randy/draft-9092update
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

rob wilton's AD review comments addrssed

Browse source
This commit is contained in:
Randy Bush 2024-01-18 11:46:00 -08:00
parent 5bffcbca02
commit a6a0395e92
1 changed files with 7 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

17
draft-ietf-opsawg-9092-update.xml
View file

@ -290,10 +290,12 @@
</t> </t>
<t> <t>
Any particular inetnum: object SHOULD have, at Any particular inetnum: object SHOULD have, at most, one geofeed
most, one geofeed reference, whether a remarks: or a proper reference, whether a remarks: or a proper geofeed: attribute
geofeed: attribute when it is implemented. If there is more when it is implemented. A geofeed: attribute is preferred, of
than one, the geofeed: attribute SHOULD be used. course, if the RIR supports it. If there is more than one type
of attribute in the intetnum: object, the geofeed: attribute
SHOULD be used.
</t> </t>
<t> <t>
For inetnum:s covering the same address range, or an inetnum: For inetnum:s covering the same address range, or an inetnum:
@ -357,11 +359,6 @@
via brute-force search through the IP space. via brute-force search through the IP space.
</t> </t>
<t>
When an inetnum: with a geofeed file reference is identified,
the file MUST be downloaded using HTTPS.
</t>
<t> <t>
When reading data from the geofeed file, one MUST ignore data When reading data from the geofeed file, one MUST ignore data
outside the referring inetnum: object's address range. This is outside the referring inetnum: object's address range. This is
@ -541,7 +538,7 @@
</t> </t>
<ol spacing="normal" type="1"> <ol spacing="normal" type="1">
<li> <li>
Obtain the signer's certificate from the CMS SignedData Obtaining the signer's certificate from the CMS SignedData
CertificateSet <xref target="RFC5652"/>. The certificate CertificateSet <xref target="RFC5652"/>. The certificate
SubjectKeyIdentifier extension <xref target="RFC5280"/> MUST SubjectKeyIdentifier extension <xref target="RFC5280"/> MUST
match the SubjectKeyIdentifier in the CMS SignerInfo match the SubjectKeyIdentifier in the CMS SignerInfo