[OPSEC] Fwd: Document Action: 'Security Assessment of the Internet Protocol version 4' to Informational RFC (draft-ietf-opsec-ip-security-07.txt)

Warren Kumari <warren@kumari.net> Mon, 18 April 2011 17:22 UTC

Return-Path: <warren@kumari.net>
X-Original-To: opsec@ietfc.amsl.com
Delivered-To: opsec@ietfc.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfc.amsl.com (Postfix) with ESMTP id 3A06FE06F8 for <opsec@ietfc.amsl.com>; Mon, 18 Apr 2011 10:22:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([208.66.40.236]) by localhost (ietfc.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8BImAyqpozvB for <opsec@ietfc.amsl.com>; Mon, 18 Apr 2011 10:22:07 -0700 (PDT)
Received: from vimes.kumari.net (vimes.kumari.net [198.186.192.250]) by ietfc.amsl.com (Postfix) with ESMTP id 48BA4E06E4 for <opsec@ietf.org>; Mon, 18 Apr 2011 10:22:07 -0700 (PDT)
Received: from dot.her.corp.google.com (unknown [74.202.225.33]) by vimes.kumari.net (Postfix) with ESMTPSA id A6FA21B4127C for <opsec@ietf.org>; Mon, 18 Apr 2011 13:22:05 -0400 (EDT)
From: Warren Kumari <warren@kumari.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Mon, 18 Apr 2011 13:22:05 -0400
References: <20110418145750.9745.50862.idtracker@ietfc.amsl.com>
To: opsec@ietf.org
Message-Id: <40345108-F0C5-4514-BDC0-06964B466A6E@kumari.net>
Mime-Version: 1.0 (Apple Message framework v1084)
X-Mailer: Apple Mail (2.1084)
Subject: [OPSEC] Fwd: Document Action: 'Security Assessment of the Internet Protocol version 4' to Informational RFC (draft-ietf-opsec-ip-security-07.txt)
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/opsec>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Apr 2011 17:22:08 -0000

I wanted to take this opportunity to thank Fernando Gont for his hard work on this...

W


Begin forwarded message:

> From: The IESG <iesg-secretary@ietf.org>
> Date: April 18, 2011 10:57:50 AM EDT
> To: IETF-Announce <ietf-announce@ietf.org>
> Cc: opsec mailing list <opsec@ietf.org>, opsec chair <opsec-chairs@tools.ietf.org>, RFC Editor <rfc-editor@rfc-editor.org>
> Subject: [OPSEC] Document Action: 'Security Assessment of the Internet Protocol	version 4' to Informational RFC (draft-ietf-opsec-ip-security-07.txt)
> 
> The IESG has approved the following document:
> - 'Security Assessment of the Internet Protocol version 4'
>  (draft-ietf-opsec-ip-security-07.txt) as an Informational RFC
> 
> This document is the product of the Operational Security Capabilities for
> IP Network Infrastructure Working Group.
> 
> The IESG contact persons are Ron Bonica and Dan Romascanu.
> 
> A URL of this Internet Draft is:
> http://datatracker.ietf.org/doc/draft-ietf-opsec-ip-security/
> 
> 
> 
> 
> Technical Summary
> 
> This document contains a security assessment of the IETF
> specifications of the Internet Protocol version 4, and of a number of
> mechanisms and policies in use by popular IPv4 implementations.  It
> is based on the results of a project carried out by the UK's Centre
> for the Protection of National Infrastructure (CPNI).
> 
> Working Group Summary
> 
> Working group consensus required the settlement of two major points of
> contention:
> 
> Was this document in scope for the opsec working group charter, and were
> the participants sufficiently knowledgeable to provide input?
> 
> What status should be pursued by the document authors?
> 
> Regarding to former, it was the opinion of the area director and WG
> consensus that the document  was compatible with the working group
> charter. capabilities and limitations of the ipv4 protocol fall within the
> scope of operational security capabilities work.
> 
> Regarding the second question, consensus that informational status was
> the appropriate approach for this document. The number of documents
> potentially touched by this document is considerable. It is not necessary
> in the process of making recommendations on the basis of operational
> experience to update the protocol specification so long as those
> recommendations do not result in divergence from the protocol
> specification that would  result in non-inter-operable operation. That
> said, operationaly some such as source routing can be expected not to work
> as a product of current practice.
> 
> Document Quality
> 
> Numerous implementations of the IPv4 protocol exist. The recommendations
> contained within this document have accumulated over the course of close
> to 30 years worth of operational experience. The information contained in
> this document has not been collected in one IETF document before, doing so
> has produced a document that is quite challenging to review from a scale
> perspective. We have solicited and received a number of reviews high
> quality reviews and we believe that prior publication of previous versions
> of document also aided considerably with development and review.
> 
> 
> 
> Personnel
> 
> Joel Jaegli is shepherd for this draft.
> 
> _______________________________________________
> OPSEC mailing list
> OPSEC@ietf.org
> https://www.ietf.org/mailman/listinfo/opsec
>