Re: [IPsec] Comments to thedraft-ietf-ipsecme-ikev2-fragmentation-05

"Valery Smyslov" <svanru@gmail.com> Tue, 04 March 2014 05:25 UTC

Return-Path: <svanru@gmail.com>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CEA1B1A0361 for <ipsec@ietfa.amsl.com>; Mon, 3 Mar 2014 21:25:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EJVkmxPrOju4 for <ipsec@ietfa.amsl.com>; Mon, 3 Mar 2014 21:25:41 -0800 (PST)
Received: from mail-la0-x231.google.com (mail-la0-x231.google.com [IPv6:2a00:1450:4010:c03::231]) by ietfa.amsl.com (Postfix) with ESMTP id B71A91A035F for <ipsec@ietf.org>; Mon, 3 Mar 2014 21:25:40 -0800 (PST)
Received: by mail-la0-f49.google.com with SMTP id mc6so5200799lab.22 for <ipsec@ietf.org>; Mon, 03 Mar 2014 21:25:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:from:to:references:subject:date:mime-version :content-type:content-transfer-encoding; bh=yiB/NMh/FhTfT1ZHLLzY4EzuhOy+78C61R1qxv78gOA=; b=zVqJ7zuddrgnGi45NSY0nqWinxp7qoMrbWZcxH9On8zP8Jzgfe6qTQQEakCdT+pres 1GZuUkEJ8SLzHkAik/wik35/xA+Y5bynYoLCDCpnfl2nbzEJla32qYzmJq72/cxmPjQW mGqkJYd5L6j9chhkBC9xLcf2scidBQN8Z8GixuD/8hcPGEjTi1/1DwjnPbUnYHTcvQVI Jf+57rAOshElLUfWsC9+9F+SNROepRW3BIRiC94zb+8zi3gRQV8k90N69lqhFvrQEgw/ mgGfp9av4BT7CQ3q15n+O9DRtlO0mg4oN06kNpUcSBnZ8HCHtjMiav+/RtjJEcXpYV97 Kkig==
X-Received: by 10.152.28.41 with SMTP id y9mr678129lag.11.1393910737097; Mon, 03 Mar 2014 21:25:37 -0800 (PST)
Received: from buildpc ([93.188.44.200]) by mx.google.com with ESMTPSA id pz10sm18355711lbb.10.2014.03.03.21.25.35 for <multiple recipients> (version=TLSv1 cipher=RC4-SHA bits=128/128); Mon, 03 Mar 2014 21:25:36 -0800 (PST)
Message-ID: <DD4E013B1B724197A7F7550E36CB3A3A@buildpc>
From: "Valery Smyslov" <svanru@gmail.com>
To: "Yaron Sheffer" <yaronf.ietf@gmail.com>, "Tero Kivinen" <kivinen@iki.fi>, <ipsec@ietf.org>
References: <21268.44277.606320.237806@fireball.kivinen.iki.fi> <5314EACE.5060502@gmail.com>
Date: Tue, 4 Mar 2014 09:25:50 +0400
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=response
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157
Archived-At: http://mailarchive.ietf.org/arch/msg/ipsec/RS4g58srilslA5JylqV9_PBjRJQ
Subject: Re: [IPsec] Comments to thedraft-ietf-ipsecme-ikev2-fragmentation-05
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec/>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Mar 2014 05:25:43 -0000

Thanks Yaron!

Valery.

----- Original Message ----- 
From: "Yaron Sheffer" <yaronf.ietf@gmail.com>
To: "Tero Kivinen" <kivinen@iki.fi>fi>; <ipsec@ietf.org>
Sent: Tuesday, March 04, 2014 12:49 AM
Subject: Re: [IPsec] Comments to 
thedraft-ietf-ipsecme-ikev2-fragmentation-05


> ...And s/reassempling/reassembling (also in the preceding paragraph).
>
> Yaron
>
> On 03/03/2014 06:25 PM, Tero Kivinen wrote:
>> I have read this document, and I think it is getting ready. I have
>> some nits for it, but they are just typos and similar.
>>
>> Nits:
>> ----------------------------------------------------------------------
>>
>> In appendix A:
>>
>>     The attacker could infrequently emit forged but looking valid 
>> fragments
>>                            ^^^^^^^^^^^^^
>> s/looking valid/valid looking/
>>
>> --
>>
>>     ... that allows receiver to determine forgeg fragments and
>>                       ^^^^^^
>>     not to fetch them into the reassempling queue.
>>           ^^^^^
>>
>> s/forgeg/forged/
>> s/fetch/store/
>>
>
> _______________________________________________
> IPsec mailing list
> IPsec@ietf.org
> https://www.ietf.org/mailman/listinfo/ipsec