort-PHdr: =?us-ascii?q?9a23=3AAVJ0URezilv2pDzxeNX/pBAQlGMj4e+mNxMJ6p?= =?us-ascii?q?chl7NFe7ii+JKnJkHE+PFxlwaQB9fa5u5Kze3MvPOoVW8B5MOHt3YPONxJWg?= =?us-ascii?q?QegMob1wonHIaeCEL9IfKrCk5yHMlLWFJ/uX3uN09TFZX/akHc5Hqo4m1aFh?= =?us-ascii?q?D2LwEgIOPzF8bbhNi20Obn/ZrVbk1IiTOxbKk0Ig+xqFDat9Idhs1pLaNixw?= =?us-ascii?q?=3D=3D?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="5.79,347,1602547200"; d="scan'208";a="667452601"
Received: from alln-core-9.cisco.com ([173.36.13.129]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 14 Jan 2021 13:12:16 +0000
Received: from XCH-ALN-004.cisco.com (xch-aln-004.cisco.com [173.36.7.14]) by alln-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id 10EDCGLR008128 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 14 Jan 2021 13:12:16 GMT
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-004.cisco.com (173.36.7.14) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 14 Jan 2021 07:12:16 -0600
Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 14 Jan 2021 07:12:15 -0600
Received: from NAM12-DM6-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 14 Jan 2021 07:12:15 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=TkGfU/rQMtIf0iddIBS9NpsuwqfzfEuc6FrWHPFWsTOFe3QmG4xSqFcFisOQdEF5wYX2zF0wujfiule2+sovqsRK0tpUPZ9YS7Tx0oK2iDaDE6lvCkIT4ouqNW06orfpNiCP3PfZm0aCrnUdp9iDho5VX7sVuHHHYg4vKI1e5hbH/6WPSDYuVgQTj/M0RTrButuah8pG6wMKGQQaG6reTlY34lVdREkmKsOoKbcnYuqzq/ygzMq6fABEbW/4eNGZW/x5FLCzdBv4baLmHlqgb4EFJScbVKLeCYE2ajSkboe53+64VHA37vnlGUBB09R5OIMMKweCcrfCD5aB/t1FMg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=t5wtNjUVF2Jr/QuoH5HmiJ+XUKWErAnADTlOJ0BtQ34=; b=lE1Oo4+XsLoVHv+UGIa/vvQ40kNPau6Ple9PociO+c3BGJmg1Q03L9X+rqva6hMMPrCeKo772JzFKUWL73gXYh1feBnQtcjP1JwHs0d9Ghv6k3R1RV6xrsXlrnJ+7oM8W/FC9YO7m6pL38lNfFiAr5bkN7P0Q6VZTHtngal4mJV24iN52d9m8vC0Kof4SDYhT/touQyR1BhuclUk9a8Pdj/9b1nmHO/NIXzgi5kxxJeV5ag8DnTCpvnteV3MBIJZ8RWmueueAo9c0VCMFLs4Y8bgbG89MH1Rf1cUus/0clGqDAVCPKzOxxWDXr0HBng3wrWKSvpXTvT72xdDAjrdLA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com;  s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=t5wtNjUVF2Jr/QuoH5HmiJ+XUKWErAnADTlOJ0BtQ34=; b=BzaurJ+ZEdHX4yKxfMQ5aLTV3Pvr4m1L8utJVRmi2pOFoK/OQAmPjU7ld9KTfSQmYEkpFSM5AsQDE6f0HyhFRlAiVGeQwCjzhJAgj7kJMGF1qUs/IcFZCUtK7dGaCU/H9n8MEf7C6KmjHJIMdsXrffqs7jL63ppS5fz9jdvCfxM=
Received: from MN2PR11MB4366.namprd11.prod.outlook.com (2603:10b6:208:190::17) by MN2PR11MB4757.namprd11.prod.outlook.com (2603:10b6:208:26b::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3763.10; Thu, 14 Jan 2021 13:12:06 +0000
Received: from MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::3c82:1fa3:2b18:3afb]) by MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::3c82:1fa3:2b18:3afb%6]) with mapi id 15.20.3742.012; Thu, 14 Jan 2021 13:12:06 +0000
From: "Rob Wilton (rwilton)" <rwilton@cisco.com>
To: "netconf@ietf.org" <netconf@ietf.org>, "draft-ietf-netconf-https-notif@ietf.org" <draft-ietf-netconf-https-notif@ietf.org>
Thread-Topic: WGLC: draft-ietf-netconf-https-notif-06
Thread-Index: AdbqdYOgUz15Gs1wTZ6RgVXH+iq7RQ==
Date: Thu, 14 Jan 2021 13:12:06 +0000
Message-ID: <MN2PR11MB43669EEF05655F07E39FE4BEB5A80@MN2PR11MB4366.namprd11.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [82.12.233.180]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: ea774c06-ef82-485d-1d56-08d8b88dfe45
x-ms-traffictypediagnostic: MN2PR11MB4757:
x-microsoft-antispam-prvs: <MN2PR11MB47570BB7B1E8909D250F0927B5A80@MN2PR11MB4757.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: sJjqnj5jVyWbXJ2Peu6/Nak5DYu+T0K859t4ha0tVFrhudP7M6VsZKS2NPY4EBacZkijb4iha4kYMVSVFIRIFVYMNRKjZsY7T8zzNdvJUSLhpo+i9OnPMKH//tdpfaseAkVjA/jc4IRr83qPGQd5SqoDCfOuLJiXb6RhGLJFrFGg91ynxzwxnM5oFliegBnTgxrSW0BnTSpKyM+YCQZrlDl5c0BpjQ+BMsHtXFpwk+iWyghAxZca1Ee5wxzF5PfgiAFoKZ41MJxpQOFhojxpocam6wRn3bwSRe2qhsxhaF4YIPE4aqFvcwrRgQ05RM4OdohVM7/Er5GyQbQc1bCt0/Qq4SX+ZpMSXGdUE6yWeT+ER3AGCnkb6DmGtngv/sXJau/ZKT13DSdmPARa6s9goKlxsSfXHh8fgoDdo0HhL/91IC8bSfQ1lkxHamDq5b6VOClQET9Y/Prh3XUNYcYPQw==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:MN2PR11MB4366.namprd11.prod.outlook.com; PTR:; CAT:NONE;  SFS:(346002)(39860400002)(366004)(136003)(376002)(396003)(7696005)(450100002)(316002)(33656002)(76116006)(6506007)(71200400001)(83380400001)(86362001)(2906002)(55016002)(26005)(966005)(8936002)(186003)(8676002)(110136005)(52536014)(4744005)(9686003)(478600001)(66476007)(64756008)(66556008)(5660300002)(66946007)(66446008); DIR:OUT; SFP:1101; 
x-ms-exchange-antispam-messagedata: =?us-ascii?Q?Ve222LdYj3v26gxpe1M5BUFVVbOMOXdFJI9u0IoNR2wAgfN0HeALQLfFVCRQ?= =?us-ascii?Q?A+VBpknHrR4f50IfZZgPhx8rL4qZhaE9IqbYeJgk8qauWlFrtFkeYOrtDgLP?= =?us-ascii?Q?16/+fSBNM9CawRldRyxO2ClHtbEmkJjbWZ3/Lbot0uRwooJLXKG+rR1Epqql?= =?us-ascii?Q?+bE/tjJCT/x4k8T/dt3YDM59JGh6kG9nT3MxwHbvLF4+ZXYYD3yw+DDuqMCX?= =?us-ascii?Q?L+4J952U3aEycnXJfIc5WgIBUUr8KydznXYD6VaxvdC84lg0ogO/dm/V7jRu?= =?us-ascii?Q?64wvt2nZ/HEvgclaRslLQxf3AoWbKsC3FVtbSgirDT8hHh5eoizyqZx2ZIXc?= =?us-ascii?Q?zv8P1B5NB+FelV9O3IYX8VkpMvd5VDgcdvQ3pePHyP+09YP5yAgbPaqQquEs?= =?us-ascii?Q?UChUP/KegVMRPh9SlSaCtNgFa9dWnMjxR84OX88IHkP0t6apGLMcn3jik2kX?= =?us-ascii?Q?KxhUxsJ7htidnNHkrQtQZ3+HMB8pD0zhjDVe9gj534ifww1YVu3Cu8w6o+E/?= =?us-ascii?Q?nX3q2NBYUa9+GXEWqu9feQ2d0rvKzSnnQWf8krBr0NVa0l2OBVbfQKehg71n?= =?us-ascii?Q?naLQhUKSoJVCVl83cjgB1OBARtX9CwFbLyXYHDtRrxYokcWHQBw4QFbeA9mN?= =?us-ascii?Q?59zcCQp3ptyBI2/7wqhjjoEm8bQQehkB4/xAJHhwewbCmmFuktumU980sTgE?= =?us-ascii?Q?Fxu1HjIluWFm+tU1iJMCmMSn/Ipm1jkkT17LZexlBobFP53q5kGXY1fLMsar?= =?us-ascii?Q?RMgKoFoHg+7MRWJJ9shOG1M0I5c8tQzWjDdK+qtQMYOUTb0Ke0k9aUOicfoU?= =?us-ascii?Q?8BRJHMYtCwpE23ZX10J+yR83Q++VA/rBcb2VOi2/GQbKZvDPPDKuRWwAHPV5?= =?us-ascii?Q?GxmnHqOhVaJOI9bkCwhc7CAq+bl69VGyhsxolNcJ2a7p92PE7N1C9IlDTA1f?= =?us-ascii?Q?DiPuDYMEkp4wa2eZ+y+FBRsJ3LWjxVIWQm8Odl3NNc8=3D?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR11MB4366.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ea774c06-ef82-485d-1d56-08d8b88dfe45
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Jan 2021 13:12:06.7607 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 8uYtyvVeRpkQ9GOLZ1gBa9C5SeH5+7G98Hke90ppXpt6WcnPvYOO8D6lRvdrvKfPvmGk5Ph1qeSlrEQIdFDPtQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4757
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.14, xch-aln-004.cisco.com
X-Outbound-Node: alln-core-9.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/lRVid8TdPOglKyHxfDxAHAlTUXE>
Subject: [netconf] WGLC: draft-ietf-netconf-https-notif-06
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2021 13:12:19 -0000

This message begins a two-week WGLC for draft-ietf-netconf-https-notif-06 e=
nding on Jan 28.  Here is a direct link to the HTML version of the draft:

	https://tools.ietf.org/html/draft-ietf-netconf-https-notif-06

Positive comments, e.g., "I've reviewed this document and believe it is rea=
dy for publication", are welcome!  This is useful and important, even from =
authors.  Objections, concerns, and suggestions are also welcomed at this t=
ime.

Please note, the reason that I am making this request rather than the
WG chairs is because both chairs are listed as authors on this document.

Thank you,
Rob Wilton, OPS AD


From nobody Thu Jan 14 08:27:29 2021
Return-Path: <0100017701b91b90-5b4fac25-1818-41c2-be81-4f57296fe9d2-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DB693A1341 for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 08:27:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.917
X-Spam-Level: 
X-Spam-Status: No, score=-1.917 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ov6yN5h5oBu4 for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 08:27:25 -0800 (PST)
Received: from a48-110.smtp-out.amazonses.com (a48-110.smtp-out.amazonses.com [54.240.48.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA1D73A07C8 for <netconf@ietf.org>; Thu, 14 Jan 2021 08:27:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1610641644; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=1FQSaBqr5bJdZZGuKe/Kp/YWnRroq4qTHdlK6YAabwE=; b=FtSZfrLeEWJinGKwgZSsc8VeK/Efn4GG1pNlrIoUpaIBjXrkQB4ysKnh1Tdxt1WL n7ONuN2x8+C0mlWDYGFhL+XRREyODEi12vgBTARZU4pxYSZeqiZw6aESKUvE6O4wPpI fWCfNKcF2Zzv+drMzfs95bEuWBFGLRDg/VCM7D9k=
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
From: Kent Watsen <kent+ietf@watsen.net>
In-Reply-To: <20210114.084621.1561500589637511150.id@4668.se>
Date: Thu, 14 Jan 2021 16:27:24 +0000
Cc: "netconf@ietf.org" <netconf@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-ID: <0100017701b91b90-5b4fac25-1818-41c2-be81-4f57296fe9d2-000000@email.amazonses.com>
References: <20210113.122655.1074482340604641202.id@4668.se> <20210113150934.pg7ptdm5ljfuuhpp@anna.jacobs.jacobs-university.de> <01000176fc95b165-e1e7254b-3895-4267-8470-854552276315-000000@email.amazonses.com> <20210114.084621.1561500589637511150.id@4668.se>
To: =?utf-8?Q?Martin_Bj=C3=B6rklund?= <mbj+ietf@4668.se>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.14-54.240.48.110
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/vbLQSs5TA85LQ_UMNmf_JjuWOhs>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2021 16:27:27 -0000

Hi Martin,


> On Jan 14, 2021, at 2:46 AM, Martin Bj=C3=B6rklund <mbj+ietf@4668.se> =
wrote:
>=20
> Kent Watsen <kent+ietf@watsen.net> wrote:
>> [Top-posting as this is a response to the entire thread, sans
>> draft-ma-netconf-with-system, which I haven=E2=80=99t looked at yet].

Update: I did look at this draft and found the motivation unclear.


>> Having "instance-required false=E2=80=9D was an idea from before, but =
it
>> didn=E2=80=99t make sense to disable validation for the 99% use-case =
to enable
>> a 1% use-case.  There will only ever be a few built-in keys/certs
>> (typically at most just one of each, to enable bootstrapping), =
whereas
>> potentially many keys/certs will be configured over time (for normal
>> ops).
>=20
> Ok.
>=20
>> Hiding all the descendent nodes except =E2=80=9Cname=E2=80=9D for =
built-in keys/certs
>> doesn=E2=80=99t work because the pubkey/cert is needed in order to =
encrypt
>> data that only a device can decrypt
>=20
> I don't understand this.  The descendent nodes would not be present in
> 'running', but they would be present in <operational> (b/c they are
> present in the firmware).

I think that there is a misunderstanding somewhere.  It might be helpful =
for me to clarify that, at a high-level: 1) the drafts only present a =
*configuration* model, and that 2)  it=E2=80=99s possible that some =
=E2=80=9Cconfig=E2=80=9D only shows up in <operational>, when the values =
are =E2=80=9Cbuilt-in=E2=80=9D.

For the =E2=80=9Cconfig=E2=80=9D that only shows in <operational>, =
it=E2=80=99s necessary to promote them to <running> in order for =
leafrefs to resolve.  I agree that only the =E2=80=9Cname=E2=80=9D is =
needed, but we lack a mechanism to just configure a name as otherwise 1) =
validation would fail because "mandatory true=E2=80=9D descendants would =
fail validation and 2) there=E2=80=99s no way to tell =E2=80=9Capply =
config=E2=80=9D process to not-delete the missing values.


>> , as needed to support RMA
>> scenarios (see
>> =
https://tools.ietf.org/html/draft-ietf-netconf-keystore-20#section-4.3
>> =
<https://tools.ietf.org/html/draft-ietf-netconf-keystore-20#section-4.3>
>> starting with the 4th paragraph).
>>=20
>> The built-in keys/certs are envisioned to be forever; they never
>> expire nor are affected by firmware updates.
>=20
> :)
>=20
>> For the example of a
>> list of public CAs (trust anchors such as Verisign, RSA, etc.), these
>> SHOULD be in <startup> and admins SHOULD be allowed (NACM permitting)
>> to add/remove entries.
>>=20
>> I agree that the =E2=80=9Cillusion=E2=80=9D text Martin quoted is =
"weird special
>> handling=E2=80=9D, but this was the best that could be envisioned =
after
>> several tries.  You might recall there were two or three other
>> variations (inc. the "instance-required false=E2=80=9D mentioned =
above) that
>> we tried before landing on this approach.
>=20
> Since this problem comes up every now and then, it would be good with
> a design pattern that can work in other cases as well. =20

I agree the patterns are good, but disagree that *this* come up once in =
awhile or, for that matter, ever before=E2=80=A6and likely never again =
(at least not within my understanding).


> It seems that
> the "hidden" design already used in crypto-types can be used in this
> case, as J=C3=BCrgen suggested.

Please note that the value is hidden in <operational> originally.   This =
is because, e.g., it is impossible to extract a private key value from a =
TPM.   Regardless, the net-net is that the value is =E2=80=9Chidden=E2=80=9D=
 in both <operational> *and* <running> (when the asymmetric key has been =
copied into <running>).   To be clear, hidden private keys nodes still =
appear in <running> (they are *not* missing) and have the same value as =
appears in <operational>.


>  I don't remember this propsal from the
> previous discussion; was it discussed?

We=E2=80=99ve been discussing these drafts for a long time, and you know =
that I=E2=80=99ve been careful to communicate pretty much everything =
along the way=E2=80=A6

Looking at the keystore draft's Change Log, I see that the =
=E2=80=9Crequire-instance false=E2=80=9D idea was added in -05 (June =
2018) and removed in -07 (April 2019). =20

As for =E2=80=9Chidden=E2=80=9D, the current approach arrived in =
crypto-types-08.  Previously, the node was a =E2=80=98union=E2=80=99 =
with "permanently-hidden=E2=80=9D being an enumerated value.  This idea =
was moved into crypto-types-01 from=20
keystore-06.  It was called "hardware-protected=E2=80=9D in keystore =
03-05, and =E2=80=9CINACCESSIBLE=E2=80=9D in keystore 01-02.

We also explored letting the private-key value be "mandatory false=E2=80=9D=
 somewhere along the line.  Without digging for dates, I=E2=80=99m sure =
the reason we backed out of it is because, again, it didn=E2=80=99t make =
sense to do it for a 1% use case.


K.




From nobody Thu Jan 14 09:00:37 2021
Return-Path: <noreply@ietf.org>
X-Original-To: netconf@ietf.org
Delivered-To: netconf@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B72873A15F3; Thu, 14 Jan 2021 09:00:27 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: =?utf-8?q?J=C3=BCrgen_Sch=C3=B6nw=C3=A4lder_via_Datatracker?= <noreply@ietf.org>
To: <yang-doctors@ietf.org>
Cc: draft-ietf-netconf-keystore.all@ietf.org, last-call@ietf.org, netconf@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 7.24.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <161064362767.26403.10249622617283363882@ietfa.amsl.com>
Reply-To: =?utf-8?b?SsO8cmdlbiBTY2jDtm53w6RsZGVy?= <j.schoenwaelder@jacobs-university.de>
Date: Thu, 14 Jan 2021 09:00:27 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/2xF5Vd6I_5wqwyyUvo6AS2k35NM>
Subject: [netconf] Yangdoctors last call review of draft-ietf-netconf-keystore-20
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2021 17:00:28 -0000

Reviewer: Jürgen Schönwälder
Review result: Ready with Issues

The crypto modules aim at providing a flexible reusable infrastructure
of groupings for modeling cryptographic keys and related concepts. The
flexibility of the definitions provided of course comes with a certain
amount of complexity.

>From a YANG perspective, draft-ietf-netconf-keystore-20.txt is in a
good and close to publish state (a couple of minor issues left).  I
also tried to understand what is being modeled here and hence I also
have some questions concerning the concepts modeled and I hope these
are easy to answer/resolve as well.

- I have compiled the YANG modules using yanglint 0.16.105.

- Compared to the other two I-Ds in the batch, this I-D has a more
  verbose introduction (appreciated) and it also has a terminology
  section (which never hurts). I do not know whether Kent has the
  energy to align the I-Ds in their intro style.

- s/in Examples (Section 2.2)./in Section 2.2./

- Is the feature keystore-supported really needed? Does the YANG
  library not already provide the information whether a module has
  been implemented or just imported to access type and grouping
  definitions? OK, I know see that this is used to make definitions
  conditional, hence it makes sense. This means that my comment on
  truststore-supported in the other review can be ignored, I found
  the answer.

- My question concerning two-letter prefixes applies to this I-D as
  well.

- In the YANG module, you seem to use Keystore to refer to
  /ks:keystore but in the surrounding text you also use just
  keystore. I am not sure it is necessary to have the capitalized
  version but if people think its necessary, it makes sense to define
  the difference and to make sure the proper capitalization is used
  throughout the document. (If it is necessary somewhere to be
  explicit, I would rather use /ks:keystore but that may be my
  subjective preference. In the other I-D review, I used the term
  'central truststore', which is not a good term either, the term
  'well-known keystore' may be a better alternative.)

- Many of the groupings either symmetric-key-ref or asymmetric-key-ref
  and while the groupings seem to offer flexibility to instantiate
  other keystores, I have some doubts that this actually works unless
  you augment in other reference types. Looking at the
  ex-keystore-usage module, I find in there the usage of
  ks:symmetric-key-ref and ks:asymmetric-key-ref and they refer to the
  well-known keystore, not the one defined in the example module.

  YANG's reference mechanism via leafrefs is not really supporting
  well what you try to do. I understand the flexibility you want to
  achieve but it seems YANG 1.1 does not really support this well
  enough. What you would need is a leafref type that can be "anchored"
  at different places but we don't really have this...

  You hint at this in the definition of the keystore-grouping:

         "Grouping definition enables use in other contexts.  If ever
          done, implementations SHOULD augment new 'case' statements
          into local-or-keystore 'choice' statements to supply leafrefs
          to the new location.";

  It seems the SHOULD really is a 'must' (I do not care about
  capitalization); if you do not add your own leafrefs, things will
  not work or be majorly surprising.

  If I am correct, then there should be stronger warnings upfront that
  simply reusing the groupings is not enough and that the example
  module is actually an incomplete example...

  The same may apply to some of the groupings in the truststore
  drafts.

- There is a live discussion concerning the built-in keys, which
  obviously applies here as well. Perhaps the conclusion is that what
  we have is the best solution. This is just here as a reminder in
  case there are changes.

- Section 4 points to keys being compromised 'when in transit' but I
  think we also want to protect keys at rest, i.e., sitting in a
  backup.

- I am wondering whether key encryption also applies to the related
  truststore document.

- Expand RMA in "RMA scenarios" or simply avoid the acronym (its only
  used once).

- s/"default-deny-all)/"default-deny-all")/

- Section 4.3 talks about _highly_ restricted access mechanisms and
  _highly_ authorized clients and I am usually a bit confused what
  _highly_ means. But I am YANG doctor, not a security reviewer. ;-)

- Section 5.2 says:

   This module does not define any RPCs, actions, or notifications, and
   thus the security consideration for such is not provided here.

  Well, the module actually instantiates certificate-expiration
  notifications.

- Registrant Contact: should be changed to the IESG.




From nobody Thu Jan 14 09:26:06 2021
Return-Path: <mbj+ietf@4668.se>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CF313A13E8 for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 09:26:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.123
X-Spam-Level: 
X-Spam-Status: No, score=-0.123 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, PDS_NAKED_TO_NUMERO=1.997, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=4668.se header.b=gJICvZLX; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=bznJowhx
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1PspkaqALhnl for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 09:26:02 -0800 (PST)
Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F0A23A15FD for <netconf@ietf.org>; Thu, 14 Jan 2021 09:25:57 -0800 (PST)
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id D2F785C0178; Thu, 14 Jan 2021 12:25:54 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Thu, 14 Jan 2021 12:25:54 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=4668.se; h=date :message-id:to:cc:subject:from:in-reply-to:references :mime-version:content-type:content-transfer-encoding; s=fm3; bh= zcS1z20SzAarw0NimkdZUV3wWTmRp77zwwhuBhhjE7Q=; b=gJICvZLXF7YcNVDC kF5/lmour8hFzVdhXvcQFylnZNS5O8xLwZowQSgewqyteY+ZxZ1ogOlFjlzGN5UM X0qos5IDgSlNOlXXwG3UAT+weNeQte5lbDl2vHbPNkl4/k38TGhXs2/YY/oAhsRY dzxNxwDaszauK3YeKn3h8zPfUDTB3zeg5MiytrATHq3PtD48I+Xo0p0r52Day7xp OD4lW6jc4ioJkmsjCQjTMFhD4wzNd/0LjbeHnWVcxv6KrWIri0FUFcDrdef2bjfn AoUL7VLp8RBWrxBpcnQ5EwxgHMqBwQs9Sx8aWFqwozN1amBFQUhm5wee20KDUdaX bp+TqQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=zcS1z20SzAarw0NimkdZUV3wWTmRp77zwwhuBhhjE 7Q=; b=bznJowhxyhsVpHUZgG8nDfqnfBU2aajM4osICEdZFmDb/2oTDQpXMS052 yne+dG9+myiPtiElmjxmjrP6osLVloqXiRG90/4IBKkUkfx709eH4q2a2knlT5or pVXGWBbTh4qZc4FIGG5cZIlU3nhSVrUcAGlTlwz58DFRjoAamD/F18TQsEbwAzFj KOZG8juWtw99VLx8t5jdSZBw3HqHo+u4349HhhDJgCs4KRCzWbnOkBcVNMeRNRdn K6y4cMM8nXUKwQcVzYyA9K+7QKETqOihtjJjyyM8zE4J5H1uYSICmoGApRAPcLm2 9zVVjwZlamq3zkMhg38Anxu3UaVEg==
X-ME-Sender: <xms:oH4AYBOU5O75t10z_oJIyFMSS1DXmajOYYBoMDjGMTvg8Jz7eBInhg> <xme:oH4AYD861lco9deXh_wcDXzbMyWWMDBut5jF-kYIAdCpuOuIyyYec1XfN32n5Gha8 CkFiXwlEuZZ_nUR7ug>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrtddtgdejhecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepfffkvffuhfgjfhfogggtgfesthgsre dtredtjeenucfhrhhomhepofgrrhhtihhnuceujhpnrhhklhhunhguuceomhgsjhdoihgv thhfseegieeikedrshgvqeenucggtffrrghtthgvrhhnpeefheekgfdukeefheeihefhke egvdffheetvefgfeefgefhvdefueeluddvvdfgheenucffohhmrghinhepihgvthhfrdho rhhgnecukfhppeduheekrddujeegrdegrddvudehnecuvehluhhsthgvrhfuihiivgeptd enucfrrghrrghmpehmrghilhhfrhhomhepmhgsjhdoihgvthhfseegieeikedrshgv
X-ME-Proxy: <xmx:oH4AYAS__ykLPKRd6tDHElwzz4-Rc8mvqmTQSlDsdzAYxFUY_kSf1w> <xmx:oH4AYNtYFXzyQCYRuLLXNVWmy2MakBzg69_1mG4N0YoVpTpOtB63Jg> <xmx:oH4AYJdbExPfH4mLl8kmXzPaxjjsXo14KO3b-Z8oCjCXkBYID0cQtQ> <xmx:on4AYPrVqVwg2_RKkPIlCQBXdqRZLUXBLKVpmtsbP1nTpdCnyDFI3A>
Received: from localhost (unknown [158.174.4.215]) by mail.messagingengine.com (Postfix) with ESMTPA id 21B1B1080057; Thu, 14 Jan 2021 12:25:52 -0500 (EST)
Date: Thu, 14 Jan 2021 18:25:50 +0100 (CET)
Message-Id: <20210114.182550.2075205444128224956.id@4668.se>
To: kent+ietf@watsen.net
Cc: netconf@ietf.org
From: Martin =?iso-8859-1?Q?Bj=F6rklund?= <mbj+ietf@4668.se>
In-Reply-To: <0100017701b91b90-5b4fac25-1818-41c2-be81-4f57296fe9d2-000000@email.amazonses.com>
References: <01000176fc95b165-e1e7254b-3895-4267-8470-854552276315-000000@email.amazonses.com> <20210114.084621.1561500589637511150.id@4668.se> <0100017701b91b90-5b4fac25-1818-41c2-be81-4f57296fe9d2-000000@email.amazonses.com>
X-Mailer: Mew version 6.8 on Emacs 26.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=utf-8
Content-Transfer-Encoding: base64
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/MHx25N20JRslP8I4Bi5AEvp7QC8>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2021 17:26:06 -0000
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From nobody Thu Jan 14 10:28:03 2021
Return-Path: <0100017702277d20-860e3dc6-6396-4265-a069-27602414eecd-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAF5F3A12FB for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 10:28:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.916
X-Spam-Level: 
X-Spam-Status: No, score=-1.916 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KFmYLWcLtoh0 for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 10:28:00 -0800 (PST)
Received: from a8-31.smtp-out.amazonses.com (a8-31.smtp-out.amazonses.com [54.240.8.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB8163A12FA for <netconf@ietf.org>; Thu, 14 Jan 2021 10:27:59 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1610648878; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=UMK25W1aYwNpVn9RQgbaquV+IMlDWAk3ZpI2oNuMsmc=; b=Hanv7lmXVzAUYNqMJemPmTpw9dyPJp+M3U6F9VrGC/SOhB9rPypuptA0Kw7No11K 7OXdn2ekdLDPfE1E59N3/oG0HysyzRmCiPgdSbWDO+k4AnjFTjTxnAKQK8qKDl1mc8s nEF+1jlStqDpALyKs8YwOFYhHeK7g0nBMQ/h6o/w=
From: Kent Watsen <kent+ietf@watsen.net>
Message-ID: <0100017702277d20-860e3dc6-6396-4265-a069-27602414eecd-000000@email.amazonses.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_66876209-A5A5-402E-B08B-031777C4715A"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Date: Thu, 14 Jan 2021 18:27:58 +0000
In-Reply-To: <AM7PR07MB624827F7CCED289056F991FBA0A80@AM7PR07MB6248.eurprd07.prod.outlook.com>
Cc: "netconf@ietf.org" <netconf@ietf.org>
To: tom petch <ietfc@btconnect.com>
References: <20210112195951.oi7dlnnqpda7wavm@anna.jacobs.jacobs-university.de> <DM6PR08MB5084ED69870DF456DA8F1A509BAA0@DM6PR08MB5084.namprd08.prod.outlook.com> <20210113082918.zy4m4wtltstrs64h@anna.jacobs.jacobs-university.de> <20210113.122655.1074482340604641202.id@4668.se> <20210113150934.pg7ptdm5ljfuuhpp@anna.jacobs.jacobs-university.de> <01000176fc95b165-e1e7254b-3895-4267-8470-854552276315-000000@email.amazonses.com> <AM7PR07MB624827F7CCED289056F991FBA0A80@AM7PR07MB6248.eurprd07.prod.outlook.com>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.14-54.240.8.31
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/jJ75LuO1AhehxROdkmuOIKhTEMo>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2021 18:28:02 -0000

--Apple-Mail=_66876209-A5A5-402E-B08B-031777C4715A
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Tom,


> Having "instance-required false=E2=80=9D was an idea from before, but =
it didn=E2=80=99t make sense to disable validation for the 99% use-case =
to enable a 1% use-case.  There will only ever be a few built-in =
keys/certs (typically at most just one of each, to enable =
bootstrapping), whereas potentially many keys/certs will be configured =
over time (for normal ops).
>=20
> <tp>
> depends where you are.  For me, the great advance in Internet security =
was when Microsoft built in the certificates I needed to access sites =
securely, in the shrink-wrapped software.  I do not know how many there =
are but it is now rare for me to need to add one.
>=20
> By contrast other certificates are ephemeral, used for a session and =
then discarded.
>=20
> I can guess the model you have in mind but suspect that it is not the =
common one when looking at security across the Internet as a whole.

