[Curdle] Opsdir last call review of draft-ietf-curdle-ssh-dh-group-exchange-05
Susan Hares <shares@ndzh.com> Wed, 13 September 2017 14:41 UTC
Return-Path: <shares@ndzh.com>
X-Original-To: curdle@ietf.org
Delivered-To: curdle@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 63D60132949; Wed, 13 Sep 2017 07:41:42 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Susan Hares <shares@ndzh.com>
To: ops-dir@ietf.org
Cc: curdle@ietf.org, ietf@ietf.org, draft-ietf-curdle-ssh-dh-group-exchange.all@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.61.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <150531370238.30451.687387668032813578@ietfa.amsl.com>
Date: Wed, 13 Sep 2017 07:41:42 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/curdle/acdriJ4NWh1AZUoFBEf_XJ9uKWU>
Subject: [Curdle] Opsdir last call review of draft-ietf-curdle-ssh-dh-group-exchange-05
X-BeenThere: curdle@ietf.org
X-Mailman-Version: 2.1.22
List-Id: "List for discussion of potential new security area wg." <curdle.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/curdle>, <mailto:curdle-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/curdle/>
List-Post: <mailto:curdle@ietf.org>
List-Help: <mailto:curdle-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/curdle>, <mailto:curdle-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Sep 2017 14:41:42 -0000
Reviewer: Susan Hares Review result: Has Nits This document provides a clear description of the change in minimum modules size. On editorial comment, this document does not indicate whether it is wise for the operations system to log a report if it receives a less than 2048 bits. Would this enhance security or provide DoS attack surface. If logging creates a DoS surface, it would be good to include this as operational advice.