[CCAMP] Stephen Farrell's No Objection on draft-ietf-ccamp-wson-signal-compatibility-ospf-15: (with COMMENT)

["Stephen Farrell" <[e-mail]>]

Stephen Farrell has entered the following ballot position for
draft-ietf-ccamp-wson-signal-compatibility-ospf-15: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-ccamp-wson-signal-compatibility-ospf/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------


I have two (non-blocking) questions...

I always get worried when the security considerations
says "nothing to see here, move on, but if you must, do
feel free to look at <other-rfcs>." That is sometimes a
signal that nobody bothered to think about security, but
only thought about how to try keep the security ADs
quiet:-) Can you re-assure me that in this case, you did
think about security?

Is there any interesting new way in which abuse of these
TLVs (either via direct insertion or else by causing
them to be sort-of controlled by sending other traffic)
can be used to control how traffic flows in a network so
that the attacker can better control or predict through
which nodes (or at which wavelengths) some traffic of
interest (to the attacker) will flow? I'd say that the
answer is probably not, but did you consider it?