Please see =
https://tools.ietf.org/html/draft-ietf-netconf-trust-anchors-13#section-3 =
<https://tools.ietf.org/html/draft-ietf-netconf-trust-anchors-13#section-3=
>.

I think the question we need to ask ourselves is:

    Are =E2=80=9CBuilt-In=E2=80=9D Public CA Certs:
      1) read-only
      2) hybrid       (sys-defined entries are read-only, new values MAY =
be added)
      3) read/write (sys-defined entries are read-write, new values MAY =
be added)

The link above reflects #1.

In this case, just the =E2=80=9Cbag=E2=80=9D itself is forever, whereas =
the certs within are free to come and go as the OS-provider desires.  =
This is fine as, in configuration, a TLS-client only refs the bag (see =
3.1.2.1 in the tls-client-server draft, and note that it refs 2.1.3.1 in =
the truststore draft, which uses a "ts:certificate-bag-ref=E2=80=9D).

As currently defined, #3 is supported by an administrator copying the =
=E2=80=9Cbuilt-in=E2=80=9D bag to custom bag =E2=80=9Ce.g., =E2=80=9CMy =
Public CA Certs=E2=80=9D) and hack on them from there.  (note: I =
misspoke in my previous msg when I said the certs could be in <startup>, =
which is still possible, albeit less desirable IMO)

If that seems too coarse and #2 seems like a sweet-spot, then I think we =
could just change the text in =
https://tools.ietf.org/html/draft-ietf-netconf-trust-anchors-13#section-3 =
<https://tools.ietf.org/html/draft-ietf-netconf-trust-anchors-13#section-3=
> to allow it.  Specifically, the sentence:

      "No certificates may be added or changed; that is, the =
certificates in
       <running> MUST be a subset (which includes the whole of the set)
       of the built-in certificates define in <operational>.=E2=80=9D

=E2=80=A6could be tweaked to allow additions of new certificates while =
still 1) disallowing modification of any existing certificate and 2) =
only requiring the (subset of) certificates that are directly-referenced =
to be copied in <running> (note that it MAY be that no certs are copied, =
i.e., an empty bag).


PS: I have for a long time had difficulty reading your responses.  Can =
you investigate configuring your SMTP-client to support threading (i.g., =
indenting blocks) and/or trim messages down so that only relevant parts =
are visible?

K.



--Apple-Mail=_66876209-A5A5-402E-B08B-031777C4715A
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">Hi =
Tom,<div class=3D""><br class=3D""></div><div class=3D""><br =
class=3D""></div><div class=3D""><div><blockquote type=3D"cite" =
class=3D""><div class=3D""><div class=3D"">Having "instance-required =
false=E2=80=9D was an idea from before, but it didn=E2=80=99t make sense =
to disable validation for the 99% use-case to enable a 1% use-case. =
&nbsp;There will only ever be a few built-in keys/certs (typically at =
most just one of each, to enable bootstrapping), whereas potentially =
many keys/certs will be configured over time (for normal ops).<br =
class=3D""><br class=3D"">&lt;tp&gt;<br class=3D"">depends where you =
are. &nbsp;For me, the great advance in Internet security was when =
Microsoft built in the certificates I needed to access sites securely, =
in the shrink-wrapped software. &nbsp;I do not know how many there are =
but it is now rare for me to need to add one.<br class=3D""><br =
class=3D"">By contrast other certificates are ephemeral, used for a =
session and then discarded.<br class=3D""><br class=3D"">I can guess the =
model you have in mind but suspect that it is not the common one when =
looking at security across the Internet as a whole.<br =
class=3D""></div></div></blockquote><div><br class=3D""></div><div>Please =
see&nbsp;<a =
href=3D"https://tools.ietf.org/html/draft-ietf-netconf-trust-anchors-13#se=
ction-3" =
class=3D"">https://tools.ietf.org/html/draft-ietf-netconf-trust-anchors-13=
#section-3</a>.</div><div><br class=3D""></div><div>I think the question =
we need to ask ourselves is:</div><div><br class=3D""></div><div>&nbsp; =
&nbsp; Are =E2=80=9CBuilt-In=E2=80=9D Public CA Certs:</div><div>&nbsp; =
&nbsp; &nbsp; 1) read-only</div><div>&nbsp; &nbsp; &nbsp; 2) hybrid =
&nbsp; &nbsp; &nbsp; (sys-defined entries are read-only,&nbsp;<span =
style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class=3D"">new =
values MAY be added)</span></div><div>&nbsp; &nbsp; &nbsp; 3) read/write =
(<span style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" =
class=3D"">sys-defined entries are read-write,&nbsp;</span><span =
style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class=3D"">new =
values MAY be added)</span></div><div><br class=3D""></div><div>The link =
above reflects #1.</div><div><br class=3D""></div><div>In this case, =
just the =E2=80=9Cbag=E2=80=9D itself is forever, whereas the&nbsp;<span =
style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class=3D"">certs=
 within are free to come and go as the OS-provider desires. &nbsp;This =
is fine as, in configuration, a TLS-client only refs the bag (see =
3.1.2.1 in&nbsp;</span><font color=3D"#000000" class=3D"">the =
tls-client-server draft, and note that it refs 2.1.3.1 in the truststore =
draft, which uses a "ts:certificate-bag-ref=E2=80=9D).</font></div><div><b=
r class=3D""></div><div>As currently defined, #3&nbsp;is supported by an =
administrator copying the =E2=80=9Cbuilt-in=E2=80=9D bag to custom bag =
=E2=80=9Ce.g., =E2=80=9CMy Public CA Certs=E2=80=9D) and hack on them =
from there. &nbsp;(note:&nbsp;<font color=3D"#000000" class=3D"">I =
misspoke in my&nbsp;previous msg when I said the certs could be in =
&lt;startup&gt;, which is&nbsp;still possible, albeit less desirable =
IMO)</font></div><div><br class=3D""></div><div>If that seems too coarse =
and #2 seems like a sweet-spot, then I think we could just change the =
text in&nbsp;<a =
href=3D"https://tools.ietf.org/html/draft-ietf-netconf-trust-anchors-13#se=
ction-3" =
class=3D"">https://tools.ietf.org/html/draft-ietf-netconf-trust-anchors-13=
#section-3</a>&nbsp;to allow it. &nbsp;Specifically, the =
sentence:</div><div><br class=3D""></div><div>&nbsp; &nbsp; &nbsp; "No =
certificates may be added or changed; that is, the certificates =
in</div><div>&nbsp; &nbsp; &nbsp; &nbsp;&lt;running&gt; MUST be a subset =
(which includes the whole of the set)</div><div>&nbsp; &nbsp; &nbsp; =
&nbsp;of the built-in certificates define in =
&lt;operational&gt;.=E2=80=9D</div><div><br class=3D""></div><div>=E2=80=A6=
could be tweaked to allow additions of new certificates while still 1) =
disallowing modification of any existing certificate and 2) only =
requiring the (subset of) certificates that are directly-referenced to =
be copied in &lt;running&gt; (note that it MAY be that no certs are =
copied, i.e., an empty bag).</div><div><br class=3D""></div><div><br =
class=3D""></div></div></div><div class=3D"">PS: I have for a long time =
had difficulty reading your responses. &nbsp;Can you investigate =
configuring your SMTP-client to support threading (i.g., indenting =
blocks) and/or trim messages down so that only relevant parts are =
visible?</div><div class=3D""><br class=3D""></div><div =
class=3D"">K.</div><div class=3D""><br class=3D""></div><div =
class=3D""><br class=3D""></div></body></html>=

--Apple-Mail=_66876209-A5A5-402E-B08B-031777C4715A--


From nobody Thu Jan 14 12:31:08 2021
Return-Path: <0100017702980f9a-46c72646-4158-42bf-a15f-842281b70d72-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49AD13A14C9 for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 12:31:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.908
X-Spam-Level: 
X-Spam-Status: No, score=-2.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JzR_aJyYYBYt for <netconf@ietfa.amsl.com>; Thu, 14 Jan 2021 12:31:04 -0800 (PST)
Received: from a48-90.smtp-out.amazonses.com (a48-90.smtp-out.amazonses.com [54.240.48.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A8CE3A163A for <netconf@ietf.org>; Thu, 14 Jan 2021 12:30:57 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1610656256; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=U3PKEFD+a5K0bRBj4vBWZOaVZbF9S/lBJbx4MVaNRrs=; b=GTQ+85Tc30ZFIL0alsQ9bK2FTPEnbzMWmvpFnPODwfZjjYrCJSwveEllkjF08aE8 LeUMv3n7bw6yryjvxy4UpIc9MCG9G/VJMH1jCrz52eRF+q56qGwC9MdWX6+66U0Jj93 HakbGVPVoSyaD9UhUJpHPmbOvkSCTzapBvVZdZrI=
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
From: Kent Watsen <kent+ietf@watsen.net>
In-Reply-To: <20210114.182550.2075205444128224956.id@4668.se>
Date: Thu, 14 Jan 2021 20:30:55 +0000
Cc: "netconf@ietf.org" <netconf@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-ID: <0100017702980f9a-46c72646-4158-42bf-a15f-842281b70d72-000000@email.amazonses.com>
References: <01000176fc95b165-e1e7254b-3895-4267-8470-854552276315-000000@email.amazonses.com> <20210114.084621.1561500589637511150.id@4668.se> <0100017701b91b90-5b4fac25-1818-41c2-be81-4f57296fe9d2-000000@email.amazonses.com> <20210114.182550.2075205444128224956.id@4668.se>
To: =?utf-8?Q?Martin_Bj=C3=B6rklund?= <mbj+ietf@4668.se>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.14-54.240.48.90
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/2RL2stg0xbPYpUjAuTVbrUnKwEA>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2021 20:31:07 -0000

Hi Martin,

>>>> Hiding all the descendent nodes except =E2=80=9Cname=E2=80=9D for =
built-in keys/certs
>>>> doesn=E2=80=99t work because the pubkey/cert is needed in order to =
encrypt
>>>> data that only a device can decrypt
>>>=20
>>> I don't understand this.  The descendent nodes would not be present =
in
>>> 'running', but they would be present in <operational> (b/c they are
>>> present in the firmware).
>>=20
>> I think that there is a misunderstanding somewhere.  It might be
>> helpful for me to clarify that, at a high-level: 1) the drafts only
>> present a *configuration* model, and that 2) it=E2=80=99s possible =
that some
>> =E2=80=9Cconfig=E2=80=9D only shows up in <operational>, when the =
values are
>> =E2=80=9Cbuilt-in=E2=80=9D.
>>=20
>> For the =E2=80=9Cconfig=E2=80=9D that only shows in <operational>, =
it=E2=80=99s necessary to
>> promote them to <running> in order for leafrefs to resolve.  I agree
>> that only the =E2=80=9Cname=E2=80=9D is needed, but we lack a =
mechanism to just
>> configure a name as otherwise 1) validation would fail because
>> "mandatory true=E2=80=9D descendants would fail validation and 2) =
there=E2=80=99s no
>> way to tell =E2=80=9Capply config=E2=80=9D process to not-delete the =
missing values.
>=20
> It can be done by doing something similar to "hidden", here's a sketch
> of the idea:
>=20
>  list certificate-bag {
>    key name;
>    leaf name { ... }
>    choice type {
>      case inline {
>        list certificate { ... }
>      }
>      case built-in {
>        leaf built-in { type empty; }
>      }
>    }
>  }

Thank you for the example.  It's infinitely easier to understand what =
folks intend when examples are provided.

Yes, your model enables just the =E2=80=9Cname=E2=80=9D node to appear, =
but I=E2=80=99m confused/concerned by its implications...

In particular, what would be in <operational> in a device as shipped =
from Manufacturing?  It can=E2=80=99t be =E2=80=9Cbuilt-in=E2=80=9D =
because the certificate data must be accessible.  But, assuming it=E2=80=99=
s =E2=80=9Cinline=E2=80=9D, then we=E2=80=99d expect =E2=80=9Cinline=E2=80=
=9D in <running> too, right?  If not, then we're devising yet other =
special case rules that are no better than those described in the =
truststore draft.  Worse, how to reference specific certs (not the bag), =
as is needed in some cases (not a TLS-client), becomes even more =
complicated.

Related, please see my response just now to Tom.




>> Looking at the keystore draft's Change Log, I see that the
>> =E2=80=9Crequire-instance false=E2=80=9D idea was added in -05 (June =
2018) and removed
>> in -07 (April 2019).
>>=20
>> As for =E2=80=9Chidden=E2=80=9D, the current approach arrived in =
crypto-types-08.
>> Previously, the node was a =E2=80=98union=E2=80=99 with =
"permanently-hidden=E2=80=9D being an
>> enumerated value.  This idea was moved into crypto-types-01 from
>> keystore-06.  It was called "hardware-protected=E2=80=9D in keystore =
03-05,
>> and =E2=80=9CINACCESSIBLE=E2=80=9D in keystore 01-02.
>>=20
>> We also explored letting the private-key value be "mandatory false=E2=80=
=9D
>> somewhere along the line.  Without digging for dates, I=E2=80=99m =
sure the
>> reason we backed out of it is because, again, it didn=E2=80=99t make =
sense to
>> do it for a 1% use case.
>=20
> I much prefer J=C3=BCrgen's proposal than haveing special rules for =
some
> nodes in <running>.  Especially if it falls into this "1%" bucket.

Do you mean that built-in values should be in <factory-default>, not =
<operational>?

It is an interesting idea, and one I hadn=E2=80=99t considered before, =
but:

1) there would still be a need for special-case rules ensuring that =
descendent nodes of =E2=80=9Cbuilt-in=E2=80=9D (read-only) keys/certs =
are never changed. E.g., consider a built-in (TPM-protected) key having =
an associated IDevID cert, nothing about it can vary.

2) how do vendor-updates for the built-in public CA certs get picked up? =
 Do we suggest that operators re-merge that part of <factory-default> =
into their <running> after each OS update?  (And what if the update =
occurs via ZTP and somehow that new cert is needed then?)

3) looking to my response to Tom, the proposal supports #3 - is this =
what we want?   I personally think that deleting built-in public CA =
certs is a questionably bad idea (too many things can break).  #2 is =
=E2=80=9Cokay=E2=80=9D (at least nothing breaks), but some may question =
if it=E2=80=99s ever needed (i.e., rather than merge a new cert into the =
existing bag, it may be better to put it in its own bag and have the =
TLS-client point that bag instead).  #1 is the most conservative, =
perhaps to a fault, but in the world of security, sometimes that is =
what=E2=80=99s needed.

4) it seems that it may be possible to use alternate cert-data for a =
=E2=80=9Cbuilt-in=E2=80=9D cert.  E.g., consider a built-in public CA =
cert called =E2=80=9CVerisign Root CA 2009-2=E2=80=9D, it would be =
possible to configure a cert having that name/key but with a different =
base64 value, potentially opening up an attack vector.  My intention for =
#3 was =E2=80=9Call or nothing=E2=80=9D, that is, certs can be present =
or deleted in their entirety, nothing in-between.=20

5) The entire contents of the built-in public CA certs bag would have to =
be copied into <running>, cluttering it up unnecessarily with a bunch of =
base64 strings representing the contents of, e.g., /etc/ssl/certs/.  =
Maybe this is okay, but it would likely be unwelcomed by many.


My seems that the currently documented approach (tweaked per my email to =
Tom) is still the simplest, agreed?   Yes, there are special case rules, =
but they=E2=80=99re simple (=E2=80=9Ctreat built-in values as =
read-only=E2=80=9D).

K.





From nobody Sun Jan 17 23:43:43 2021
Return-Path: <mbj+ietf@4668.se>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8194C3A1110 for <netconf@ietfa.amsl.com>; Sun, 17 Jan 2021 23:43:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.123
X-Spam-Level: 
X-Spam-Status: No, score=-0.123 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, PDS_NAKED_TO_NUMERO=1.997, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=4668.se header.b=BQMeEjGz; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=CMoqH6iX
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Cibhr3kt-NSR for <netconf@ietfa.amsl.com>; Sun, 17 Jan 2021 23:43:39 -0800 (PST)
Received: from wout2-smtp.messagingengine.com (wout2-smtp.messagingengine.com [64.147.123.25]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D23873A09EA for <netconf@ietf.org>; Sun, 17 Jan 2021 23:43:39 -0800 (PST)
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id A601A14A6; Mon, 18 Jan 2021 02:43:38 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Mon, 18 Jan 2021 02:43:38 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=4668.se; h=date :message-id:to:cc:subject:from:in-reply-to:references :mime-version:content-type:content-transfer-encoding; s=fm3; bh= ouOsbAoaUxRVoDsFL35uKHqM+AcJ5UK1img2ao2R1HY=; b=BQMeEjGzekWvDoPB aD5DgwCywJ+xUnVhCXZgZARH7zgtOn7CCpJYNfBZpuqHVlUa4yVQ+uoRTm4YDCdN hFfPMhsH0LTm+uNdzZ8BNL2KU7k+EC+EyPEi/mHV5XM+dq3+hLxEvGhpB2fov2JO R4v21rpUkTfhXMVx67UIp97I9/iYzrVYHxi2MJQIs4PnEgU6xpxWa19mswOHx+y5 oGRq8agUZXXbPmyHaWslR4+6FCksOYdDIAcVIf+UKpVNAAeaz00xJ2JoxltC61DG 6PYjsM/Drkwzb8c3zU9xz9d9vDWMmwQw8sQfU9gsbSe7pM+Lgwq/viKagfUexH5a SNnQog==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=ouOsbAoaUxRVoDsFL35uKHqM+AcJ5UK1img2ao2R1 HY=; b=CMoqH6iXlQaYcMTWboaTcP0Pd+sHLM6XaR5C2QV2KILtngz+mtuVxleHJ g5iWP0Vdgs4BYT9vdaIc+56ZPUfEW1aRWiaD91DEDB+xXqDV8WU+XKfTj9G6fNJt QACLMx1EJqRlFg/fTfHvHHxyqS6aLNn3DUvG0ha9hf7Oni9IO4qrqqyAutalNhxE z8C0ix8/1nyRTzBIG/0QqtTnpS5tuMzpdr+NmnZybKOY4EmK+5B+KmXui+ZYabZv D7q5FpiHQpYBQvkTh2iOemFEGrHaZ7DY5x3jS+NDEwOdv/Jrd1tbZAJyzgRb89xm DkMqIr6l2sOLEk4VCgGJww7Um9NRQ==
X-ME-Sender: <xms:KTwFYFiGMTEpuZ4SnvFiSd-icPL9QVppJ4teYXYy4okmKHrDJjDjmw> <xme:KTwFYKBf3-FBze8IyP68Tq2N8VXk3LKVghcjKdOfnLQrZBKrWXRoMY1IYEc6uYbnL DYqyx1gd6A6H5z5V-E>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrtdejgdduuddtucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffkffvuffhjghfofggtgfgsehtsg ertdertdejnecuhfhrohhmpeforghrthhinhcuuehjnphrkhhluhhnugcuoehmsghjodhi vghtfhesgeeiieekrdhsvgeqnecuggftrfgrthhtvghrnhepheetgedtfffggeffkedvje ekveelteeuuddttdffhfelgfetvdevhedvgeeutddunecukfhppeduheekrddujeegrdeg rddvudehnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomh epmhgsjhdoihgvthhfseegieeikedrshgv
X-ME-Proxy: <xmx:KTwFYFHP5brv3R9Lz2TlrDVlVEuxcQMSurtCDsppIofgHH3VhtkySA> <xmx:KTwFYKR3q638AFCiZzjcKhBCqOiP2xzeeIKCgCI5TKDy8k1cxAzXzw> <xmx:KTwFYCwN8760nAH96pTZrfohnXY329xjimM0OiJ_drYK6r8qHa0rvA> <xmx:KjwFYHvmE3yhVvA9U6_ObGHovY-bach-5BWl8w68qRzxJiIyUAu2WQ>
Received: from localhost (unknown [158.174.4.215]) by mail.messagingengine.com (Postfix) with ESMTPA id 23511108005B; Mon, 18 Jan 2021 02:43:37 -0500 (EST)
Date: Mon, 18 Jan 2021 08:43:34 +0100 (CET)
Message-Id: <20210118.084334.2073692074145182067.id@4668.se>
To: kent+ietf@watsen.net
Cc: netconf@ietf.org
From: Martin =?iso-8859-1?Q?Bj=F6rklund?= <mbj+ietf@4668.se>
In-Reply-To: <0100017702980f9a-46c72646-4158-42bf-a15f-842281b70d72-000000@email.amazonses.com>
References: <0100017701b91b90-5b4fac25-1818-41c2-be81-4f57296fe9d2-000000@email.amazonses.com> <20210114.182550.2075205444128224956.id@4668.se> <0100017702980f9a-46c72646-4158-42bf-a15f-842281b70d72-000000@email.amazonses.com>
X-Mailer: Mew version 6.8 on Emacs 26.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=utf-8
Content-Transfer-Encoding: base64
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/XuN9ogxPDVIOj_INatUm2LBTTQ8>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Jan 2021 07:43:42 -0000
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From nobody Tue Jan 19 11:02:29 2021
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2929A3A16D4; Tue, 19 Jan 2021 11:02:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.92
X-Spam-Level: 
X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b8-cPoU5UX27; Tue, 19 Jan 2021 11:02:21 -0800 (PST)
Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CD013A16D1; Tue, 19 Jan 2021 11:02:21 -0800 (PST)
Received: by rfc-editor.org (Postfix, from userid 30) id 5DD43F40779; Tue, 19 Jan 2021 11:02:05 -0800 (PST)
To: muly_i@rad.com, evoit@cisco.com, ludwig@clemm.org, alberto.gonzalez@microsoft.com, einarnn@cisco.com, ambtripa@cisco.com
X-PHP-Originating-Script: 1005:errata_mail_lib.php
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: rfc-editor@rfc-editor.org, iesg@ietf.org, netconf@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset=UTF-8
Message-Id: <20210119190205.5DD43F40779@rfc-editor.org>
Date: Tue, 19 Jan 2021 11:02:05 -0800 (PST)
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/k8KY6Ebg8cgK79PsupNo0VvyktY>
Subject: [netconf] [Errata Rejected] RFC8639 (6366)
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Jan 2021 19:02:23 -0000

The following errata report has been rejected for RFC8639,
"Subscription to YANG Notifications".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid6366

--------------------------------------
Status: Rejected
Type: Editorial

Reported by: Muly Ilan <muly_i@rad.com>
Date Reported: 2020-12-24
Rejected by: RFC Editor  

Section: 4.

Original Text
-------------
  feature subtree {
    description
      "This feature indicates support for YANG subtree filtering.";
    reference
      "RFC 6241: Network Configuration Protocol (NETCONF),
                 Section 6";
  }

  feature supports-vrf {
    description
      "This feature indicates that a publisher supports VRF
       configuration for configured subscriptions.  VRF support for
       dynamic subscriptions does not require this feature.";
    reference
      "RFC 8529: YANG Data Model for Network Instances,
                 Section 6";
  }

Corrected Text
--------------
  feature subtree {
    description
      "This feature indicates support for YANG subtree filtering.";
    reference
      "RFC 6241: Network Configuration Protocol (NETCONF),
                 Section 6";
  }

  feature supports-vrf {
    description
      "This feature indicates that a publisher supports VRF
       configuration for configured subscriptions.  VRF support for
       dynamic subscriptions does not require this feature.";
    reference
      "RFC 8529: YANG Data Model for Network Instances,
                 Section 6";
  }

Notes
-----
In the HTML version the two hyperlinks "Section 6" (for 'subtree' feature and for 'supports-vrf' feature) point to wrong RFCs.

Verifier Note:
-------------------
This is regarding the link generated in the rfc2html output, not the RFC itself (https://www.rfc-editor.org/rfc/rfc8639.txt).
 --VERIFIER NOTES-- 
This is regarding the link generated in the rfc2html output, not the RFC itself (https://www.rfc-editor.org/rfc/rfc8639.txt).
   

--------------------------------------
RFC8639 (draft-ietf-netconf-subscribed-notifications-26)
--------------------------------------
Title               : Subscription to YANG Notifications
Publication Date    : September 2019
Author(s)           : E. Voit, A. Clemm, A. Gonzalez Prieto, E. Nilsen-Nygaard, A. Tripathy
Category            : PROPOSED STANDARD
Source              : Network Configuration
Area                : Operations and Management
Stream              : IETF


From nobody Tue Jan 19 11:22:55 2021
Return-Path: <mferguson@amsl.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31A103A16F5 for <netconf@ietfa.amsl.com>; Tue, 19 Jan 2021 11:22:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J9tkfxB2H6LW for <netconf@ietfa.amsl.com>; Tue, 19 Jan 2021 11:22:50 -0800 (PST)
Received: from mail.amsl.com (c8a.amsl.com [4.31.198.40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0762B3A16F1 for <netconf@ietf.org>; Tue, 19 Jan 2021 11:22:49 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by c8a.amsl.com (Postfix) with ESMTP id 504D638B35E; Tue, 19 Jan 2021 11:22:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from c8a.amsl.com ([127.0.0.1]) by localhost (c8a.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FZv47571DHqv; Tue, 19 Jan 2021 11:22:49 -0800 (PST)
Received: from [192.168.68.121] (pool-173-48-33-241.bstnma.fios.verizon.net [173.48.33.241]) by c8a.amsl.com (Postfix) with ESMTPA id B520638B35B; Tue, 19 Jan 2021 11:22:48 -0800 (PST)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
From: Megan Ferguson <mferguson@amsl.com>
In-Reply-To: <0100017696493c92-1a3c9143-3975-444f-b0f6-c12c39a58ef7-000000@email.amazonses.com>
Date: Tue, 19 Jan 2021 14:22:47 -0500
Cc: "netconf@ietf.org" <netconf@ietf.org>, Muly Ilan <muly_i@rad.com>, "Eric Voit (evoit)" <evoit=40cisco.com@dmarc.ietf.org>, Reshad Rahman <reshad@yahoo.com>, RFC System <rfc-editor@rfc-editor.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <8C4D4664-0282-42E8-AF2E-33D15AF9904B@amsl.com>
References: <8A1D1573-6DBB-4767-9C4C-944AFD6D3058.ref@yahoo.com> <8A1D1573-6DBB-4767-9C4C-944AFD6D3058@yahoo.com> <0100017696493c92-1a3c9143-3975-444f-b0f6-c12c39a58ef7-000000@email.amazonses.com>
To: Kent Watsen <kent+ietf@watsen.net>
X-Mailer: Apple Mail (2.1878.6)
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/vWVWGLPJ8JvYnpx7cxbW1whUX7A>
Subject: Re: [netconf] [Editorial Errata Reported] RFC8650 (6368)
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Jan 2021 19:22:53 -0000

Greetings,

FYI - errata report EID 6368 has been deleted as it seems to have been =
replaced by https://www.rfc-editor.org/errata/eid6369.

Thank you.

RFC Editor/mf

On Dec 24, 2020, at 2:45 PM, Kent Watsen <kent+ietf@watsen.net> wrote:

> Let it be noted that this Errata (6368) is rejected.
>=20
> Muly, please submit another Errata with the solution forwarded by =
Eric.
>=20
> Kent // as co-Chair
>=20
>=20
>> On Dec 24, 2020, at 1:55 PM, Reshad Rahman <reshad@yahoo.com> wrote:
>>=20
>> +1.=20
>>=20
>> =EF=BB=BFOn 2020-12-24, 1:27 PM, "netconf on behalf of Eric Voit =
(evoit)" <netconf-bounces@ietf.org on behalf of =
evoit=3D40cisco.com@dmarc.ietf.org> wrote:
>>=20
>>    Yes, that is what I suggest: that we change '22' to '39' in the =
URI.
>>=20
>>    Eric
>>=20
>>> -----Original Message-----
>>> From: Kent Watsen <kent+ietf@watsen.net>
>>> Sent: Thursday, December 24, 2020 11:23 AM
>>> To: Eric Voit (evoit) <evoit@cisco.com>
>>> Cc: RFC Errata System <rfc-editor@rfc-editor.org>; Reshad Rahman =
(rrahman)
>>> <rrahman@cisco.com>; Einar Nilsen-Nygaard (einarnn) =
<einarnn@cisco.com>;
>>> ludwig@clemm.org; andy@yumaworks.com; warren@kumari.net; Rob Wilton
>>> (rwilton) <rwilton@cisco.com>; Mahesh Jethanandani
>>> <mjethanandani@gmail.com>; muly_i@rad.com; netconf@ietf.org
>>> Subject: Re: [Editorial Errata Reported] RFC8650 (6368)
>>>=20
>>> Hi Eric,
>>>=20
>>> Thank you for you comment.  But note that the errata system is =
binary,
>>    either an
>>> errata is accepted or rejected.  To do what you say entails =
rejecting this
>>    errata
>>> and submitting a different one to say it,  Is this what you =
advocate?
>>>=20
>>> Thanks,
>>> Kent
>>>=20
>>>=20
>>>> On Dec 24, 2020, at 10:14 AM, Eric Voit (evoit) <evoit@cisco.com> =
wrote:
>>>>=20
>>>> Rather than changing the subscription from 22 to 39, the URI should =
be
>>    made:
>>>> https://example.com/restconf/subscriptions/39
>>>>=20
>>>> Reasons:
>>>> (1) There is no assumption that the subscription is the same one as
>>>> for the previous example.
>>>> (2) We want to keep the examples in lock-step with RFC8640.
>>>>=20
>>>> Eric
>>=20
>>    _______________________________________________
>>    netconf mailing list
>>    netconf@ietf.org
>>    https://www.ietf.org/mailman/listinfo/netconf
>>=20
>>=20
>=20


From nobody Tue Jan 19 18:18:37 2021
Return-Path: <010001771d9617c5-754c1d57-350f-4ee1-abb6-3becda69efcf-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CA223A0C38 for <netconf@ietfa.amsl.com>; Tue, 19 Jan 2021 18:18:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NBuF4yKtWWdY for <netconf@ietfa.amsl.com>; Tue, 19 Jan 2021 18:18:33 -0800 (PST)
Received: from a8-33.smtp-out.amazonses.com (a8-33.smtp-out.amazonses.com [54.240.8.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D9143A0C37 for <netconf@ietf.org>; Tue, 19 Jan 2021 18:18:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1611109111; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=YhtNYdbHQ4ap11yhp5sisi5JKlv6yMrEPM4llDIYcCg=; b=C4ZCJUm2hZVK/qs4mgqm/w6SK3wT9g/T7YfSDXbSse9ADLV9Ef5kELd3ximLzOc/ lVatU5ohJjPtrnnlgiYuUFGKEdMpp9QEHzPNtfmkEJu2ZwyifvtHg1pEtZxmYDuyqBF ITZNMVBrOGOFJRWOqJbQ74R1WiLzyF4KzpVOmKK8=
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
From: Kent Watsen <kent+ietf@watsen.net>
In-Reply-To: <20210118.084334.2073692074145182067.id@4668.se>
Date: Wed, 20 Jan 2021 02:18:31 +0000
Cc: "netconf@ietf.org" <netconf@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-ID: <010001771d9617c5-754c1d57-350f-4ee1-abb6-3becda69efcf-000000@email.amazonses.com>
References: <0100017701b91b90-5b4fac25-1818-41c2-be81-4f57296fe9d2-000000@email.amazonses.com> <20210114.182550.2075205444128224956.id@4668.se> <0100017702980f9a-46c72646-4158-42bf-a15f-842281b70d72-000000@email.amazonses.com> <20210118.084334.2073692074145182067.id@4668.se>
To: =?utf-8?Q?Martin_Bj=C3=B6rklund?= <mbj+ietf@4668.se>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.20-54.240.8.33
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/yRogyKL1Zz1jQaXaX-IaBjH48wU>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Jan 2021 02:18:35 -0000

Hi Martin,

>>>>>> Hiding all the descendent nodes except =E2=80=9Cname=E2=80=9D for =
built-in keys/certs
>>>>>> doesn=E2=80=99t work because the pubkey/cert is needed in order =
to encrypt
>>>>>> data that only a device can decrypt
>>>>>=20
>>>>> I don't understand this.  The descendent nodes would not be =
present in
>>>>> 'running', but they would be present in <operational> (b/c they =
are
>>>>> present in the firmware).
>>>>=20
>>>> I think that there is a misunderstanding somewhere.  It might be
>>>> helpful for me to clarify that, at a high-level: 1) the drafts only
>>>> present a *configuration* model, and that 2) it=E2=80=99s possible =
that some
>>>> =E2=80=9Cconfig=E2=80=9D only shows up in <operational>, when the =
values are
>>>> =E2=80=9Cbuilt-in=E2=80=9D.
>>>>=20
>>>> For the =E2=80=9Cconfig=E2=80=9D that only shows in <operational>, =
it=E2=80=99s necessary to
>>>> promote them to <running> in order for leafrefs to resolve.  I =
agree
>>>> that only the =E2=80=9Cname=E2=80=9D is needed, but we lack a =
mechanism to just
>>>> configure a name as otherwise 1) validation would fail because
>>>> "mandatory true=E2=80=9D descendants would fail validation and 2) =
there=E2=80=99s no
>>>> way to tell =E2=80=9Capply config=E2=80=9D process to not-delete =
the missing values.
>>>=20
>>> It can be done by doing something similar to "hidden", here's a =
sketch
>>> of the idea:
>>>=20
>>> list certificate-bag {
>>>   key name;
>>>   leaf name { ... }
>>>   choice type {
>>>     case inline {
>>>       list certificate { ... }
>>>     }
>>>     case built-in {
>>>       leaf built-in { type empty; }
>>>     }
>>>   }
>>> }
>>=20
>> Thank you for the example.  It's infinitely easier to understand what
>> folks intend when examples are provided.
>>=20
>> Yes, your model enables just the =E2=80=9Cname=E2=80=9D node to =
appear, but I=E2=80=99m
>> confused/concerned by its implications...
>>=20
>> In particular, what would be in <operational> in a device as shipped
>> from Manufacturing?  It can=E2=80=99t be =E2=80=9Cbuilt-in=E2=80=9D =
because the certificate
>> data must be accessible.  But, assuming it=E2=80=99s =E2=80=9Cinline=E2=
=80=9D, then we=E2=80=99d
>> expect =E2=80=9Cinline=E2=80=9D in <running> too, right?  If not, =
then we're devising
>> yet other special case rules that are no better than those described
>> in the truststore draft.
>=20
> No I don't agree that all nodes in <running> must exactly match what's
> in <operational>.  This is not a special case.  <operational> is
> designed to reflect reality, so things may not match what's in
> <running>.

