Re: Éric Vyncke's No Objection on draft-iet f-ipsecme-qr-ikev2-10: (with COMMENT)
"Panos Kampanakis (pkampana)" <[email protected]>
| Newsgroups | gmane.ietf.ipsec |
|---|---|
| Message-ID | <BN7PR11MB25478BE761A73359A9D2B632C9220@BN7PR11MB2547.namprd11.prod.outlook.com> |
Hi Éric, To improve the IANA section a bit we followed the guidelines in RFC8126 more religiously and I am attaching the diff here. Let me know if there are more changes you would like to suggest for the IANA section. Rgs, Panos -----Original Message----- From: IPsec <[email protected]> On Behalf Of Éric Vyncke via Datatracker Sent: Friday, January 03, 2020 4:14 AM To: The IESG <[email protected]> Cc: [email protected]; [email protected]; [email protected]; [email protected] Subject: [IPsec] Éric Vyncke's No Objection on draft-ietf-ipsecme-qr-ikev2-10: (with COMMENT) Éric Vyncke has entered the following ballot position for draft-ietf-ipsecme-qr-ikev2-10: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-ipsecme-qr-ikev2/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thank you for the work put into this document. I found it very interesting to read BTW. I have only one minor non-blocking comment: please read RFC 8126 to have a correct IANA section about "type 16435" (and others). Same applies for section 5.1. I hope that this helps to improve this document or any future one of yours, Regards, -éric _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
Diff_ draft-ietf-ipsecme-qr-ikev2-10.xml - draft-ietf-ipsecme-qr-ikev2-11.xml.html
(text/html, 32.5 KB)
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<!-- saved from url=(0030)https://tools.ietf.org/rfcdiff -->
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta http-equiv="Content-Style-Type" content="text/css">
<title>Diff: draft-ietf-ipsecme-qr-ikev2-10.xml - draft-ietf-ipsecme-qr-ikev2-11.xml</title>
<style type="text/css">
body { margin: 0.4ex; margin-right: auto; }
tr { }
td { white-space: pre; font-family: monospace; vertical-align: top; font-size: 0.86em;}
th { font-size: 0.86em; }
.small { font-size: 0.6em; font-style: italic; font-family: Verdana, Helvetica, sans-serif; }
.left { background-color: #EEE; }
.right { background-color: #FFF; }
.diff { background-color: #CCF; }
.lblock { background-color: #BFB; }
.rblock { background-color: #FF8; }
.insert { background-color: #8FF; }
.delete { background-color: #ACF; }
.void { background-color: #FFB; }
.cont { background-color: #EEE; }
.linebr { background-color: #AAA; }
.lineno { color: red; background-color: #FFF; font-size: 0.7em; text-align: right; padding: 0 2px; }
.elipsis{ background-color: #AAA; }
.left .cont { background-color: #DDD; }
.right .cont { background-color: #EEE; }
.lblock .cont { background-color: #9D9; }
.rblock .cont { background-color: #DD6; }
.insert .cont { background-color: #0DD; }
.delete .cont { background-color: #8AD; }
.stats, .stats td, .stats th { background-color: #EEE; padding: 2px 0; }
span.hide { display: none; color: #aaa;} a:hover span { display: inline; } tr.change { background-color: gray; }
tr.change a { text-decoration: none; color: black }
</style>
<script>
var chunk_index = 0;
var old_chunk = null;
function format_chunk(index) {
var prefix = "diff";
var str = index.toString();
for (x=0; x<(4-str.length); ++x) {
prefix+='0';
}
return prefix + str;
}
function find_chunk(n){
return document.querySelector('tr[id$="' + n + '"]');
}
function change_chunk(offset) {
var index = chunk_index + offset;
var new_str;
var new_chunk;
new_str = format_chunk(index);
new_chunk = find_chunk(new_str);
if (!new_chunk) {
return;
}
if (old_chunk) {
old_chunk.style.outline = "";
}
old_chunk = new_chunk;
old_chunk.style.outline = "1px solid red";
window.location.replace("#" + new_str)
window.scrollBy(0,-100);
chunk_index = index;
}
document.onkeydown = function(e) {
switch (e.keyCode) {
case 78:
change_chunk(1);
break;
case 80:
change_chunk(-1);
break;
}
};
</script>
<style>@media print {#ghostery-purple-box {display:none !important}}</style></head>
<body>
<table border="0" cellpadding="0" cellspacing="0">
