Re: [Idr] Kathleen Moriarty's Yes on draft-ietf-idr-error-handling-18: (with COMMENT)

[Kathleen Moriarty <[e-mail]>]

Hi John,

On Mon, Apr 20, 2015 at 1:53 PM, John G. Scudder <[e-mail]> wrote:

> Hi Kathleen,
>
> On Mar 9, 2015, at 8:07 PM, Kathleen Moriarty <
> [e-mail]> wrote:
>
> > My only comment would be to see if you could break the first paragraph of
> > the security considerations into a few sentences.  Maybe getting rid of
> > the parens to help break out the additional sentences would help.
>
> Good point, thanks. Parentheses are the bane of my existence. How about
> this?
>
>    This specification addresses the vulnerability of a BGP speaker to a
>    potential attack whereby a distant attacker can generate a malformed
>    optional transitive attribute that is not recognized by intervening
>    routers. Since the intervening routers do not recognize the
>    attribute, they propagate it without checking it. When the malformed
>    attribute arrives at a router that does recognize the given attribute
>    type, that router resets the session over which it arrived. Since
>    significant fan-out can occur between the attacker and the routers
>    that do recognize the attribute type, this attack could potentially
>    be particularly harmful.
>

That's much easier to read, thank you!

>
> – John




-- 

Best regards,
Kathleen