[Bier] Secdir last call review of draft-ietf-bier-bfd-03

[Catherine Meadows via Datatracker <[e-mail]>]

Reviewer: Catherine Meadows
Review result: Ready

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG. These comments were written primarily for the benefit of the
security area directors. Document editors and WG chairs should treat
these comments just like any other last call comments.

The summary of the review is Ready.

RFC8562 and RFC8563 define methods using Bidirectional Forwarding Detection
(BFD) for  monitoring  and detecting unicast failure between senders (heads)
and receivers (tails) in multipoint or multicast networks.   This document
describes procedures for applying these methods in the Bit Index Explicit
Replication (BIER) [RFC8279] domain.  Most of it is concerned with the format
and use of packet headers.

In the Security Consideration section, the reader is directed to
I-D.ietf-bier-ping for BIER packet processing security considerations, and
RFC8562 for general multipoint BFD security considerations. I agree with the
authors’ assertion that this document does not produce any additional security
considerations.