<tbody><tr id="part-1" bgcolor="orange"><th></th><th><a href="https://tools.ietf.org/rfcdiff?url2=draft-ietf-ipsecme-qr-ikev2-10.xml" style="color:#008; text-decoration:none;"><</a> <a href="https://tools.ietf.org/html/draft-ietf-ipsecme-qr-ikev2-10.xml" style="color:#008">draft-ietf-ipsecme-qr-ikev2-10.xml</a> </th><th> </th><th> <a href="https://tools.ietf.org/html/draft-ietf-ipsecme-qr-ikev2-11.xml" style="color:#008">draft-ietf-ipsecme-qr-ikev2-11.xml</a> <a href="https://tools.ietf.org/rfcdiff?url1=draft-ietf-ipsecme-qr-ikev2-11.xml" style="color:#008; text-decoration:none;">></a></th><th></th></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr id="part-1" class="change"><td></td><th><small>skipping to change at</small><a href="https://tools.ietf.org/rfcdiff#part-1"><em> line 46<span class="hide"> ¶</span></em></a></th><th> </th><th><small>skipping to change at</small><a href="https://tools.ietf.org/rfcdiff#part-1"><em> line 46<span class="hide"> ¶</span></em></a></th><td></td></tr>
<tr><td class="lineno"></td><td class="left"><!-- use symbolic references tags, i.e, [RFC2119] instead of [1] --></td><td> </td><td class="right"><!-- use symbolic references tags, i.e, [RFC2119] instead of [1] --></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"><?rfc sortrefs="yes" ?></td><td> </td><td class="right"><?rfc sortrefs="yes" ?></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"><!-- sort the reference entries alphabetically --></td><td> </td><td class="right"><!-- sort the reference entries alphabetically --></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"><!-- control vertical white space</td><td> </td><td class="right"><!-- control vertical white space</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> (using these PIs as follows is recommended by the RFC Editor) --></td><td> </td><td class="right"> (using these PIs as follows is recommended by the RFC Editor) --></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"><?rfc compact="yes" ?></td><td> </td><td class="right"><?rfc compact="yes" ?></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"><!-- do not start each main section on a new page --></td><td> </td><td class="right"><!-- do not start each main section on a new page --></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"><?rfc subcompact="no" ?></td><td> </td><td class="right"><?rfc subcompact="no" ?></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"><!-- keep one blank line between list items --></td><td> </td><td class="right"><!-- keep one blank line between list items --></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"><!-- end of list of popular I-D processing instructions --></td><td> </td><td class="right"><!-- end of list of popular I-D processing instructions --></td><td class="lineno"></td></tr>
<tr id="diff0001"><td></td></tr>
<tr><td class="lineno"></td><td class="lblock"><rfc category="std" docName="draft-ietf-ipsecme-qr-ikev2-1<span class="delete">0</span>" ipr="trust2009
02"></td><td> </td><td class="rblock"><rfc category="std" docName="draft-ietf-ipsecme-qr-ikev2-1<span class="insert">1</span>" ipr="trust2009
02"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <!-- category values: std, bcp, info, exp, and historic</td><td> </td><td class="right"> <!-- category values: std, bcp, info, exp, and historic</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> ipr values: full3667, noModification3667, noDerivatives3667</td><td> </td><td class="right"> ipr values: full3667, noModification3667, noDerivatives3667</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> you can add the attributes updates="NNNN" and obsoletes="NNNN"</td><td> </td><td class="right"> you can add the attributes updates="NNNN" and obsoletes="NNNN"</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> they will automatically be output with "(if approved)" --></td><td> </td><td class="right"> they will automatically be output with "(if approved)" --></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <!-- ***** FRONT MATTER ***** --></td><td> </td><td class="right"> <!-- ***** FRONT MATTER ***** --></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <front></td><td> </td><td class="right"> <front></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <!-- The abbreviated title is used in the page header - it is only nece
ssary if the</td><td> </td><td class="right"> <!-- The abbreviated title is used in the page header - it is only nece
