Re: [secdir] Secdir review of draft-ietf-mpls-oam-ipv6-rao-02

"Adrian Farrel" <adrian@olddog.co.uk> Thu, 29 January 2015 19:50 UTC

From: Adrian Farrel <adrian@olddog.co.uk>
To: 'Vincent Roca' <vincent.roca@inria.fr>, 'IESG' <iesg@ietf.org>, secdir@ietf.org, draft-ietf-mpls-oam-ipv6-rao@tools.ietf.org
References: <53F9995B-6F70-49D2-ABA1-AD293C185121@inria.fr>
In-Reply-To: <53F9995B-6F70-49D2-ABA1-AD293C185121@inria.fr>
Date: Thu, 29 Jan 2015 19:50:00 -0000
Message-ID: <00f101d03bfc$c5708f30$5051ad90$@olddog.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Thread-Index: AQIBcNoYGZtvoWVneyalyEOIazxr5Jx1Fljw
Content-Language: en-gb
Archived-At: <http://mailarchive.ietf.org/arch/msg/secdir/4Cyb4-3BtHRutM54Dri0IIMwwCc>
Subject: Re: [secdir] Secdir review of draft-ietf-mpls-oam-ipv6-rao-02
Precedence: list
Reply-To: adrian@olddog.co.uk

Thanks Vincent. Good nits.
Adrian

> -----Original Message-----
> From: iesg [mailto:iesg-bounces@ietf.org] On Behalf Of Vincent Roca
> Sent: 29 January 2015 19:36
> To: IESG; secdir@ietf.org; draft-ietf-mpls-oam-ipv6-rao@tools.ietf.org
> Cc: Vincent Roca
> Subject: Secdir review of draft-ietf-mpls-oam-ipv6-rao-02
> 
> Hello,
> 
> I have reviewed this document as part of the security directorate's ongoing
> effort to review all IETF documents being processed by the IESG. These
> comments were written primarily for the benefit of the security area
> directors.  Document editors and WG chairs should treat these comments just
> like any other last call comments.
> 
> Summary: ready
> 
> This document specifies a new Router Alert Option Value for IPv6, to be used
> by MPLS OAM tools in IPv6 environments.
> It does not introduce any new mechanism that is likely to create security
> threats. Additionally, RFC 6398 discusses the security aspects of IP Router
> Alert in detail. The Security Considerations section of the present document
> refers to this (and related RFCs) for security aspects which I think is
appropriate.
> 
> 
> Non-Security comments:
> 
> ** The Introduction uses several terms that appear to me synonymous, namely:
>        generic Option Value
>        generic IPV6 Router Alert code point
>        Value field in the Router Alert Option
>        IPv6 Router Alert Option Value
> And later in Section 3:
>        option value            (i.e., without any upper case letter)
> Or in Section 6:
>        defines a new code point (value TBD1)
> It's worth to harmonize them.
> 
> ** Section 5: there's probably a missing word in:
>        "...examine the packet the MPLS OAM purpose."

[secdir] Secdir review of draft-ietf-mpls-oam-ipv… Vincent Roca
Re: [secdir] Secdir review of draft-ietf-mpls-oam… Adrian Farrel
Re: [secdir] Secdir review of draft-ietf-mpls-oam… Carlos Pignataro (cpignata)