Yes.


>> Worse, how to reference specific certs (not
>> the bag), as is needed in some cases (not a TLS-client), becomes even
>> more complicated.
>=20
> So then we need to adjust the data model to allow this.  Perhaps not
> use a choice like I did above, but simply a leaf that indicates that
> the bag is builtin, and then allow certs to be set in <running> as
> well.

First we should decide if operators should be allowed to add =
certificates to built-in bags (i.e. #2 in my message to Tom).



>>>> Looking at the keystore draft's Change Log, I see that the
>>>> =E2=80=9Crequire-instance false=E2=80=9D idea was added in -05 =
(June 2018) and removed
>>>> in -07 (April 2019).
>>>>=20
>>>> As for =E2=80=9Chidden=E2=80=9D, the current approach arrived in =
crypto-types-08.
>>>> Previously, the node was a =E2=80=98union=E2=80=99 with =
"permanently-hidden=E2=80=9D being an
>>>> enumerated value.  This idea was moved into crypto-types-01 from
>>>> keystore-06.  It was called "hardware-protected=E2=80=9D in =
keystore 03-05,
>>>> and =E2=80=9CINACCESSIBLE=E2=80=9D in keystore 01-02.
>>>>=20
>>>> We also explored letting the private-key value be "mandatory =
false=E2=80=9D
>>>> somewhere along the line.  Without digging for dates, I=E2=80=99m =
sure the
>>>> reason we backed out of it is because, again, it didn=E2=80=99t =
make sense to
>>>> do it for a 1% use case.
>>>=20
>>> I much prefer J=C3=BCrgen's proposal than haveing special rules for =
some
>>> nodes in <running>.  Especially if it falls into this "1%" bucket.
>>=20
>> Do you mean that built-in values should be in <factory-default>, not
>> <operational>?
>=20
> Yes, but if they are added via <factory-defaults> or not is imo
> important.  If the device doesn't have <factory-defaults>, a client
> can simply add them to <running>.

I=E2=80=99m unable to parse fully what you mean.  In any case, built-in =
stuff being in <factory-default> is a convenience, to have it in =
<running> at first boot, assuming that is necessary (I don=E2=80=99t =
think it is).  The draft says built-in certs/keys are in <operational>, =
just like built-in interfaces (e.g., loopback) in RFC 8342.


>> 1) there would still be a need for special-case rules ensuring that
>> descendent nodes of =E2=80=9Cbuilt-in=E2=80=9D (read-only) keys/certs =
are never
>> changed. E.g., consider a built-in (TPM-protected) key having an
>> associated IDevID cert, nothing about it can vary.
>=20
> I don't think special rules are needed.

True, servers can already ignore/override <intended> to reflect reality. =
=20


>> 2) how do vendor-updates for the built-in public CA certs get picked
>> up?  Do we suggest that operators re-merge that part of
>> <factory-default> into their <running> after each OS update?  (And
>> what if the update occurs via ZTP and somehow that new cert is needed
>> then?)
>=20
> I think this problem is present with your proposed solution as well.

Yes and No. =20

The only problem is that the intention of the words in the =E2=80=9CSuppor=
t for Built-in Trust Anchors=E2=80=9D section isn=E2=80=99t completely =
realized by the model.  This section talks about what needs to be done =
in order to reference =E2=80=9Ccertificates=E2=80=9D, which is still =
true, sans it should be that servers must ignore (not =E2=80=9Creject") =
attempts to modify built-ins. =20

What=E2=80=99s missing is what needs to be done to reference a built-in =
*bag* that has not had any operator-specified certs added to it (i.e., =
an =E2=80=9Cempty=E2=80=9D bag, in <running> only).  Your "case =
built-in=E2=80=9D above addresses that case, as well could an empty =
list, which is even simpler.


>> 3) looking to my response to Tom, the proposal supports #3 - is this
>> what we want?  I personally think that deleting built-in public CA
>> certs is a questionably bad idea (too many things can break).  #2 is
>> =E2=80=9Cokay=E2=80=9D (at least nothing breaks), but some may =
question if it=E2=80=99s ever
>> needed (i.e., rather than merge a new cert into the existing bag, it
>> may be better to put it in its own bag and have the TLS-client point
>> that bag instead).  #1 is the most conservative, perhaps to a fault,
>> but in the world of security, sometimes that is what=E2=80=99s =
needed.
>=20
> If the system can handle the case that a cert that is marked as
> built-in in running doesn't exist (see thread w/ J=C3=BCrgen), then #3 =
is
> ok.

Regarding =E2=80=9Cthen #3 is ok=E2=80=9D, regardless if #3 is possible, =
I don=E2=80=99t think we want to support it.   #1 is safe, #2 is okay, =
#3 is potentially dangerous and the use case is weak.



>> 4) it seems that it may be possible to use alternate cert-data for a
>> =E2=80=9Cbuilt-in=E2=80=9D cert.  E.g., consider a built-in public CA =
cert called
>> =E2=80=9CVerisign Root CA 2009-2=E2=80=9D, it would be possible to =
configure a cert
>> having that name/key but with a different base64 value, potentially
>> opening up an attack vector.  My intention for #3 was =E2=80=9Call or
>> nothing=E2=80=9D, that is, certs can be present or deleted in their =
entirety,
>> nothing in-between.
>=20
> I'm not sure I follow you, but nothing prevents the system to ignore
> unwanted data in <running> for built-in certs, and use the
> system-provided values instead.

Yes (same realization as above)


>> 5) The entire contents of the built-in public CA certs bag would have
>> to be copied into <running>, cluttering it up unnecessarily with a
>> bunch of base64 strings representing the contents of, e.g.,
>> /etc/ssl/certs/.  Maybe this is okay, but it would likely be
>> unwelcomed by many.
>=20
> I don't understand why this is needed.

Maybe I misunderstood what you or J=C3=BCrgen were trying to say before. =
 So long as we agree that it would be a usability-fail, then I=E2=80=99m =
fine.


>> It seems that the currently documented approach (tweaked per my email
>> to Tom) is still the simplest, agreed?  Yes, there are special case
>> rules, but they=E2=80=99re simple (=E2=80=9Ctreat built-in values as =
read-only=E2=80=9D).
>=20
> They may look innocent, but this is a slippery slope.  The proposal in
> the draft goes against the NMDA architure, see section 5 of RFC 8342.
> "system configuration" goes into <operational>, NOT into <running>.

The draft is completely in line with NMDA, sans the s/reject/ignore/ bit =
mentioned above.  Where do you see otherwise?


K.



From nobody Wed Jan 20 05:00:49 2021
Return-Path: <maqiufang1@huawei.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1356F3A11F4 for <netconf@ietfa.amsl.com>; Wed, 20 Jan 2021 05:00:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XeOcB1Tz5Ph8 for <netconf@ietfa.amsl.com>; Wed, 20 Jan 2021 05:00:46 -0800 (PST)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F169F3A11F2 for <netconf@ietf.org>; Wed, 20 Jan 2021 05:00:45 -0800 (PST)
Received: from fraeml711-chm.china.huawei.com (unknown [172.18.147.201]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4DLQWl135fz67dkk for <netconf@ietf.org>; Wed, 20 Jan 2021 20:56:35 +0800 (CST)
Received: from dggeme717-chm.china.huawei.com (10.1.199.113) by fraeml711-chm.china.huawei.com (10.206.15.60) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2106.2; Wed, 20 Jan 2021 14:00:43 +0100
Received: from dggeme770-chm.china.huawei.com (10.3.19.116) by dggeme717-chm.china.huawei.com (10.1.199.113) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2106.2; Wed, 20 Jan 2021 21:00:42 +0800
Received: from dggeme770-chm.china.huawei.com ([10.8.68.58]) by dggeme770-chm.china.huawei.com ([10.8.68.58]) with mapi id 15.01.2106.002; Wed, 20 Jan 2021 21:00:41 +0800
From: "maqiufang (A)" <maqiufang1@huawei.com>
To: "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [netconf] New Version Notification for draft-tao-netconf-data-export-capabilities-03.txt
Thread-Index: AdbvLDKVGqiL++xhQ1Wmnaa8k+OoaA==
Date: Wed, 20 Jan 2021 13:00:41 +0000
Message-ID: <c3ff2684e6f7481c95974c4fa0fa98f4@huawei.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.136.100.25]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/GRcHG51Q-U1tBx9QYR5PMLi0hjs>
Subject: [netconf] New Version Notification for draft-tao-netconf-data-export-capabilities-03.txt
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Jan 2021 13:00:48 -0000
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From nobody Wed Jan 20 05:07:06 2021
Return-Path: <maqiufang1@huawei.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8F793A11FA for <netconf@ietfa.amsl.com>; Wed, 20 Jan 2021 05:07:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kU09R0uedzEm for <netconf@ietfa.amsl.com>; Wed, 20 Jan 2021 05:07:03 -0800 (PST)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A862F3A11F8 for <netconf@ietf.org>; Wed, 20 Jan 2021 05:07:02 -0800 (PST)
Received: from fraeml713-chm.china.huawei.com (unknown [172.18.147.207]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4DLQh64X7wz67bvk for <netconf@ietf.org>; Wed, 20 Jan 2021 21:03:50 +0800 (CST)
Received: from dggeme717-chm.china.huawei.com (10.1.199.113) by fraeml713-chm.china.huawei.com (10.206.15.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2106.2; Wed, 20 Jan 2021 14:06:59 +0100
Received: from dggeme770-chm.china.huawei.com (10.3.19.116) by dggeme717-chm.china.huawei.com (10.1.199.113) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2106.2; Wed, 20 Jan 2021 21:06:57 +0800
Received: from dggeme770-chm.china.huawei.com ([10.8.68.58]) by dggeme770-chm.china.huawei.com ([10.8.68.58]) with mapi id 15.01.2106.002; Wed, 20 Jan 2021 21:06:57 +0800
From: "maqiufang (A)" <maqiufang1@huawei.com>
To: "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [netconf] New Version Notification for draft-wang-netconf-adaptive-subscription-03.txt
Thread-Index: AdbvLFBSH3T0dmtIT6+4I4igEa7DiA==
Date: Wed, 20 Jan 2021 13:06:57 +0000
Message-ID: <9c25a269e09747efa7115fcdaa3419e7@huawei.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.136.100.25]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/pufKRlLwmI2aD1D6mexExgKASFg>
Subject: [netconf] New Version Notification for draft-wang-netconf-adaptive-subscription-03.txt
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Jan 2021 13:07:05 -0000
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From nobody Wed Jan 20 05:26:33 2021
Return-Path: <maqiufang1@huawei.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13CB23A1222 for <netconf@ietfa.amsl.com>; Wed, 20 Jan 2021 05:26:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kOLklReL7PcJ for <netconf@ietfa.amsl.com>; Wed, 20 Jan 2021 05:26:29 -0800 (PST)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A2003A121B for <netconf@ietf.org>; Wed, 20 Jan 2021 05:26:29 -0800 (PST)
Received: from fraeml736-chm.china.huawei.com (unknown [172.18.147.200]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4DLR3p72Ddz67dqq for <netconf@ietf.org>; Wed, 20 Jan 2021 21:20:54 +0800 (CST)
Received: from dggeme718-chm.china.huawei.com (10.1.199.114) by fraeml736-chm.china.huawei.com (10.206.15.217) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2106.2; Wed, 20 Jan 2021 14:26:24 +0100
Received: from dggeme770-chm.china.huawei.com (10.3.19.116) by dggeme718-chm.china.huawei.com (10.1.199.114) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2106.2; Wed, 20 Jan 2021 21:26:22 +0800
Received: from dggeme770-chm.china.huawei.com ([10.8.68.58]) by dggeme770-chm.china.huawei.com ([10.8.68.58]) with mapi id 15.01.2106.002; Wed, 20 Jan 2021 21:26:22 +0800
From: "maqiufang (A)" <maqiufang1@huawei.com>
To: Kent Watsen <kent+ietf@watsen.net>, =?utf-8?B?TWFydGluIEJqw7Zya2x1bmQ=?= <mbj+ietf@4668.se>
CC: "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [netconf] built-in trust anchors
Thread-Index: AdbpFFL2IioTw935RTC9hP47Cn7q7f//jDeAgAAyLwCAAJ82AIAAMaCAgAA+NQCAABalgIAA/9qAgACRlQCAABBTAIAAM7aAgAVy7wCAAsnYgP/+wUug
Date: Wed, 20 Jan 2021 13:26:22 +0000
Message-ID: <698fa44f3efe47a89aea5ee05e0d2e7e@huawei.com>
References: <0100017701b91b90-5b4fac25-1818-41c2-be81-4f57296fe9d2-000000@email.amazonses.com> <20210114.182550.2075205444128224956.id@4668.se> <0100017702980f9a-46c72646-4158-42bf-a15f-842281b70d72-000000@email.amazonses.com> <20210118.084334.2073692074145182067.id@4668.se> <010001771d9617c5-754c1d57-350f-4ee1-abb6-3becda69efcf-000000@email.amazonses.com>
In-Reply-To: <010001771d9617c5-754c1d57-350f-4ee1-abb6-3becda69efcf-000000@email.amazonses.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.136.100.25]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/5Soj1Jc9bw41tTfvk8ecBul-oJA>
Subject: Re: [netconf] built-in trust anchors
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Jan 2021 13:26:32 -0000
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From nobody Fri Jan 22 03:26:47 2021
Return-Path: <rwilton@cisco.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68B933A1258; Fri, 22 Jan 2021 03:26:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.92
X-Spam-Level: 
X-Spam-Status: No, score=-11.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=NE0j1txd; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=BUZ5R7c5
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bk6eoQ_PAjEi; Fri, 22 Jan 2021 03:26:44 -0800 (PST)
Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 670983A0C9F; Fri, 22 Jan 2021 03:26:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1240; q=dns/txt; s=iport; t=1611314804; x=1612524404; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=sacZUNRZW5It3Uo0IfnSBEDivmxNMAWaHoE1Am09wdE=; b=NE0j1txdSkb40AZg4SYgo5jeqGg7zdzkmTt1M+6jdAxxa86siS7Yl4C2 K4ykA+TNXAWjBWWazNFp5IYKPrc8OX8nKgnQU0Z+3ciqUllXt952qzOn0 rVpd1DR1klKzwJVYG9/XqgN9m7o3XaH2vCht+Y9oUlLKBfKvS32yP/xkF o=;
IronPort-PHdr: =?us-ascii?q?9a23=3AIdS3EhD/JLHUxY2bGmFJUyQJPHJ1sqjoPgMT9p?= =?us-ascii?q?ssgq5PdaLm5Zn5IUjD/qw01g3IUJnVrfVehLmev6PhXDkG5pCM+DAHfYdXXh?= =?us-ascii?q?AIwcMRg0Q7AcGDBEG6SZyibyEzEMlYElMw+Xa9PBtUFdrwIVrIrS764TsbAB?= =?us-ascii?q?6qMw1zK6z8EZLTiMLi0ee09tXTbgxEiSD7b6l1KUC9rB7asY8dho4xJw=3D?= =?us-ascii?q?=3D?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BUAAAZtQpg/5BdJa1iHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgTsHAQELAYFSUQd2Wy8vCod+A4RZiTIDmReBLoElA1QLAQE?= =?us-ascii?q?BDQEBGAsKAgQBAYQGRAKBeAIlNAkOAgMBAQsBAQUBAQECAQYEcYVhAQuFcwE?= =?us-ascii?q?BAQQBATgGAQEsCwELBAIBCBEEAQEfECcLHQgBAQQOBQiDH4JVAy4BAwunJAK?= =?us-ascii?q?KJXSBNIMFAQEGgTcCg1UYghEDBoE4AYJ1hlGDdCYbgUE/gRFDglY+gl0BAQO?= =?us-ascii?q?BXniCU4IsgyELBFECUAsmF0ovAbkICoJ3iTCSXYMrijOVFpQeix6RYxyENgI?= =?us-ascii?q?EAgQFAg4BAQaBJTE6gVdwFTuCaVAXAg2OIYNxhRSFRHQ3AgYKAQEDCXyJeQG?= =?us-ascii?q?BEAEB?=
X-IronPort-AV: E=Sophos;i="5.79,366,1602547200"; d="scan'208";a="840048045"
Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 22 Jan 2021 11:26:43 +0000
Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by rcdn-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id 10MBQhGH003384 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 22 Jan 2021 11:26:43 GMT
Received: from xhs-aln-001.cisco.com (173.37.135.118) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 22 Jan 2021 05:26:42 -0600
Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 22 Jan 2021 05:26:42 -0600
Received: from NAM11-DM6-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Fri, 22 Jan 2021 05:26:42 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=l5ngWd0UdbT5CeNdD7s9LSrPapdilwqxNGLCmXbF/vSmTB24KrtVODFkcVyE8OmwTod6vfoNaLpFLZGAcHo+bI3543HPuNYp1dDEdFKNzhzrJ6Q/WirMMLuTvx8q3xTZgtuw20OYHSXoug0UUFC2FUYPDssi8PIMhU63jNi6bED7byzHP+zNds565ZQWC0i9saDwlEnvPJHhIlkaR0pRl5QzUkn2g/DhMqoDjcRM2siGAXh0SnHUWRkS/6beIBfthyLRjDaXwNH42xcZiYsiu2A1pe0RKArNwyBEKde+Xvix6qA0sJsvalZm6rrxLpn7Hp/OIOO8adTJq8n4IvnEpQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=P4892mobURVyWgPsTw82SjKIGv2lqE6hpC55rpakK+I=; b=TuyWCXk2116PFxJ6Uomx3r8W/ki8zNIx+YgKemnW6iiKXyToFkW8d3AsXuPSVQI1umA7wDBXh4VTgLqorUFUnr3vto3ZusFuyjC+hshHnXaV3uq/vYYAHYF7ulF+Bg/l+BQItp8YK0Yuh7nogelOoQwgXByMTfJ5nCdzzXlI6xqK3nuLdHS4Jb1opORPwYWqdzJ2Ufp3HQsRXoRKyYEW8friI8ijaMjwkCz6Pnu3+0qDwkJqZsiCfHzVJDFlPS6xUCNFPxUbu00QNyklp1pNkKYn1LYv5z71oOFLZU/mfFoIq4qW+IDori2p3DFHe2+SPE/oNbqyHa3LkyZr4eHCRA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com;  s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=P4892mobURVyWgPsTw82SjKIGv2lqE6hpC55rpakK+I=; b=BUZ5R7c5SGLOCUUlVbY7QyKwTmFKmd/JHbIyKVM77ex03wuyGFe63TZeWg6TgXKMqJao2iEQZC++2rOT6mXh5hjF3z3UN22ByAvedIQ8waoZZ0b5rc8LG+cjzXJY+91doImc6iPrAnPgHrE8RMOC1et22Ac3vLfc12FPhVdqU+k=
Received: from MN2PR11MB4366.namprd11.prod.outlook.com (2603:10b6:208:190::17) by MN2PR11MB4550.namprd11.prod.outlook.com (2603:10b6:208:267::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3763.10; Fri, 22 Jan 2021 11:26:41 +0000
Received: from MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::3c82:1fa3:2b18:3afb]) by MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::3c82:1fa3:2b18:3afb%6]) with mapi id 15.20.3784.015; Fri, 22 Jan 2021 11:26:41 +0000
From: "Rob Wilton (rwilton)" <rwilton@cisco.com>
To: "netconf@ietf.org" <netconf@ietf.org>
CC: "draft-ietf-netconf-https-notif@ietf.org" <draft-ietf-netconf-https-notif@ietf.org>
Thread-Topic: WGLC: draft-ietf-netconf-https-notif-06
Thread-Index: AdbqdYOgUz15Gs1wTZ6RgVXH+iq7RQGO6+cg
Date: Fri, 22 Jan 2021 11:26:41 +0000
Message-ID: <MN2PR11MB436614F37CCD3BC9CCE445C5B5A09@MN2PR11MB4366.namprd11.prod.outlook.com>
References: <MN2PR11MB43669EEF05655F07E39FE4BEB5A80@MN2PR11MB4366.namprd11.prod.outlook.com>
In-Reply-To: <MN2PR11MB43669EEF05655F07E39FE4BEB5A80@MN2PR11MB4366.namprd11.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [82.12.233.180]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: af181499-c19d-47a8-a985-08d8bec89776
x-ms-traffictypediagnostic: MN2PR11MB4550:
x-microsoft-antispam-prvs: <MN2PR11MB4550D33643FDECF0F788F9E0B5A00@MN2PR11MB4550.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: JtF9qByOjGbPMBRQZnbdOw5Gye+VDyhJwLIDrzq7iVMepbnh036eLV7wPfDHLdlXTRVTEbnnGk7Ocqa4oWJLtXnl2+ke6JNVFZyXA2wdwYIgYgsSb+9edGuwxzW8Y4VgKbfj6ZW8JwssIJNm28DEqPj9W0g+lnw2MjdkgF6swQWMysbb3hdk8lMlYKZ5bZRr17r4yeuuJ53WxDxZGOYfrjIbk8Il+wddKWf1HRWA2B0FKoMQBgN+guOuY5pjnKF/L3MSWYzYezQSKxjyQ2LPmigXkEhv6yXeh9KUcWw1Wg07N851slU5BUJOc6zCPFlfgjfQ3nP4X1fVm6v+e9qMAKrWRyn4RP3DyKY4KJcCbwlnsxilSHhCpmGJfE29RLFbwwcUOYuRZPFaTX5hg7Tdi3HyvYj6BU4bvIsLUp6NpdXf3+QFEjtjSmAE87pcxeCDXhHxJItsKGiGYLkPQ4w1Lw==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:MN2PR11MB4366.namprd11.prod.outlook.com; PTR:; CAT:NONE;  SFS:(346002)(396003)(136003)(366004)(39860400002)(376002)(450100002)(83380400001)(4326008)(6916009)(966005)(7696005)(66476007)(52536014)(64756008)(66556008)(478600001)(86362001)(5660300002)(33656002)(76116006)(66946007)(26005)(2906002)(316002)(71200400001)(66446008)(8936002)(8676002)(55016002)(186003)(6506007)(53546011)(9686003); DIR:OUT; SFP:1101; 
x-ms-exchange-antispam-messagedata: =?us-ascii?Q?/bdYrVVA53BL9Qvc1eLO/iC6qZ7WP4js4y6u6M+KKrL3mz8UmGZufWnBF+Xr?= =?us-ascii?Q?Br9jwe7TH5aNSZ8uMPQeunHy2LZz1GqVyr8UdfVUb5723PxF8AOqjXDD+aId?= =?us-ascii?Q?rsUUizhK8Scx0MbgBAaR7TksxuCQPeZZ49bH2CEU1KbRnXhLZxjU0eAOHh7a?= =?us-ascii?Q?rRFCTree1xtz4wGyGIQlpbREu6x8iWj8pj5wGKhyuYd7M+geRtXBmoXeUshO?= =?us-ascii?Q?OEGI4F68ilP6arF06it+GRY3HYGK3c0zyx2dPDRjEF/MRibom3/2SVk1qlt5?= =?us-ascii?Q?5pfCynlRFk1yZYbSD6spAQh0gctU6U5ZvCjD4Bg+WE0GFwNBLIWJF5WT72A7?= =?us-ascii?Q?OAsJzDqLy9DZ2gepOizSbs3fJX9H7gQBneo4rp69Nx+1/IW4a8DwNocU9Y+i?= =?us-ascii?Q?ACDLveM6kixHnldkI7rpgAVu5NVN6eIn+fL4s5ivoBxia6mSHSD40c/BQQWR?= =?us-ascii?Q?mgPwjwETz3IwmrJAMqPGVO+poJtAQHQtvXcDedK8pvB2aQqOfO3jEKqcOu3M?= =?us-ascii?Q?AQeSZCMoHZRsHgcisysTIbwS7Gkel/hxypIqZcLRG0ZqlN3PXW0oX3roF1Ki?= =?us-ascii?Q?L1gLlGKitSDMekplEY2Oe2el6L0Rb3dm814ffCFdvFppYdj9rGcgbWKnlNnm?= =?us-ascii?Q?TbE9uUxrUyy07NgnQcgjKZnLbFvUjfpU8vgdovrZ2wdsSTxO6BkFvbBE3QtG?= =?us-ascii?Q?C7uT/jLAmAbMln68zrGSuquNnqx3QNf5lmsmJMTxoCEOzrWRKMK2yqgtfrzx?= =?us-ascii?Q?71MMUTowCuG1gWxBYxEjMyQv9IBDWYuuWGGzL2Ep2D129X9XebYFWc5HvRri?= =?us-ascii?Q?sSmDxBxJy9v7/LYJiSOpxfArS6fvpDuy+4D5UAcqllj39v5Sx4MVvLlp7nNU?= =?us-ascii?Q?prMibOyOQZlic3lcdXYfSTLXBDRBz5O3aBYGd6C8RMM4RpCZdUKQjKXIS+qp?= =?us-ascii?Q?GX6fjRXts/tpA3wzoIqGPEF+5usE40WhAVcb9qbQv40=3D?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR11MB4366.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: af181499-c19d-47a8-a985-08d8bec89776
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jan 2021 11:26:41.5828 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: xdY4JjWmkRl0r424yVVLySChjX+74iE+nEvdJGhSVRvAYTFUR2rLpRosSUIOvu1I439U58Kgm77gP8K3dshx6w==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4550
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.12, xch-aln-002.cisco.com
X-Outbound-Node: rcdn-core-8.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/LR9OE4Ac4t0yBHmVqGHTs13UEJo>
Subject: Re: [netconf] WGLC: draft-ietf-netconf-https-notif-06
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Jan 2021 11:26:47 -0000

Just to bump this thread as a reminder that the WGLC finishes in 6 days.

Please make time to review this document.