ssary if the</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> full title is longer than 39 characters --></td><td> </td><td class="right"> full title is longer than 39 characters --></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr id="part-2" class="change"><td></td><th><small>skipping to change at</small><a href="https://tools.ietf.org/rfcdiff#part-2"><em> line 166<span class="hide"> ¶</span></em></a></th><th> </th><th><small>skipping to change at</small><a href="https://tools.ietf.org/rfcdiff#part-2"><em> line 166<span class="hide"> ¶</span></em></a></th><td></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>It was considered important to minimize the changes to IKEv2.</td><td> </td><td class="right"> <t>It was considered important to minimize the changes to IKEv2.</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> The existing mechanisms to do authentication and key exchange remain</td><td> </td><td class="right"> The existing mechanisms to do authentication and key exchange remain</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> in place (that is, we continue to do (EC)DH, and potentially PKI</td><td> </td><td class="right"> in place (that is, we continue to do (EC)DH, and potentially PKI</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> authentication if configured). This document does not replace the aut
hentication</td><td> </td><td class="right"> authentication if configured). This document does not replace the aut
hentication</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> checks that the protocol does; instead, it is done as a parallel chec
k.</t></td><td> </td><td class="right"> checks that the protocol does; instead, it is done as a parallel chec
k.</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <section title="Changes"></td><td> </td><td class="right"> <section title="Changes"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>RFC EDITOR PLEASE DELETE THIS SECTION.</t></td><td> </td><td class="right"> <t>RFC EDITOR PLEASE DELETE THIS SECTION.</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>Changes in this draft in each version iterations.</t></td><td> </td><td class="right"> <t>Changes in this draft in each version iterations.</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr id="diff0002"><td></td></tr>
<tr><td class="lineno"></td><td class="lblock"></td><td> </td><td class="rblock"> <span class="insert"><t>draft-ietf-ipsecme-qr-ikev2-11</span></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> <list style="symbols"></span></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> <t>Updates the IANA section based on Eric V.'s IESG Review.</t></span></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> </list></t></span></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="lblock"></td><td> </td><td class="rblock"> </td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>draft-ietf-ipsecme-qr-ikev2-10</td><td> </td><td class="right"> <t>draft-ietf-ipsecme-qr-ikev2-10</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <list style="symbols"></td><td> </td><td class="right"> <list style="symbols"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>Addresses issues raised during IETF LC.</t></td><td> </td><td class="right"> <t>Addresses issues raised during IETF LC.</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> </list></t></td><td> </td><td class="right"> </list></t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>draft-ietf-ipsecme-qr-ikev2-09</td><td> </td><td class="right"> <t>draft-ietf-ipsecme-qr-ikev2-09</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <list style="symbols"></td><td> </td><td class="right"> <list style="symbols"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>Addresses issues raised in AD review.</t></td><td> </td><td class="right"> <t>Addresses issues raised in AD review.</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> </list></t></td><td> </td><td class="right"> </list></t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr id="part-3" class="change"><td></td><th><small>skipping to change at</small><a href="https://tools.ietf.org/rfcdiff#part-3"><em> line 567<span class="hide"> ¶</span></em></a></th><th> </th><th><small>skipping to change at</small><a href="https://tools.ietf.org/rfcdiff#part-3"><em> line 572<span class="hide"> ¶</span></em></a></th><td></td></tr>
<tr><td class="lineno"></td><td class="left"> for those implementations that choose not to disclose the type of
PPK to active attackers.</t></td><td> </td><td class="right"> for those implementations that choose not to disclose the type of
PPK to active attackers.</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>PPK_ID_FIXED (2) - in this case the format of the PPK_ID and t
he PPK are fixed octet strings; the remaining bytes of the</td><td> </td><td class="right"> <t>PPK_ID_FIXED (2) - in this case the format of the PPK_ID and t
