Re: [Detnet] Secdir last call review of draft-ietf-detnet-mpls-05

On Thu, Mar 12, 2020 at 4:07 AM Lou Berger <lberger@labn.net> wrote:
>
> Watson,
>
> Can you provide context here? Can you be explicit on what you see needs to
> be addressed (beyond what is in this document as well as related rfcs)?

You have to talk about how the layers interact, and can't just say the
lower level handles anything without any guide as to what needs to be
provided by that lower layer.

I think my concerns about the assumptions this could be fixed by
saying. "All nodes are trusted and any of them can misbehave in ways
that affect the network.  If the MPLS layer cannot provide sufficient
determinism, then the DetNet mechanisms won't work".  I agree we
shoudn't require an entire massive security framework to be quoted
again here, but there must be some details of this embedding that are
worth noting, and yet I don't see them called out in the security
considerations section.

Are there really no specific concerns about the interaction between
DetNet and MPLS?

>
> Thank you,
> Lou
>
>
> ----------
> On March 11, 2020 10:30:27 PM Watson Ladd <watsonbladd@gmail.com> wrote:
>
> > I don't see any reason why RFC 3552's guidelines shoudn't apply to this draft.
> >
> > If there is a MPLS exception I'd like to see the rules that should be applied.
> >
> > As is I don't see any reason why the assumptions can't be explicitly
> > spelled out, either in the Security Considerations or elsewhere.
> >
> > _______________________________________________
> > detnet mailing list
> > detnet@ietf.org
> > https://www.ietf.org/mailman/listinfo/detnet
> >
>
>

-- 
"Man is born free, but everywhere he is in chains".
--Rousseau.