Re: [mpls] IESG comments on draft-ietf-mpls-sfl-framework - first tranche (security)

Roman Danyliw <rdd@cert.org> Wed, 30 September 2020 12:59 UTC

Return-Path: <rdd@cert.org>
X-Original-To: mpls@ietfa.amsl.com
Delivered-To: mpls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C04E3A0EFD; Wed, 30 Sep 2020 05:59:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T5RvQ4qevwxK; Wed, 30 Sep 2020 05:59:29 -0700 (PDT)
Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 801783A0EFC; Wed, 30 Sep 2020 05:59:29 -0700 (PDT)
Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 08UCxS7g031076; Wed, 30 Sep 2020 08:59:28 -0400
DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu 08UCxS7g031076
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1601470768; bh=pCPTcfi72mKcMqYFioiQtz3ttfHQbA88kbJuG1E/7lQ=; h=From:To:Subject:Date:References:In-Reply-To:From; b=qqsTIEykfpWvZLhk96XVfddhpeDuvQSTOX+Aqybefpftk2lbemqYx2XVhUzELp/db G+3cS6lywgmD0z4XbwpR91IsykJ1ziqmXL2DFfAEOt7eW2PvEeG4/yvfb+h+gs/d+i 1TkxJvbavNKCmSJtkXybTvnk8NHQyCWkQ/CNmJaw=
Received: from MURIEL.ad.sei.cmu.edu (muriel.ad.sei.cmu.edu [147.72.252.47]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 08UCxQlO007169; Wed, 30 Sep 2020 08:59:26 -0400
Received: from MORRIS.ad.sei.cmu.edu (147.72.252.46) by MURIEL.ad.sei.cmu.edu (147.72.252.47) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1979.3; Wed, 30 Sep 2020 08:59:26 -0400
Received: from MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb]) by MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb%13]) with mapi id 15.01.1979.003; Wed, 30 Sep 2020 08:59:26 -0400
From: Roman Danyliw <rdd@cert.org>
To: Stewart Bryant <sb@stewartbryant.com>, "draft-ietf-mpls-sfl-framework@ietf.org" <draft-ietf-mpls-sfl-framework@ietf.org>, "mpls-ads@ietf.org" <mpls-ads@ietf.org>, mpls <mpls@ietf.org>, Benjamin Kaduk <kaduk@mit.edu>
Thread-Topic: IESG comments on draft-ietf-mpls-sfl-framework - first tranche (security)
Thread-Index: AQHWlxnomUkbuvYNxUuj088zuULJL6mBJEgw
Date: Wed, 30 Sep 2020 12:59:25 +0000
Message-ID: <93a503c52b13459ca5229e0c2b988de0@cert.org>
References: <2A8FF52B-BE61-44AF-B98C-9E5B75B83BBD@stewartbryant.com>
In-Reply-To: <2A8FF52B-BE61-44AF-B98C-9E5B75B83BBD@stewartbryant.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.64.202.177]
Content-Type: multipart/alternative; boundary="_000_93a503c52b13459ca5229e0c2b988de0certorg_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/mpls/VQyUUM7gU5Tyo7J_LP63CfUIdPc>
Subject: Re: [mpls] IESG comments on draft-ietf-mpls-sfl-framework - first tranche (security)
X-BeenThere: mpls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multi-Protocol Label Switching WG <mpls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mpls>, <mailto:mpls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mpls/>
List-Post: <mailto:mpls@ietf.org>
List-Help: <mailto:mpls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mpls>, <mailto:mpls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Sep 2020 12:59:32 -0000

Hi Stewart!

Thanks for the status update.  Inline about non-Section 6 and 7 text …

From: Stewart Bryant <sb@stewartbryant.com>
Sent: Wednesday, September 30, 2020 7:08 AM
To: draft-ietf-mpls-sfl-framework@ietf.org; mpls-ads@ietf.org; mpls <mpls@ietf.org>; Roman Danyliw <rdd@cert.org>; Benjamin Kaduk <kaduk@mit.edu>
Cc: Stewart Bryant <sb@stewartbryant.com>
Subject: IESG comments on draft-ietf-mpls-sfl-framework - first tranche (security)

Dear All,

I am working my way through the various IESG comments on  draft-ietf-mpls-sfl-framework.

I have looked at the comments by Roman and Benjamin, but need to pause for a few days to do other work. My proposed disposition of the comments is as follows.

I thank all of the reviewers and will address the other comments and upload a new version of the text shortly.

Bets regards

Stewart

From Roman Danyliw

** Section 3.  What is “triggering IPFIX inspection”?  I wasn’t familiar with this phrasing.  Is the intent to trigger more in-depth analysis of header information, as opposed to “triggering … DPI”, which will do content inspection?

SB> I have changed this to

"triggering an IP Flow Information Export (IPFIX) {{RFC7011}} capture"


** Editorial Nits:
-- Section 3.  Typo. s/co-ordinating/coordinating/

SB> Fixed

-- Section 4.1.  Typo. s/are present/is present/

I think the original is correct (there is a plurality of cases), I will leave it to the RFC Editor.


-- Section 5.  Typo. s/invalidate the certain uses/invalidate certain uses/

SB> Fixed

[Roman] These changes all look good.  Thanks for making them.

Regards,
Roman