[Last-Call] Secdir last call review of draft-ietf-bess-evpn-lsp-ping-08

[Rifaat Shekh-Yusef via Datatracker <[e-mail]>]

Reviewer: Rifaat Shekh-Yusef
Review result: Has Nits

I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG.  These
comments were written primarily for the benefit of the security area directors.

Document editors and WG chairs should treat these comments just like any other
last call comments.

LSP Ping is a widely deployed Operation, Administration, and
Maintenance mechanism in MPLS networks.  This document describes
mechanisms for detecting data plane failures using LSP Ping in MPLS
based EVPN and PBB-EVPN network

Summary: Ready

This document builds on top of an existing and widely deployed mechanism, by
adding new TLVs to the LSP Ping mechanism. The existing mechanism security
properties are well defined in existing standards, and this document does not
seem to make any changes that impacts the existing security properties.

I did not see any mention of potential impact of the new TLVs on privacy. It
would be nice if that could be addressed in the security considerations section.