[Dime] Comments on draft-ietf-dime-ikev2-psk-diameter-02

Sebastien Decugis <sdecugis@nict.go.jp> Thu, 05 August 2010 08:20 UTC

Return-Path: <sdecugis@nict.go.jp>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1DB5A3A6ACE for <dime@core3.amsl.com>; Thu, 5 Aug 2010 01:20:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.249
X-Spam-Level:
X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WyAXlShuqOwy for <dime@core3.amsl.com>; Thu, 5 Aug 2010 01:20:40 -0700 (PDT)
Received: from sd-11965.dedibox.fr (sd-11965.dedibox.fr [88.191.67.190]) by core3.amsl.com (Postfix) with ESMTP id 0103B3A6A97 for <dime@ietf.org>; Thu, 5 Aug 2010 01:20:40 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by sd-11965.dedibox.fr (Postfix) with ESMTP id 0039F27DD0 for <dime@ietf.org>; Thu, 5 Aug 2010 10:21:09 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at sd-11965.dedibox.fr
Received: from sd-11965.dedibox.fr ([127.0.0.1]) by localhost (sd-11965.dedibox.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H9Ewuf-nXLtB for <dime@ietf.org>; Thu, 5 Aug 2010 10:21:06 +0200 (CEST)
Received: from [202.249.37.5] (morbier.koganei.wide.ad.jp [202.249.37.5]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by sd-11965.dedibox.fr (Postfix) with ESMTPSA id 4DFB327DCE for <dime@ietf.org>; Thu, 5 Aug 2010 10:21:06 +0200 (CEST)
Message-ID: <4C5A7463.2080603@nict.go.jp>
Date: Thu, 05 Aug 2010 17:20:51 +0900
From: Sebastien Decugis <sdecugis@nict.go.jp>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; fr; rv:1.9.2.7) Gecko/20100713 Thunderbird/3.1.1
MIME-Version: 1.0
To: "dime@ietf.org" <dime@ietf.org>
X-Enigmail-Version: 1.1.1
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Subject: [Dime] Comments on draft-ietf-dime-ikev2-psk-diameter-02
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Aug 2010 08:20:41 -0000

Here are my comments on this document. They are only cosmetics. I think the document is ready to be moved forward.

1) What is the purpose of including the Auth-Request-Type AVP in the IKEv2-PSK-Request, since its value is constrained?

2) Security section: This section refers to Master-Security-Association AVP, which is not defined (I believe Key AVP is intended).
I also believe the second paragraph does not belong to this specification, but rather to 
I-D.ietf-dime-local-keytran. However, it does not harm as a reminder.

3) The reference section points to I-D.ietf-dime-local-keytran in version -01 
but the -06 is the latest, maybe an update would be useful.

That's all I have.

Best regards,
Sebastien.

-- 
Sebastien Decugis
Research fellow
Network Architecture Group
NICT (nict.go.jp)