Re: [mpls] IESG comments on draft-ietf-mpls-sfl-framework - first tranche (security)
Roman Danyliw <rdd@cert.org> Wed, 30 September 2020 12:59 UTC
Return-Path: <rdd@cert.org>
X-Original-To: mpls@ietfa.amsl.com
Delivered-To: mpls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C04E3A0EFD; Wed, 30 Sep 2020 05:59:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T5RvQ4qevwxK; Wed, 30 Sep 2020 05:59:29 -0700 (PDT)
Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 801783A0EFC; Wed, 30 Sep 2020 05:59:29 -0700 (PDT)
Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 08UCxS7g031076; Wed, 30 Sep 2020 08:59:28 -0400
DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu 08UCxS7g031076
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1601470768; bh=pCPTcfi72mKcMqYFioiQtz3ttfHQbA88kbJuG1E/7lQ=; h=From:To:Subject:Date:References:In-Reply-To:From; b=qqsTIEykfpWvZLhk96XVfddhpeDuvQSTOX+Aqybefpftk2lbemqYx2XVhUzELp/db G+3cS6lywgmD0z4XbwpR91IsykJ1ziqmXL2DFfAEOt7eW2PvEeG4/yvfb+h+gs/d+i 1TkxJvbavNKCmSJtkXybTvnk8NHQyCWkQ/CNmJaw=
Received: from MURIEL.ad.sei.cmu.edu (muriel.ad.sei.cmu.edu [147.72.252.47]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 08UCxQlO007169; Wed, 30 Sep 2020 08:59:26 -0400
Received: from MORRIS.ad.sei.cmu.edu (147.72.252.46) by MURIEL.ad.sei.cmu.edu (147.72.252.47) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1979.3; Wed, 30 Sep 2020 08:59:26 -0400
Received: from MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb]) by MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb%13]) with mapi id 15.01.1979.003; Wed, 30 Sep 2020 08:59:26 -0400
From: Roman Danyliw <rdd@cert.org>
To: Stewart Bryant <sb@stewartbryant.com>, "draft-ietf-mpls-sfl-framework@ietf.org" <draft-ietf-mpls-sfl-framework@ietf.org>, "mpls-ads@ietf.org" <mpls-ads@ietf.org>, mpls <mpls@ietf.org>, Benjamin Kaduk <kaduk@mit.edu>
Thread-Topic: IESG comments on draft-ietf-mpls-sfl-framework - first tranche (security)
Thread-Index: AQHWlxnomUkbuvYNxUuj088zuULJL6mBJEgw
Date: Wed, 30 Sep 2020 12:59:25 +0000
Message-ID: <93a503c52b13459ca5229e0c2b988de0@cert.org>
References: <2A8FF52B-BE61-44AF-B98C-9E5B75B83BBD@stewartbryant.com>
In-Reply-To: <2A8FF52B-BE61-44AF-B98C-9E5B75B83BBD@stewartbryant.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.64.202.177]
Content-Type: multipart/alternative; boundary="_000_93a503c52b13459ca5229e0c2b988de0certorg_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/mpls/VQyUUM7gU5Tyo7J_LP63CfUIdPc>
Subject: Re: [mpls] IESG comments on draft-ietf-mpls-sfl-framework - first tranche (security)
X-BeenThere: mpls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multi-Protocol Label Switching WG <mpls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mpls>, <mailto:mpls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mpls/>
List-Post: <mailto:mpls@ietf.org>
List-Help: <mailto:mpls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mpls>, <mailto:mpls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Sep 2020 12:59:32 -0000
Hi Stewart! Thanks for the status update. Inline about non-Section 6 and 7 text … From: Stewart Bryant <sb@stewartbryant.com> Sent: Wednesday, September 30, 2020 7:08 AM To: draft-ietf-mpls-sfl-framework@ietf.org; mpls-ads@ietf.org; mpls <mpls@ietf.org>; Roman Danyliw <rdd@cert.org>; Benjamin Kaduk <kaduk@mit.edu> Cc: Stewart Bryant <sb@stewartbryant.com> Subject: IESG comments on draft-ietf-mpls-sfl-framework - first tranche (security) Dear All, I am working my way through the various IESG comments on draft-ietf-mpls-sfl-framework. I have looked at the comments by Roman and Benjamin, but need to pause for a few days to do other work. My proposed disposition of the comments is as follows. I thank all of the reviewers and will address the other comments and upload a new version of the text shortly. Bets regards Stewart From Roman Danyliw ** Section 3. What is “triggering IPFIX inspection”? I wasn’t familiar with this phrasing. Is the intent to trigger more in-depth analysis of header information, as opposed to “triggering … DPI”, which will do content inspection? SB> I have changed this to "triggering an IP Flow Information Export (IPFIX) {{RFC7011}} capture" ** Editorial Nits: -- Section 3. Typo. s/co-ordinating/coordinating/ SB> Fixed -- Section 4.1. Typo. s/are present/is present/ I think the original is correct (there is a plurality of cases), I will leave it to the RFC Editor. -- Section 5. Typo. s/invalidate the certain uses/invalidate certain uses/ SB> Fixed [Roman] These changes all look good. Thanks for making them. Regards, Roman
- [mpls] IESG comments on draft-ietf-mpls-sfl-frame… Stewart Bryant
- Re: [mpls] IESG comments on draft-ietf-mpls-sfl-f… Roman Danyliw
- Re: [mpls] IESG comments on draft-ietf-mpls-sfl-f… Benjamin Kaduk