[mpls] FW: I-D Action: draft-farrelll-mpls-opportunistic-encrypt-00.txt

Hi MPLS working group,

Stephen and I have been looking at MPLS data plane security and wondering
whether anything could be done to help protect against various types of bulk
surveillance achieved by tapping entire links without requiring full and
management-heavy establishment of security associations.

This I-D is very rough! it is a first attempt to show what might be achieved. We
are confident that there are problems with what we have suggested both from a
security and an MPLS perspective. Your thoughts and comments are encouraged.

Thanks,
The Farrel twins.

> -----Original Message-----
> From: I-D-Announce [mailto:i-d-announce-bounces@ietf.org] On Behalf Of
> internet-drafts@ietf.org
> Sent: 09 January 2014 11:44
> To: i-d-announce@ietf.org
> Subject: I-D Action: draft-farrelll-mpls-opportunistic-encrypt-00.txt
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts
directories.
> 
> 
>         Title           : Opportunistic Encryption in MPLS Networks
>         Authors         : Adrian Farrel
>                           Stephen Farrell
> 	Filename        : draft-farrelll-mpls-opportunistic-encrypt-00.txt
> 	Pages           : 22
> 	Date            : 2014-01-09
> 
> Abstract:
>    This document describes a way to apply opportunistic encryption
>    between adjacent nodes on an MPLS Label Switched Path (LSP) or
>    between end points of an LSP.  It explains how keys may be exchanged
>    to enable the encryption, and indicates how key identifiers are
>    exchanged in encrypted MPLS packets.  Finally, this document
>    describes the applicability of opportunistic encryption in MPLS
>    networks with an indication of the level of improved security as well
>    as the continued vulnerabilities.
> 
>    This document does not describe security for MPLS control plane
>    protocols.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-farrelll-mpls-opportunistic-encrypt/
> 
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-farrelll-mpls-opportunistic-encrypt-00
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________
> I-D-Announce mailing list
> I-D-Announce@ietf.org
> https://www.ietf.org/mailman/listinfo/i-d-announce
> Internet-Draft directories: http://www.ietf.org/shadow.html
> or ftp://ftp.ietf.org/ietf/1shadow-sites.txt