[secdir] secdir review of draft-ietf-ancp-framework-10

"pat cain" <pcain2@mail2.coopercain.com> Mon, 29 June 2009 14:12 UTC

From: pat cain <pcain2@mail2.coopercain.com>
To: secdir@ietf.org, draft-ietf-ancp-framework@tools.ietf.org
Date: Mon, 29 Jun 2009 10:12:22 -0400
Message-ID: <039b01c9f8c3$a108a7e0$e319f7a0$@coopercain.com>
MIME-Version: 1.0
Thread-Index: Acn4w5iFLrA4q3muRTSpPrluE93lVA==
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Language: en-us
Cc: iesg@ietf.org
Subject: [secdir] secdir review of draft-ietf-ancp-framework-10
Precedence: list

Hi,

I have reviewed this document as part of the security directorate's 
ongoing effort to review all IETF documents being processed by the 
IESG.  These comments were written primarily for the benefit of the 
security area directors.  Document editors and WG chairs should treat 
these comments just like any other last call comments.

This document defines a framework for an Access Node Control Mechanism
between a Network Access Server and a DSLAM. It is informational.

I have a mostly small comment on this document:

The security considerations section points to
"draft-ietf-ancp-security-threats
that lists the security-related security threats". I read that document,
too.
It has more than threats in it; there a whole section on security
requirements. 
I would add a small phrase to the security considerations of the framework
to 
make sure the reader is aware that there are more requirements than just
what 
is in the framework document. Maybe just add a few words to the first
sentence of the security considerations section in the framework: "I
develops a threat model [ and identifies requirements] for ANCP
security...."

Otherwise it looked okay to me. 

Pat Cain

[secdir] secdir review of draft-ietf-ancp-framewo… pat cain
Re: [secdir] secdir review of draft-ietf-ancp-fra… OOGHE Sven