Re: [mpls] would the WG like to adopt draft-farrelll-mpls-opportunistic-encrypt?

[Stephen Farrell <[e-mail]>]

Hiya,

On 23/04/15 10:40, Loa Andersson wrote:
> Working Group,
> 
> <chair hat off>
> 
> I've read the draft (a while ago) and I think this document is within
> the wg charter and should be progressed by the mpls wg.
> 
> (chair hat on>
> 
> If I hear nothing to the contrary I will start the process with
> mpls-rt review, IPR poll and wg adoption poll first week of May.

Thanks Loa. I'm not entirely familiar with the mpls-rt review but
one issue on which I think some detailed requirements-level guidance
would be useful for me is on whether this ought stick with "classic"
integer DH or move to a more modern DH approach based on curve 25519.
If you have reviewers who are familiar with the issues there and
with MPLS performance and implementation requirements that'd be good.
If not, I'm happy to try explain the pros and cons from the security
and crypto POV, either to the reviewers or the list. And that can be
done post-adoption on the list if that's better too, but it'd be a
good thing to bottom out early-ish in the WG process.

> There has been some comments, but I think those are address. Please
> read and comment on the draft.

Yes, I think we've addressed the substantive comments we've so
far seen.

Cheers,
S.

> 
> /Loa
> 
> 
> 
> On 2015-04-17 14:10, Stephen Farrell wrote:
>>
>> Hiya,
>>
>> Adrian and I wrote up [1]. How'd the WG feel about adopting
>> that? If you did, I'd be willing to continue editing if you
>> wanted. So consider this as a request that the WG take on
>> this work.
>>
>> In case it helps, the current abstract is:
>>
>> "
>>     This document describes a way to apply opportunistic security
>>     between adjacent nodes on an MPLS Label Switched Path (LSP) or
>>     between end points of an LSP.  It explains how keys may be agreed
>>     to enable encryption, and how key identifiers are exchanged in
>>     encrypted MPLS packets.  Finally, this document describes the
>>     applicability of this approach to opportunistic security in MPLS
>>     networks with an indication of the level of improved security as
>>     well as the continued vulnerabilities.
>>
>>     This document does not describe security for MPLS control plane
>>     protocols.
>> "
>>
>> Cheers,
>> S.
>>
>> [1] https://tools.ietf.org/html/draft-farrelll-mpls-opportunistic-encrypt
>>
>> _______________________________________________
>> mpls mailing list
>> [e-mail]
>> https://www.ietf.org/mailman/listinfo/mpls
>>
>