X#NodeArchitecture draft - next steps
| Newsgroups | gmane.ietf.ips |
|---|---|
| Message-ID | <F222151D3323874393F83102D614E05502B6689D@CORPUSMX20A.corp.emc.com> |
This draft is better known as: draft-wysochanski-xkey-iscsi-support-00.txt
This draft will be an official WG draft, but three things
need to happen first:
(1) New security text. The existing "SHOULD" in the security
considerations text needs to be a "MUST". In addition,
there needs to be a sentence pointing out that it may
be important to shield the contents of this key from
observers of network traffic, and that IPsec as specified
for iSCSI in RFC 3720 and 3723 (cite both of them) is an
appropriate tool for this purpose.
(2) New "prevention of abuse" text. The current "The key MUST NOT
be used by iSCSI nodes for things such as ..." is well-
intentioned but does not get the job done. My recollection
of discussion in Dallas is that saying that "functional behavior
of the iSCSI node MUST NOT depend on this key (presence/absence
or value)" may be closer to the mark. The only permitted
(and intended) use of this key is to report it/log it in order
to avoid the browser detection JavaScript disasters caused by
the corresponding HTTP header fields.
(3) The draft needs a new title and file name ("supportability" just
reeks of marketing ;-) ). Let's try:
The iSCSI X#NodeArchitecture Key
draft-ietf-ips-iscsi-nodearch-key-00.txt
Text for (1) and (2), or at least initial versions of it should be
worked out on the list before the -00 version of the draft-ietf-ips-...
draft is submitted. I've just sent the request to the secretariat for
an end-of-2006 completion milestone for this, but in practice, it
could be done shortly after Montreal, if not before.
Thanks,
--David
----------------------------------------------------
David L. Black, Senior Technologist
EMC Corporation, 176 South St., Hopkinton, MA 01748
+1 (508) 293-7953 FAX: +1 (508) 293-7786
[email protected] Mobile: +1 (978) 394-7754
----------------------------------------------------
_______________________________________________
Ips mailing list
[email protected]
https://www1.ietf.org/mailman/listinfo/ips