Regards,
Rob


> -----Original Message-----
> From: netconf <netconf-bounces@ietf.org> On Behalf Of Rob Wilton (rwilton=
)
> Sent: 14 January 2021 13:12
> To: netconf@ietf.org; draft-ietf-netconf-https-notif@ietf.org
> Subject: [netconf] WGLC: draft-ietf-netconf-https-notif-06
>=20
> This message begins a two-week WGLC for draft-ietf-netconf-https-notif-06
> ending on Jan 28.  Here is a direct link to the HTML version of the draft=
:
>=20
> 	https://tools.ietf.org/html/draft-ietf-netconf-https-notif-06
>=20
> Positive comments, e.g., "I've reviewed this document and believe it is
> ready for publication", are welcome!  This is useful and important, even
> from authors.  Objections, concerns, and suggestions are also welcomed at
> this time.
>=20
> Please note, the reason that I am making this request rather than the
> WG chairs is because both chairs are listed as authors on this document.
>=20
> Thank you,
> Rob Wilton, OPS AD
>=20
> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf


From nobody Fri Jan 22 11:08:33 2021
Return-Path: <mjethanandani@gmail.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E0AA3A1436 for <netconf@ietfa.amsl.com>; Fri, 22 Jan 2021 11:08:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level: 
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HbFMZmD-JJaQ for <netconf@ietfa.amsl.com>; Fri, 22 Jan 2021 11:08:30 -0800 (PST)
Received: from mail-pj1-x102f.google.com (mail-pj1-x102f.google.com [IPv6:2607:f8b0:4864:20::102f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9FF93A1435 for <netconf@ietf.org>; Fri, 22 Jan 2021 11:08:30 -0800 (PST)
Received: by mail-pj1-x102f.google.com with SMTP id my11so6786593pjb.1 for <netconf@ietf.org>; Fri, 22 Jan 2021 11:08:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=syZzkW15XqoShYnq1wH6sc+lmX8agJFr2jU8caMi9Zs=; b=JqAMslsjwCSWcwHwNBpEiaOPtGws8COT9+CNVo7JUuxOQwMQN8DHPyQvsKDKn9xNhr MwoPsiaOsuQVLfXpRkKGyuC8aZQ+b794bvTme7dZErDUUK8uu8tCF64E7/1JKGEIKSjE IWsK5tO2/fvEV2CGPaEz8ancWi8owMs0QaxpJVi+5ewKjtRbLRtdyjOvVlI56S+W7MGk ybzplIEZVj2HWQNuesblCj5IK44OpKRBsylEcn0onD2rxVy+rXs8X0JAfltxW709hqzN DXm2UqWCpxngBiPBSB2e09Hv3BPBc0PzKJ7YUhPgU61mDheEwbQYQfG4Qe1aP3ieq60g 88rw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=syZzkW15XqoShYnq1wH6sc+lmX8agJFr2jU8caMi9Zs=; b=SBRNBCVLdfknFkC2xW5lUxAjcIy11EiyNfOP7MK+/fvUgdy/yMd7jZ7qPi4TTvkakS /QUDDs6RUHQbV7TcV7d9XaZtiy9CaGHWVDm1+XxnJV8JKl+wTSGEZQLVACXza58WzzfR H4koWqiKiCZnBIB2vSH1Ea3kjaD6i8teu6L96WR8xDiOWY36nTq3mhPPZnRoVWRT7b1c i/cJrsHvmRH3Hku+05r/lm9/GXBK0LNqRQ8LvudcchIIee/ih3qGlkX55JL155/0lr4m G2UHt+4De3zELg6+8HC8BC7nANlWTqGyFfe+dONCgxL39KdXLTwVeMnLyxYJZy4UxgkK 8fPA==
X-Gm-Message-State: AOAM530PLEw2ua/EfnxzALGOOsvyWwwSt5ymUexaNpMWg3ZKYlnwWmMu nLynWX9dg7PMCP84Rtk6KKE=
X-Google-Smtp-Source: ABdhPJwPACDAvNn7LY+2/KvSRQwTiSHwF6i5hbfdKDlh5f4fxOHC9aNbnYNX/X7r5J4dHuy8MO0bJg==
X-Received: by 2002:a17:90b:350b:: with SMTP id ls11mr6978928pjb.166.1611342510037;  Fri, 22 Jan 2021 11:08:30 -0800 (PST)
Received: from ?IPv6:2601:647:5600:5020:9d6f:16d3:a2a1:b92e? ([2601:647:5600:5020:9d6f:16d3:a2a1:b92e]) by smtp.gmail.com with ESMTPSA id f3sm8925837pfe.25.2021.01.22.11.08.26 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Jan 2021 11:08:27 -0800 (PST)
From: Mahesh Jethanandani <mjethanandani@gmail.com>
Message-Id: <FA4A4A76-817B-4E07-BA5C-614BD76398ED@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_49B19D9C-0B5B-4A94-90B7-5FF3CFF6E82A"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\))
Date: Fri, 22 Jan 2021 11:08:26 -0800
In-Reply-To: <CAGnRvuqe9iAbkgxak7m8c4UDGEVjmDif0ri5MpeQDm3KcG0viA@mail.gmail.com>
Cc: Netconf <netconf@ietf.org>
To: Henning Rogge <hrogge@gmail.com>
References: <CAGnRvuqe9iAbkgxak7m8c4UDGEVjmDif0ri5MpeQDm3KcG0viA@mail.gmail.com>
X-Mailer: Apple Mail (2.3608.120.23.2.4)
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/A8xyL--fra4sJuVM3TAc3kMDwGA>
Subject: Re: [netconf] netconf-https-notif-draft HTTP "pipelining"
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Jan 2021 19:08:32 -0000

--Apple-Mail=_49B19D9C-0B5B-4A94-90B7-5FF3CFF6E82A
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Henning,

The draft was trying to address the question of =E2=80=9Cpipelining=E2=80=9D=
 using two methods. One is the equivalent of =E2=80=9CHTTP 1.1 =
pipelining=E2=80=9D and the other is concept of =E2=80=9Cbundled-messages=E2=
=80=9D introduced by draft-ietf-netconf-notification-messages. In the =
process it mixed both of them, and thus the contradiction in the example =
in section 1.5.1.

Let me update the document to fix the example(s), at which point the WG =
can decide if they want to support one or both the methods.

Thanks.

> On Jan 13, 2021, at 11:29 PM, Henning Rogge <hrogge@gmail.com> wrote:
>=20
> Hi,
>=20
> I had a longer discussion with Kent Watsen yesterday and he asked me
> to get the questions about the netconf-https-notif-draft to the
> mailing list:
>=20
> In section 1.5.1 the draft talks about "pipelining" of messages. Is
> this meant equivalent to "HTTP 1.1 pipelining" or is this just a
> technique unique to the draft? If this is not something reused from
> HTTP, maybe there should be some advice on how this interacts with
> normal HTTP server/client code.
>=20
> Also the example in 1.5.1 seems to contradict each other.
>=20
> The overview (page 5) shows the Publisher sending HTTPS POST message
> once for each notification (which I think is important because the URL
> is part of the context of the message)... but the content description
> (page 6) does only show a single POST with multiple responses. Same is
> true for chapter 8.3.
>=20
> Henning Rogge
>=20
> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf

Mahesh Jethanandani
mjethanandani@gmail.com






--Apple-Mail=_49B19D9C-0B5B-4A94-90B7-5FF3CFF6E82A
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">Hi =
Henning,<div class=3D""><br class=3D""></div><div class=3D"">The draft =
was trying to address the question of =E2=80=9Cpipelining=E2=80=9D using =
two methods. One is the equivalent of =E2=80=9CHTTP 1.1 pipelining=E2=80=9D=
 and the other is concept of =E2=80=9Cbundled-messages=E2=80=9D =
introduced by draft-ietf-netconf-notification-messages. In the process =
it mixed both of them, and thus the contradiction in the example in =
section 1.5.1.</div><div class=3D""><br class=3D""></div><div =
class=3D"">Let me update the document to fix the example(s), at which =
point the WG can decide if they want to support one or both the =
methods.</div><div class=3D""><br class=3D""></div><div =
class=3D"">Thanks.<br class=3D""><div><br class=3D""><blockquote =
type=3D"cite" class=3D""><div class=3D"">On Jan 13, 2021, at 11:29 PM, =
Henning Rogge &lt;<a href=3D"mailto:hrogge@gmail.com" =
class=3D"">hrogge@gmail.com</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><div class=3D"">Hi,<br=
 class=3D""><br class=3D"">I had a longer discussion with Kent Watsen =
yesterday and he asked me<br class=3D"">to get the questions about the =
netconf-https-notif-draft to the<br class=3D"">mailing list:<br =
class=3D""><br class=3D"">In section 1.5.1 the draft talks about =
"pipelining" of messages. Is<br class=3D"">this meant equivalent to =
"HTTP 1.1 pipelining" or is this just a<br class=3D"">technique unique =
to the draft? If this is not something reused from<br class=3D"">HTTP, =
maybe there should be some advice on how this interacts with<br =
class=3D"">normal HTTP server/client code.<br class=3D""><br =
class=3D"">Also the example in 1.5.1 seems to contradict each other.<br =
class=3D""><br class=3D"">The overview (page 5) shows the Publisher =
sending HTTPS POST message<br class=3D"">once for each notification =
(which I think is important because the URL<br class=3D"">is part of the =
context of the message)... but the content description<br class=3D"">(page=
 6) does only show a single POST with multiple responses. Same is<br =
class=3D"">true for chapter 8.3.<br class=3D""><br class=3D"">Henning =
Rogge<br class=3D""><br =
class=3D"">_______________________________________________<br =
class=3D"">netconf mailing list<br class=3D""><a =
href=3D"mailto:netconf@ietf.org" class=3D"">netconf@ietf.org</a><br =
class=3D"">https://www.ietf.org/mailman/listinfo/netconf<br =
class=3D""></div></div></blockquote></div><br class=3D""><div class=3D"">
<div dir=3D"auto" style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, =
0); letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: =
break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" =
class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: =
break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" =
class=3D""><div class=3D"">Mahesh Jethanandani</div><div class=3D""><a =
href=3D"mailto:mjethanandani@gmail.com" =
class=3D"">mjethanandani@gmail.com</a></div><div class=3D""><br =
class=3D""></div></div><br class=3D"Apple-interchange-newline"></div><br =
class=3D"Apple-interchange-newline"><br =
class=3D"Apple-interchange-newline">
</div>
<br class=3D""></div></body></html>=

--Apple-Mail=_49B19D9C-0B5B-4A94-90B7-5FF3CFF6E82A--


From nobody Fri Jan 22 11:47:08 2021
Return-Path: <reshad@yahoo.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAD1F3A149F for <netconf@ietfa.amsl.com>; Fri, 22 Jan 2021 11:47:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.472
X-Spam-Level: 
X-Spam-Status: No, score=0.472 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, MALFORMED_FREEMAIL=1.569, MIME_QP_LONG_LINE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bhKPpvobILFR for <netconf@ietfa.amsl.com>; Fri, 22 Jan 2021 11:47:04 -0800 (PST)
Received: from sonic312-21.consmr.mail.bf2.yahoo.com (sonic312-21.consmr.mail.bf2.yahoo.com [74.6.128.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 099D63A1480 for <netconf@ietf.org>; Fri, 22 Jan 2021 11:47:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1611344821; bh=FJr8vl/BYwbpeN225m/+eLN73mffS/x4gZ+NyryhWm4=; h=Date:Subject:From:To:CC:References:In-Reply-To:From:Subject:Reply-To; b=CJ74WquOxnqCj5kqrKwW63Bikj+oA1xbD49xaRe00aEI5kHuS4PwhLNDWagyiiFkXTQb+aRtXlEm3G1RrUq8VJ7dt7V6KBlks9r1cbyOsS4hw5ZSZe9UvvzUpoOhIeaeTE3cg8U5rdtQ4YYxqflXZFoKmeHM42b9HOWM6OI2b4Ix7h/pyRjhVNYPyCpME5zKu8TanGVeZiysTzDiDtbvi/3HU/HkC5ZUG076uA2dnF6HBekvbOaMigFjaJ1j5FAe5YcUEa757spIjHVc/Crn6KfuqHpy6RMg5ZdyvnvOXqyMxvQ383azdWridVx3JCtLwpEy9b7FLUGqeFaGgfTe1w==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048;  t=1611344821; bh=5vmpbBkDkTCF8CdY/LqwShhw3np7EtMGIChnHw9t95L=;  h=Date:Subject:From:To:From:Subject:Reply-To; b=KFGfYBWTVELNe53bauOCU+LeCQgIG1yCnxQyEQEOL7OP2QIpjTmvmIch3+wHPP0w/n05kR+yB+0tGT7Dex+O+u3Bx8c3LRefIgtX/+sQt+tTwqS4JcxCnV+y2QXBi2xOwSN5OuyrzwOzGtNRGsju2YqjlbKPgQTAjLwKSofKHp05iJQjWOhSkBBLCIDxqvkPn1F2C54MPkoIaiEQHjhKv6o3tRPqSKs4Om3CFCYvAO+YDknGSgVBHHRiLoWOclaYyAAuMKw0b7sNW5+w9L2WeiSElSgJmffBKkLenvxX8ORbZ7jClRKBMLchUj3Rj1SjwuQYLQhj7SRGOuboSCX/YQ==
X-YMail-OSG: mYp91REVM1lg7qX_7jRHbYo5qITtI8N5doJv8iu6tKa1Z7FblEaoprXShhd01lo 6F4iiuMm5RuhMITW4u39tJmmLiJLazyxfgr4b1ty8Dm1LACjXWlv5DpDQotk0DIbz2xprIBwP_Hp 84rjWMWHqIml5XTBP6NlkIncLQPNc5C6vkSclq_KaY3GBZzbmozbWynbN498XUpsDUC8eqCEFAFq bWAoUUhjsXFRVSi017a2DWcMtpEXArxcMmPtTeo1xKRJD0Xdk94PIsnPmFfsJ8TKu0y9wOdwDZzq 6MYZGnch0a3BIuV5w1Gysir11sypEuWqJBkVW06iCd0IrB9wpAW8ZTEkwLm5D4vngBzYIjmF9Xnk nndbEO7kK0BGC_0nNSOAoR1qEwU8uO.bDNg35FGZCnTFHCqBOapF_JfKTgqn.sbZJ9pfcIYSLjGg jsAa7odCXFK_83fXVrrczYEhDycG41.JEKULQgJr665dRZV1a6wzdlEb_CN6L513xL64s1tkyA_j NiMqVCxO4FZ0W8Cf2MExDVVPJckVky.kqYMRO0qgwS_7hifzAv5TlvS1qrbG8pD73hFfwiDXLlC5 V.4IvX8yfYDQN9s1vmq0e5kKhYCUMHiLlXQ_zEM7YqYQ6gRsSfOA69l08YYdqdE7TEt_VVb_hO3_ PMAVhbXmurfcvsQlWtp8ocZRNCeGKswkZdEbzu4GMcfcyAH7WCMDlvRUO1_HbSzNxJYx0l_a0afT NBslls_VNlynyl8.d6ch0SvoAarux6h19BOqxPFEy4VCSAJgoZz7h3JmtpCYQDRqsdNEW25aPOgQ Xs0mm7RI64JpZAggBUTqzK6159nmrN2qqAvIniuHKBU.pX546Tcwb_2BCQ5GZq1RKB4F_HBv1hle 3vzN97C_wGyl7kK0ReuTax4_JvWmVOPMlSpLy1nxvA2PpHTsocwgC0LEbq02BLoSp9fHlHl2NOwC 44zoshvCS8IE2pYfXVNNq7kz6.FOyf4yILIQvlW9qK1GJB2eNXO7a6VoNmdSzz1SUPHl1ABnkpJ5 AazjB1WSU0U8DzoA4fsDL_l2JO7MrAPh7pxDOqRnwI.ndSGPjW7SLc..RafXtRhr2qlFkUELHpSW ojCbrrVroFqbhHrZ3rJOXHr9PN7k4Cida3gIDnFBpsryoXdn5sYV8auAoZwSF9WM46StKF94OZJs zEvHm4mv694wnmlBHRxzNs7DRzLgtX45QemL5tg2ou1wtdF1toOqDSFM3n68k_paKPkUsCJAwVaa s8Z04UI3kASp4gUInlk0x0b2NTb4Lj3wuOz_Za9ioRKeAkti9o3wHL2Y1XM8HHdLocChdMRZd3fT Uch_jt6SmRq7Ra79KiDpCsGimZNdB98qGm0f1ZKTwvEQxA6llb3DDGVaFuq3VIju..ayiEiGTEGL iP7XYecAtrQMO4NAnH9VmMuMJUFHQ7E5DI3haV6_ePeAgusm8EIBR_NKjsioSOzrGh.bJdwgCWJ6 RWVyGfknWNzR7hGdBCDbESG3HJAVzQ6UHQTXUti0ZhLN2kwDV0RKZiCT8UxxFeVjLNH__BwH408g VGOQsWEo_ods9.R4ljKWd4b75_XBdEMBk4fcObLrNJFv87ESbdQFuraToSpMtlu7MCXUO8p0B5a_ orXaaBWVGBqQhsNxYCPqKgipwegJOIo1hpZsFrMFy5eSmcgvR_5hu0VFfiV1VXayaj7zRdv7BtcR .LUbstFSeAU9YuskH1L7F7vzhuHM8l5D4foUDwPVERT6aeqAnuM1ZzfdLlUYULx2J8UEZrfH4Lj3 2b78SmgPhhQEFCIJwaCJ86P.CGN.9wKrUdSd5KILBcBe7Voxpxivd4EUUXaZtviT_R0IGTvz3JkQ 399zi1TDtW3P.OQZKz6dJmqUpXcRShJjpAZk4gCHVQk09h54hvg8u4zKwwOVNXxzOshyM6E3PCd3 4tjGU_l6WFY4Bw.S1xESLBZP31RkGrEbBWD4kJFucJXxmBFDTE3epJPsXEuX3TMo56jNvMuMhRc7 TcFWBV2zY78rKI2eu80xz9zgXrX9.SK_k89agdMsNqV3T24faB1cB3ARdHFXnCYvxzIRii5PcErz K53kY_ZSnpDuSosslnXgNOgyVoLgLiqlr6aE9QP1ZiBSuR.DSVXjG9Wbc7Uutk64SsNpHGwwBjNZ dMqU2rhGNGclDAdIYMt.f0yXwffkuBqibZypRf7i.rU3B9zJCkdt8VY_4HSCgjuHAbVTnwmukocT 45aFgthTl32ZhJuhQIbWi7j6jIHWCIA_Gamu31W48pJ0_5t17ljmc1By5OjTEviU2vWOYNNddaE5 Y4doofN9U68dlgZcLEBP7W0GQ3aVbm.K0hkQPU851zVF6SfTYaCiBDRiB0eXKt_ebX.Da.gvmLvn lJnROrsvH3_4adfnPa_GqqNbQySk0KycpitqYgMhLAF33vM5FBjxuK8WAKNhS1pBRdSi25rFuaZD _w6U979XlnXXgbuZPf9v8OxFVzy5suD2rUlwwmu9E1ARsSP2Do.TZHsuvkmeoBqTM5q4F1ZULVz9 yzAEY
Received: from sonic.gate.mail.ne1.yahoo.com by sonic312.consmr.mail.bf2.yahoo.com with HTTP; Fri, 22 Jan 2021 19:47:01 +0000
Received: by smtp407.mail.ne1.yahoo.com (VZM Hermes SMTP Server) with ESMTPA ID 650727960c5a42373047c842310c0e89;  Fri, 22 Jan 2021 19:46:55 +0000 (UTC)
User-Agent: Microsoft-MacOutlook/16.44.20121301
Date: Fri, 22 Jan 2021 14:46:52 -0500
From: Reshad Rahman <reshad@yahoo.com>
To: Mahesh Jethanandani <mjethanandani@gmail.com>, Henning Rogge <hrogge@gmail.com>
CC: Netconf <netconf@ietf.org>
Message-ID: <43B054E1-8834-4178-985F-DB2660E4BAE0@yahoo.com>
Thread-Topic: [netconf] netconf-https-notif-draft HTTP "pipelining"
References: <CAGnRvuqe9iAbkgxak7m8c4UDGEVjmDif0ri5MpeQDm3KcG0viA@mail.gmail.com> <FA4A4A76-817B-4E07-BA5C-614BD76398ED@gmail.com>
In-Reply-To: <FA4A4A76-817B-4E07-BA5C-614BD76398ED@gmail.com>
Mime-version: 1.0
Content-type: multipart/alternative; boundary="B_3694171615_2112389587"
X-Mailer: WebService/1.1.17501 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo Apache-HttpAsyncClient/4.1.4 (Java/11.0.8)
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/5uaFC9Da9NllH5E2rZ-Mk7FDQpI>
Subject: Re: [netconf] netconf-https-notif-draft HTTP "pipelining"
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Jan 2021 19:47:06 -0000

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3694171615_2112389587
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable

Hi Mahesh,

=20

Since draft-ietf-netconf-notification-messages is in parked state, and expi=
red 8 months ago, should the netconf-https-notif document be using bundled m=
essages? But I don=E2=80=99t know the reason why it=E2=80=99s in parked state and whethe=
r it=E2=80=99ll be in drive mode soon.

=20

Regards,

Reshad.

=20

From: netconf <netconf-bounces@ietf.org> on behalf of Mahesh Jethanandani <=
mjethanandani@gmail.com>
Date: Friday, January 22, 2021 at 2:08 PM
To: Henning Rogge <hrogge@gmail.com>
Cc: Netconf <netconf@ietf.org>
Subject: Re: [netconf] netconf-https-notif-draft HTTP "pipelining"

=20

Hi Henning,

=20

The draft was trying to address the question of =E2=80=9Cpipelining=E2=80=9D using two =
methods. One is the equivalent of =E2=80=9CHTTP 1.1 pipelining=E2=80=9D and the other is=
 concept of =E2=80=9Cbundled-messages=E2=80=9D introduced by draft-ietf-netconf-notifica=
tion-messages. In the process it mixed both of them, and thus the contradict=
ion in the example in section 1.5.1.

=20

Let me update the document to fix the example(s), at which point the WG can=
 decide if they want to support one or both the methods.

=20

Thanks.



On Jan 13, 2021, at 11:29 PM, Henning Rogge <hrogge@gmail.com> wrote:

=20

Hi,

I had a longer discussion with Kent Watsen yesterday and he asked me
to get the questions about the netconf-https-notif-draft to the
mailing list:

In section 1.5.1 the draft talks about "pipelining" of messages. Is
this meant equivalent to "HTTP 1.1 pipelining" or is this just a
technique unique to the draft? If this is not something reused from
HTTP, maybe there should be some advice on how this interacts with
normal HTTP server/client code.

Also the example in 1.5.1 seems to contradict each other.

The overview (page 5) shows the Publisher sending HTTPS POST message
once for each notification (which I think is important because the URL
is part of the context of the message)... but the content description
(page 6) does only show a single POST with multiple responses. Same is
true for chapter 8.3.

Henning Rogge

_______________________________________________
netconf mailing list
netconf@ietf.org
https://www.ietf.org/mailman/listinfo/netconf

=20

Mahesh Jethanandani

mjethanandani@gmail.com

=20

=20

=20

=20

_______________________________________________ netconf mailing list netcon=
f@ietf.org https://www.ietf.org/mailman/listinfo/netconf=20


--B_3694171615_2112389587
Content-type: text/html;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:w=3D"urn:schema=
s-microsoft-com:office:word" xmlns:m=3D"http://schemas.microsoft.com/office/20=
04/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta http-equiv=3DC=
ontent-Type content=3D"text/html; charset=3Dutf-8"><meta name=3DGenerator content=3D=
"Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style></head><body lang=3DEN-CA link=3Dblue vlink=3Dpurple style=3D'word-wrap:=
break-word'><div class=3DWordSection1><p class=3DMsoNormal>Hi Mahesh,<o:p></o:p>=
</p><p class=3DMsoNormal><o:p>&nbsp;</o:p></p><p class=3DMsoNormal>Since <span s=
tyle=3D'color:black'>draft-ietf-netconf-notification-messages is in parked sta=
te, and expired 8 months ago, should the netconf-https-notif document be usi=
ng bundled messages? But I don=E2=80=99t know the reason why it=E2=80=99s in parked stat=
e and whether it=E2=80=99ll be in drive mode soon.<o:p></o:p></span></p><p class=3DM=
soNormal><span style=3D'color:black'><o:p>&nbsp;</o:p></span></p><p class=3DMsoN=
ormal><span style=3D'color:black'>Regards,<o:p></o:p></span></p><p class=3DMsoNo=
rmal><span style=3D'color:black'>Reshad.</span><o:p></o:p></p><p class=3DMsoNorm=
al><o:p>&nbsp;</o:p></p><div style=3D'border:none;border-top:solid #B5C4DF 1.0=
pt;padding:3.0pt 0cm 0cm 0cm'><p class=3DMsoNormal><b><span style=3D'font-size:1=
2.0pt;color:black'>From: </span></b><span style=3D'font-size:12.0pt;color:blac=
k'>netconf &lt;netconf-bounces@ietf.org&gt; on behalf of Mahesh Jethanandani=
 &lt;mjethanandani@gmail.com&gt;<br><b>Date: </b>Friday, January 22, 2021 at=
 2:08 PM<br><b>To: </b>Henning Rogge &lt;hrogge@gmail.com&gt;<br><b>Cc: </b>=
Netconf &lt;netconf@ietf.org&gt;<br><b>Subject: </b>Re: [netconf] netconf-ht=
tps-notif-draft HTTP &quot;pipelining&quot;<o:p></o:p></span></p></div><div>=
<p class=3DMsoNormal><o:p>&nbsp;</o:p></p></div><p class=3DMsoNormal>Hi Henning,=
<o:p></o:p></p><div><p class=3DMsoNormal><o:p>&nbsp;</o:p></p></div><div><p cl=
ass=3DMsoNormal>The draft was trying to address the question of =E2=80=9Cpipelining=E2=
=80=9D using two methods. One is the equivalent of =E2=80=9CHTTP 1.1 pipelining=E2=80=9D and=
 the other is concept of =E2=80=9Cbundled-messages=E2=80=9D introduced by draft-ietf-net=
conf-notification-messages. In the process it mixed both of them, and thus t=
he contradiction in the example in section 1.5.1.<o:p></o:p></p></div><div><=
p class=3DMsoNormal><o:p>&nbsp;</o:p></p></div><div><p class=3DMsoNormal>Let me =
update the document to fix the example(s), at which point the WG can decide =
if they want to support one or both the methods.<o:p></o:p></p></div><div><p=
 class=3DMsoNormal><o:p>&nbsp;</o:p></p></div><div><p class=3DMsoNormal>Thanks.<=
o:p></o:p></p><div><p class=3DMsoNormal><br><br><o:p></o:p></p><blockquote sty=
le=3D'margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=3DMsoNormal>On Jan 13,=
 2021, at 11:29 PM, Henning Rogge &lt;<a href=3D"mailto:hrogge@gmail.com">hrog=
ge@gmail.com</a>&gt; wrote:<o:p></o:p></p></div><p class=3DMsoNormal><o:p>&nbs=
p;</o:p></p><div><div><p class=3DMsoNormal>Hi,<br><br>I had a longer discussio=
n with Kent Watsen yesterday and he asked me<br>to get the questions about t=
he netconf-https-notif-draft to the<br>mailing list:<br><br>In section 1.5.1=
 the draft talks about &quot;pipelining&quot; of messages. Is<br>this meant =
equivalent to &quot;HTTP 1.1 pipelining&quot; or is this just a<br>technique=
 unique to the draft? If this is not something reused from<br>HTTP, maybe th=
ere should be some advice on how this interacts with<br>normal HTTP server/c=
lient code.<br><br>Also the example in 1.5.1 seems to contradict each other.=
<br><br>The overview (page 5) shows the Publisher sending HTTPS POST message=
<br>once for each notification (which I think is important because the URL<b=
r>is part of the context of the message)... but the content description<br>(=
page 6) does only show a single POST with multiple responses. Same is<br>tru=
e for chapter 8.3.<br><br>Henning Rogge<br><br>_____________________________=
__________________<br>netconf mailing list<br><a href=3D"mailto:netconf@ietf.o=
rg">netconf@ietf.org</a><br>https://www.ietf.org/mailman/listinfo/netconf<o:=
p></o:p></p></div></div></blockquote></div><p class=3DMsoNormal><o:p>&nbsp;</o=
:p></p><div><div><div><div><p class=3DMsoNormal><span style=3D'color:black'>Mahe=
sh Jethanandani<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span sty=
le=3D'color:black'><a href=3D"mailto:mjethanandani@gmail.com">mjethanandani@gmai=
l.com</a><o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'co=
lor:black'><o:p>&nbsp;</o:p></span></p></div></div><p class=3DMsoNormal><span =
style=3D'color:black'><o:p>&nbsp;</o:p></span></p></div><p class=3DMsoNormal sty=
le=3D'margin-bottom:12.0pt'><o:p>&nbsp;</o:p></p></div><p class=3DMsoNormal><o:p=
>&nbsp;</o:p></p></div><p class=3DMsoNormal>__________________________________=
_____________ netconf mailing list netconf@ietf.org https://www.ietf.org/mai=
lman/listinfo/netconf <o:p></o:p></p></div></body></html>

--B_3694171615_2112389587--



From nobody Sun Jan 24 23:39:23 2021
Return-Path: <hrogge@gmail.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 831803A0BE9 for <netconf@ietfa.amsl.com>; Sun, 24 Jan 2021 23:39:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.802
X-Spam-Level: 
X-Spam-Status: No, score=0.802 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hs2gL74-Ik3o for <netconf@ietfa.amsl.com>; Sun, 24 Jan 2021 23:39:20 -0800 (PST)
Received: from mail-lj1-x22e.google.com (mail-lj1-x22e.google.com [IPv6:2a00:1450:4864:20::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9D8A3A0BDB for <netconf@ietf.org>; Sun, 24 Jan 2021 23:39:19 -0800 (PST)
Received: by mail-lj1-x22e.google.com with SMTP id f2so8884101ljp.11 for <netconf@ietf.org>; Sun, 24 Jan 2021 23:39:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=ysHK8pxAtpR5Yr8FVKn20zESuzR56CJW7aZF79M5Yvk=; b=HNUzqOBKVh4O4F7GfysWPYxMCMLsZmQ/0tIqZbyNHqlnfnkti9R2Hc3UepjnkEx8z1 GV/c2hFXu60CiFyiXZ36/X0ok5WsJHTpliBVgFr6D7W+RAUpoWWE3Fg7yN0KN1TG/Sak PB37W0ajYZsscfpFpPqtFZbE+KTZDXiF6DpUt75KPtBELdP5SvnW2CnFb+nKOzhG1A3f p8zpaTpJ50o57UwW1xfA+/gMESTZMV3DqxoC9RnFDCiElBnJWkbu2zEiwIK+Ii/JoNos ZFCGhtkmulSxphKZ4zVqhAf/3DOErcsAC7j6kJBI5hZ7D80RLUV9O3R6otVCotKCcSKB 0+RA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=ysHK8pxAtpR5Yr8FVKn20zESuzR56CJW7aZF79M5Yvk=; b=Y08F0yVb2zXuHMkAOkUNIEZBzz1dEbLoQ4TyiOr2odWalI7632r9Jj9bAo9WCZnzme rUeRZVjl8nCPfI+c8p3GqaB5J3B/fzOQ9hkVRHUGB7nO2VLxC9Jssjl5RRea0/8QdLzM zI+lw+TBn4tK+4cGfvo2o32a1pbZdr71GFDFjyboqqI1NGvJ6nkeKun+X+q8xJitBd/B 0nlGE61Fx3KRfVKfbyNhA2Emzh1l8iAKsB7roGzThn1+o3/X/QjZPTHzBsP8R+ioeTZx N0x2j6RtkH55Jg19O96kHEeUHUkF5A1nAF8Ui8B8/uFQVYq30DtNh6H2Lftrb5CF9z/k T/wA==
X-Gm-Message-State: AOAM533x97fHqL3/dr5TnYuoaOrbMJiWwnczhr9tmNZeYYsE5cdHzzR4 uZql1kkI+cKfhSeUy4MKk1Wvj2LKGKvZuXvu7+4=
X-Google-Smtp-Source: ABdhPJy8AVAiSveyj+D9WX89SGnJiVAyJ/SS5mAN+lIk5Mi9HdVFiSnCue2xd3EI+GozQjgNinZXdvENJ3v0xjnI5dE=
X-Received: by 2002:a2e:b88b:: with SMTP id r11mr209914ljp.187.1611560357661;  Sun, 24 Jan 2021 23:39:17 -0800 (PST)
MIME-Version: 1.0
References: <CAGnRvuqe9iAbkgxak7m8c4UDGEVjmDif0ri5MpeQDm3KcG0viA@mail.gmail.com> <FA4A4A76-817B-4E07-BA5C-614BD76398ED@gmail.com> <43B054E1-8834-4178-985F-DB2660E4BAE0@yahoo.com>
In-Reply-To: <43B054E1-8834-4178-985F-DB2660E4BAE0@yahoo.com>
From: Henning Rogge <hrogge@gmail.com>
Date: Mon, 25 Jan 2021 08:38:51 +0100
Message-ID: <CAGnRvurHbsydCJ34GuTW45i4OhhBoRcrH4v6VKA-Mjw98+NtNg@mail.gmail.com>
To: Reshad Rahman <reshad@yahoo.com>
Cc: Mahesh Jethanandani <mjethanandani@gmail.com>, Netconf <netconf@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/eDU2r0SJNNrFfOBhmCfWKKNrnps>
Subject: Re: [netconf] netconf-https-notif-draft HTTP "pipelining"
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Jan 2021 07:39:21 -0000

Hi,

The problem I see with the "bundled messages" method is that it seems
to transmit the URL once... which contains an important part of the
Restconf Semantics... that feels like a strange restriction and
something easy to get wrong.

