[dtn] Security in BPv7

I've been thinking through the concept of whether security (e.g., security blocks) should be formally defined in BPv7 or whether their definition should be deferred to a separate document.

Having worked through several use cases for both space and terrestrial networking, I think that BPv7 should not mandate a particular security block structure. In most cases, we've been using the design mantra "make the common case fast", which will work for (by definition) a majority of deployments. However, I am sure there are boundary cases and pathological topologies for which a particular closed network or other special deployment would want something different. For those networks, it is far easier to stay compliant with BP and then non-compliant with BSP/SBSP than to require divergence from the core standard. 

Further, my intuition is that the security posture is best captured in a series of (at least) three documents: the initial common-case security blocks (SBSP), a security recipe for common security services (drafting in progress), and configurations/policy best practices. To the extent that a "recipe book" for security would show more than one way to achieve a desired security service, baselining a single methodology in 5050 or BP7 spec would be unduly constraining.

Long story short, I think the path proposed in BPv7 (pointing outside of the document) for security services seems like a sensical thing to be doing.

-Ed
________________________________________
From: dtn [dtn-bounces@ietf.org] On Behalf Of Templin, Fred L [Fred.L.Templin@boeing.com]
Sent: Friday, June 06, 2014 2:38 PM
To: dtn@ietf.org
Subject: [dtn] FW: I-D Action: draft-burleigh-bpv7-00.txt

FYI, see below for a first draft of RFC5050bis (Appendix A has a
summary of differences from RFC5050). Comments to dtn@ietf.org.

-----Original Message-----
From: I-D-Announce [mailto:i-d-announce-bounces@ietf.org] On Behalf Of internet-drafts@ietf.org
Sent: Friday, June 06, 2014 10:38 AM
To: i-d-announce@ietf.org
Subject: I-D Action: draft-burleigh-bpv7-00.txt

A New Internet-Draft is available from the on-line Internet-Drafts directories.

        Title           : Proposed Revised Bundle Protocol
        Author          : Scott Burleigh
        Filename        : draft-burleigh-bpv7-00.txt
        Pages           : 64
        Date            : 2014-06-06

Abstract:
   This Internet Draft presents a proposed modification to the Bundle
   Protocol Specification, including notes on the rationale underlying
   some of the proposed changes.

The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-burleigh-bpv7/

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-burleigh-bpv7-00

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

_______________________________________________
dtn mailing list
dtn@ietf.org
https://www.ietf.org/mailman/listinfo/dtn