Re: NETCONF over TLS

[badra@isima.fr]

Hi Lear,

> When you add the "simple framing" used
> in SSH, you end up with something that is only slightly less complex
> than BEEP but with no libraries, and from a performance perspective
> requires a content scan.  Far better to use BEEP which has a byte count.

I won't make a comparison for the moment between SSH and TLS to defend
this latter but IMHO, all the points you listed above are given in a
fashion way within NETCONF over TLS:

- The document implements the same SSH "simple framing"
- The content scan and byte count should be done at the TLS Record layer.

Best regards,
Badra

--
to unsubscribe send a message to netconf-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/netconf/>