[secdir] sec-dir review of draft-ietf-mpls-tp-gach-gal-05
Derek Atkins <derek@ihtfp.com> Wed, 20 May 2009 20:46 UTC
Return-Path: <derek@ihtfp.com>
X-Original-To: secdir@core3.amsl.com
Delivered-To: secdir@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3F02C3A6EF8; Wed, 20 May 2009 13:46:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.875
X-Spam-Level:
X-Spam-Status: No, score=-1.875 tagged_above=-999 required=5 tests=[AWL=0.114, BAYES_00=-2.599, HELO_MISMATCH_ORG=0.611]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tVsn4X-A3TKU; Wed, 20 May 2009 13:46:20 -0700 (PDT)
Received: from mail.ihtfp.org (MAIL.IHTFP.ORG [204.107.200.6]) by core3.amsl.com (Postfix) with ESMTP id A728F3A6FBF; Wed, 20 May 2009 13:46:00 -0700 (PDT)
Received: from pgpdev.ihtfp.org (unknown [64.1.215.244]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "cliodev.ihtfp.com", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail.ihtfp.org (Postfix) with ESMTP id E980ABD85A2; Wed, 20 May 2009 16:47:37 -0400 (EDT)
Received: (from warlord@localhost) by pgpdev.ihtfp.org (8.14.3/8.14.2/Submit) id n4KKlZug016606; Wed, 20 May 2009 16:47:35 -0400
To: iesg@ietf.org, secdir@ietf.org
From: Derek Atkins <derek@ihtfp.com>
Date: Wed, 20 May 2009 16:47:35 -0400
Message-ID: <sjmoctn4i3c.fsf@pgpdev.ihtfp.org>
User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Cc: swallow@cisco.com, matthew.bocci@alcatel-lucent.com, rahul@juniper.net, dward@cisco.com, mpls-chairs@tools.ietf.org, martin.vigoureux@alcatel-lucent.com, stbryant@cisco.com
Subject: [secdir] sec-dir review of draft-ietf-mpls-tp-gach-gal-05
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 May 2009 20:46:21 -0000
I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG. These comments were written primarily for the benefit of the
security area directors. Document editors and WG chairs should treat
these comments just like any other last call comments.
This document generalizes the applicability of the pseudowire (PW)
Associated Channel Header (ACH), enabling the realization of a
control channel associated to MPLS Label Switched Paths (LSPs) and
MPLS Sections in addition to MPLS pseudowires. In order to identify
the presence of this Associated Channel Header in the label stack,
this document also assigns one of the reserved MPLS label values to
the Generic Associated Channel Label (GAL), to be used as a label
based exception mechanism.
This document refers to RFC 4385 and 5085 for security consideration
dependencies. I believe this document adds no new security issues.
-derek
--
Derek Atkins 617-623-3745
derek@ihtfp.com www.ihtfp.com
Computer and Internet Security Consultant
- [secdir] sec-dir review of draft-ietf-mpls-tp-gac… Derek Atkins