[mpls] Ask for comments: New draft notification: draft-zheng-mpls-ldp-hello-crypto-auth

[Vero Zheng <[e-mail]>]

Hi All,

We have submitted a new "LDP Hello Cryptographic Authentication" draft,
The URL for it is:
http://tools.ietf.org/id/draft-zheng-mpls-ldp-hello-crypto-auth-00.txt

Unlike all other LDP messages, the Hello messages are sent using UDP not TCP. 
This means that they cannot benefit from the security mechanisms available with TCP. 
[RFC5036] does not provide any security mechanisms for use with Hello messages except to note that 
   some configuration may help protect against bogus discovery events. 

In this draft, we introduce a new Cryptographic Authentication TLV which is used in LDP Hello message as an optional parameter. 
It enhances the authentication mechanism for LDP by securing the Hello message against spoofing attack, and an LSR can be configured to 
   only accept Hello messages from specific peers when authentication is in use. 

Looking forward to your comments.

BR,
Mach and Vero