[Gen-art] Genart LC review: draft-ietf-grow-filtering-threats-06

Robert Sparks <rjsparks@nostrum.com> Wed, 24 June 2015 23:19 UTC

Return-Path: <rjsparks@nostrum.com>
X-Original-To: gen-art@ietfa.amsl.com
Delivered-To: gen-art@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 528261A700D; Wed, 24 Jun 2015 16:19:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Cvv9nonB6bbL; Wed, 24 Jun 2015 16:19:19 -0700 (PDT)
Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CA0A1A6FF0; Wed, 24 Jun 2015 16:19:16 -0700 (PDT)
Received: from unnumerable.local (pool-71-170-237-80.dllstx.fios.verizon.net [71.170.237.80]) (authenticated bits=0) by nostrum.com (8.15.1/8.14.9) with ESMTPSA id t5ONJFYC011330 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=OK); Wed, 24 Jun 2015 18:19:16 -0500 (CDT) (envelope-from rjsparks@nostrum.com)
X-Authentication-Warning: raven.nostrum.com: Host pool-71-170-237-80.dllstx.fios.verizon.net [71.170.237.80] claimed to be unnumerable.local
Message-ID: <558B3AEE.2010009@nostrum.com>
Date: Wed, 24 Jun 2015 18:19:10 -0500
From: Robert Sparks <rjsparks@nostrum.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.7.0
MIME-Version: 1.0
To: General Area Review Team <gen-art@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>, grow@ietf.org, draft-ietf-grow-filtering-threats.all@ietf.org
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/gen-art/EAWKX-s894-JzNPoMvOH2zq_tnw>
Subject: [Gen-art] Genart LC review: draft-ietf-grow-filtering-threats-06
X-BeenThere: gen-art@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gen-art>, <mailto:gen-art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art/>
List-Post: <mailto:gen-art@ietf.org>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gen-art>, <mailto:gen-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jun 2015 23:19:21 -0000

I am the assigned Gen-ART reviewer for this draft. For background on
Gen-ART, please see the FAQ at

<http://wiki.tools.ietf.org/area/gen/trac/wiki/GenArtfaq>.

Please resolve these comments along with any other Last Call comments
you may receive.

Document: draft-ietf-grow-filtering-threats-06
Reviewer: Robert Sparks
Review Date: 24-Jun-2015
IETF LC End Date: 2-Jul-2015
IESG Telechat date: not yet scheduled for a telechat

Summary: Ready with nits

 From looking at the document history and list archives, this document's 
been around for some time, and has had some editorial push already.
The unintended consequences it highlights are interesting, and it will 
be useful to operators to know these possible causes of unexpected behavior.

I encourage another strong editing pass before publication.

This is being published as an IETF-stream document. When published it 
reflects IETF consensus.
There are places in the text that I think are problematic given that 
status. The issues are editorial, and I expect they will be easy to address.

The document uses "we" frequently. Originally, that meant the authors. 
It's ambiguous what it means in an IETF-stream document. I suggest 
editing out all occurrences. Try to avoid simply changing "we" to "the 
authors" - find a way to reflect what the IETF is saying here.

Is the last paragraph of 4.1 an IETF consensus position on how operators 
might charge one another? It would be good to find a way to word this 
that look more like statements of fact and less like charging advice.

The document draws some conclusions that I think are unnecessary. For 
instance, "Therefore, we conclude that the reactive approach is the more 
reasonable recommendation to deal with unexpected flows." Why does the 
IETF need to say that (and is it an IETF consensus statement)? It would 
be enough, I think, to reduce the discussion in these sections to 
calling out the issues with each approach.

Please simplify the sentences, and avoid passive construction. For 
instance, "It can be considered problematic to be causing unexpected 
traffic flows in other ASes." can be much shorter. After you do that, I 
think you'll find it easier to identify and collapse sections of 
redundant text.

RjS