Re: [Detnet] Roman Danyliw's No Objection on draft-ietf-detnet-ip-over-mpls-07: (with COMMENT)

[Balázs Varga A <[e-mail]>]

Hi Roman,
Many thanks for the review. My comments/replies inline.
Thanks & Cheers 
Bala'zs

-----Original Message-----
From: Roman Danyliw via Datatracker <[e-mail]> 
Sent: Wednesday, September 9, 2020 5:16 PM
To: The IESG <[e-mail]>
Cc: [e-mail]; [e-mail]; [e-mail]; Ethan Grossman <[e-mail]>; [e-mail]
Subject: Roman Danyliw's No Objection on draft-ietf-detnet-ip-over-mpls-07: (with COMMENT)

Roman Danyliw has entered the following ballot position for
draft-ietf-detnet-ip-over-mpls-07: No Objection

When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-detnet-ip-over-mpls/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

(Identical comments as draft-ietf-detnet-mpls – if needed, we can chat about them only once)

** Section 6.  Per “Application flows can be protected through whatever means are provided by the underlying technology”, what is the scope of “underlying technology”, is that an application concern?  Or a DetNet data or control plan concern?  The text isn’t clear on who’s responsibility it is to provide these services (IPSec or MacSec), or what assumptions the application can make?  IMO, the clearer statement to make is that MPLS doesn’t provide any native security services to account for confidentiality and integrity.

<Bala'zs> Right. I will fix this sentence with your suggested clearer statement.

** Section 6.  Per “From a data plane perspective this document does not add or modify any header information.”, to be clear, does this text mean “_application_ header information”?  I’d recommend being clear.

<Bala'zs> Thanks, I will fix this.

** Section 6. Please s/for the mitigation of Man-In-The-Middle attackers/for the mitigation of on-path attackers/

<Bala'zs> Thanks, I will fix this.

** Note the DISCUSS for draft-ietf-detnet-mpls.  Whatever the resolution on that text would apply here too.  Due to the overlap in authors on both documents, I’m adding the marker for that feedback here as a comment.

<Bala'zs> OK.