[Lwip] Martin Duke's No Objection on draft-ietf-lwig-minimal-esp-08: (with COMMENT)

Martin Duke via Datatracker <noreply@ietf.org> Mon, 04 April 2022 17:42 UTC

Return-Path: <noreply@ietf.org>
X-Original-To: lwip@ietf.org
Delivered-To: lwip@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 999F93A0E84; Mon, 4 Apr 2022 10:42:22 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Martin Duke via Datatracker <noreply@ietf.org>
To: The IESG <iesg@ietf.org>
Cc: draft-ietf-lwig-minimal-esp@ietf.org, lwig-chairs@ietf.org, lwip@ietf.org, mohit.m.sethi@ericsson.com, mohit.m.sethi@ericsson.com
X-Test-IDTracker: no
X-IETF-IDTracker: 7.46.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: Martin Duke <martin.h.duke@gmail.com>
Message-ID: <164909414260.31261.13253029039130358420@ietfa.amsl.com>
Date: Mon, 04 Apr 2022 10:42:22 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/lwip/7G8FThc558nt4V1Rb2e137w1M2o>
Subject: [Lwip] Martin Duke's No Objection on draft-ietf-lwig-minimal-esp-08: (with COMMENT)
X-BeenThere: lwip@ietf.org
X-Mailman-Version: 2.1.29
List-Id: "Lightweight IP stack. Official mailing list for IETF LWIG Working Group." <lwip.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lwip>, <mailto:lwip-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lwip/>
List-Post: <mailto:lwip@ietf.org>
List-Help: <mailto:lwip-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lwip>, <mailto:lwip-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Apr 2022 17:42:23 -0000

Martin Duke has entered the following ballot position for
draft-ietf-lwig-minimal-esp-08: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-lwig-minimal-esp/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks to Bob Briscoe for the TSVART review.

Sec 2.1. I find it odd that a node implementing IPSec is overburdened by
generating a random number, but this is not my domain.

Sec 3. Bob and the authors had an interesting discussion on time-based SN and
replay windows. It seems to me that the best way to do this would be for the
receiver to keep a replay window of some number of packets rather than SNs. The
receiver would then store the last, say, 10 packet SNs regardless of how many
SNs that covered. This would avoid all the issues with the sender skipping many
SNs.