[Syslog] FW: I-D Action:draft-ietf-syslog-dtls-00.txt

["Joseph Salowey (jsalowey)" <jsalowey at cisco.com>]

I Just posted a -00 version of the syslog DTLS draft
(http://www.ietf.org/internet-drafts/draft-ietf-syslog-dtls-00.txt). I
tried to merge the two proposals together and keep consistent with the
Syslog TLS draft.  Below are some issues I have identified, I'm sure
there are others.  

1. Transport

DTLS can run over several different transports,  right now the draft
requires UDP and recommends DCCP.  I think these are the most well
defined.  The draft also forbids DTLS over TCP and favors TLS over TCP
to keep things consistent.  I left out SCTP, I'm not sure where SCTP
over DTLS is in the process and there also is a TLS option for SCTP.  

2. Port Number

DTLS could use the same port and TLS, which seems simple.  The
difficulty could be that for some transports you could use either TLS or
DTLS (SCTP for example).  In theory you could tell the difference
between TLS and DTLS by version number so maybe this isn't a problem.  

3. Initiation

One of the drafts allowed either side to initiate.  I did not include
this.  If we have a use case for it we could bring it back in.  

4. Dead Peer Detection

There has been a lot of discussion on DPD on the list.  I don't have any
specific remedy in the draft, just a warning that it could be a problem.
Its likely that some work on this will happen in DTLS, but I'm not
confident on the timeframe at this point. 

5. Message Size

The text on message size could use some review. 

Cheers,

Joe  

-----Original Message-----
From: syslog-bounces at ietf.org [mailto:syslog-bounces at ietf.org] On Behalf
Of Internet-Drafts at ietf.org
Sent: Wednesday, October 14, 2009 1:15 PM
To: i-d-announce at ietf.org
Cc: syslog at ietf.org
Subject: [Syslog] I-D Action:draft-ietf-syslog-dtls-00.txt

A New Internet-Draft is available from the on-line Internet-Drafts
directories.
This draft is a work item of the Security Issues in Network Event
Logging Working Group of the IETF.


	Title           : Datagram Transport Layer Security (DTLS)
Transport Mapping for Syslog
	Author(s)       : J. Salowey, et al.
	Filename        : draft-ietf-syslog-dtls-00.txt
	Pages           : 18
	Date            : 2009-10-14

This document describes the transport of syslog messages over DTLS
(Datagram Transport Level Security).  It provides a secure transport for
syslog messages in cases where a connection-less transport is desired.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-syslog-dtls-00.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

Attachment: draft-ietf-syslog-dtls-00.URL
Description: draft-ietf-syslog-dtls-00.URL