a second separate concern I have about this I-D is the Security Considerations which seem to me to be weak. I would expect more about the hazards of key pairs, keeping the private private, who is the TA for the chain, who generated the key pair and how.
I see a lot of private certificates and key pairs these days driven by the requirements of PC to connect to networks and suspect that there is a disaster there waiting to happen because the risks are not understood and believe that what is being recommended here may fall in the same category. Tom Petch ________________________________________ From: OPSAWG <[email protected]> on behalf of Warren Kumari <[email protected]> Sent: 09 February 2020 21:49 To: Joe Clarke (jclarke) Cc: opsawg; [email protected] Subject: Re: [OPSAWG] WG LC for draft-ietf-opsawg-sdi-02 Dear OpsAWG, As there has been no feedback, I have to assume that you think that this document is **absolutely** perfect, and contains nothing unclear, inaccurate or confusing. Franky, this surprises me - I'd thought that the bit about the penguins was somewhat vague... W (Yes, this is just a thinly veiled attempt to try and get more review and feedback :-)) On Tue, Feb 4, 2020 at 12:41 PM Joe Clarke (jclarke) <[email protected]> wrote: > > With the publication of -02 of this draft, it seems to have reached > stability. There has been interest in both usage an implementation of this > draft expressed in the past, but discussion has been quiet lately. > > This email serves as a two-week start of a WG LC for this document. Please > [re-]read this draft and comment on its content as well as whether or not you > feel it’s ready. WG LC will conclude on February 18, 2020. > > Authors and contributors, please reply on-list as to whether or not you are > aware of any intellectual property attributed to this work. Reply that > either you are not aware of any such IP, or reply with the details of known > IP while also making sure you complete any IPR disclosures in data tracker. > > Joe and Tianran -- I don't think the execution is relevant when it was obviously a bad idea in the first place. This is like putting rabid weasels in your pants, and later expressing regret at having chosen those particular rabid weasels and that pair of pants. ---maf _______________________________________________ OPSAWG mailing list [email protected] https://www.ietf.org/mailman/listinfo/opsawg _______________________________________________ OPSAWG mailing list [email protected] https://www.ietf.org/mailman/listinfo/opsawg
