RE: [NSIS] AD Review comments on draft-ietf-nsis-req-07.txt

Hi Georgios,

> > We are designing this for the Internet (see the 'I' in the
> > IETF).  This being so, security is extremely important and
> > is needed to ensure a robust protocol that is resistant
> > to DoS attacks; protects infrastructure, etc.  In this
> > way:
> 
> You are right, but there are situations where security can be 
> provided, without adding additional functionality into the protocol.
> 
> For example, the security threats within a trusted administrative domain are
> different then the security threats in a inter-domain communication. Therefore, the
> security features required in these two situations are different.

Currently, the suggested text is:

	"Channel security between signaling entities MUST be implemented."

As one cannot implement or mandate use in a trusted admin domain,
I am not sure how to capture your concern.

If there exists certain deployment scenarios where interior nodes don't
have security associations, that is life.  However, I doubt the security
area will let us have a SHOULD for this requirement, as they have not
let other working groups do that.

John
_______________________________________________
nsis mailing list
nsis@ietf.org
https://www1.ietf.org/mailman/listinfo/nsis