Mercurial > hg > ietf

annotate satp-core-review.txt @ 19:7f1bd15f2d23

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
getting started
author Henry S. Thompson <ht@inf.ed.ac.uk>
date Tue, 20 Oct 2026 19:49:34 +0100
parents
children 7cf0c76e9749
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
19
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
1 https://datatracker.ietf.org/doc/draft-ietf-satp-core/
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
2 Document: https://www.ietf.org/archive/id/draft-ietf-satp-core-17.html
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
3 Title: Secure Asset Transfer Protocol (SATP) Core
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
4 Reviewer: Henry S. Thompson
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
5 Review Date: Mon Oct 19 13:48:49 2026
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
6
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
7 *Summary*
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
8
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
9 As far as I can tell as a non-specialist, the ... is in good shape.
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
10 There are ... below.
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
11
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
12 This draft is part of a package of at least three parts, including
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
13 also _Secure Asset Transfer (SAT) Interoperability Architecture_ and
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
14 _Secure Asset Transfer (SAT) Use Cases_.
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
15
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
16 *Minor points*
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
17
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
18 1.
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
19
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
20 The restriction to just HTTPS with TLS1.3 is almost certainly not
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
21 what you want. The use of HTTP/2 or QUIC, which requires use of
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
22 TLS1.3, should be allowed.
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
23
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
24 In the Introduction, all that's needed is something along these lines:
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
25
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
26 Secure transfer mechanisms such as HTTPS with TLS no less than 1.3
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
27 must be used.
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
28
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
29 5.3.9 and 5.4 can actually be simplified by switching to language
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
30 which allows for successor messaging systems which offer the same or
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
31 better security than HTTPS with TLS1.3.
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
32
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
33 There might be an argument for a SHOULD support HTTPS with TLS 1.3,
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
34 but only if there is a strong case for encouraging
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
35
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
36 [sender/receiver vs. client/server is confusing at best. Cf. ARCH
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
37 which tries to be clear wrt "sender gateway" and "recipient gateway",
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
38 but uses "client application" for both "originator" and "beneficiary"]
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
39
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
40 *Nits*
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
41
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
42 15.1
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
43
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
44 RFC 8446 is obsolete, should refer to 9846.
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
45
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
46
7f1bd15f2d23 getting started
Henry S. Thompson <ht@inf.ed.ac.uk>
parents:
diff changeset
47