Re: [Gen-art] [Last-Call] Genart last call review of draft-gont-numeric-ids-sec-considerations-06

Lars Eggert <lars@eggert.org> Mon, 16 January 2023 13:07 UTC

Return-Path: <lars@eggert.org>
X-Original-To: gen-art@ietfa.amsl.com
Delivered-To: gen-art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67604C1516F3; Mon, 16 Jan 2023 05:07:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=eggert.org
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fk0WOrrimfCp; Mon, 16 Jan 2023 05:07:35 -0800 (PST)
Received: from mail.eggert.org (mail.eggert.org [91.190.195.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0A89CC1516E7; Mon, 16 Jan 2023 05:07:35 -0800 (PST)
Received: from smtpclient.apple (unknown [IPv6:2a00:ac00:4000:400:5052:b2a:33bd:cf70]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.eggert.org (Postfix) with ESMTPSA id C7BA81D1E95; Mon, 16 Jan 2023 15:07:27 +0200 (EET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=eggert.org; s=dkim; t=1673874448; bh=DeYvEPMk6KuNCGPsbhqMFhQbRxFJMU39NSmMke1AyME=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=jicgveU52HnTsfFpJX8VfAOsXd+jMygpEPT/ljVkvM0GNb/tEF5cZKfTAE7BtR6xq qn9HmnGygJr1GMS9wI95Qql4l0t0K9hbABkS2pkDMYjkqUKFcCvycFGPv4HfkN2tbp gVjMO61nSDcB0elS3+MIFRra27CahQ+q6aec6fgE=
Content-Type: multipart/signed; boundary="Apple-Mail=_FD25392C-1279-4B6A-A56D-D0DD002A2CA8"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.300.101.1.3\))
From: Lars Eggert <lars@eggert.org>
In-Reply-To: <160999724659.20047.15592378976775376321@ietfa.amsl.com>
Date: Mon, 16 Jan 2023 15:07:26 +0200
Cc: gen-art@ietf.org, draft-gont-numeric-ids-sec-considerations.all@ietf.org, last-call@ietf.org
Message-Id: <C7226924-2A7C-45B2-9C78-8E186A8E0DF2@eggert.org>
References: <160999724659.20047.15592378976775376321@ietfa.amsl.com>
To: Gyan Mishra <hayabusagsm@gmail.com>
X-MailScanner-ID: C7BA81D1E95.A6226
X-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-MailScanner-From: lars@eggert.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/gen-art/LTbe7yfaFVFKY4YVVZpWiDEUk-U>
Subject: Re: [Gen-art] [Last-Call] Genart last call review of draft-gont-numeric-ids-sec-considerations-06
X-BeenThere: gen-art@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gen-art>, <mailto:gen-art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art/>
List-Post: <mailto:gen-art@ietf.org>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gen-art>, <mailto:gen-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Jan 2023 13:07:39 -0000

Gyan, thank you for your review. I have entered a Discuss ballot for this document based on my own review.

Lars


> On Jan 7, 2021, at 07:27, Gyan Mishra via Datatracker <noreply@ietf.org> wrote:
> 
> Reviewer: Gyan Mishra
> Review result: Ready with Issues
> 
> I am the assigned Gen-ART reviewer for this draft. The General Area
> Review Team (Gen-ART) reviews all IETF documents being processed
> by the IESG for the IETF Chair.  Please treat these comments just
> like any other last call comments.
> 
> For more information, please see the FAQ at
> 
> <https://trac.ietf.org/trac/gen/wiki/GenArtfaq>.
> 
> Document: draft-gont-numeric-ids-sec-considerations-??
> Reviewer: Gyan Mishra
> Review Date: 2021-01-06
> IETF LC End Date: 2021-01-04
> IESG Telechat date: Not scheduled for a telechat
> 
> Summary:
> This document updates RFC 3552 Security Considerations for Transient numeric
> identifiers employed in network protocols. Currently RFC 3552 does not address
> transient network identifiers exploitation by pervasive monitoring.
> 
> Major issues:
> None
> 
> Minor issues:
> My suggestion is to maybe have examples section similar to RFC 3552 that gives
> examples of the security implications of the various types of transient numeric
> identifiers. An example for IPv6 IID would be using modified EUI64 versus RFC
> 4941 privacy extension or even RFC 7217 / RFC 8064 stable IID.
> 
> Nits/editorial comments:
> None
> 
> 
> --
> last-call mailing list
> last-call@ietf.org
> https://www.ietf.org/mailman/listinfo/last-call