IETF Logo Mail Archive

Re: [Last-Call] [Taps] Opsdir telechat review of draft-ietf-taps-transport-security-11

Susan Hares <shares@ndzh.com> Thu, 16 April 2020 16:56 UTC

Return-Path: <shares@ndzh.com>
X-Original-To: last-call@ietfa.amsl.com
Delivered-To: last-call@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BF803A0EC3; Thu, 16 Apr 2020 09:56:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.948
X-Spam-Level:
X-Spam-Status: No, score=0.948 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=2.845, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SyMXdPw9PCq2; Thu, 16 Apr 2020 09:56:21 -0700 (PDT)
Received: from hickoryhill-consulting.com (50-245-122-100-static.hfc.comcastbusiness.net [50.245.122.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35BE83A112B; Thu, 16 Apr 2020 09:55:36 -0700 (PDT)
X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=166.170.25.188;
From: Susan Hares <shares@ndzh.com>
To: 'Joseph Touch' <touch@strayalpha.com>
Cc: ops-dir@ietf.org, last-call@ietf.org, draft-ietf-taps-transport-security.all@ietf.org, taps@ietf.org
References: <158703333468.25896.8984664151253035199@ietfa.amsl.com> <87F84D2D-ED5D-445A-ABA3-416AD0F3F9BD@strayalpha.com>
In-Reply-To: <87F84D2D-ED5D-445A-ABA3-416AD0F3F9BD@strayalpha.com>
Date: Thu, 16 Apr 2020 12:55:29 -0400
Message-ID: <009001d6140f$d6346030$829d2090$@ndzh.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Content-Language: en-us
Thread-Index: AQCxyBZWHy51XSpfJdx0FkoOJmBzXgIi2NOyqrN2NJA=
X-Antivirus: AVG (VPS 200415-0, 04/15/2020), Outbound message
X-Antivirus-Status: Not-Tested
X-Authenticated-User: skh@ndzh.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/last-call/-WGId8mJh2ojZk6JD6uU6kBfZ8A>
Subject: Re: [Last-Call] [Taps] Opsdir telechat review of draft-ietf-taps-transport-security-11
X-BeenThere: last-call@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF Last Calls <last-call.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/last-call>, <mailto:last-call-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/last-call/>
List-Post: <mailto:last-call@ietf.org>
List-Help: <mailto:last-call-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/last-call>, <mailto:last-call-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Apr 2020 16:56:27 -0000

Joe: 

I have come to the same conclusion that an open-source TCP-AO is the next
step for TCP-AO.

I still hoping for some fairy dust ... to fix the BGP TCP security problem. 
If you have any ... let me know 

Susan Hares


-----Original Message-----
From: Joseph Touch [mailto:touch@strayalpha.com] 
Sent: Thursday, April 16, 2020 11:32 AM
To: Susan Hares
Cc: ops-dir@ietf.org; last-call@ietf.org;
draft-ietf-taps-transport-security.all@ietf.org; taps@ietf.org
Subject: Re: [Taps] Opsdir telechat review of
draft-ietf-taps-transport-security-11

Hi, Susan,

> On Apr 16, 2020, at 3:35 AM, Susan Hares via Datatracker
<noreply@ietf.org> wrote:
> 
> Reviewer: Susan Hares
> ...
> Personal plea: 
> You've clear stated the BGP issue up front. 
> TCP MD5 is bad (due to privacy issues) and TCP-AO is not deployed..

It is available in Cisco IOS at least. Its biggest drawback appears to be a
lack of open-source implementations.

>  Has the TAPs given any thought to
> what might be  a replacement that could utilize some of the modern 
> TCP.

Given the problem with TCP-AO deployment is that there is no free
implementation and low implementation by vendors, how exactly would a new
solution with even less implemented code help?

Joe

v2.23.0 | Report a Bug | By Email