Henning

On Fri, Jan 22, 2021 at 8:47 PM Reshad Rahman <reshad@yahoo.com> wrote:
>
> Hi Mahesh,
>
>
>
> Since draft-ietf-netconf-notification-messages is in parked state, and ex=
pired 8 months ago, should the netconf-https-notif document be using bundle=
d messages? But I don=E2=80=99t know the reason why it=E2=80=99s in parked =
state and whether it=E2=80=99ll be in drive mode soon.
>
>
>
> Regards,
>
> Reshad.
>
>
>
> From: netconf <netconf-bounces@ietf.org> on behalf of Mahesh Jethanandani=
 <mjethanandani@gmail.com>
> Date: Friday, January 22, 2021 at 2:08 PM
> To: Henning Rogge <hrogge@gmail.com>
> Cc: Netconf <netconf@ietf.org>
> Subject: Re: [netconf] netconf-https-notif-draft HTTP "pipelining"
>
>
>
> Hi Henning,
>
>
>
> The draft was trying to address the question of =E2=80=9Cpipelining=E2=80=
=9D using two methods. One is the equivalent of =E2=80=9CHTTP 1.1 pipelinin=
g=E2=80=9D and the other is concept of =E2=80=9Cbundled-messages=E2=80=9D i=
ntroduced by draft-ietf-netconf-notification-messages. In the process it mi=
xed both of them, and thus the contradiction in the example in section 1.5.=
1.
>
>
>
> Let me update the document to fix the example(s), at which point the WG c=
an decide if they want to support one or both the methods.
>
>
>
> Thanks.
>
>
>
> On Jan 13, 2021, at 11:29 PM, Henning Rogge <hrogge@gmail.com> wrote:
>
>
>
> Hi,
>
> I had a longer discussion with Kent Watsen yesterday and he asked me
> to get the questions about the netconf-https-notif-draft to the
> mailing list:
>
> In section 1.5.1 the draft talks about "pipelining" of messages. Is
> this meant equivalent to "HTTP 1.1 pipelining" or is this just a
> technique unique to the draft? If this is not something reused from
> HTTP, maybe there should be some advice on how this interacts with
> normal HTTP server/client code.
>
> Also the example in 1.5.1 seems to contradict each other.
>
> The overview (page 5) shows the Publisher sending HTTPS POST message
> once for each notification (which I think is important because the URL
> is part of the context of the message)... but the content description
> (page 6) does only show a single POST with multiple responses. Same is
> true for chapter 8.3.
>
> Henning Rogge
>
> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf
>
>
>
> Mahesh Jethanandani
>
> mjethanandani@gmail.com
>
>
>
>
>
>
>
>
>
> _______________________________________________ netconf mailing list netc=
onf@ietf.org https://www.ietf.org/mailman/listinfo/netconf


From nobody Mon Jan 25 06:36:34 2021
Return-Path: <evoit@cisco.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CA8D3A136C; Mon, 25 Jan 2021 06:36:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.721
X-Spam-Level: 
X-Spam-Status: No, score=-7.721 tagged_above=-999 required=5 tests=[DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=U8XDYDW4; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=JrhI30E+
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dg7fasjLZTzU; Mon, 25 Jan 2021 06:36:30 -0800 (PST)
Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B4ECB3A136B; Mon, 25 Jan 2021 06:36:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8545; q=dns/txt; s=iport; t=1611585390; x=1612794990; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=T8eZK/6H1Q6Ta2TiVt2eKiuvs5M4HZZSow84dckHck8=; b=U8XDYDW4PGdsbtz8G0Ubr61C6thd7fUlJKBkDhZtWBzT1pPfNOC8tP2O SRkTYryZb5Wsg1Y3LLerd1mx2cpQ4Q/z/+6jgYC+kaQzoVqUBEaeTDu2u Gfg5QQ+DBANr/3nbP2hkTNZ+xKnKRzfnQIOb+vNtdYX24Hw3r1KeyG20E Y=;
X-Files: smime.p7s : 3975
X-IPAS-Result: =?us-ascii?q?A0CDAAAe1A5g/40NJK1YCh0BAQEBCQESAQUFAUCBOwgBC?= =?us-ascii?q?wGBUlEHdi0uLy8Kh34DhFmJNAOPEYoGgS6BJQNUBAcBAQEKAwEBGA0IAgQBA?= =?us-ascii?q?YQGRAKBeAIlNAkOAgMBAQEDAgMBAQEBBQEBAQIBBgRxhWEBC4VzAQEBBAEBP?= =?us-ascii?q?gEBKwELAQsEAgEIEQQBAQ4hAiULHQgBAQQOBQgGgxmBflcDHw8BDqdRAoold?= =?us-ascii?q?IE0gwUBAQaBMwEDAoNoGIILBwMGgTgBgVKBJIpHJhuBQT+BEUOBWH4+gl0BA?= =?us-ascii?q?QOBLy8FM4MTgiyCSD4bCwRDDgEBUAsYDgEWMxcwnFecMgqCd4EZg0eCaYFnk?= =?us-ascii?q?mGDK4o0lRmUHosfkWUTCYQ2AgICAgQFAg4BAQaBVjqBV3AVO4I1AQEyUBcCD?= =?us-ascii?q?Y4hg3GFFIVEdDcCBgoBAQMJfIoIAYEQAQE?=
IronPort-PHdr: =?us-ascii?q?9a23=3A/idX/BClqZDMAK5ueC6RUyQJPHJ1sqjoPgMT9p?= =?us-ascii?q?ssgq5PdaLm5Zn5IUjD/qw01g3IUJnVrfVehLmev6PhXDkG5pCM+DAHfYdXXh?= =?us-ascii?q?AIwcMRg0Q7AcGDBEG6SZyibyEzEMlYElMw+Xa9PBtUFdrwIVrIrS764TsbAB?= =?us-ascii?q?6qMw1zK6z8EZLTiMLi0ee09tXTbgxEiSD7b6l1KUC9rB7asY8dho4xJw=3D=?= =?us-ascii?q?3D?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="5.79,373,1602547200";  d="p7s'?scan'208";a="632382055"
Received: from alln-core-8.cisco.com ([173.36.13.141]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 25 Jan 2021 14:36:29 +0000
Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by alln-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id 10PEaTkn024787 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 25 Jan 2021 14:36:29 GMT
Received: from xfe-aln-001.cisco.com (173.37.135.121) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 25 Jan 2021 08:36:29 -0600
Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xfe-aln-001.cisco.com (173.37.135.121) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.2.792.3; Mon, 25 Jan 2021 08:36:29 -0600
Received: from NAM12-MW2-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 25 Jan 2021 09:36:28 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Zk1GfLMGMGOcsvKqDWQ/39423dj/defcy3yox19E+j2Rit95iGFRr9fMv522VO8Rq70n+YvNNFbSiLQP3MFxuHAL6l9p126UbBN6w9QCuAN89PlaIGRvo5Za/KdcN2KOwi4tTzi7sjk5j8/CPlTnvq+c1rFq83ZVoZaEhkMcucOGVXBPka1UIqjZwm8EDiHugzLDXsG9LMN/ga038iSgYSGAvbDfyeRP6p++X81yE+XN5flEfTq0Z6d1msOcIbR/1LUrQmJNCKJWfipSRuqJtnfbMgJaGAx68ni/EGRU+hm6ZMxuugJknoE9mJ2AkyL/8qoOsqRssEPBlkj1vEVXsQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TwS/EONUUzRy5jvnF5JGq/n0ICIufHxxJx0+LR5XLkg=; b=jkDVt8IU95LZIBxCCvpsSamDOFSTJr3jBBsjYmwLok3L0LzV/sHclEzMnUXY+cT22D1fTcm6KNPya1OJ6HE7LfrUWqW33QwQDwNMcnD59sDrno+SCxzOhVNw3fjLTPRrwG+QRmPE4UbiJAQxL+AqpFCPgyKcT/T2l4lmQEhrMKX9NF4SD15ZCRV8GCRNLYdiPvdmpu0DH7tSeYrfeKLjWAM9zUvcbnZMqbANPJrpMzA7QRecFvS5Xb6+mJaYG/ylaEzkgDHwD7snCNGbYNwbZpAyvLGihFCzRFXxh3vEFsEddYOoMgyOl3J5uAIwQy+MaocbBGUC8sNzXF+cLca90Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com;  s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TwS/EONUUzRy5jvnF5JGq/n0ICIufHxxJx0+LR5XLkg=; b=JrhI30E+tOBZ+Lcim0yyYPO6i4p5R0A/1JbNM7lJXQIErKO+q2UF/adjXJVI8U1Oy0+2pp+3HZURUoUIgJoN3UZ1FWRLiTm0H/CMYvFJprTV8shpSzsBy5DZKj+G13lkKmBDpd5hJ99+RmnPevQanVtBkOcPJ0VuPXsqMAy3/Sc=
Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by BL0PR11MB3521.namprd11.prod.outlook.com (2603:10b6:208:7b::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3784.17; Mon, 25 Jan 2021 14:36:27 +0000
Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::88f5:c7e1:3338:cecf]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::88f5:c7e1:3338:cecf%3]) with mapi id 15.20.3784.017; Mon, 25 Jan 2021 14:36:27 +0000
From: "Eric Voit (evoit)" <evoit@cisco.com>
To: "draft-ietf-netconf-https-notif@ietf.org" <draft-ietf-netconf-https-notif@ietf.org>
CC: "Rob Wilton (rwilton)" <rwilton@cisco.com>, "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: WGLC: draft-ietf-netconf-https-notif-06
Thread-Index: AdbqdYOgUz15Gs1wTZ6RgVXH+iq7RQGk0X5Q
Date: Mon, 25 Jan 2021 14:36:26 +0000
Message-ID: <BL0PR11MB3122129B92F8B02D99081112A1BD9@BL0PR11MB3122.namprd11.prod.outlook.com>
References: <MN2PR11MB43669EEF05655F07E39FE4BEB5A80@MN2PR11MB4366.namprd11.prod.outlook.com>
In-Reply-To: <MN2PR11MB43669EEF05655F07E39FE4BEB5A80@MN2PR11MB4366.namprd11.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [108.18.114.139]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: d16007d3-255c-4d0a-e5e9-08d8c13e98f1
x-ms-traffictypediagnostic: BL0PR11MB3521:
x-ms-exchange-transport-forked: True
x-microsoft-antispam-prvs: <BL0PR11MB3521C9C12BB1DF70448F262DA1BD9@BL0PR11MB3521.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 3PaCRP7xVnHHw46SLxd/wkS7qpy1kSCacL4ldHs2DyD/ePJ75BHu3TlfilmX/WYwemxCz+p+b+syNqd8NM2AfC9R8LIZ0U39bgLE1z43EFARnjkQFCCplRjyPiLkG0TYrjtG2LBG/elMTCY/llIwzFBYHhZKkCOSW+GshsBgaJua3izIF//Io1EpGn7YoF5g0yxiB4xh+dS3puoClIkgJ9FhnU2UQEabZ5aHQwQtRDnBWPd1PY1XQClGRM1z4fMRz2Q6/4QngZY2yQ2bUbNvAy/Svcuc1GKpNvWcYXXCQk4glrSFk3kJT8L6wyL8TKXo34uAKgyMcmuEEbwuS8kz0dIYVkNxEPbcb77u4uFXDDrPb/uhDUQk9ks1MlwIJaHBlgFmg7iXdvnY1awy5auQ6b8JJhSfhz1dJeF/8+ulh05UvCm+rp+jjAdrSP9JB+Uror9VRBZBKNCX2Lm3s2Le3Q==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE;  SFS:(396003)(346002)(376002)(366004)(136003)(39860400002)(186003)(71200400001)(478600001)(86362001)(66446008)(52536014)(2906002)(66946007)(66556008)(66476007)(5660300002)(966005)(316002)(64756008)(66616009)(54906003)(83380400001)(33656002)(7696005)(6916009)(9686003)(4326008)(450100002)(6506007)(53546011)(76116006)(8936002)(55016002)(8676002)(26005)(99936003); DIR:OUT; SFP:1101; 
x-ms-exchange-antispam-messagedata: =?us-ascii?Q?Km7e7y3hI6ZW7ZSp2xh0ltwt3wWVNQ63ffcpkJmNv0QX3N95v+Qy0D6HSdIs?= =?us-ascii?Q?EJ5sstwCWApnoTece3OI1iCTQgH2Z9iHMji6aJn76DQXjZhWX4QaWQjT8Rvc?= =?us-ascii?Q?3BB/0WkxNZ4rJVoQTP0s2xeB1vNAuiTanS1WOGnEVnWFWEBI/yq0asa+gSES?= =?us-ascii?Q?IH64jfzM5YGlm0MocPAz3SlxKpRshmxe0uWanqp33YIAbZMJjIyRE7z2Pdpx?= =?us-ascii?Q?+vosMAJfhUcWzm3xjHwIYo6BQfgjNlX4obpTCQXQgrZtOmWRBzHsf3zL9ohM?= =?us-ascii?Q?foZwh/kBReN4CP5WEFPvgNngDniTyMm89J+/MswnPnvKauph+mPD4vFDJ69m?= =?us-ascii?Q?oow1EsznwNf/QnLeRF2jZF79eFUKxcxyv8akAflKuPfXJAaMuhkADy3OD3f5?= =?us-ascii?Q?KDenjvcnd7oZM3ziCVn+38/sVwlYWkNpCAYjinIndP4Xolexg456e6uAXxDj?= =?us-ascii?Q?2CeVu7QpSD1dAVE/2Bxf2b2vR9S0b4BIjsTyNhhzlyDnMUxH6OaHf5Y4HTd9?= =?us-ascii?Q?5iUs/83D6kmdoLCpDVPpIjwps/71HTzkAccIF28oNXvKpty8O3croH07qKXT?= =?us-ascii?Q?v8Kwi4iwDnYOI3iXeCEMYsa6bcFZEp7W8SOZg0Z18/6X2wyh+OgZuRfa5IaW?= =?us-ascii?Q?N36eh0MCtqEOprwC8Fl5jWpbp0CDwe29ZO747gfAkSWw8g1C6dYdMXg4Mm/R?= =?us-ascii?Q?JOP8OMCEon1WqAZZis804vPL1+izGHia8A949HKiqaGTHMVPr8VmnTuIwh/q?= =?us-ascii?Q?McRjYFaKkPBAl2QBgRQb6+gt08T2NpxOtU8VgWwobP8UBWMBX2lvIrOMFZ33?= =?us-ascii?Q?FBlcKsL+B6fobaVea1oWIwtUPq5v5wI9RnsVMstJWM6lwFzBIpUbggLQslo0?= =?us-ascii?Q?neWnItxXz62IctEfHWuBsFkDXnrZmWd9arYETUnSW93dTq81uElWx0sXzIle?= =?us-ascii?Q?E28rYATckJva2x06rEEplzQ/eSgDwrEn5HU9+NuDEu/SC3/v6mbvxOBcw7CH?= =?us-ascii?Q?wtwnB822mY5hEyEfDF36jYQFYVF6sqmh9Wk4XK9Ce0nS/LGQDAK+sCUDwTW6?= =?us-ascii?Q?yAmWRcdd?=
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0529_01D6F2FD.8B396350"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BL0PR11MB3122.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d16007d3-255c-4d0a-e5e9-08d8c13e98f1
X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Jan 2021 14:36:26.6920 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: CMNLCMvOjSdxl4TuFdY69dk2st0571YNPb2cnESFTPw87fyZ084NfV36Gm3a7ie0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR11MB3521
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.15, xch-aln-005.cisco.com
X-Outbound-Node: alln-core-8.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/lNAUzFwWM8Ei4l6nZ1s6MWHvbtE>
Subject: Re: [netconf] WGLC: draft-ietf-netconf-https-notif-06
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Jan 2021 14:36:32 -0000

------=_NextPart_000_0529_01D6F2FD.8B396350
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

I have reviewed this document.  I believe it close to being ready.  I do
have three comments:

(1) Section 1.1
There was an interaction in July 2020 about describes why subscription state
change notifications are not included within the draft.
https://mailarchive.ietf.org/arch/msg/netconf/K0jnMW3GZknxihnNjKL4UlFTfoY/
https://mailarchive.ietf.org/arch/msg/netconf/CYOosxZy_-tKKsrCCoLmQeFvEuI/
Actually, we are talking only about a subset of the subscription state
change notifications, as <Subscription-Started> is include within examples
of this document.  

Per Alex and my earlier requests, it would be good to include which state
change notifications are included, and why,  so that others have this
context.  This would allow receivers to understand that the control plane
messages which identify the current state of the subscription on the
subscriber are not available.  Perhaps it might even drive others who might
want this functionality to add this upon the current http-notif.  This might
be worth including in Section 1.1, Applicability Statement.

(2) Section 2.1
Learning Receiver Capabilities is critical, as Configured Subscriptions can
DOS a receiver if adequate protections are not on the publisher.  It would
be useful to list this here so that the topic is not missed in an
implementation.  Alternatively this could be addressed in Section 5.

(3)
In Sections 1.5 and 8.3 there is a reference to
I-D.ietf-netconf-notification-messages.  I am not sure how this impacts the
eventual completion of this draft, but defer to others who know the IETF
process better.

Thanks,
Eric

> -----Original Message-----
> From: netconf <netconf-bounces@ietf.org> On Behalf Of Rob Wilton (rwilton)
> Sent: Thursday, January 14, 2021 8:12 AM
> To: netconf@ietf.org; draft-ietf-netconf-https-notif@ietf.org
> Subject: [netconf] WGLC: draft-ietf-netconf-https-notif-06
> 
> This message begins a two-week WGLC for draft-ietf-netconf-https-notif-06
> ending on Jan 28.  Here is a direct link to the HTML version of the draft:
> 
> 	https://tools.ietf.org/html/draft-ietf-netconf-https-notif-06
> 
> Positive comments, e.g., "I've reviewed this document and believe it is
ready for
> publication", are welcome!  This is useful and important, even from
authors.
> Objections, concerns, and suggestions are also welcomed at this time.
> 
> Please note, the reason that I am making this request rather than the WG
chairs
> is because both chairs are listed as authors on this document.
> 
> Thank you,
> Rob Wilton, OPS AD
> 
> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf

------=_NextPart_000_0529_01D6F2FD.8B396350
Content-Type: application/pkcs7-signature;
	name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw
ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz
Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX
DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g
Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2
tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI
zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl
zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS
qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk
UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD
VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB
BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO
VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup
SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p
+slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg
lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA
AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD
aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD
VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz
guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I
4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG
VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+
FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ
BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC
NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j
BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j
aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG
CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw
NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3
LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF
AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo
0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp
9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt
U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ
MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04
96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv
eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg
Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw
EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM
D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE
S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO
yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M
mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v
Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp
W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB
Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v
c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp
c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E
MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV
HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G
A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr
+GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ
KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0
JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f
1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG
+gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG
A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI
hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjEwMTI1MTQzNjIzWjAjBgkqhkiG
9w0BCQQxFgQUKQCZUqjUV3dr7dmslvnnePt1YdQwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK
EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN
AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK
AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw
CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH
BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B
AQEFAASCAQB0My+OPHQGzKv5JJKbyc/4GV8omkAReBhClMJ2GQ03Z+kPi96pStLbZ6E/Bx4qGdln
i5wjuYcm4xWubJgnLN3XATjEdHf72uAuYsRWfUbefkyEHy1XkoQdzF4T4FbHt5Pw/79I+mbLdfuS
mocet9htEfi46r0dgs9hfvbnf6Vzq5CIBoMumN0QLdcmDDC8Jy0nj02ToD2XYRscayAw6ZDi/i2R
sPo84pO8VqF+17Xl45KCt+KfdNo5wly0oxegST55MhB5M63woTjabTodaQOSHPdh4HwmepVPTQP1
HjEAlvUEhZZhzd2uKk3FtbwISIg++ySaXSrP28eqdP4bQlXnAAAAAAAA

------=_NextPart_000_0529_01D6F2FD.8B396350--


From nobody Mon Jan 25 17:57:44 2021
Return-Path: <010001773c692875-2c22a9f2-80e8-4a16-81f3-c17fbb95b50e-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7137E3A1ABD for <netconf@ietfa.amsl.com>; Mon, 25 Jan 2021 17:57:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.002
X-Spam-Level: 
X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q5Q0uk7xaCjX for <netconf@ietfa.amsl.com>; Mon, 25 Jan 2021 17:57:42 -0800 (PST)
Received: from a48-110.smtp-out.amazonses.com (a48-110.smtp-out.amazonses.com [54.240.48.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED4DC3A1AB4 for <netconf@ietf.org>; Mon, 25 Jan 2021 17:57:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1611626260; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=BdUdSteI2ph/UL0qr7wtmXI9KADR2ctdAljvrN0s1M0=; b=aJzFycGJpl+LwAS3V8CHdi8U/gkO01hygdL7Rr0lEx2Mwd5xs9mu1xDJrAiza0xr bw37IS2ItGVskJjvR0TBRsahAmF4r62s7B0/jnkA/OzRKYDqtYNwm+Fc40eAYrVBuUm ka+2KXDCPKNgjdgaEeLhIjAl3xVbzjBCJveMUN44=
From: Kent Watsen <kent@watsen.net>
Message-ID: <010001773c692875-2c22a9f2-80e8-4a16-81f3-c17fbb95b50e-000000@email.amazonses.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_18EA960C-6134-48A2-878D-C6AEEECB93DD"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Date: Tue, 26 Jan 2021 01:57:40 +0000
In-Reply-To: <43B054E1-8834-4178-985F-DB2660E4BAE0@yahoo.com>
Cc: Mahesh Jethanandani <mjethanandani@gmail.com>, Henning Rogge <hrogge@gmail.com>, "netconf@ietf.org" <netconf@ietf.org>
To: Reshad Rahman <reshad=40yahoo.com@dmarc.ietf.org>
References: <CAGnRvuqe9iAbkgxak7m8c4UDGEVjmDif0ri5MpeQDm3KcG0viA@mail.gmail.com> <FA4A4A76-817B-4E07-BA5C-614BD76398ED@gmail.com> <43B054E1-8834-4178-985F-DB2660E4BAE0@yahoo.com>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.26-54.240.48.110
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/sgOgMRAdgidtHOmn7P2YnA3Qvxc>
Subject: Re: [netconf] netconf-https-notif-draft HTTP "pipelining"
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Jan 2021 01:57:43 -0000

--Apple-Mail=_18EA960C-6134-48A2-878D-C6AEEECB93DD
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Reshad, et. al.,

> Since draft-ietf-netconf-notification-messages is in parked state, and =
expired 8 months ago, should the netconf-https-notif document be using =
bundled messages? But I don=E2=80=99t know the reason why it=E2=80=99s =
in parked state and whether it=E2=80=99ll be in drive mode soon.

There=E2=80=99s an open question as to what extent this draft supports =
draft-ietf-netconf-notification-messages.

Section 2 (Learning Receiver Capabilities) describes how a Publisher can =
discover what optional capabilities a Receiver supports.  The section =
includes an example that shows the URN =E2=80=9Cbinary-encoding:1.0=E2=80=9D=
 being returned. =20

What=E2=80=99s missing, however, is the creation of something like an =
IANA maintained registry for all of the URNs that can be returned by the =
Receiver.

This registry would need to, for instance, contain an initial entry to =
indicate the Receiver supports XML-encoded notifications.  It was/is an =
oversight that it=E2=80=99s not in the draft now.  Mahesh and I are =
working on an update for that.

Back to the "notification-messages=E2=80=9D draft, it also is the case =
that there needs to be a URN for Receivers to use to advertise their =
support for bundled-messages.  The question is if this draft should be =
the one to register the =E2=80=9Cbundled-messages=E2=80=9D capability =
into the new registry, or if the "notification-messages=E2=80=9D draft =
should.

We believe that the "notification-messages=E2=80=9D draft should =
register it because:

  1) In general, the I-D that defines a thing (e.g., a binary-encoding =
for notifs)
      should be the one that registers hooks as needed for the it to be =
used. =20

  2) That this draft and "notification-messages=E2=80=9D are both WG =
docs doesn=E2=80=99t
      change that, especially given that the "notification-messages=E2=80=9D=
 draft is
      expired.=20

  3) We feel uncomfortable having a "notification-messages=E2=80=9D =
example in this
      draft knowing that it will likely be wrong (as already a quick =
review shows
      potential problems)

  4) We prefer this draft not be held in the MISREF state by RFC Editor.


Thusly, we propose to remove the "notification-messages=E2=80=9D =
references from the draft, leaving it to that draft to register a =
capability (for the Receiver to return to the Publisher) and provide =
usage examples.

Comments?

Kent and Mahesh



--Apple-Mail=_18EA960C-6134-48A2-878D-C6AEEECB93DD
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">Hi =
Reshad, et. al.,<div class=3D""><br class=3D""><div><blockquote =
type=3D"cite" class=3D""><div class=3D"WordSection1" style=3D"page: =
WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; =
font-size: 14px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;"><div style=3D"margin: 0cm; font-size: 11pt; font-family: Calibri, =
sans-serif;" class=3D"">Since<span =
class=3D"Apple-converted-space">&nbsp;</span><span style=3D"" =
class=3D"">draft-ietf-netconf-notification-messages is in parked state, =
and expired 8 months ago, should the netconf-https-notif document be =
using bundled messages? But I don=E2=80=99t know the reason why it=E2=80=99=
s in parked state and whether it=E2=80=99ll be in drive mode =
soon.</span></div></div></blockquote><br =
class=3D""></div></div><div>There=E2=80=99s an open question as to what =
extent this draft supports =
draft-ietf-netconf-notification-messages.</div><div><br =
class=3D""></div><div>Section 2 (Learning Receiver Capabilities) =
describes how a Publisher can discover what optional capabilities a =
Receiver supports. &nbsp;The section includes an example that shows the =
URN =E2=80=9Cbinary-encoding:1.0=E2=80=9D being returned. =
&nbsp;</div><div><br class=3D""></div><div>What=E2=80=99s missing, =
however, is the creation of something like an IANA maintained registry =
for all of the URNs that can be returned by the Receiver.</div><div><br =
class=3D""></div><div>This registry would need to, for instance, contain =
an initial entry to indicate the Receiver supports XML-encoded =
notifications. &nbsp;It was/is an oversight that it=E2=80=99s not in the =
draft now. &nbsp;Mahesh and I are working on an update for =
that.</div><div><br class=3D""></div><div>Back to the =
"notification-messages=E2=80=9D draft, it also is the case that there =
needs to be a URN for Receivers to use to advertise their support for =
bundled-messages. &nbsp;The question is if this draft should be the one =
to register the =E2=80=9Cbundled-messages=E2=80=9D capability into the =
new registry, or if&nbsp;<span style=3D"caret-color: rgb(0, 0, 0); =
color: rgb(0, 0, 0);" class=3D"">the "notification-messages=E2=80=9D =
draft should.</span></div><div><br class=3D""></div><div>We believe that =
the "notification-messages=E2=80=9D draft should register it =
because:</div><div><br class=3D""></div><div>&nbsp; 1) In general, the =
I-D that defines a thing (e.g., a binary-encoding for =
notifs)</div><div>&nbsp; &nbsp; &nbsp; should be the one that registers =
hooks as needed for the it to be used. &nbsp;</div><div><br =
class=3D""></div><div>&nbsp; 2) That this draft and&nbsp;<span =
style=3D"color: rgb(0, 0, 0);" class=3D"">"notification-messages=E2=80=9D =
are both WG docs doesn=E2=80=99t</span></div><div><span style=3D"color: =
rgb(0, 0, 0);" class=3D"">&nbsp; &nbsp; &nbsp; change that, =
especially&nbsp;</span><span style=3D"color: rgb(0, 0, 0);" =
class=3D"">given that&nbsp;</span><span style=3D"color: rgb(0, 0, 0); =
caret-color: rgb(0, 0, 0);" class=3D"">the "notification-messages=E2=80=9D=
 draft is</span></div><div><span style=3D"color: rgb(0, 0, 0); =
caret-color: rgb(0, 0, 0);" class=3D"">&nbsp; &nbsp; &nbsp; =
expired.</span><span style=3D"color: rgb(0, 0, 0);" =
class=3D"">&nbsp;</span></div><div><br class=3D""></div><div>&nbsp; 3) =
We feel uncomfortable having a&nbsp;<span style=3D"caret-color: rgb(0, =
0, 0); color: rgb(0, 0, 0);" =
class=3D"">"notification-messages=E2=80=9D</span>&nbsp;example in =
this</div><div>&nbsp; &nbsp; &nbsp; draft knowing that it will likely be =
wrong (as already a quick review&nbsp;<span style=3D"caret-color: rgb(0, =
0, 0); color: rgb(0, 0, 0);" class=3D"">shows</span></div><div>&nbsp; =
&nbsp; &nbsp; potential problems)</div><div><br =
class=3D""></div><div>&nbsp; 4) We prefer this draft not be held in the =
MISREF state by RFC Editor.</div><div><br class=3D""></div><div><br =
class=3D""></div><div>Thusly, we propose to remove the&nbsp;<span =
style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" =
class=3D"">"notification-messages=E2=80=9D</span><font color=3D"#000000" =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" =
class=3D"">&nbsp;references from the draft,&nbsp;</span></font><span =
style=3D"color: rgb(0, 0, 0);" class=3D"">leaving it to that&nbsp;draft =
to register a&nbsp;capability (for the Receiver to return to =
the&nbsp;</span><span style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, =
0, 0);" class=3D"">Publisher) and provide usage =
examples.</span></div><div><br =
class=3D""></div><div>Comments?</div><div><br class=3D""></div><div>Kent =
and Mahesh</div><div><br class=3D""></div><div><br =
class=3D""></div></body></html>=

--Apple-Mail=_18EA960C-6134-48A2-878D-C6AEEECB93DD--


From nobody Wed Jan 27 09:01:52 2021
Return-Path: <noreply@ietf.org>
X-Original-To: netconf@ietf.org
Delivered-To: netconf@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 84A6F3A0C8A; Wed, 27 Jan 2021 09:01:50 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Acee Lindem via Datatracker <noreply@ietf.org>
To: <yang-doctors@ietf.org>
Cc: draft-ietf-netconf-https-notif.all@ietf.org, last-call@ietf.org, netconf@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 7.24.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <161176691048.5494.2373231790931856179@ietfa.amsl.com>
Reply-To: Acee Lindem <acee@cisco.com>
Date: Wed, 27 Jan 2021 09:01:50 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/9dpwQHFIwhpPQxdKNLfLKOSNerE>
Subject: [netconf] Yangdoctors last call review of draft-ietf-netconf-https-notif-06
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Jan 2021 17:01:51 -0000

Reviewer: Acee Lindem
Review result: Almost Ready

The document is almost ready for WG Last Call. I have the following comments:

Model ietf-sub-notif-recv-list:

    Seems odd to have a model that adds a choice statement without any
    valid options. I realize you expect other transports in the future but
    having a separate module the one defined in the same draft seems like a
    profligate design choice.

