Re: [IPsec] Comments to the draft-ietf-ipsecme-ikev2-fragmentation-05

Yaron Sheffer <yaronf.ietf@gmail.com> Mon, 03 March 2014 20:49 UTC

Return-Path: <yaronf.ietf@gmail.com>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91B141A03DE for <ipsec@ietfa.amsl.com>; Mon, 3 Mar 2014 12:49:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v-OodO1eSt3F for <ipsec@ietfa.amsl.com>; Mon, 3 Mar 2014 12:49:24 -0800 (PST)
Received: from mail-wg0-x22b.google.com (mail-wg0-x22b.google.com [IPv6:2a00:1450:400c:c00::22b]) by ietfa.amsl.com (Postfix) with ESMTP id 0A3B01A0388 for <ipsec@ietf.org>; Mon, 3 Mar 2014 12:49:23 -0800 (PST)
Received: by mail-wg0-f43.google.com with SMTP id x13so2725340wgg.26 for <ipsec@ietf.org>; Mon, 03 Mar 2014 12:49:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=6X5NovMXwOcasc8my7o5UAVOPA2suO99jPqA5Anx8Ew=; b=kaV79J0lRVCTTT9YzDb/jLVK6krO4k6UL4Wcq5jpmq0114hO6MUDzaW/x73pkSGaaV 75x4T/ISyU4M/3api3tZQrqhp3xtEu3Nxh7cwjViIQ0hMN9GTDBf8BO2RbwSZzIxH5HO 4o9bQre5iSr2eKH0WRKdpOyJR0YyP3sFDXYTJRyJycfurNBWPi8Tjvb+X+h+inAFjU5+ +KXQPU3wv25Dko/bf41tiVRprrcoQ/14WZNzYLhYYlV3PKU1t6CtLXNxyE/7wOOXYDpn QaoVRq4ufqivBKaf0ps0QTvmLDW7Ljf2sLO45Q0L63P9l3I/m2JOkJSAGZcsT8SqeTJt SVFw==
X-Received: by 10.194.2.194 with SMTP id 2mr9627087wjw.73.1393879760584; Mon, 03 Mar 2014 12:49:20 -0800 (PST)
Received: from [10.0.0.6] ([109.65.63.189]) by mx.google.com with ESMTPSA id z1sm41060784wjq.19.2014.03.03.12.49.19 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 03 Mar 2014 12:49:19 -0800 (PST)
Message-ID: <5314EACE.5060502@gmail.com>
Date: Mon, 03 Mar 2014 22:49:18 +0200
From: Yaron Sheffer <yaronf.ietf@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0
MIME-Version: 1.0
To: Tero Kivinen <kivinen@iki.fi>, ipsec@ietf.org
References: <21268.44277.606320.237806@fireball.kivinen.iki.fi>
In-Reply-To: <21268.44277.606320.237806@fireball.kivinen.iki.fi>
Content-Type: text/plain; charset=windows-1255; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/ipsec/DlaHzvQcbwWF-4bVHZbu2CQhuqU
Subject: Re: [IPsec] Comments to the draft-ietf-ipsecme-ikev2-fragmentation-05
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec/>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Mar 2014 20:49:25 -0000

...And s/reassempling/reassembling (also in the preceding paragraph).

	Yaron

On 03/03/2014 06:25 PM, Tero Kivinen wrote:
> I have read this document, and I think it is getting ready. I have
> some nits for it, but they are just typos and similar.
>
> Nits:
> ----------------------------------------------------------------------
>
> In appendix A:
>
>     The attacker could infrequently emit forged but looking valid fragments
>         		      		   	       	   ^^^^^^^^^^^^^
> s/looking valid/valid looking/
>
> --
>
>     ... that allows receiver to determine forgeg fragments and
>         	    	   	       		 ^^^^^^
>     not to fetch them into the reassempling queue.
>         	  ^^^^^
>
> s/forgeg/forged/
> s/fetch/store/
>