[Bier] Secdir last call review of draft-ietf-bier-bar-ipa-10
Vincent Roca via Datatracker <noreply@ietf.org> Thu, 24 March 2022 10:30 UTC
Return-Path: <noreply@ietf.org>
X-Original-To: bier@ietf.org
Delivered-To: bier@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C3A43A18B8; Thu, 24 Mar 2022 03:30:29 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: Vincent Roca via Datatracker <noreply@ietf.org>
To: secdir@ietf.org
Cc: bier@ietf.org, draft-ietf-bier-bar-ipa.all@ietf.org, last-call@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 7.46.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <164811782957.30345.1786492893062018914@ietfa.amsl.com>
Reply-To: Vincent Roca <vincent.roca@inria.fr>
Date: Thu, 24 Mar 2022 03:30:29 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/bier/PoJx3ONGHTa2yqn9yCtCtlmeNf8>
Subject: [Bier] Secdir last call review of draft-ietf-bier-bar-ipa-10
X-BeenThere: bier@ietf.org
X-Mailman-Version: 2.1.29
List-Id: "\"Bit Indexed Explicit Replication discussion list\"" <bier.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bier>, <mailto:bier-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bier/>
List-Post: <mailto:bier@ietf.org>
List-Help: <mailto:bier-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bier>, <mailto:bier-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Mar 2022 10:30:30 -0000
Reviewer: Vincent Roca Review result: Ready Hello, I have reviewed this document as part of the security directorate’s ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. Summary: Ready I have no comment regarding the security part, little is said in section 6 which seems appropriate. The three RFCs referenced are appropriate and I agree with the authors the present document does not change the situation. However, I have a few comments on non-SecDir aspects, so feel free to ignore it. For someone who's not aware of the topic, the abstract and introduction are really obscur and of little help to understand the context (e.g., no mention of multicast). After reading the abstract of RFC8279, then everything became clear. Sure, RFC8279 is prominently mentioned in the introduction, yet I think a sentence to position this document in the full architecture would be very helpful. Also, the document makes use of several acronyms that are not defined: Section 1 mentions BFERs that is never defined/expended. Section 2 mentions BFRs that is defined only in section 3. Finally, shouldn't step 4 be rewritten to highlight the case where RC(BC(X)), is empty as in: 4. if (RC(BC(X) non empty) then run AG on RC(BC(X) else throw an exception. As explained in Section 4, this is an exception caused by a bad network design. Typo: - Section 2: mistake, this is probably RFC 8444 and not 8441. > The definition for the BAR and IPA fields in [RFC8401] and [RFC8441] > are updated as following. Cheers, Vincent
- [Bier] Secdir last call review of draft-ietf-bier… Vincent Roca via Datatracker
- Re: [Bier] Secdir last call review of draft-ietf-… Jeffrey (Zhaohui) Zhang
- Re: [Bier] Secdir last call review of draft-ietf-… Vincent Roca