Model ietf-sub-notif-recv-list:
    1. The prefix "hn" seems inconsistent to lose the context. I'd use
        "snrlhn".  This wouldn't be an issue if you combined the modules.
    2. This comment is incomprehensible:

               // create the logical impossibility of enabling "tcp"
               // transport

In the IANA section, the security considerations for the media types
point to this draft's security considerations. However, they don't
include the referenced information. It seems these IANA references
should point to other RFCs.

It should be noted that ietf-subscribed-notifications has a number of YANG
errors and warnings.

I also have the following editorial comments:
Acee-Lindems-iMac-2:Desktop acee$ diff -c
draft-ietf-netconf-https-notif-06.txt.orig
draft-ietf-netconf-https-notif-06.txt ***
draft-ietf-netconf-https-notif-06.txt.orig  2021-01-27 10:06:29.000000000 -0500
--- draft-ietf-netconf-https-notif-06.txt       2021-01-27 11:57:13.000000000
-0500
***************
*** 17,23 ****
     This document defines a YANG data module for configuring HTTPS based
     configured subscription, as defined in RFC 8639.  The use of HTTPS
     maximizes transport-level interoperability, while allowing for
!    encoding selection from text, e.g.  XML or JSON, to binary.

  Status of This Memo

--- 17,23 ----
     This document defines a YANG data module for configuring HTTPS based
     configured subscription, as defined in RFC 8639.  The use of HTTPS
     maximizes transport-level interoperability, while allowing for
!    encoding selection from text, e.g.,  XML or JSON, to binary.

  Status of This Memo

***************
*** 103,109 ****
     documents.  This document defines two YANG 1.1 [RFC7950] data
     modules, one for augmenting the Subscription to YANG Notifications
     [RFC8639] to add a transport type, and another for configuring and
!    managing HTTPS based receivers for the notifications.

--- 103,109 ----
     documents.  This document defines two YANG 1.1 [RFC7950] data
     modules, one for augmenting the Subscription to YANG Notifications
     [RFC8639] to add a transport type, and another for configuring and
!    managing HTTPS-based receivers for the notifications.

***************
*** 118,124 ****
     the same receiver instance.  The second module describes how to
     enable the transmission of YANG modeled notifications, in the
     configured encoding (i.e., XML, JSON) over HTTPS.  Notifications are
!    delivered in the form of a HTTPS POST.  The use of HTTPS maximizes
     transport-level interoperability, while the encoding selection pivots
     between implementation simplicity (XML, JSON) and throughput (text
     versus binary).
--- 118,124 ----
     the same receiver instance.  The second module describes how to
     enable the transmission of YANG modeled notifications, in the
     configured encoding (i.e., XML, JSON) over HTTPS.  Notifications are
!    delivered in the form of an HTTPS POST.  The use of HTTPS maximizes
     transport-level interoperability, while the encoding selection pivots
     between implementation simplicity (XML, JSON) and throughput (text
     versus binary).
***************
*** 196,202 ****

     In the case of "pipelining", the flow of messages would look
     something like this.  This example shows the flow assuming that
!    Subscribed Notifications is used and therefore a <subscription-
     started> notification is sent before sending the first notification.
     The example would be the same for when Subscribed Notification is not
     used by removing the first POST message for <susbscription-started>.
--- 196,202 ----

     In the case of "pipelining", the flow of messages would look
     something like this.  This example shows the flow assuming that
!    Subscribed Notification is used and therefore a <subscription-
     started> notification is sent before sending the first notification.
     The example would be the same for when Subscribed Notification is not
     used by removing the first POST message for <susbscription-started>.
***************
*** 342,350 ****

  2.1.  Introduction

!    To learn the capabilities of the receiver, the publisher can issue a
     HTTPS GET request with Accept-Type set to application/ietf-https-
!    notif-cap+xml or application/ietf-https-notif-cap+json, with latter
     as the mandatory to implement, and the default in case the type is
     not specified.  If the receiver supports capabilities such as binary
     encoding of data, it can return that as a capability in a response.
--- 342,350 ----

  2.1.  Introduction

!    To learn the capabilities of the receiver, the publisher can issue an
     HTTPS GET request with Accept-Type set to application/ietf-https-
!    notif-cap+xml or application/ietf-https-notif-cap+json, with the latter
     as the mandatory to implement, and the default in case the type is
     not specified.  If the receiver supports capabilities such as binary
     encoding of data, it can return that as a capability in a response.
***************
*** 450,456 ****
  Internet-Draft        HTTPS Configured Subscription        November 2020

!      Copyright (c) 2018 IETF Trust and the persons identified as
       the document authors.  All rights reserved.
       Redistribution and use in source and binary forms, with or
       without modification, is permitted pursuant to, and subject
--- 450,456 ----
  Internet-Draft        HTTPS Configured Subscription        November 2020

!      Copyright (c) 2021 IETF Trust and the persons identified as
       the document authors.  All rights reserved.
       Redistribution and use in source and binary forms, with or
       without modification, is permitted pursuant to, and subject
***************
*** 536,545 ****

     This YANG module is a definition of a set of receivers that are
     interested in the notifications published by the publisher.  The
!    module contains the TCP, TLS and HTTPS parameters that are needed to
     communicate with the receiver.  The module augments the ietf-sub-
     notif-recv-list module to define a transport specific receiver.  As
!    mentioned earlier, it uses POST method to deliver the notification.
     The attribute 'path' defines the path for the resource on the
     receiver, as defined by 'path-absolute' in URI Generic Syntax
     [RFC3986].  The user-id used by Network Configuration Access Control
--- 536,545 ----

     This YANG module is a definition of a set of receivers that are
     interested in the notifications published by the publisher.  The
!    module contains the TCP, TLS, and HTTPS parameters that are needed to
     communicate with the receiver.  The module augments the ietf-sub-
     notif-recv-list module to define a transport specific receiver.  As
!    mentioned earlier, it uses the POST method to deliver the notification.
     The attribute 'path' defines the path for the resource on the
     receiver, as defined by 'path-absolute' in URI Generic Syntax
     [RFC3986].  The user-id used by Network Configuration Access Control
***************
*** 639,645 ****
       description
         "YANG module for configuring HTTPS base configuration.

!         Copyright (c) 2018 IETF Trust and the persons identified as
          the document authors.  All rights reserved.
          Redistribution and use in source and binary forms, with or
          without modification, is permitted pursuant to, and subject
--- 639,645 ----
       description
         "YANG module for configuring HTTPS base configuration.

!         Copyright (c) 2021 IETF Trust and the persons identified as
          the document authors.  All rights reserved.
          Redistribution and use in source and binary forms, with or
          without modification, is permitted pursuant to, and subject
***************
*** 704,710 ****

             container receiver-identity {
               description
!                "Specifies mechanism for identifying the receiver.
                  The publisher MUST NOT include any content in a
                  notification that the user is not authorized to view.";

--- 704,710 ----

             container receiver-identity {
               description
!                "Specifies the mechanism for identifying the receiver.
                  The publisher MUST NOT include any content in a
                  notification that the user is not authorized to view.";

***************
*** 791,801 ****

  6.  Receiving Event Notifications

!    Encoding notifications for the HTTPS notifications is the same as the
     encoding notifications as defined in RESTCONF [RFC8040] Section 6.4,
     with the following changes.  Instead of saying that for JSON-encoding
     purposes, the module name for "notification" element will be "ietf-
!    restconf, it will say that for JSON-encoding purposes, the module
     name for "notification" element will be "ietf-https-notif".

     With those changes, the SSE event notification encoded JSON example
--- 791,801 ----

  6.  Receiving Event Notifications

!    Encoding notifications for the HTTPS notifications is the same as for
     encoding notifications as defined in RESTCONF [RFC8040] Section 6.4,
     with the following changes.  Instead of saying that for JSON-encoding
     purposes, the module name for "notification" element will be "ietf-
!    restconf", it will say that for JSON-encoding purposes, the module
     name for "notification" element will be "ietf-https-notif".

     With those changes, the SSE event notification encoded JSON example
***************
*** 815,826 ****

  7.  IANA Considerations

!    This document registers two URI, two YANG module and two Media Types.

  7.1.  URI Registration

     in the IETF XML registry [RFC3688].  Following the format in RFC
!    3688, the following registration is requested to be made:

     URI: urn:ietf:params:xml:ns:yang:ietf-http-notif
     URI: urn:ietf:params:xml:ns:yang:ietf-sub-notif-recv-list
--- 815,826 ----

  7.  IANA Considerations

!    This document registers two URIs, two YANG modules, and two Media Types.

  7.1.  URI Registration

     in the IETF XML registry [RFC3688].  Following the format in RFC
!    3688, the following registrations are requested to be made:

     URI: urn:ietf:params:xml:ns:yang:ietf-http-notif
     URI: urn:ietf:params:xml:ns:yang:ietf-sub-notif-recv-list
***************
*** 854,860 ****

  7.3.  Media Types

! 7.3.1.  Media Type "application/ietf-https-notif-cap+xml

  Type name: application

--- 854,860 ----

  7.3.  Media Types

! 7.3.1.  Media Type "application/ietf-https-notif-cap+xml"

  Type name: application

***************
*** 917,923 ****

  Provisional registration? (standards tree only): no

! 7.3.2.  Media Type "application/ietf-https-notif-cap+json

  Type name: application

--- 917,923 ----

  Provisional registration? (standards tree only): no

! 7.3.2.  Media Type "application/ietf-https-notif-cap+json"

  Type name: application

***************
*** 1106,1112 ****
  </config>

! 8.2.  Non Subscribed Notification based Configuration

     In the case that it is desired to use HTTPS notif outside of
     Subscribed Notifications, there would have to be a module to define
--- 1106,1112 ----
  </config>

! 8.2.  Non-Subscribed Notification based Configuration

     In the case that it is desired to use HTTPS notif outside of
     Subscribed Notifications, there would have to be a module to define

Thanks,
Acee



From nobody Wed Jan 27 15:33:02 2021
Return-Path: <01000177463160fb-8dd3e153-dd68-4eba-b370-49aed4d02a87-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 945863A0D60; Wed, 27 Jan 2021 15:33:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level: 
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rUzV39IHvAwi; Wed, 27 Jan 2021 15:32:59 -0800 (PST)
Received: from a8-33.smtp-out.amazonses.com (a8-33.smtp-out.amazonses.com [54.240.8.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 832B23A0D64; Wed, 27 Jan 2021 15:32:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1611790377; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=40yNJK1r5WqPRwwAwXrbbDBJ0hRRjym+UlJzylnCe3w=; b=cGTHHuq5tiaj7NxqtHwBAWzEJOX+yroHhTpOE4160TcvnGXyCRr/iDFlV9l1dwZp EfP19lo6weVZWLehNrIFlsTc2BOLLHjclVqZRcThl1pHFQLZyO1bKAqOTwfgpXsG4fl E3CH5SJbnjxybGyD2cRLARa+NSq1hKoGKoZrtg28=
From: Kent Watsen <kent+ietf@watsen.net>
Message-ID: <01000177463160fb-8dd3e153-dd68-4eba-b370-49aed4d02a87-000000@email.amazonses.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_9B6F05B5-F72C-414B-8564-8C142E4E68B1"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Date: Wed, 27 Jan 2021 23:32:57 +0000
In-Reply-To: <01000176b576c690-7bb22a7a-1fb1-485f-bb06-51f3c08d0fdc-000000@email.amazonses.com>
Cc: draft-ietf-netconf-trust-anchors.all@ietf.org, "netconf@ietf.org" <netconf@ietf.org>, Yoav Nir <ynir.ietf@gmail.com>, secdir@ietf.org
To: Benjamin Kaduk <kaduk@mit.edu>
References: <160107496501.14047.597283542214697710@ietfa.amsl.com> <01000174e90a9186-0a4edb66-4120-44b7-a79f-7b9935f6d48f-000000@email.amazonses.com> <010001768d05bf5b-eb6d3807-2d23-45c8-a905-dfdaf9fe5bb3-000000@email.amazonses.com> <20201230011701.GO89068@kduck.mit.edu> <01000176b576c690-7bb22a7a-1fb1-485f-bb06-51f3c08d0fdc-000000@email.amazonses.com>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.27-54.240.8.33
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/0LkbyZhMc892m8xKOWGGIR1XSCQ>
Subject: Re: [netconf] [secdir] [Last-Call] Secdir last call review of draft-ietf-netconf-trust-anchors-13
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Jan 2021 23:33:01 -0000

--Apple-Mail=_9B6F05B5-F72C-414B-8564-8C142E4E68B1
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Ben/Yoav,

I forgot to mention before that the draft supports two ways to store =
symmetric keys and two ways to store private keys.  In general, the two =
ways are =E2=80=9Craw=E2=80=9D and =E2=80=9CCMS=E2=80=9D.  The good =
news, when using CMS, the structure internally includes a field for the =
key's usage.  So, perhaps the resolution is for the Security =
Considerations section to say =E2=80=9CCMS keys are RECOMMENDED=E2=80=A6=E2=
=80=9D?

Details:

1) for asymmetric keys
      - the =E2=80=9Craw=E2=80=9D value is an RSAPrivateKey, =
ECPrivateKey, etc.
      - the =E2=80=9Ccms=E2=80=9D value is an OneAsymmetricKey (from RFC =
5958)
      - the OneAsymmetricKey structure includes a field called =
=E2=80=9Cattributes=E2=80=9D
      - the =E2=80=9Cattributes=E2=80=9D field is of type =
OneAsymmetricKeyAttributes
      - attribute values van come from, e.g., RFC 7906

2) for symmetric keys
      - the =E2=80=9Craw=E2=80=9D value is an octet string
      - the =E2=80=9Ccms=E2=80=9D value is an OneSymmetricKey (from RFC =
6031)
      - the OneSymmetricKey structure includes a field called =
=E2=80=9CsKeyAttrs=E2=80=9D
      - the sKeyAttrs field is of type Attributes
      - SKeyAttributes include "at-pskc-keyUsage"

Kent



> On Dec 30, 2020, at 4:03 PM, Kent Watsen <kent+ietf@watsen.net> wrote:
>=20
> Hi Ben,
>=20
>> This doesn't really fill me with joy.  In short, constraints are =
going to
>> have to be applied at *some* level, even if it's not this one, or the
>> system as a whole is likely to have some very surprising security
>> properties.  I recognize that coming up with a new language to =
describe
>> this sort of constraints is neither fun nor easy (and trying to =
repurpose
>> an existing language, such as that used by X.509, is not without =
issues
>> either), but I'd hope we could come up with something to say about =
how to
>> effectively use constraints on raw public keys.
>=20
> You say constraints have to be applied at some level, but is this true =
when TLS uses a raw key?  Likewise for SSH keys (e.g., ~/.ssh/id_rsa)?
>=20
> I=E2=80=99m extremely hesitant to make this change.  Already this work =
(9 drafts in total) has been in progress for more than 5 years.  Will =
you object during the IETF Last Call if it=E2=80=99s not added?
>=20
> One thing not mentioned before, is that, while the keys are =
unconstrained in the three base drafts (crypto-types, keystore, and =
truststore), the =E2=80=9Ctis-client-server=E2=80=9D and =
=E2=80=9Cssh-client-server=E2=80=9D drafts refine the base YANG models =
to assert that the raw public key must be a SubjectPublicInfo structure =
or an SSH public key, respectively.  In fairness, this only constrains =
the format of the data, not how the keys are used.   That said, this =
approach works with OpenSSH and OpenSSL keys, apparently indicating that =
specifying the raw key=E2=80=99s use isn=E2=80=99t always necessary...
>=20
>=20
>>=20
>> Thanks,
>>=20
>> Ben
>=20
>=20
> Kent
>=20
>=20
> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf


--Apple-Mail=_9B6F05B5-F72C-414B-8564-8C142E4E68B1
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">Hi =
Ben/Yoav,<div class=3D""><br class=3D""></div><div class=3D"">I forgot =
to mention before that the draft supports two ways to store symmetric =
keys and two ways to store private keys. &nbsp;In general, the two ways =
are =E2=80=9Craw=E2=80=9D and =E2=80=9CCMS=E2=80=9D. &nbsp;The good =
news, when using CMS, the structure internally includes a field for the =
key's usage. &nbsp;So, perhaps the resolution is for the Security =
Considerations section to say =E2=80=9CCMS keys are =
RECOMMENDED=E2=80=A6=E2=80=9D?</div><div class=3D""><div><br =
class=3D""></div><div>Details:</div><div><br class=3D""></div><div>1) =
for asymmetric keys</div><div><div>&nbsp; &nbsp; &nbsp; - the =E2=80=9Craw=
=E2=80=9D value is an RSAPrivateKey, ECPrivateKey, etc.</div><div>&nbsp; =
&nbsp; &nbsp; - the =E2=80=9Ccms=E2=80=9D value is an OneAsymmetricKey =
(from RFC 5958)</div><div>&nbsp; &nbsp; &nbsp; - the&nbsp;<font =
color=3D"#000000" class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" =
class=3D"">OneAsymmetricKey structure includes a field =
called&nbsp;=E2=80=9Cattributes=E2=80=9D</span></font></div><div><font =
color=3D"#000000" class=3D"">&nbsp; &nbsp; &nbsp; - =
the&nbsp;=E2=80=9Cattributes=E2=80=9D field is of =
type&nbsp;</font>OneAsymmetricKeyAttributes</div><div>&nbsp; &nbsp; =
&nbsp; - attribute values van come from, e.g., RFC 7906</div><div><br =
class=3D""></div></div><div><div>2) for symmetric keys</div><div>&nbsp; =
&nbsp; &nbsp; - the =E2=80=9Craw=E2=80=9D value is an octet =
string</div><div>&nbsp; &nbsp; &nbsp; - the =E2=80=9Ccms=E2=80=9D value =
is an OneSymmetricKey (from RFC 6031)</div><div>&nbsp; &nbsp; &nbsp; - =
the&nbsp;<span style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" =
class=3D"">OneSymmetricKey structure includes a field =
called&nbsp;</span><font color=3D"#000000" class=3D"">=E2=80=9CsKeyAttrs<s=
pan style=3D"caret-color: rgb(0, 0, 0);" =
class=3D"">=E2=80=9D</span></font></div><div><font color=3D"#000000" =
class=3D"">&nbsp; &nbsp; &nbsp; - the&nbsp;<span style=3D"caret-color: =
rgb(0, 0, 0);" class=3D"">sKeyAttrs field is of =
type&nbsp;</span></font><span style=3D"color: rgb(0, 0, 0); orphans: 2; =
white-space: pre-wrap; widows: 2;" class=3D"">Attributes</span></div><div =
class=3D"">&nbsp; &nbsp; &nbsp; -&nbsp;<span style=3D"color: rgb(0, 0, =
0); orphans: 2; white-space: pre-wrap; widows: 2;" =
class=3D"">SKeyAttributes include =
"</span>at-pskc-keyUsage"</div><div></div></div><div><br =
class=3D""></div><div>Kent</div><div><br class=3D""></div><div><br =
class=3D""></div><div><br class=3D""><blockquote type=3D"cite" =
class=3D""><div class=3D"">On Dec 30, 2020, at 4:03 PM, Kent Watsen =
&lt;<a href=3D"mailto:kent+ietf@watsen.net" =
class=3D"">kent+ietf@watsen.net</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><meta =
http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8" =
class=3D""><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: =
space; line-break: after-white-space;" class=3D"">Hi Ben,<div =
class=3D""><br class=3D""><div class=3D""><div class=3D""><blockquote =
type=3D"cite" class=3D""><div class=3D""><div class=3D"">This doesn't =
really fill me with joy. &nbsp;In short, constraints are going to<br =
class=3D"">have to be applied at *some* level, even if it's not this =
one, or the<br class=3D"">system as a whole is likely to have some very =
surprising security<br class=3D"">properties. &nbsp;I recognize that =
coming up with a new language to describe<br class=3D"">this sort of =
constraints is neither fun nor easy (and trying to repurpose<br =
class=3D"">an existing language, such as that used by X.509, is not =
without issues<br class=3D"">either), but I'd hope we could come up with =
something to say about how to<br class=3D"">effectively use constraints =
on raw public keys.<br class=3D""></div></div></blockquote><div =
class=3D""><br class=3D""></div><div class=3D"">You say constraints have =
to be applied at some level, but is this true when TLS uses a raw key? =
&nbsp;Likewise for SSH keys (e.g.,&nbsp;~/.ssh/id_rsa)?</div><div =
class=3D""><br class=3D""></div><div class=3D"">I=E2=80=99m extremely =
hesitant to make this change. &nbsp;Already this work (9 drafts in =
total) has been in progress for more than 5 years. &nbsp;Will you object =
during the IETF Last Call if it=E2=80=99s not added?</div><div =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" class=3D""><br =
class=3D""></span></div><div class=3D""><font class=3D"">One thing not =
mentioned before, is that, while the keys are unconstrained in the three =
base drafts (crypto-types, keystore, and truststore), the =
=E2=80=9Ctis-client-server=E2=80=9D and =E2=80=9Cssh-client-server=E2=80=9D=
 drafts refine the base YANG models to assert that the raw public key =
must be a SubjectPublicInfo structure or an SSH public key, =
respectively. &nbsp;In fairness, this only constrains the format of the =
data, not how the keys are used. &nbsp; That said, this approach works =
with OpenSSH and OpenSSL keys, apparently indicating that specifying the =
raw key=E2=80=99s use isn=E2=80=99t always necessary...</font></div><div =
style=3D"caret-color: rgb(0, 0, 0);" class=3D""><br class=3D""></div><div =
style=3D"caret-color: rgb(0, 0, 0);" class=3D""><br =
class=3D""></div><blockquote type=3D"cite" class=3D""><div class=3D""><div=
 class=3D""><br class=3D"">Thanks,<br class=3D""><br class=3D"">Ben<br =
class=3D""></div></div></blockquote></div><br class=3D""></div></div><div =
class=3D""><br class=3D""></div><div class=3D"">Kent</div><div =
class=3D""><br class=3D""></div><div class=3D""><br =
class=3D""></div></div>_______________________________________________<br =
class=3D"">netconf mailing list<br class=3D""><a =
href=3D"mailto:netconf@ietf.org" class=3D"">netconf@ietf.org</a><br =
class=3D"">https://www.ietf.org/mailman/listinfo/netconf<br =
class=3D""></div></blockquote></div><br class=3D""></div></body></html>=

--Apple-Mail=_9B6F05B5-F72C-414B-8564-8C142E4E68B1--


From nobody Fri Jan 29 02:34:59 2021
Return-Path: <dodin.roman@gmail.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACF873A0A2E for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 02:34:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level: 
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0fOPx5VE2bjz for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 02:34:54 -0800 (PST)
Received: from mail-pj1-x102b.google.com (mail-pj1-x102b.google.com [IPv6:2607:f8b0:4864:20::102b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F8E33A0A2C for <netconf@ietf.org>; Fri, 29 Jan 2021 02:34:54 -0800 (PST)
Received: by mail-pj1-x102b.google.com with SMTP id s24so5574021pjp.5 for <netconf@ietf.org>; Fri, 29 Jan 2021 02:34:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:from:date:message-id:subject:to; bh=Ff67dPbedsY3xy90TFx93zN0wD+dkAzhiwodawaKFvo=; b=EVmZKb077L2eSNplWTQ5xzzJsOVdVzaxejhQ/rO8l1T3QveW4uOgt58+dx7ro/IgTG hYZZ49AokgOcE/+/JcyYjDFPTUhmOUmuo4mCGJI2p6pT8KlDBlX0DoOUsDtIIZlUyLXO LkPO/21v6zPyJBf1PbqGM9Uu2RZNKJw4dkQYwZhp1EAI776dBy5QjugK55HppjF59deI 9JIEnoL+jxACnRNL3awl+OoKSON47iFrQu5ffLD4ppRgstOa4M4Ujyn3vHp4aXmoCi7f FxaJRKykUUuqltJmwVRfvYTTsmxSh23EoRWmYWEksw5m4NWa5XDn1c3j3DBUZoUIIS6F ZsrQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=Ff67dPbedsY3xy90TFx93zN0wD+dkAzhiwodawaKFvo=; b=B5RQU++BGg6awRDGdp0Du1pqdNBGwF+xk0smBuGm5abM0zAaKhyU2LWVegTScbNn1K +aZhdVMyWnLrHQ348e5G3S4s+Tcgl1JQIi0FrHKPK8WeRetvtCWOZzLE9frQ9lc8cCSz e58zKytKq40QwfxPKmenVMreG/epCtYIFqZAVmr6NzEXrhGQJLn0OnYP6A3rNi1x1sU6 5s5GWQvLHtkzZqy6OeEbmxsvnccZ3pOPT06i8EZzAr+pBA17twSqkMKVDgMwbhq+mus5 BiMorWkw8D7rjtAdjLRG95me+GklPYA6D4zPvmkhbqRVPSYqqNmLLbcR05mS5uJkOl2N 16Xw==
X-Gm-Message-State: AOAM533Crwo4xzlYaYWpxNwoIIpePeOTXOwt0um69H0VVEeU7ATZOYcI JTsbzphYMrmNnurXP2XSpuCn8POEAYq6ysbL7eRtNc+hDvA=
X-Google-Smtp-Source: ABdhPJyH+ONBqnFs4CnNuRwenobelL9t3MN3aWHZErql/HZST78509rmODu7h6bAkdwkuSzOdAisrJ7TfSFb2sUKOio=
X-Received: by 2002:a17:902:b597:b029:e1:54c:634c with SMTP id a23-20020a170902b597b02900e1054c634cmr3529826pls.5.1611916493315; Fri, 29 Jan 2021 02:34:53 -0800 (PST)
MIME-Version: 1.0
From: Roman Dodin <dodin.roman@gmail.com>
Date: Fri, 29 Jan 2021 11:34:27 +0100
Message-ID: <CAFBEvLuet6ACNgwxukmFfn_B4ivuGTpaBGdB1Fe8uCVS3xLQLQ@mail.gmail.com>
To: netconf@ietf.org
Content-Type: multipart/alternative; boundary="000000000000fde43905ba078d20"
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/GbGKSR2QTHZUZHI01EQfPvlFDB4>
Subject: [netconf] creating multiple list entries within a single YANG-PATCH edit-id?
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jan 2021 10:34:57 -0000

--000000000000fde43905ba078d20
Content-Type: text/plain; charset="UTF-8"

Hello all,
is it possible in a YANG-PATCH body to target an entire list with a goal to
create multiple list-entries in a single edit-id?
Or should rather the target be a specific list entry and not the whole list?

Best regards,
Roman

--000000000000fde43905ba078d20
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:verdana,=
sans-serif;font-size:small;color:#330000">Hello all,</div><div class=3D"gma=
il_default" style=3D"font-family:verdana,sans-serif;font-size:small;color:#=
330000">is it possible in a YANG-PATCH body to target an entire list with a=
 goal to create multiple list-entries in a single edit-id?</div><div class=
=3D"gmail_default" style=3D"font-family:verdana,sans-serif;font-size:small;=
color:#330000">Or should rather the target be a specific list entry and not=
 the whole list?</div><div class=3D"gmail_default" style=3D"font-family:ver=
dana,sans-serif;font-size:small;color:#330000"><br></div><div class=3D"gmai=
l_default" style=3D"font-family:verdana,sans-serif;font-size:small;color:#3=
30000">Best regards,</div><div class=3D"gmail_default" style=3D"font-family=
:verdana,sans-serif;font-size:small;color:#330000">Roman</div></div>

--000000000000fde43905ba078d20--


From nobody Fri Jan 29 10:20:05 2021
Return-Path: <010001774f5f7df0-89830501-6d1a-465b-a172-dd95e98e8a3e-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3B813A11F8 for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 10:19:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.917
X-Spam-Level: 
X-Spam-Status: No, score=-1.917 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yPCodTOAgwFy for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 10:19:56 -0800 (PST)
Received: from a48-93.smtp-out.amazonses.com (a48-93.smtp-out.amazonses.com [54.240.48.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79C4C3A11F0 for <netconf@ietf.org>; Fri, 29 Jan 2021 10:19:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1611944394; h=From:Content-Type:Mime-Version:Subject:Message-Id:Date:To:Feedback-ID; bh=Ja7xbD023Wjbsje6FfgWY9RXK9+BrboB37ZRnCJ5RpA=; b=GNtrxtWDqWM4rveKjTBlLKWrIbMTk6geh1caMbxdbTqSo6j+kZeZNSiM41Z17qHI aCM4M7u9Os0nZfJfigs+VKHmb0CHL1Dj9xcX3d3jnUZQZDpxhrgtz1Qo0gDMneQe5IQ RHKfYEokQTI0ZHZxBbkOUEQKG14Mmh1zNSVPa22I=
From: Kent Watsen <kent+ietf@watsen.net>
Content-Type: multipart/alternative; boundary="Apple-Mail=_AEF8B755-B1CA-481C-B512-D0C42A4DB39D"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Message-ID: <010001774f5f7df0-89830501-6d1a-465b-a172-dd95e98e8a3e-000000@email.amazonses.com>
Date: Fri, 29 Jan 2021 18:19:54 +0000
To: "netconf@ietf.org" <netconf@ietf.org>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.29-54.240.48.93
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/EXGJxcmNOvQ7ZY3O7E1a6_UXyjQ>
Subject: [netconf] base64encodedvalue== is an invalid base64 value
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jan 2021 18:19:58 -0000

--Apple-Mail=_AEF8B755-B1CA-481C-B512-D0C42A4DB39D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8


I=E2=80=99m unsure if this issue warrants a fix, but be aware that using =
"base64encodedvalue=3D=3D=E2=80=9C in code doesn't roundtrip correctly:

$ echo "base64encodedvalue=3D=3D" | base64 -d | base64
base64encodedvaluQ=3D=3D

Specifically, there is no binary input that results in =E2=80=9Cue=3D=3D=E2=
=80=9C.

$ echo "ue=3D=3D" | base64 -d | base64
uQ=3D=3D

The reason is a more detailed than this message warrants, but =
effectively, the second sextet is quantized and, worse, none of three =
different implementations I tested against raise a warning, much less an =
error...which is reasonable, IMO.

Options:

1) stick with "base64encodedvalue=3D=3D=E2=80=9C for the examples.
2) use a different value that is a valid base64 string.

Thoughts?