he PPK are fixed octet strings; the remaining bytes of the</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> PPK_ID are a configured value. We assume that there is a fixed m
apping between PPK_ID and PPK, which is</td><td> </td><td class="right"> PPK_ID are a configured value. We assume that there is a fixed m
apping between PPK_ID and PPK, which is</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> configured locally to both the initiator and the responder. The
responder can use the PPK_ID to look up the corresponding</td><td> </td><td class="right"> configured locally to both the initiator and the responder. The
responder can use the PPK_ID to look up the corresponding</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> PPK value. Not all implementations are able to configure arbitrar
y octet strings; to improve the potential interoperability,</td><td> </td><td class="right"> PPK value. Not all implementations are able to configure arbitrar
y octet strings; to improve the potential interoperability,</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> it is recommended that, in the PPK_ID_FIXED case, both the PPK an
d the PPK_ID strings be limited to the base64 character set,</td><td> </td><td class="right"> it is recommended that, in the PPK_ID_FIXED case, both the PPK an
d the PPK_ID strings be limited to the base64 character set,</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> namely the 64 characters 0-9, A-Z, a-z, + and /.</t></td><td> </td><td class="right"> namely the 64 characters 0-9, A-Z, a-z, + and /.</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> </list></t></td><td> </td><td class="right"> </list></t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr id="diff0003"><td></td></tr>
<tr><td class="lineno"></td><td class="lblock"><span class="delete"> <t>The PPK_ID type value 0 is reserved; values 3-127 are reserved f
or IANA; values 128-255 are for private use among mutually consenting parti
es.</t></span></td><td> </td><td class="rblock"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> </section></td><td> </td><td class="right"> </section></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <section title="Operational Considerations"></td><td> </td><td class="right"> <section title="Operational Considerations"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>The need to maintain several independent sets of security creden
tials can significantly complicate a security administrator's job,</td><td> </td><td class="right"> <t>The need to maintain several independent sets of security creden
tials can significantly complicate a security administrator's job,</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> and can potentially slow down widespread adoption of this specifica
tion. It is anticipated, that administrators will try to simplify their job</td><td> </td><td class="right"> and can potentially slow down widespread adoption of this specifica
tion. It is anticipated, that administrators will try to simplify their job</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> by decreasing the number of credentials they need to maintain. This
section describes some of the considerations for PPK management.</t></td><td> </td><td class="right"> by decreasing the number of credentials they need to maintain. This
section describes some of the considerations for PPK management.</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <section title="PPK Distribution"></td><td> </td><td class="right"> <section title="PPK Distribution"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>PPK_IDs of the type PPK_ID_FIXED (and the corresponding PPKs)
are assumed to be configured within the IKE device in an out-of-band fashio
n.</td><td> </td><td class="right"> <t>PPK_IDs of the type PPK_ID_FIXED (and the corresponding PPKs)
are assumed to be configured within the IKE device in an out-of-band fashio
n.</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> While the method of distribution is a local matter and out
of scope of this document or IKEv2, <xref target="RFC6030"/> describes a f
ormat for</td><td> </td><td class="right"> While the method of distribution is a local matter and out
of scope of this document or IKEv2, <xref target="RFC6030"/> describes a f
ormat for</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> for the transport and provisioning of symmetric keys. That format
could be reused using the PIN profile (defined in Section 10.2 of <xref ta
