[secdir] secdir review of draft-ietf-sipcore-subnot-etags-02

Sam Hartman <hartmans-ietf@mit.edu> Tue, 23 June 2009 16:12 UTC

To: secdir@ietf.org, iesg@ietf.org
From: Sam Hartman <hartmans-ietf@mit.edu>
Date: Tue, 23 Jun 2009 12:12:35 -0400
Message-ID: <tsltz27apzg.fsf@mit.edu>
User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Cc: draft-ietf-sipcore-subnot-etags@tools.ietf.org, sipcore-chairs@tools.ietf.org
Subject: [secdir] secdir review of draft-ietf-sipcore-subnot-etags-02
Precedence: list

I've reviewed this draft for the security directorate.  My review was
reasonably light although I believe was sufficient. 

This draft defines a mechanism so that subscribers can avoid a
notification message being generated when they already know the
contents of that notification.

The security considerations section claims that this mechanism does
not change the security properties of the protocol: it is just an
optimization.  I'm fine with the document as it stands.  It's not
inherently true that an optimization of this type doesn't change the
security properties.  For example, if an attacker could modify a
subscribe request and suppress a notification, that might change the
security properties.

However, as far as I can tell, this particular mechanism does not make
any significant changes to the security properties.

[secdir] secdir review of draft-ietf-sipcore-subn… Sam Hartman