With regards to option #1:
  - still seems okay, as the value never occurs in practice


With regards to option #2:

  - if it is desired to end with =E2=80=9C=3D=3D=E2=80=9C:
      - the last character must be one of [A, Q, g, w]
      - options: b64tag=3D=3D, BASE64DATA=3D=3D

  - if it is desired to end with =E2=80=9C=3D=E2=80=9C:
      - the last character must be one of [A, E, I, M, Q, U, Y, c, g, k, =
o, s, w, 0, 4, 8]
      - options: BASE64VALUE=3D

  - if it is desisired to end with no padding:
      - any alphanumeric string with length%4=3D=3D0 works
      - options: base64encodedval, anybase64val, b64value, base64string


K.






--Apple-Mail=_AEF8B755-B1CA-481C-B512-D0C42A4DB39D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><div =
class=3D""><br class=3D""></div><div class=3D"">I=E2=80=99m unsure if =
this issue warrants a fix, but be aware that using "<font =
color=3D"#000000" class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" =
class=3D"">base64encodedvalue=3D=3D=E2=80=9C in code doesn't roundtrip =
correctly:</span></font></div><div class=3D""><br class=3D""></div><div =
class=3D"">$ echo "base64encodedvalue=3D=3D" | base64 -d | base64<br =
class=3D"">base64encodedvaluQ=3D=3D<br class=3D""><br =
class=3D""></div><div class=3D"">Specifically, there is no binary input =
that results in =E2=80=9Cue=3D=3D=E2=80=9C.</div><div class=3D""><br =
class=3D""></div>$ echo "ue=3D=3D" | base64 -d | base64<br =
class=3D"">uQ=3D=3D<br class=3D""><br class=3D""><div class=3D"">The =
reason is a more detailed than this message warrants, but effectively, =
the second sextet is quantized and, worse, none of three different =
implementations I tested against raise a warning, much less an =
error...which is reasonable, IMO.</div><div class=3D""><br =
class=3D""></div><div class=3D"">Options:</div><div class=3D""><br =
class=3D""></div><div class=3D"">1) stick with&nbsp;<font =
color=3D"#000000" class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" =
class=3D"">"base64encodedvalue=3D=3D=E2=80=9C for the =
examples.</span></font></div><div class=3D""><font color=3D"#000000" =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" class=3D"">2) use =
a different value that is a valid base64 string.</span></font></div><div =
class=3D""><font color=3D"#000000" class=3D""><span style=3D"caret-color: =
rgb(0, 0, 0);" class=3D""><br class=3D""></span></font></div><div =
class=3D""><font color=3D"#000000" class=3D""><span style=3D"caret-color: =
rgb(0, 0, 0);" class=3D"">Thoughts?</span></font></div><div =
class=3D""><font color=3D"#000000" class=3D""><span style=3D"caret-color: =
rgb(0, 0, 0);" class=3D""><br class=3D""></span></font></div><div =
class=3D""><font color=3D"#000000" class=3D""><span style=3D"caret-color: =
rgb(0, 0, 0);" class=3D""><br class=3D""></span></font></div><div =
class=3D""><font color=3D"#000000" class=3D""><span style=3D"caret-color: =
rgb(0, 0, 0);" class=3D"">With regards to option =
#1:</span></font></div><div class=3D""><font color=3D"#000000" =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" class=3D"">&nbsp; =
- still seems okay, as the value never occurs =
in&nbsp;practice</span></font></div><div class=3D""><font =
color=3D"#000000" class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" =
class=3D""><br class=3D""></span></font></div><div class=3D""><font =
color=3D"#000000" class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" =
class=3D""><br class=3D""></span></font></div><div class=3D""><font =
color=3D"#000000" class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" =
class=3D"">With regards to option #2:</span></font></div><div =
class=3D""><font color=3D"#000000" class=3D""><span style=3D"caret-color: =
rgb(0, 0, 0);" class=3D""><br class=3D""></span></font></div><div =
class=3D""><font color=3D"#000000" class=3D"">&nbsp; - if it is desired =
to end with&nbsp;=E2=80=9C=3D=3D=E2=80=9C:</font></div><div =
class=3D""><font color=3D"#000000" class=3D"">&nbsp; &nbsp; &nbsp; - the =
last character must be one of [A, Q, g, w]</font></div><div =
class=3D""><font color=3D"#000000" class=3D"">&nbsp; &nbsp; &nbsp; - =
options:&nbsp;<span style=3D"caret-color: rgb(0, 0, 0);" =
class=3D"">b64tag=3D=3D,&nbsp;BASE64DATA=3D=3D</span></font></div><div =
class=3D""><font color=3D"#000000" class=3D""><br =
class=3D""></font></div><div class=3D""><font color=3D"#000000" =
class=3D"">&nbsp; - if&nbsp;<span style=3D"caret-color: rgb(0, 0, 0);" =
class=3D"">it is desired to end =
with&nbsp;=E2=80=9C=3D=E2=80=9C:</span></font></div><div class=3D""><font =
color=3D"#000000" class=3D"">&nbsp; &nbsp; &nbsp; - the&nbsp;last =
character must be one of [A, E, I, M,&nbsp;</font><span =
style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" =
class=3D"">Q,</span><span style=3D"caret-color: rgb(0, 0, 0); color: =
rgb(0, 0, 0);" class=3D"">&nbsp;U,&nbsp;</span><font color=3D"#000000" =
class=3D"">Y, c,&nbsp;</font><span style=3D"caret-color: rgb(0, 0, 0); =
color: rgb(0, 0, 0);" class=3D"">g, k, o, s, w,&nbsp;</span><span =
style=3D"color: rgb(0, 0, 0);" class=3D"">0, 4, 8]</span></div><div =
class=3D""><span style=3D"color: rgb(0, 0, 0);" class=3D"">&nbsp; &nbsp; =
&nbsp; - options:&nbsp;</span><font color=3D"#000000" class=3D""><span =
style=3D"caret-color: rgb(0, 0, 0);" =
class=3D"">BASE64VALUE=3D</span></font></div><div class=3D""><span =
style=3D"color: rgb(0, 0, 0);" class=3D""><br class=3D""></span></div><div=
 class=3D""><span style=3D"color: rgb(0, 0, 0);" class=3D"">&nbsp; - if =
it is desisired to end with no padding:</span></div><div class=3D""><span =
style=3D"color: rgb(0, 0, 0);" class=3D"">&nbsp; &nbsp; &nbsp; - any =
alphanumeric string with length%4=3D=3D0 works</span></div><div =
class=3D""><span style=3D"color: rgb(0, 0, 0);" class=3D"">&nbsp; &nbsp; =
&nbsp; - options:&nbsp;</span><font color=3D"#000000" class=3D""><span =
style=3D"caret-color: rgb(0, 0, 0);" =
class=3D"">base64encodedval,&nbsp;anybase64val,&nbsp;b64value,&nbsp;base64=
string</span></font></div><div class=3D""><font color=3D"#000000" =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" class=3D""><br =
class=3D""></span></font></div><div class=3D""><font color=3D"#000000" =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" class=3D""><br =
class=3D""></span></font></div><div class=3D""><font color=3D"#000000" =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" =
class=3D"">K.</span></font></div><div class=3D""><font color=3D"#000000" =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" class=3D""><br =
class=3D""></span></font></div><div class=3D""><font color=3D"#000000" =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" class=3D""><br =
class=3D""></span></font></div><div class=3D""><font color=3D"#000000" =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" class=3D""><br =
class=3D""></span></font></div><div class=3D""><font color=3D"#000000" =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" class=3D""><br =
class=3D""></span></font></div><div class=3D""><font color=3D"#000000" =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0);" class=3D""><br =
class=3D""></span></font></div></body></html>=

--Apple-Mail=_AEF8B755-B1CA-481C-B512-D0C42A4DB39D--


From nobody Fri Jan 29 11:11:50 2021
Return-Path: <J.Schoenwaelder@jacobs-university.de>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 930DF3A123D for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 11:11:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MSGID_FROM_MTA_HEADER=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6xrrqp6BCNzM for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 11:11:46 -0800 (PST)
Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150079.outbound.protection.outlook.com [40.107.15.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3288A3A112A for <netconf@ietf.org>; Fri, 29 Jan 2021 11:11:45 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=csBKNCfN1tZ7Z6/5JuKsmuLSpue/u99+YBbM8u/VMa6gyrIQ6Rdj7mQHlF37saXHQSkNB4XrVqkfJV5zRX9qRylmxzS7bYgi1a9oX0Eov6BlAIXVAR91eEyxqGEPvzMKoWmiKLyXG0uPR9hHKkSE5ewjOw7lzECQtX5AaAl1J74W3cCBSn/cSJtvL5UJTboLhsc5kNNsem9MEszat8waPnxjHuJSX6I93cONycHijItLBtChVhlAIgRO7LNa3J5OHdKYmVnSUu46TLNYHl87EoEtBaVlA67VPyEM8RjXpc/Y43Zz8tx0DL90qnbrPx3zYNuP99dnstsyqu8WiTIZ7g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oQPxa4luraVkp6U/06PO1AZRuGnVd/v8no+pK/719pY=; b=GZrAucDqa7BXcePmbVECEKa/si+HXBlywEyujJ0E3z5sVY+UQ0yh+vZP5rxUU0Bv93qGZlyyO7D1Qk+ROYDroClCsB6Rrv9u2FcsxnKx8Ge7RR7Fe1ZB+NyZePoaGHJaR+11I+QrbMg6YJIeVmrAH2nwxem3EkkbCQjwP9fPm4KxQwTtPghaFVxT44Ti5vkHQ9irFfFuglzzo3l6s58s/E4Iwir7YQpiBqSzzHrtpu/DmWXHWRLVwIJjZPYVLMQeIuJ9y3qJtx9cNx8KMjdKfTgrgdPZi70pMeNHtlUoy2iQRUEriHnGd2A/ZM6JYxV3jJE9Zn4JL+3SyS/G6e4XCA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oQPxa4luraVkp6U/06PO1AZRuGnVd/v8no+pK/719pY=; b=bzd+cZqMFPDOphThsHLnWFYRGzNBAUvlfmHhCBWIFOX8hVipqWMLhCZdhJbPF/i/bm6SDiXx3oAwymoun9knB43my8hWwUhhmQgyUCOnIVElc0riSPPA+xDC0Ue9DSn6meybWgrc/stCYiSROki4VEbNdTf4WAJ5GFWctWqCDjw=
Authentication-Results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=jacobs-university.de;
Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23) by AM8P190MB0820.EURP190.PROD.OUTLOOK.COM (2603:10a6:20b:1c5::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3784.13; Fri, 29 Jan 2021 19:11:43 +0000
Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::1ce1:49e3:3e54:804d]) by AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::1ce1:49e3:3e54:804d%4]) with mapi id 15.20.3805.019; Fri, 29 Jan 2021 19:11:43 +0000
Date: Fri, 29 Jan 2021 20:11:42 +0100
From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
To: Kent Watsen <kent+ietf@watsen.net>
Cc: "netconf@ietf.org" <netconf@ietf.org>
Message-ID: <20210129191142.lxhtegbkgan37oyj@anna.jacobs.jacobs-university.de>
Reply-To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
Mail-Followup-To: Kent Watsen <kent+ietf@watsen.net>, "netconf@ietf.org" <netconf@ietf.org>
References: <010001774f5f7df0-89830501-6d1a-465b-a172-dd95e98e8a3e-000000@email.amazonses.com>
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <010001774f5f7df0-89830501-6d1a-465b-a172-dd95e98e8a3e-000000@email.amazonses.com>
X-Originating-IP: [212.201.44.247]
X-ClientProxiedBy: AM0P190CA0003.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:190::13) To AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
Received: from localhost (212.201.44.247) by AM0P190CA0003.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:190::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3805.16 via Frontend Transport; Fri, 29 Jan 2021 19:11:42 +0000
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: b7f3b810-8b6f-4514-d894-08d8c489b6b9
X-MS-TrafficTypeDiagnostic: AM8P190MB0820:
X-MS-Exchange-Transport-Forked: True
X-Microsoft-Antispam-PRVS: <AM8P190MB08209337343F4FBAC5068F12DEB99@AM8P190MB0820.EURP190.PROD.OUTLOOK.COM>
X-MS-Oob-TLC-OOBClassifiers: OLM:9508;
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: ib7jSKSdKxfSRoaGcOWSPhB4ohod7mhHYiFvbeyPcs0s37kMxdcNfCjIk/lWY4ElNGthcOeWfHdISb/ReAW59/jwXl8WE+JmOMxSQacDzhTRCz7FzSDn/MvLr9/H+k4Li1YXSu+pAD66IdgNeLuUvEf9Bhp8Uab2ChQ9Z4ftE41nHWcT9lbpbY9kPoZiCvWHyJJkC0R3HZ1CqZ96Qmab6lta6bpSIa94DTq+PWv4DchWZWNsZKED05crDUbsih5/Ljr1ap7XjfOtCSGiHRtLgGBTKdKClyICD7arOxQeSQnDVdXtEUdLHNWteHnS4viE/52/6yb1rvhNJapfTYmS8O6e7CnRy4mI6h2A16fmxZkYx+5Cj4/Ht3O7gfpYGKDUO7W0MzzKzjpOj243u6eglK3LP8P6HA1qmegqWENWwL0CF3VLSJLvKjwui/96VJ5TyGtdZ79Cw6+rSbGNICBDFkw7afpJnBkpbgZMACL14xinj5PkR1A+AuAJlf3i/hCMcaPZB+SoFwIBd4575yQAfE13G/xEKWj/aZLKmgZYeTdlDSKGN613S1lOZyjWx4lGLqvNseLNXcZPJVLFel0lbIxqyzx1L4JCUdaStPDe1+LxuzOrDTdyA1lANhRd0ZZjxrH3xt4dPDPrqX+yGost4A==
X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:AM0P190MB0641.EURP190.PROD.OUTLOOK.COM; PTR:; CAT:NONE;  SFS:(376002)(39850400004)(396003)(346002)(136003)(366004)(83080400002)(966005)(3450700001)(2906002)(5660300002)(8936002)(186003)(66946007)(956004)(6496006)(8676002)(52116002)(16526019)(4326008)(66476007)(66556008)(86362001)(478600001)(786003)(26005)(1076003)(316002)(83380400001)(6486002); DIR:OUT; SFP:1101; 
X-MS-Exchange-AntiSpam-MessageData: =?utf-8?B?RjArUWtCWUZBMHl2bWpJRms1TW43NGFTTWgwYWl2VTkrKzhJaldmajl6eWRW?= =?utf-8?B?SDdMQTZTNC9Td0lTUHdsRzNSSDZheGdOdlRqdDFPeEtZUWozbU5hbjZSZi9W?= =?utf-8?B?Q2JjRCsxeThCbjdrNDZxMmUyRlJDa0pyTmFRQnM4SUp3NDBHOThucVdpVUgy?= =?utf-8?B?WXNKSlRTdUxjVE1YZW9SS0txbjc0YWh5Y2ZvSWRtbk1RNUxVWUs0MjJNVzFy?= =?utf-8?B?aE5NK3hzaUExUjRGTVVnV0xnSHQzV0Z6Z3NubkVCbW9hTjMxa21QOHZEd0p2?= =?utf-8?B?b1BEYVYxWStTZmdENlh4bkFkVU1wdUZtWEwzS2hVbXJESFI5bGdYQk9lQmpr?= =?utf-8?B?YkN3TWZiTXJJalpyN1lzakk1bE9kVFBSL0hsRVk4ZWM1WTVSVTMxVEU3Rnh4?= =?utf-8?B?TnBEeVZXMjNxMmdMNGZCcVpKcER4Y24yeE1MQWZWaitXcmJoeE1ic1FTd1Jw?= =?utf-8?B?NUlCK0h4amJLWWxrNXhPQ1c5QTBGUCtXQXBpaFVRU1d3UlhGWGVnM3N3N2d5?= =?utf-8?B?ZW1CZHdMQk9DZHRJUmpVQVloa1EyNnFJZTYyVEt5SzhpOFlVOUJrOWJFY2U5?= =?utf-8?B?ekYxaTNqeEdxWG03M2pmalVGcVdQdE0zbVF3WFdaRW9aU0JqZnRraUh0RURI?= =?utf-8?B?NldZa2NoREVlOEhkM3FLZ0JHMXVmOHJSVGtOanpYY0FWMXA2NkRGbTU5bzI4?= =?utf-8?B?dmdDcHhhejZLYTBRN2hubnNtU0RqUkJwWTNCR3V0UlIvd3lhY2h0cFFVcWRl?= =?utf-8?B?VTBDQW53Mk9sRzNobVg0MitvWGdoWUZ2WDZ3Q0hMajdvQTYxZFlvS0cySm8y?= =?utf-8?B?OHZpLzBYcFF1cUhzMHJ2UWg0K1o1WUs2TXM2RHdkWmVrN2VDblFtSktrditB?= =?utf-8?B?VGJXQkxXZ3N4YjVVUDNCK2tOZDdNMWs3VkJqQThUVW1TMG8rTERqdnpKUzVt?= =?utf-8?B?TTlUd3A5T29HdEdCKzVMeWpLTXVlN0pxMGNYK2FERk4xZ1Q5SS9WdXpxRktQ?= =?utf-8?B?Q1dlUCtsNGlHZU9acW1NRk12N1B4WllITkRSWWEyTHR5RDFyMWcvbFV4UHB1?= =?utf-8?B?d1RjbXZuSmlCMHF2ZHNmRWhGZmQyclpESllUK2gyWmEvY1A4WXU3ZksrSllZ?= =?utf-8?B?bHoyN2FIWHpSRlM5bWNZOTFrRGl5NDBBK1FTcW1Ib2JQRkp3UUx5S3YwZTA0?= =?utf-8?B?dy92SlBWeHhYM0ZWWC9rLyt3SEFLQzJLZU81ZFZwUFFxa21QU0x4ZGRvSXVQ?= =?utf-8?B?TktndWh4dGJVSmtuNDNtemg4LzVwZ0k3STJLZjdHK1YxWDBPTklmMkdqc1BU?= =?utf-8?B?Nngwb2IySUdCWjhNUm1LeVlmZjhWSGwzZzNZaXpXQnc5ckp2M0cyQzc0RGR0?= =?utf-8?B?dEpseE1VWTBZNmIzTEtHWmdneDJERnJsSXB6d1FTNVhLQ3dncFFxSjBwQW9m?= =?utf-8?Q?VBliGFgv?=
X-OriginatorOrg: jacobs-university.de
X-MS-Exchange-CrossTenant-Network-Message-Id: b7f3b810-8b6f-4514-d894-08d8c489b6b9
X-MS-Exchange-CrossTenant-AuthSource: AM0P190MB0641.EURP190.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Jan 2021 19:11:42.9764 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: C/UuhuEMTD4OIj6hX7M3UPKT5FTP06Q7jiX2orS+LUr2YaoAd5pfo5eqOe24V6BlTRVPLAkR8V404oFp3r4nFM+DYPEu3O/6hDXkghgWCtU=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM8P190MB0820
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/jtcza_uO5jnUxUtHnTkP83biilM>
Subject: Re: [netconf] base64encodedvalue== is an invalid base64 value
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jan 2021 19:11:49 -0000

Who cares whether this value roundtrips in an examples??

/js

On Fri, Jan 29, 2021 at 06:19:54PM +0000, Kent Watsen wrote:
> 
> I’m unsure if this issue warrants a fix, but be aware that using "base64encodedvalue==“ in code doesn't roundtrip correctly:
> 
> $ echo "base64encodedvalue==" | base64 -d | base64
> base64encodedvaluQ==
> 
> Specifically, there is no binary input that results in “ue==“.
> 
> $ echo "ue==" | base64 -d | base64
> uQ==
> 
> The reason is a more detailed than this message warrants, but effectively, the second sextet is quantized and, worse, none of three different implementations I tested against raise a warning, much less an error...which is reasonable, IMO.
> 
> Options:
> 
> 1) stick with "base64encodedvalue==“ for the examples.
> 2) use a different value that is a valid base64 string.
> 
> Thoughts?
> 
> 
> With regards to option #1:
>   - still seems okay, as the value never occurs in practice
> 
> 
> With regards to option #2:
> 
>   - if it is desired to end with “==“:
>       - the last character must be one of [A, Q, g, w]
>       - options: b64tag==, BASE64DATA==
> 
>   - if it is desired to end with “=“:
>       - the last character must be one of [A, E, I, M, Q, U, Y, c, g, k, o, s, w, 0, 4, 8]
>       - options: BASE64VALUE=
> 
>   - if it is desisired to end with no padding:
>       - any alphanumeric string with length%4==0 works
>       - options: base64encodedval, anybase64val, b64value, base64string
> 
> 
> K.
> 
> 
> 
> 
> 

> _______________________________________________
> netconf mailing list
> netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf


-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>


From nobody Fri Jan 29 12:05:13 2021
Return-Path: <010001774fbfd0f5-ffebda16-f672-4f31-8b3d-4dd0c404e12e-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56FBC3A1290 for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 12:05:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.917
X-Spam-Level: 
X-Spam-Status: No, score=-1.917 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Uv_M8lm9I1Nq for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 12:05:08 -0800 (PST)
Received: from a48-93.smtp-out.amazonses.com (a48-93.smtp-out.amazonses.com [54.240.48.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 537453A125E for <netconf@ietf.org>; Fri, 29 Jan 2021 12:05:08 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1611950707; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=t7+U+pBvBpsKOlVetTnixMiOBlXf9+VCgys4OL5MACE=; b=VZa0N+VcYYyfs3NJmMv8GdRnDxd3mHAnBUDzVHckj16MH3/usGfhD8G4rgu1YhWy WG53c2cUPdGcIb+frbjA3kNpeecHjhqGgvmiOWVubkCjsZmOaszcY8x04c6fmmo2fZb RNB8tlw8zjylz1+MdvpzUjkJgMejFRvgLpVQiuhE=
From: Kent Watsen <kent+ietf@watsen.net>
Message-ID: <010001774fbfd0f5-ffebda16-f672-4f31-8b3d-4dd0c404e12e-000000@email.amazonses.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_71EF96D3-EEC1-400A-9BE4-C7A98C8A64EB"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Date: Fri, 29 Jan 2021 20:05:06 +0000
In-Reply-To: <20210129191142.lxhtegbkgan37oyj@anna.jacobs.jacobs-university.de>
Cc: "netconf@ietf.org" <netconf@ietf.org>
To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
References: <010001774f5f7df0-89830501-6d1a-465b-a172-dd95e98e8a3e-000000@email.amazonses.com> <20210129191142.lxhtegbkgan37oyj@anna.jacobs.jacobs-university.de>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.29-54.240.48.93
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/chnNzsKquHBT_RSfyP-6w49Gfrk>
Subject: Re: [netconf] base64encodedvalue== is an invalid base64 value
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jan 2021 20:05:11 -0000

--Apple-Mail=_71EF96D3-EEC1-400A-9BE4-C7A98C8A64EB
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> Who cares whether this value roundtrips in examples??

That is why I asked  ;)

It may matter to implementers of a client or a server writing unit tests =
that don=E2=80=99t require valid base64 values, other than that =
they=E2=80=99ll roundtrip correctly.  If they assume this value will =
work, they=E2=80=99re in for a surprise.  I don=E2=80=99t care anymore, =
as I=E2=80=99ve adjusted all my test cases already.

K.




--Apple-Mail=_71EF96D3-EEC1-400A-9BE4-C7A98C8A64EB
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><div =
class=3D""><br class=3D""></div><br class=3D""><div><blockquote =
type=3D"cite" class=3D""><div class=3D""><div class=3D"">Who cares =
whether this value roundtrips in examples??<br =
class=3D""></div></div></blockquote><br class=3D""></div><div>That is =
why I asked &nbsp;;)</div><div><br class=3D""></div><div>It may matter =
to implementers of a client or a server&nbsp;<font color=3D"#000000" =
class=3D"">writing unit tests that don=E2=80=99t require valid base64 =
values, other than that they=E2=80=99ll roundtrip correctly. &nbsp;If =
they assume this value will work, they=E2=80=99re in for a surprise. =
&nbsp;I don=E2=80=99t care anymore, as I=E2=80=99ve adjusted all my test =
cases already.</font></div><div><br class=3D""></div><div>K.</div><div><br=
 class=3D""></div><div><br class=3D""></div><br class=3D""></body></html>=

--Apple-Mail=_71EF96D3-EEC1-400A-9BE4-C7A98C8A64EB--


From nobody Fri Jan 29 14:15:42 2021
Return-Path: <cabo@tzi.org>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 613F63A132D for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 14:15:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qOzgb_pNquMe for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 14:15:38 -0800 (PST)
Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0A3DB3A1324 for <netconf@ietf.org>; Fri, 29 Jan 2021 14:15:37 -0800 (PST)
Received: from [192.168.217.152] (p5089a828.dip0.t-ipconnect.de [80.137.168.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4DSBVV4r4qzyXv; Fri, 29 Jan 2021 23:15:29 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.40.0.2.32\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <20210129191142.lxhtegbkgan37oyj@anna.jacobs.jacobs-university.de>
Date: Fri, 29 Jan 2021 23:15:17 +0100
Cc: Kent Watsen <kent+ietf@watsen.net>, "netconf@ietf.org" <netconf@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <6A06C21C-70F1-40D7-A690-B2AC94BC9CB3@tzi.org>
References: <010001774f5f7df0-89830501-6d1a-465b-a172-dd95e98e8a3e-000000@email.amazonses.com> <20210129191142.lxhtegbkgan37oyj@anna.jacobs.jacobs-university.de>
To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
X-Mailer: Apple Mail (2.3654.40.0.2.32)
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/ezG8OdNe-m_IA7AUB3I9rvu6vsY>
Subject: Re: [netconf] base64encodedvalue== is an invalid base64 value
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jan 2021 22:15:40 -0000

On 29. Jan 2021, at 20:11, Juergen Schoenwaelder =
<j.schoenwaelder@jacobs-university.de> wrote:
>=20
> Who cares whether this value roundtrips in an examples??

I=E2=80=99d expect at least some decent implementations will check for =
RFC 4648=E2=80=99s mandate "These pad bits MUST be set to
   zero by conforming encoders=E2=80=9D, just like some check for the =
right number of equals signs.
Examples that fail in decent implementations are suboptimal.
(They might even be used in arguments to claim that this decency needs =
to be removed.)

Gr=C3=BC=C3=9Fe, Carsten


From nobody Fri Jan 29 15:26:48 2021
Return-Path: <0100017750786b5f-6f9004c8-d56f-4f67-802b-09154dce9f3c-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72EA83A1388 for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 15:26:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nsVevdf4eLZI for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 15:26:46 -0800 (PST)
Received: from a8-96.smtp-out.amazonses.com (a8-96.smtp-out.amazonses.com [54.240.8.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6560D3A1387 for <netconf@ietf.org>; Fri, 29 Jan 2021 15:26:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1611962805; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=gzQnBeTKDiPEOJ+F47OMhyn0xLVE+OBlnkItAnhw+Og=; b=D/1kzMTI1fklmNiJr0Ir1A4txjIIz5jPFwrImG1KYrTMNFyen3XVySmRsgUbWQha KiFUkTc5rl4QXTsILw9T+JZK9kePkLWBdVSD9dPSSO1BfTgFz6EoHxoK5CKLhNQ3LNB 4rieC/Lh3MZ/L1BHmBLy7rRePsx1xokBk87QzOx0=
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
From: Kent Watsen <kent+ietf@watsen.net>
In-Reply-To: <6A06C21C-70F1-40D7-A690-B2AC94BC9CB3@tzi.org>
Date: Fri, 29 Jan 2021 23:26:45 +0000
Cc: "netconf@ietf.org" <netconf@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-ID: <0100017750786b5f-6f9004c8-d56f-4f67-802b-09154dce9f3c-000000@email.amazonses.com>
References: <010001774f5f7df0-89830501-6d1a-465b-a172-dd95e98e8a3e-000000@email.amazonses.com> <20210129191142.lxhtegbkgan37oyj@anna.jacobs.jacobs-university.de> <6A06C21C-70F1-40D7-A690-B2AC94BC9CB3@tzi.org>
To: Carsten Bormann <cabo@tzi.org>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.29-54.240.8.96
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/tcFC9jwwY43AkOefBX6CSRcCNeo>
Subject: Re: [netconf] base64encodedvalue== is an invalid base64 value
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jan 2021 23:26:47 -0000

>> Who cares whether this value roundtrips in an examples??
>=20
> I=E2=80=99d expect at least some decent implementations will check for =
RFC 4648=E2=80=99s mandate "These pad bits MUST be set to
>   zero by conforming encoders=E2=80=9D, just like some check for the =
right number of equals signs.
> Examples that fail in decent implementations are suboptimal.
> (They might even be used in arguments to claim that this decency needs =
to be removed.)



`base64` doesn=E2=80=99t produce a warning:

    $ echo "base64encodedvalue=3D=3D" | base64 -d | base64
    base64encodedvaluQ=3D=3D



`openssl` doesn=E2=80=99t produce a warning:

    $ echo "base64encodedvalue=3D=3D" | openssl enc -d -base64 -A | =
openssl enc -base64 -A
    base64encodedvaluQ=3D=3D



Python doesn=E2=80=99t produce a warning:

    $ printf "import =
binascii\nprint(binascii.b2a_base64(binascii.a2b_base64('base64encodedvalu=
e=3D=3D'), newline=3DFalse).decode('ascii'))" |  python -
    base64encodedvaluQ=3D=3D





From nobody Fri Jan 29 17:48:09 2021
Return-Path: <cabo@tzi.org>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FE193A1485 for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 17:48:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level: 
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MB6fmEKHy2ah for <netconf@ietfa.amsl.com>; Fri, 29 Jan 2021 17:48:03 -0800 (PST)
Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 301983A1484 for <netconf@ietf.org>; Fri, 29 Jan 2021 17:48:02 -0800 (PST)
Received: from [192.168.217.152] (p5089a828.dip0.t-ipconnect.de [80.137.168.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4DSHCh36z2zyfX; Sat, 30 Jan 2021 02:48:00 +0100 (CET)
Content-Type: multipart/alternative; boundary="Apple-Mail=_359AE3E3-93E5-4869-B1F5-DB95972534BF"
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.40.0.2.32\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <0100017750786b5f-6f9004c8-d56f-4f67-802b-09154dce9f3c-000000@email.amazonses.com>
Date: Sat, 30 Jan 2021 02:47:59 +0100
Cc: "netconf@ietf.org" <netconf@ietf.org>
Message-Id: <A4D41C16-5737-4A59-8FF3-C324FC36567E@tzi.org>
References: <010001774f5f7df0-89830501-6d1a-465b-a172-dd95e98e8a3e-000000@email.amazonses.com> <20210129191142.lxhtegbkgan37oyj@anna.jacobs.jacobs-university.de> <6A06C21C-70F1-40D7-A690-B2AC94BC9CB3@tzi.org> <0100017750786b5f-6f9004c8-d56f-4f67-802b-09154dce9f3c-000000@email.amazonses.com>
To: Kent Watsen <kent+ietf@watsen.net>
X-Mailer: Apple Mail (2.3654.40.0.2.32)
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/AH49Z24FVzbvoMaJAPEwpI54Fss>
Subject: Re: [netconf] base64encodedvalue== is an invalid base64 value
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 30 Jan 2021 01:48:07 -0000

--Apple-Mail=_359AE3E3-93E5-4869-B1F5-DB95972534BF
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

On 30. Jan 2021, at 00:26, Kent Watsen <kent+ietf@watsen.net> wrote:
>=20
>=20
>>> Who cares whether this value roundtrips in an examples??
>>=20
>> I=E2=80=99d expect at least some decent implementations will check =
for RFC 4648=E2=80=99s mandate "These pad bits MUST be set to
>>  zero by conforming encoders=E2=80=9D, just like some check for the =
right number of equals signs.
>> Examples that fail in decent implementations are suboptimal.
>> (They might even be used in arguments to claim that this decency =
needs to be removed.)
>=20
>=20
>=20
> `base64` doesn=E2=80=99t produce a warning:
>=20
>    $ echo "base64encodedvalue=3D=3D" | base64 -d | base64
>    base64encodedvaluQ=3D=3D
>=20
>=20
>=20
> `openssl` doesn=E2=80=99t produce a warning:
>=20
>    $ echo "base64encodedvalue=3D=3D" | openssl enc -d -base64 -A | =
openssl enc -base64 -A
>    base64encodedvaluQ=3D=3D
>=20
>=20
>=20
> Python doesn=E2=80=99t produce a warning:
>=20
>    $ printf "import =
binascii\nprint(binascii.b2a_base64(binascii.a2b_base64('base64encodedvalu=
e=3D=3D'), newline=3DFalse).decode('ascii'))" |  python -
>    base64encodedvaluQ=3D=3D


Thanks for the data points; adding 1=C2=BD more:

$ ruby -rbase64 -e 'puts =
Base64.encode64(Base64.decode64("base64encodedvalue=3D=3D"))'=20
base64encodedvaluQ=3D=3D
$ ruby -rbase64 -e 'puts =
Base64.strict_encode64(Base64.strict_decode64("base64encodedvalue=3D=3D"))=
'
<internal:pack>:281:in `unpack1': invalid base64 (ArgumentError)
	from =
/opt/homebrew/Cellar/ruby/3.0.0_1/lib/ruby/3.0.0/base64.rb:74:in =
`strict_decode64'
	from -e:1:in `<main>'

Checking conformance is a MAY(*) for a decoder, so I=E2=80=99m not =
surprised that many don=E2=80=99t do that.
(Or check only on specific request, as in Ruby.)

