[secdir] secdir review of draft-thomson-beep-async-02

Samuel Weiler <weiler@watson.org> Mon, 04 May 2009 04:39 UTC

Return-Path: <weiler@watson.org>
X-Original-To: secdir@core3.amsl.com
Delivered-To: secdir@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7A1A83A6869; Sun, 3 May 2009 21:39:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.433
X-Spam-Level:
X-Spam-Status: No, score=-2.433 tagged_above=-999 required=5 tests=[AWL=0.166, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tGHqs738owUn; Sun, 3 May 2009 21:39:44 -0700 (PDT)
Received: from fledge.watson.org (fledge.watson.org [65.122.17.41]) by core3.amsl.com (Postfix) with ESMTP id 226D33A6A4F; Sun, 3 May 2009 21:39:43 -0700 (PDT)
Received: from fledge.watson.org (localhost.watson.org [127.0.0.1]) by fledge.watson.org (8.14.3/8.14.3) with ESMTP id n444f8h0063174; Mon, 4 May 2009 00:41:08 -0400 (EDT) (envelope-from weiler@watson.org)
Received: from localhost (weiler@localhost) by fledge.watson.org (8.14.3/8.14.3/Submit) with ESMTP id n444f7mV063170; Mon, 4 May 2009 00:41:07 -0400 (EDT) (envelope-from weiler@watson.org)
X-Authentication-Warning: fledge.watson.org: weiler owned process doing -bs
Date: Mon, 04 May 2009 00:41:07 -0400
From: Samuel Weiler <weiler@watson.org>
To: secdir@ietf.org, iesg@ietf.org, martin.thomson@andrew.com
Message-ID: <alpine.BSF.2.00.0905040022410.59136@fledge.watson.org>
User-Agent: Alpine 2.00 (BSF 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; format="flowed"; charset="US-ASCII"
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0.1 (fledge.watson.org [127.0.0.1]); Mon, 04 May 2009 05:41:08 +0100 (BST)
Cc: Chris Newman <Chris.Newman@Sun.COM>
Subject: [secdir] secdir review of draft-thomson-beep-async-02
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: secdir-secretary@mit.edu
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 May 2009 04:39:45 -0000

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.

This is a BEEP extension to enable asynchrony.  The security 
considerations section highlights the DOS potential from state 
accumulation, and I don't think anything more needs to be said.  I see 
no security problems with the document.

Process/quality of review: The template for the doc says it was 
reviewed on the BEEP WG list, but the document doesn't suggest taking 
discussion there.  And BEEP closed in 2002.

Typo in section 3.1:
s/separate/separated/

I also noticed that there's no list of contributors nor any 
acknowledgements.  Might some be appropriate?

-- Sam