[Gen-art] GEN-Art review of draft-ietf-dhc-relay-id-suboption-07

Sean Turner <turners@ieca.com> Tue, 06 October 2009 19:26 UTC

Message-ID: <4ACB9A5F.4090300@ieca.com>
Date: Tue, 06 Oct 2009 15:28:31 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812)
MIME-Version: 1.0
To: draft-ietf-dhc-relay-id-suboption.all@tools.ietf.org, General Area Review Team <gen-art@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: [Gen-art] GEN-Art review of draft-ietf-dhc-relay-id-suboption-07
Precedence: list

I have been selected as the General Area Review Team (Gen-ART) reviewer
for this draft (for background on Gen-ART, please see
http://www.alvestrand.no/ietf/gen/art/gen-art-FAQ.html). Please resolve
these comments along with any other Last Call comments you may receive.

Document: draft-ietf-dhc-relay-id-suboption-07
Reviewer: Sean Turner
Review Date: 2009-10-06
IETF LC End Date: 2009-10-16
IESG Telechat date: N/A

Summary: This draft is on the right track but has open issues, described
in the review

Major #1 It's not clear to me whether both relay identifier types MUST
be supported or whether implementations are free to pick which one(s)
they support?  If you add one of the following (or something similar) in
Section 5 then my concern is addressed:

Implementations MUST support both RELAY_IDENTIFIER_DUID and
RELAY_IDENTIFIER_ASCII.

Implementations MUST support RELAY_IDENTIFIER_DUID and [SHOULD or MAY]
support RELAY_IDENTIFIER_ASCII.

Implementations MUST support RELAY_IDENTIFIER_ASCII and [SHOULD or MAY]
support RELAY_IDENTIFIER_DUID.

Major #2  In the security considerations it says look to RFC 3046 and
RFC 4030 for security considerations and then says SHOULD use the relay
agent authentication option from RFC 4030.  RFC 3046 is targeted at
network infrastructures that are "trusted and secure" and RFC 4030
allows the relay agent to be part of this trusted and secure network.
If an implementation doesn't use the relay agent authentication option,
then the relay agent can't be part of the "trusted and secure" network.
  This makes me think that the relay agent authentication option from
RFC 4030 ought to be a MUST not a SHOULD?

spt

[Gen-art] GEN-Art review of draft-ietf-dhc-relay-… Sean Turner
Re: [Gen-art] GEN-Art review of draft-ietf-dhc-re… Ted Lemon