I would strongly expect any decoder that is used in a security context =
to actually check, so I *am* surprised by the openssl example above.
(Well, not that much surprised; it is, well, openssl.)

I wouldn=E2=80=99t have reacted to this thread if I hadn=E2=80=99t years =
ago, when writing a random test case generator, been surprised by a =
base64 implementation that did check.
I don=E2=80=99t recollect the details of that, though=E2=80=A6

Gr=C3=BC=C3=9Fe, Carsten

(*) https://tools.ietf.org/html/rfc4648#section-3.5 =
<https://tools.ietf.org/html/rfc4648#section-3.5>
For those not familiar with RFC 2119 interoperability keywords:
MAY means that an implementation is free to do so.
Which raises the interoperability requirement that any peer =
implementation MUST be able to interoperate with an implementation that =
does.
This would be unnecessary to state in this case because that MUST is in =
the paragraph before.
So the intent here apparently was stressing the optionality of checking =
in a decoder.


--Apple-Mail=_359AE3E3-93E5-4869-B1F5-DB95972534BF
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">On =
30. Jan 2021, at 00:26, Kent Watsen &lt;<a =
href=3D"mailto:kent+ietf@watsen.net" =
class=3D"">kent+ietf@watsen.net</a>&gt; wrote:<br =
class=3D""><div><blockquote type=3D"cite" class=3D""><br =
class=3D"Apple-interchange-newline"><div class=3D""><div class=3D""><br =
class=3D""><blockquote type=3D"cite" class=3D""><blockquote type=3D"cite" =
class=3D"">Who cares whether this value roundtrips in an examples??<br =
class=3D""></blockquote><br class=3D"">I=E2=80=99d expect at least some =
decent implementations will check for RFC 4648=E2=80=99s mandate "These =
pad bits MUST be set to<br class=3D""> &nbsp;zero by conforming =
encoders=E2=80=9D, just like some check for the right number of equals =
signs.<br class=3D"">Examples that fail in decent implementations are =
suboptimal.<br class=3D"">(They might even be used in arguments to claim =
that this decency needs to be removed.)<br class=3D""></blockquote><br =
class=3D""><br class=3D""><br class=3D"">`base64` doesn=E2=80=99t =
produce a warning:<br class=3D""><br class=3D""> &nbsp;&nbsp;&nbsp;$ =
echo "base64encodedvalue=3D=3D" | base64 -d | base64<br class=3D""> =
&nbsp;&nbsp;&nbsp;base64encodedvaluQ=3D=3D<br class=3D""><br =
class=3D""><br class=3D""><br class=3D"">`openssl` doesn=E2=80=99t =
produce a warning:<br class=3D""><br class=3D""> &nbsp;&nbsp;&nbsp;$ =
echo "base64encodedvalue=3D=3D" | openssl enc -d -base64 -A | openssl =
enc -base64 -A<br class=3D""> &nbsp;&nbsp;&nbsp;base64encodedvaluQ=3D=3D<b=
r class=3D""><br class=3D""><br class=3D""><br class=3D"">Python =
doesn=E2=80=99t produce a warning:<br class=3D""><br class=3D""> =
&nbsp;&nbsp;&nbsp;$ printf "import =
binascii\nprint(binascii.b2a_base64(binascii.a2b_base64('base64encodedvalu=
e=3D=3D'), newline=3DFalse).decode('ascii'))" | &nbsp;python -<br =
class=3D""> &nbsp;&nbsp;&nbsp;base64encodedvaluQ=3D=3D<br =
class=3D""></div></div></blockquote></div><div class=3D""><br =
class=3D""></div><div class=3D"">Thanks for the data points; adding 1=C2=BD=
 more:</div><div class=3D""><br class=3D""></div><div class=3D""><div =
class=3D"">$ ruby -rbase64 -e 'puts =
Base64.encode64(Base64.decode64("base64encodedvalue=3D=3D"))'&nbsp;</div><=
div class=3D"">base64encodedvaluQ=3D=3D</div></div><div class=3D""><div =
class=3D"">$ ruby -rbase64 -e 'puts =
Base64.strict_encode64(Base64.strict_decode64("base64encodedvalue=3D=3D"))=
'</div><div class=3D"">&lt;internal:pack&gt;:281:in `unpack1': invalid =
base64 (ArgumentError)</div><div class=3D""><span class=3D"Apple-tab-span"=
 style=3D"white-space:pre">	</span>from =
/opt/homebrew/Cellar/ruby/3.0.0_1/lib/ruby/3.0.0/base64.rb:74:in =
`strict_decode64'</div><div class=3D""><span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span>from -e:1:in =
`&lt;main&gt;'</div></div><br class=3D""><div class=3D"">Checking =
conformance is a MAY(*) for a decoder, so I=E2=80=99m not surprised that =
many don=E2=80=99t do that.</div><div class=3D"">(Or check only on =
specific request, as in Ruby.)</div><div class=3D""><br =
class=3D""></div><div class=3D"">I would strongly expect any decoder =
that is used in a security context to actually check, so I *am* =
surprised by the openssl example above.</div><div class=3D"">(Well, not =
that much surprised; it is, well, openssl.)</div><div class=3D""><br =
class=3D""></div><div class=3D"">I wouldn=E2=80=99t have reacted to this =
thread if I hadn=E2=80=99t years ago, when writing a random test case =
generator, been surprised by a base64 implementation that did =
check.</div><div class=3D"">I don=E2=80=99t recollect the details of =
that, though=E2=80=A6</div><div class=3D""><br class=3D""></div><div =
class=3D""><div class=3D"">Gr=C3=BC=C3=9Fe, Carsten</div></div><div =
class=3D""><br class=3D""></div><div class=3D"">(*)&nbsp;<a =
href=3D"https://tools.ietf.org/html/rfc4648#section-3.5" =
class=3D"">https://tools.ietf.org/html/rfc4648#section-3.5</a></div><div =
class=3D"">For those not familiar with RFC 2119 interoperability =
keywords:</div><div class=3D"">MAY means that an implementation is free =
to do so.</div><div class=3D"">Which raises the interoperability =
requirement that any peer implementation MUST be able to interoperate =
with an implementation that does.</div><div class=3D"">This would be =
unnecessary to state in this case because that MUST is in the paragraph =
before.</div><div class=3D"">So the intent here apparently was stressing =
the optionality of checking in a decoder.</div><div class=3D""><br =
class=3D""></div></body></html>=

--Apple-Mail=_359AE3E3-93E5-4869-B1F5-DB95972534BF--


From nobody Sat Jan 30 14:18:47 2021
Return-Path: <reshad@yahoo.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1CC33A11DB for <netconf@ietfa.amsl.com>; Sat, 30 Jan 2021 14:18:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.506
X-Spam-Level: 
X-Spam-Status: No, score=-0.506 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, MALFORMED_FREEMAIL=1.591, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BwH6L7N0sZAI for <netconf@ietfa.amsl.com>; Sat, 30 Jan 2021 14:18:41 -0800 (PST)
Received: from sonic308-2.consmr.mail.bf2.yahoo.com (sonic308-2.consmr.mail.bf2.yahoo.com [74.6.130.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 265493A11DC for <netconf@ietf.org>; Sat, 30 Jan 2021 14:18:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1612045116; bh=QEmo0cUUlZkjaPEWGbUKwIYfwuJrxY1yKedSukvFQ80=; h=Date:Subject:From:To:CC:References:From:Subject:Reply-To; b=Y7KKhPvzJEIl8QErsdvkdA+NoATFsOJV2LxzGBd3k/HILG7WxLKnmNpQhDiwv/WYsb5/GhaZ18/ae9Mr/iC/gOYdQFKzAyTwbVh81rMsXOk9EIhqNrAZ7L+uH6D2L4ucEwsJVR1BusK4zB4viz2s6bzsPtveuLcxkgetcf9SiHijka0GAXM742pGFrE6gWMejs0TckawpT2HpyBRdoaGXqKKJZHdY5C19lMFiyjV04SIOqyJu5A5yURHSpTNU+CmNAn4uo1SjLtyw0/PBCogmH3em8BfpbxWYIyFeEcPmu9bzqNJsLVi6g7tdJWFm96Rrf3EHZhajifcPyEEA7ZRIg==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048;  t=1612045116; bh=DNUpXAsRCxi4VrtNzyDqkDJB99esOZhol1bhtZ5EAIE=;  h=Date:Subject:From:To:From:Subject:Reply-To; b=f0HXt8fDEZt+VryEEi4wE7Kjem804WlY1F2xxGP/9M6O7namfyIY3rOAXztKs/xJN/pQzXaDBVlMkD7/lqYwSTwSXuRgAxgEvF12MWkdV5hHum+h1C2CBNi3oCKaTBOtdoXZVcj+S840o2607s+4TgQ5+Gy9ujxlo6Mye42vTrqHyK/SLWC8DQZ1hHN7eeXUE+cXrMc2BTOMzahANnO5oKa8lOkPkfbZk45Ba/jY36+w9px1e3xc4EB86gJlXGtcR4sZp8S6QgF7DFgP5Y8YLIl6OWRZ7oGtGYnnHR7dQ7eJwDf7DGbyP0Pv5/T+pTBJjdUVaICn+QG6J5yyICAOWQ==
X-YMail-OSG: teLloakVM1k8lx.MpzM5GdmToN2Hhn74SEEMybeClMbbXLTMkABW73IPHWFFUMb lVEBsS6phcImqgS839lZceebmBia7kXlVfKJZlnDy8Y_kGj4huFkDDD9uMNzQVhymfe0ksYZ_3TC 9NPZw_46KeUxsUe5P27CvzqZb81Pe2m2BqHiok1O7S0rsBFJqrerUUgsko8_rJQxapu0ApCGnRF2 N2hSvmVoeFY6DvYEsK5_kHFZ43dU0HYp2QHox_jFauOndnbOG9hPdiUXjOIj52dMmAFtBZ9WBxO7 L1swpRbOe3_VnZqMvyCnPI6KsP.g5etoTotGZTQBifj8zhL4hRMoPyv_cp.sRMQ6GFUOGKs5UFKh nSmpOzbJ8uGyljVWF45FqbsQJskogtXpRGQRwiXAoOLl6KITZPSv8mMZI.uiDnxxjn6ebiR7Aevd M5jBZgsLgifPx2GY7fl3uSQyXVaB3LuklSDf7MKkWP55eoOT.wGB6pUvRrB6zWaL2cmG29n4z9PT vmV1IsEJLvtE65YGbe34RregWVwQRcjFM7cy1TforA29x6wyO_74Bq7GTfkblIzCG0sFYEPqHkxv lI5iGaBFR.uPX_MxWbE1Tuo7TvSWw2sRETFJSKq_.22a0p_qNOaZ7H8kQJPRDF_xoN3.uoEHlcQL apCgF_aRfja1FL5.bbtMHohNPEG7DY9YSeRZaF2zilmtRoOW7sfBqoS8Mu8lGMqgu7uV4.HtY4mO rik_vihzdagmLwzCnPGtUNHetpBNpiTCx3igoYH9O20nYNo74EkjgnvLVvSGk5nRp7I6Rllpe4H. 8U_g.64SzWIsWX8hNonq6RaLF1LbiInNZBZk_3ilYilLIQmRiwbnhFTVgYTvQf2s7SpDmrLcq54O FAqpFyPGL48hAe1M71eU_0SN9KaHJC.2bML20rGNG9POaLsES2.JfF32zSBXGWJpwuVT9Y.zqfio Q8eIyh6UTrazu7iTHr2MjZoXdJWe8P0oXYFl3WJrApCWyQfuvZ0EBaoCeuQdiBpsBLSaxGl1DXqz oyhNl3ZtBPXqsYkx08oz4FHz0R9IzMf1YIesKmaYn8RjQcuURQtQrP_f0tKX0IhShz61Zi9txRRT 4wWOmQ90nasiIDdwiJxsWWQkytuLql5Fe0_.klEtO6A0qSB5SF2KdCusjHpYehHNKdABJaVq6YuD W57p68U8LiKVsoF1QQe_EPw6vOnXqhmQ88W2jDEX2a37I1M_9JPA.8mMmBZj6xg_4s6wbwo.cmEr IF_OkRxmYlfkNV7zliZA9VrnaSfZrIg0peOat7FshGJfKDtTUrlAEjT4ujXulhvtWA94lK_9Ok5t Fl3fZBfF6ZaNifxI0sN07MxNt.EJ0Ma06FozGixSd.ikIfMZceThfbZCMt7nX2bCH8fFi8Awgueo wI5.j7efTgqQxGdOhqHmeh.38Qdq7epfMZ9FEbSTS9kGvTctdXLIRiys7hEZ6QdakIvh828ur8tX 6cQyVnQto.n1KCDx_1hHmgxnXy_fI.xpCkVfO_i1kuUHqMhGJebq8c0KlPuG_tYe8m7T2IDs2jF3 ZUILWqPmfRb1Mu2nIbnz6xmUqGF2sqdUFkPEYlyYR6xkWI57X6AH8154nGWQmvQMWbKLvXLiE9Ny 0Qzn2YZdrCHCRsrQgS0XNK78oxeuuEfRgipJc_c2Vc9WiJ.239XXEHTm.HtHwBgadQAfqg7llBbp o4DUgI8CEVtq01bLchYK_HPvb9XmdfF5tc1hkB_uPgEAWJiDSkIbRy_5ejYKpHxVSG3KqY.uLiEN Wv0KDRtAeaBtYXxlQyEbhkPw7SbdZqHRSQ2Gss1MpotLxiNqJhXhGkjBfB8q7napjuMlJvO_Ienv lUSvjcp39T_UKp.Y20.m5CMe8ImJjrbuG1R.dljaFTk_L48gW7baiBojHQsGcYvrcxqvVLIoWzOG 3g4sF1idDURYNDsBtY2YFq.HW0UpuFS.y.YmoZzUEwnBXYTsF0siMbG9LwN0tJnhSjkW50bmk9iM lfJxvlcCzEX6V4Pc9exHu1HDKXbOH89zX0pdoDysn4ZzvTPxY9vBYr75cGJZJhLN09P.MalB_I.0 0ebXeb0IBCcwYXucjf_NshyW9f.9NpvqpF5dPiF58vRlUylfcA8.S4uDD6t.sW40.ed67I5FZfZp Xt47XQDyacatvqM2NKUZbT4cCnXIpKiEE.AqtBtqwwt1cx86PB7bstIdurse87GAyzkYT9S39223 6kgCDNbN_6Q0WFKb8AP4F70_Idb.yrNKcczPuiZHDub7ytd4oOPKzDMgQoaC3FiVQ8wwIvDYHC6I ZMuuxOLJLp53urNxbeyR3zxyzk6MFkH_nKjAAEwJtEkRyV9vhbjkZB06f27ZPIrqXkC7peunnhou CXED8E4N9vc.gBvaxy3S5aDHm_LcuBy204dYsARlhguQQTGn82pR7ZCtpVL0VZYQ7c6CreU1C5O2 8MsYN58vElip7fuemGcXzEl03bES62OLKR5_Li4FjeG3oPbEDSmeCM1OMXJKDpYmseNmKsKwo7x_ BrHD_rNUVhFDJcLekwc9MMXR2VoYn3sDchGR2.vtcWxAwpBw6nFriM5ukrEBSs5eQ19km2zakFGI 3Ra3kgjZM73MwNxUdCViwMkZqg173ECgWtLs8OVxNZv8k8wkermaqAVyIYQ--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic308.consmr.mail.bf2.yahoo.com with HTTP; Sat, 30 Jan 2021 22:18:36 +0000
Received: by smtp414.mail.bf1.yahoo.com (VZM Hermes SMTP Server) with ESMTPA ID 8c8de3c754f8ab063a1fcfba346eeb13;  Sat, 30 Jan 2021 22:18:31 +0000 (UTC)
User-Agent: Microsoft-MacOutlook/16.44.20121301
Date: Sat, 30 Jan 2021 17:18:29 -0500
From: Reshad Rahman <reshad@yahoo.com>
To: "Rob Wilton (rwilton)" <rwilton=40cisco.com@dmarc.ietf.org>, "netconf@ietf.org" <netconf@ietf.org>
CC: "draft-ietf-netconf-https-notif@ietf.org" <draft-ietf-netconf-https-notif@ietf.org>
Message-ID: <3F58C70C-C0AD-4FBA-9E89-650CC347FEF6@yahoo.com>
Thread-Topic: [netconf] WGLC: draft-ietf-netconf-https-notif-06
Mime-version: 1.0
Content-type: text/plain; charset="UTF-8"
Content-transfer-encoding: quoted-printable
References: <3F58C70C-C0AD-4FBA-9E89-650CC347FEF6.ref@yahoo.com>
X-Mailer: WebService/1.1.17648 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo Apache-HttpAsyncClient/4.1.4 (Java/11.0.8)
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/Ln2OFedHRqDNk_dtX6waho7iynY>
Subject: Re: [netconf] WGLC: draft-ietf-netconf-https-notif-06
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 30 Jan 2021 22:18:46 -0000

Hi,

I've reviewed this document and I think the document will be ready once the=
 changes planned by the authors (regarding notification-messages) are made.

I have a question on the following YANG description. Section 4.1 mentions '=
path-absolute' for the URI but the description below says "Relative URI...".=
 Should this description be clarified/corrected or am I missing something?

             augment "transport/tls/tls/http-client-parameters" {
               leaf path {
                 type string;
                 description
                   "Relative URI to the target resource.";
               }
               description
                 "Augmentation to add a path to the target resource.";
             }

Formatting nit:
            Trust anchors (i.e. CA certs) that are used to authenticat\
  e


Regards,
Reshad.

=EF=BB=BFOn 2021-01-22, 6:27 AM, "netconf on behalf of Rob Wilton (rwilton)" <net=
conf-bounces@ietf.org on behalf of rwilton=3D40cisco.com@dmarc.ietf.org> wrote=
:

    Just to bump this thread as a reminder that the WGLC finishes in 6 days=
.

    Please make time to review this document.

    Regards,
    Rob


    > -----Original Message-----
    > From: netconf <netconf-bounces@ietf.org> On Behalf Of Rob Wilton (rwi=
lton)
    > Sent: 14 January 2021 13:12
    > To: netconf@ietf.org; draft-ietf-netconf-https-notif@ietf.org
    > Subject: [netconf] WGLC: draft-ietf-netconf-https-notif-06
    >=20
    > This message begins a two-week WGLC for draft-ietf-netconf-https-noti=
f-06
    > ending on Jan 28.  Here is a direct link to the HTML version of the d=
raft:
    >=20
    > 	https://tools.ietf.org/html/draft-ietf-netconf-https-notif-06
    >=20
    > Positive comments, e.g., "I've reviewed this document and believe it =
is
    > ready for publication", are welcome!  This is useful and important, e=
ven
    > from authors.  Objections, concerns, and suggestions are also welcome=
d at
    > this time.
    >=20
    > Please note, the reason that I am making this request rather than the
    > WG chairs is because both chairs are listed as authors on this docume=
nt.
    >=20
    > Thank you,
    > Rob Wilton, OPS AD
    >=20
    > _______________________________________________
    > netconf mailing list
    > netconf@ietf.org
    > https://www.ietf.org/mailman/listinfo/netconf

    _______________________________________________
    netconf mailing list
    netconf@ietf.org
    https://www.ietf.org/mailman/listinfo/netconf



From nobody Sun Jan 31 04:54:23 2021
Return-Path: <01000177588220b4-e69a027b-360a-4e2b-af1c-e681d9bd881e-000000@amazonses.watsen.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15B823A0CE8; Sun, 31 Jan 2021 04:54:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.917
X-Spam-Level: 
X-Spam-Status: No, score=-1.917 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mb_8mC8O8U43; Sun, 31 Jan 2021 04:54:20 -0800 (PST)
Received: from a8-83.smtp-out.amazonses.com (a8-83.smtp-out.amazonses.com [54.240.8.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A8D73A0C93; Sun, 31 Jan 2021 04:54:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1612097659; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=TsNaMwjHkgfpJ1e4Z+brRCMJ9JXyjgkApuadw6vIk6c=; b=fxt7EFIEFHMQ5g1NgB8QF8eYn/KF1k2/epreyqRCpqjuaJtwnvuS+y4Ym3ZMPiJ0 8J5+AmzEVw/f/T/Fin4Y30eLtwiM1nCd6xNFqyJTaBTuI90tD8TIck008d1lnRKL1VY V6+lKDOD3ds3q8F+6yFMLPx7xoidf9CyzaehGY/Y=
From: Kent Watsen <kent+ietf@watsen.net>
Message-ID: <01000177588220b4-e69a027b-360a-4e2b-af1c-e681d9bd881e-000000@email.amazonses.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_D82A3DE0-B375-4A89-8F32-60AAC0E2D5A9"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Date: Sun, 31 Jan 2021 12:54:19 +0000
In-Reply-To: <3F58C70C-C0AD-4FBA-9E89-650CC347FEF6@yahoo.com>
Cc: "netconf@ietf.org" <netconf@ietf.org>, "draft-ietf-netconf-https-notif@ietf.org" <draft-ietf-netconf-https-notif@ietf.org>
To: Reshad Rahman <reshad@yahoo.com>
References: <3F58C70C-C0AD-4FBA-9E89-650CC347FEF6.ref@yahoo.com> <3F58C70C-C0AD-4FBA-9E89-650CC347FEF6@yahoo.com>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
X-SES-Outgoing: 2021.01.31-54.240.8.83
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/N9ddi1ST3dmuyhalvjsJOqrHSzo>
Subject: Re: [netconf] WGLC: draft-ietf-netconf-https-notif-06
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 31 Jan 2021 12:54:22 -0000

--Apple-Mail=_D82A3DE0-B375-4A89-8F32-60AAC0E2D5A9
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8


> I've reviewed this document and I think the document will be ready =
once the changes planned by the authors (regarding =
notification-messages) are made.

Thanks, but a couple more problems:

1) the URLs are bad.  Specifically, the example in the =E2=80=9CLearning =
Receiver Capabilities=E2=80=9D section uses a nonsensical URL (=E2=80=98/=E2=
=80=98).   The authors propose to instead use a sub-resource to the =
user-configured =E2=80=9Cpath=E2=80=9D (e.g., GET =
/some/path/capabilities) and move the POST URL to another sub-resource =
(e.g., /some/path/relay-notification).  [see below for more on this]

2) the media-types are bad: =E2=80=9Capplication/yang-data+[xml/json]=E2=80=
=9D is used for notifications, which is wrong since they are not =
YANG-defined, and the custom media-types for capabilities =
(application/ietf-https-notif-cap+[xml/json]) is a way overkill.  The =
authors propose to use =E2=80=9Capplication/[xml/json]=E2=80=9D for both =
cases.


> I have a question on the following YANG description. Section 4.1 =
mentions 'path-absolute' for the URI but the description below says =
"Relative URI...". Should this description be clarified/corrected or am =
I missing something?
>=20
>             augment "transport/tls/tls/http-client-parameters" {
>               leaf path {
>                 type string;
>                 description
>                   "Relative URI to the target resource.";
>               }
>               description
>                 "Augmentation to add a path to the target resource.";
>             }

Agreed.  How about this?

        leaf path {
          type string;
          mandatory true;
          description
            "URI prefix to the target resources.  Under this
             path the receiver must support both the 'capabilities'
             and 'relay-notification' resource targets, as described
             in RFC XXXX.";
        }

So, if path=3D=3D=E2=80=9C/som/path=E2=80=9D, capability-discovery would =
be to "/some/path/capabilities=E2=80=9D and notifications would be sent =
to =E2=80=9C/some/path/relay-notification=E2=80=9D.

Thoughts?


> Formatting nit:
>            Trust anchors (i.e. CA certs) that are used to authenticat\
>  e

Fixed, but the other example cannot be fixed because the =E2=80=9Cxmlns=E2=
=80=9D strings alone are too long, and XML doesn=E2=80=99t internally =
support folding, and the =E2=80=9Cstring=E2=80=9D type doesn=E2=80=99t =
allows for whitespace (include =E2=80=98\n=E2=80=99) both at the =
beginning and end of strings (recall my request for rfc6991-bis to =
define a =E2=80=9Ctoken=E2=80=9D type that would enable the parser to =
discard any found, so our examples could more often be manually-folded).

K.



--Apple-Mail=_D82A3DE0-B375-4A89-8F32-60AAC0E2D5A9
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><div =
class=3D""><br class=3D""></div><div><blockquote type=3D"cite" =
class=3D""><div class=3D""><div class=3D"">I've reviewed this document =
and I think the document will be ready once the changes planned by the =
authors (regarding notification-messages) are made.<br =
class=3D""></div></div></blockquote><div><br class=3D""></div><div>Thanks,=
 but a couple more problems:</div><div><br class=3D""></div><div>1) the =
URLs are bad. &nbsp;Specifically, the example in the =E2=80=9CLearning =
Receiver Capabilities=E2=80=9D section uses a nonsensical URL (=E2=80=98/=E2=
=80=98). &nbsp; The authors propose to instead use a sub-resource to the =
user-configured =E2=80=9Cpath=E2=80=9D (e.g., GET =
/some/path/capabilities) and move the POST URL to another sub-resource =
(e.g., /some/path/relay-notification). &nbsp;[see below for more on =
this]</div><div><br class=3D""></div><div>2) the media-types are bad: =
=E2=80=9Capplication/yang-data+[xml/json]=E2=80=9D is used for =
notifications, which is wrong since they are not YANG-defined, and the =
custom media-types for capabilities =
(application/ietf-https-notif-cap+[xml/json]) is a way overkill. =
&nbsp;The<span style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" =
class=3D"">&nbsp;</span><font color=3D"#000000" class=3D"">authors =
propose to use&nbsp;=E2=80=9Capplication/[xml/json]=E2=80=9D for both =
cases.</font></div><div><br class=3D""></div><br class=3D""><blockquote =
type=3D"cite" class=3D""><div class=3D""><div class=3D"">I have a =
question on the following YANG description. Section 4.1 mentions =
'path-absolute' for the URI but the description below says "Relative =
URI...". Should this description be clarified/corrected or am I missing =
something?<br class=3D""><br class=3D""> =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;au=
gment "transport/tls/tls/http-client-parameters" {<br class=3D""> =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;leaf path {<br class=3D""> =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;type string;<br class=3D""> =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;description<br class=3D""> =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"Relative URI to the target =
resource.";<br class=3D""> =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;}<br class=3D""> =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;description<br class=3D""> =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;"Augmentation to add a path to the target =
resource.";<br class=3D""> =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}<=
br class=3D""></div></div></blockquote><div><br =
class=3D""></div><div>Agreed. &nbsp;How about this?</div><div><br =
class=3D""></div><div>&nbsp; &nbsp; &nbsp; =
&nbsp;&nbsp;leaf&nbsp;path&nbsp;{<br class=3D"">&nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp;&nbsp;type&nbsp;string;<br class=3D"">&nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp;&nbsp;mandatory&nbsp;true;<br class=3D"">&nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp;&nbsp;description<br class=3D"">&nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp;&nbsp;"URI prefix to the target =
resources.&nbsp;&nbsp;Under&nbsp;this<br class=3D"">&nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp;path the receiver must support both =
the&nbsp;'capabilities'<br class=3D"">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp;and 'relay-notification' resource targets, =
as&nbsp;described<br class=3D"">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp;in RFC XXXX.";<br class=3D"">&nbsp; &nbsp; &nbsp; =
&nbsp;&nbsp;}<br class=3D""><br class=3D""></div><div>So, if =
path=3D=3D=E2=80=9C/som/path=E2=80=9D, capability-discovery would be to =
"/some/path/<font color=3D"#000000" class=3D"">capabilities=E2=80=9D and =
notifications would be sent =
to&nbsp;=E2=80=9C/some/path/relay-notification=E2=80=9D.</font></div><div>=
<br class=3D""></div><div>Thoughts?</div><div><br =
class=3D""></div><div><br class=3D""></div><blockquote type=3D"cite" =
class=3D""><div class=3D""><div class=3D"">Formatting nit:<br class=3D""> =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Trust =
anchors (i.e. CA certs) that are used to authenticat\<br class=3D""> =
&nbsp;e<br class=3D""></div></div></blockquote><div><br =
class=3D""></div><div>Fixed, but the other example cannot be fixed =
because the =E2=80=9Cxmlns=E2=80=9D strings alone are too long, and XML =
doesn=E2=80=99t internally support folding, and the =E2=80=9Cstring=E2=80=9D=
 type doesn=E2=80=99t allows for whitespace (include =E2=80=98\n=E2=80=99)=
 both at the beginning and end of strings (recall my request for =
rfc6991-bis to define a =E2=80=9Ctoken=E2=80=9D type that would enable =
the parser to discard any found, so our examples could more often be =
manually-folded).</div></div><br class=3D""><div class=3D"">K.</div><div =
class=3D""><br class=3D""></div><div class=3D""><br =
class=3D""></div></body></html>=

--Apple-Mail=_D82A3DE0-B375-4A89-8F32-60AAC0E2D5A9--