rget="RFC6030"/>)</td><td> </td><td class="right"> for the transport and provisioning of symmetric keys. That format
could be reused using the PIN profile (defined in Section 10.2 of <xref ta
rget="RFC6030"/>)</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr id="part-4" class="change"><td></td><th><small>skipping to change at</small><a href="https://tools.ietf.org/rfcdiff#part-4"><em> line 680<span class="hide"> ¶</span></em></a></th><th> </th><th><small>skipping to change at</small><a href="https://tools.ietf.org/rfcdiff#part-4"><em> line 684<span class="hide"> ¶</span></em></a></th><td></td></tr>
<tr><td class="lineno"></td><td class="left"> immediately, but instead waits some time for more responses (possibly
retransmitting the request).</td><td> </td><td class="right"> immediately, but instead waits some time for more responses (possibly
retransmitting the request).</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> If all the received responses contain no USE_PPK, then the exchange i
s aborted.</t></td><td> </td><td class="right"> If all the received responses contain no USE_PPK, then the exchange i
s aborted.</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>If using PPK is optional for both peers, then in case of misconfig
uration (e.g. mismatched PPK_ID) the IKE SA</td><td> </td><td class="right"> <t>If using PPK is optional for both peers, then in case of misconfig
uration (e.g. mismatched PPK_ID) the IKE SA</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> will be created without protection against quantum computers. It is a
dvised that if PPK was configured, but</td><td> </td><td class="right"> will be created without protection against quantum computers. It is a
dvised that if PPK was configured, but</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> was not used for a particular IKE SA, then implementations SHOULD aud
it this event.</td><td> </td><td class="right"> was not used for a particular IKE SA, then implementations SHOULD aud
it this event.</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> </t></td><td> </td><td class="right"> </t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> </section></td><td> </td><td class="right"> </section></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <section title="IANA Considerations"></td><td> </td><td class="right"> <section title="IANA Considerations"></td><td class="lineno"></td></tr>
<tr id="diff0004"><td></td></tr>
<tr><td class="lineno"></td><td class="lblock"> <t>This document defines three new Notify Message Types in the "Notif
y Message Types - Status Types" registry:</t></td><td> </td><td class="rblock"> <t>This document defines three new Notify Message Types in the "Notif
y Message Types - Status Types" registry<span class="insert"> (https://www.iana.org/assignments/
ikev2-parameters/ikev2-parameters.xhtml#ikev2-parameters-16)</span>:</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <figure align="center"></td><td> </td><td class="right"> <figure align="center"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <artwork align="left"><![CDATA[</td><td> </td><td class="right"> <artwork align="left"><![CDATA[</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left">16435 USE_PPK [THIS RFC]</td><td> </td><td class="right">16435 USE_PPK [THIS RFC]</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left">16436 PPK_IDENTITY [THIS RFC]</td><td> </td><td class="right">16436 PPK_IDENTITY [THIS RFC]</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left">16437 NO_PPK_AUTH [THIS RFC]</td><td> </td><td class="right">16437 NO_PPK_AUTH [THIS RFC]</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> ]]></artwork></td><td> </td><td class="right"> ]]></artwork></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> </figure></td><td> </td><td class="right"> </figure></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <t>This document also creates a new IANA registry "IKEv2 Post-quantum
Preshared Key ID Types" in</td><td> </td><td class="right"> <t>This document also creates a new IANA registry "IKEv2 Post-quantum
Preshared Key ID Types" in</td><td class="lineno"></td></tr>
<tr id="diff0005"><td></td></tr>
<tr><td class="lineno"></td><td class="lblock"> IKEv2 IANA registry (https://www.iana.org/assignments/ikev2-parameter
s/) for the PPK_ID types. The initial values of the new registry are:</t></td><td> </td><td class="rblock"> IKEv2 IANA registry (https://www.iana.org/assignments/ikev2-parameter
