Re: [Fecframe] David Harrington's Discuss on draft-ietf-fecframe-framework-14: (with DISCUSS)

[Vincent Roca <[e-mail]>]

David,

Please find below our proposal in order to try to address
your two comments. Thanks.

Cheers,

    Vincent and Ali

---

9.6.  Baseline Secure FEC Framework Operation

    This section describes a baseline mode of secure FEC Framework
    operation based on the application of the IPsec security protocol,
    which is one possible solution to solve or mitigate the security
    threats introduced by the use of the FEC Framework.
*<new text>*
    All the FEC Framework implementations MUST implement this baseline
    secure mode of operation, even if it is not mandatory to use it.
*<end new text>*

    Two related documents are of interest.
[...]


10.  Operations and Management Considerations

[...]

10.1.  What are the Key Aspects to Consider?

    Several aspects need to be considered since they will directly impact
    the way the FEC Framework and the associated FEC schemes can be
    operated and managed.

    This section lists them as follows:
[...]

*<new text>
*   o Interoperability Considerations: generally speaking, it is highly
      desirable that devices coming from different vendors, possibly
      designed for different use-cases, interoperate. However the FEC
      Framework has been designed in such a way to accommodate a large
      variety of situations. Many options are left open in the current
      document and can only be clarified in the context of a given
      use-case.
*<end new text>
*
10.2.  Operational and Management Recommendations

[...]

*<new text>
*    o Interoperability Considerations: in the general case, it is
       difficult to provide clear recommendations on how to achieve
       interoperability by mandating the use of certain protocols, tools
       or configurations, since such considerations are usually use-case
       dependent. However the following is representative of the way the
       FEC Framework MAY be used over the Internet:
         - use RTP/RTCP over FEC Framework over UDP;
         - use either point to point or point-to-multipoint, bidirectional
           communications;
       In order to increase the probability that devices coming from
       different vendors interoperate, the following is RECOMMENDED:
         - if there is a risk a client does not support the FEC Framework
           or the sender's FEC scheme(s), then it is RECOMMENDED to use RTP
           framing of FEC repair packets, with different RTP Payload Type
           (PT) values.
         - if there is a risk a client does not support the grouping 
semantics
           [RFC 5956], then it is RECOMMENDED not to use it (otherwise this
           client would not understand the bindings).
         - it is RECOMMENDED that the clients and server support regular 
RTCP
           reports.
*<end new text>*
---

On 15/03/11 22:39, David Harrington wrote:
> David Harrington has entered the following ballot position for
> draft-ietf-fecframe-framework-14: Discuss
>
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
>
> Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html
> for more information about IESG DISCUSS and COMMENT positions.
>
>
>
> ----------------------------------------------------------------------
> DISCUSS:
> ----------------------------------------------------------------------
>
> updated for -14-
>
> The new revision has added significantly improved operations and management considerations and security consdierations.
> I think the text is still lacking a bit, and the fix should be fairly easy.
>
> 1) In the operations and management consideration section, it says:
>     In particular, this section discusses the questions of
>     interoperability across vendors/use cases and whether defining
>     mandatory to implement (but not mandatory to use) solutions is
>     beneficial.
>
> The section however fails to discuss interoperability across vendors at all (teh term interoperability is only in the above text).
> A paragraph should be added explaining how interoperability of management across vendors will be achieved, at least when the framework is used in the Internet..
>
> 2) The Security Considerations says:
>     The goals of this section are to state the
>     problem, discuss the risks and identify solutions when feasible.  It
>     also defines a mandatory to implement (but not mandatory to use)
>     security scheme.
> IPsec appears to be the baseline security, but the language surrounding IPsec is not specified in RFC2119 langauge that would make this mandatory to implement. Please specify the mandatory to implement security scheme in RFC2119 REQUIRED/MUST language.
>
>
>
>
>
>
>
>
>