s/) for the PPK_ID types<span class="insert"> used in the notification messages defined in this
specification</span>. The initial values of the new registry are:</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <figure align="center"></td><td> </td><td class="right"> <figure align="center"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <artwork align="left"><![CDATA[</td><td> </td><td class="right"> <artwork align="left"><![CDATA[</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left">PPK_ID Type Value Reference</td><td> </td><td class="right">PPK_ID Type Value Reference</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left">----------- ----- ---------</td><td> </td><td class="right">----------- ----- ---------</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left">Reserved 0 [THIS RFC]</td><td> </td><td class="right">Reserved 0 [THIS RFC]</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left">PPK_ID_OPAQUE 1 [THIS RFC]</td><td> </td><td class="right">PPK_ID_OPAQUE 1 [THIS RFC]</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left">PPK_ID_FIXED 2 [THIS RFC]</td><td> </td><td class="right">PPK_ID_FIXED 2 [THIS RFC]</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left">Unassigned 3-127 [THIS RFC]</td><td> </td><td class="right">Unassigned 3-127 [THIS RFC]</td><td class="lineno"></td></tr>
<tr id="diff0006"><td></td></tr>
<tr><td class="lineno"></td><td class="lblock"><span class="delete">Reserved for private use</span> 128-255 [THIS RFC]</td><td> </td><td class="rblock"><span class="insert">Private Use </span> 128-255 [THIS RFC]</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> ]]></artwork></td><td> </td><td class="right"> ]]></artwork></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> </figure></td><td> </td><td class="right"> </figure></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr id="diff0007"><td></td></tr>
<tr><td class="lineno"></td><td class="lblock"> <t><span class="delete">Changes and additions to this registry are by Expert Review <xref
target="</span>RFC8126" />.</t></td><td> </td><td class="rblock"> <t><span class="insert">The PPK_ID type value 0 is reserved; values 3-127 are to be assign
ed by IANA; values 128-255 are for private use among mutually consenting pa
rties. To register new PPK_IDs in the unassigned range, a Type name, a Valu
e between 3 and 127 and a Reference specification need to be defined. Chang
es and additions to the unassigned range of this registry are by the Expert
Review Policy <xref target="RFC8126" />. Changes and additions to the priv
ate use range of this registry are by the Private Use Policy <xref target="
</span>RFC8126" />.</t></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> </section></td><td> </td><td class="right"> </section></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> </middle></td><td> </td><td class="right"> </middle></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <!-- *****BACK MATTER ***** --></td><td> </td><td class="right"> <!-- *****BACK MATTER ***** --></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <back></td><td> </td><td class="right"> <back></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <!-- References split into informative and normative --></td><td> </td><td class="right"> <!-- References split into informative and normative --></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> <references title="Normative References"></td><td> </td><td class="right"> <references title="Normative References"></td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> &RFC2119;</td><td> </td><td class="right"> &RFC2119;</td><td class="lineno"></td></tr>
<tr><td class="lineno"></td><td class="left"> &RFC8174;</td><td> </td><td class="right"> &RFC8174;</td><td class="lineno"></td></tr>
<tr><td></td><td class="left"></td><td> </td><td class="right"></td><td></td></tr>
<tr id="end" bgcolor="gray"><th colspan="5" align="center"> End of changes. 7 change blocks. </th></tr>
<tr class="stats"><td></td><th><i>6 lines changed or deleted</i></th><th><i> </i></th><th><i>10 lines changed or added</i></th><td></td></tr>
<tr><td colspan="5" align="center" class="small"><br>This html diff was produced by rfcdiff 1.47. The latest version is available from <a href="http://www.tools.ietf.org/tools/rfcdiff/">http://tools.ietf.org/tools/rfcdiff/</a> </td></tr>
</tbody></table>
</body></html>
smime.p7s
(application/pkcs7-signature, 3.9 KB) - not displayed