[OSPF] Jari Arkko's Yes on draft-ietf-ospf-transition-to-ospfv3-11: (with COMMENT)

"Jari Arkko" <jari.arkko@piuha.net> Wed, 29 June 2016 22:11 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Jari Arkko <jari.arkko@piuha.net>
To: The IESG <iesg@ietf.org>
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20160629221139.30479.45903.idtracker@ietfa.amsl.com>
Date: Wed, 29 Jun 2016 15:11:39 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/ospf/9dU_2yp0IQ1Y_xus8dG1oxqE25g>
Cc: ospf@ietf.org, draft-ietf-ospf-transition-to-ospfv3@ietf.org, ospf-chairs@ietf.org, wenhu.lu@gmail.com
Subject: [OSPF] Jari Arkko's Yes on draft-ietf-ospf-transition-to-ospfv3-11: (with COMMENT)

Jari Arkko has entered the following ballot position for
draft-ietf-ospf-transition-to-ospfv3-11: Yes

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-ospf-transition-to-ospfv3/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

I support this document going forward.

However, in Section 4 it says:

   Consequently, an OSPFv3 packet
   transported within an IPv4 packet requires IPsec to provide
   authentication and confidentiality.  Further work such as [ipsecospf]
   would be required to support IPsec protection for OSPFv3 over IPv4
   transport.

And I had trouble understanding what you meant by this, exactly. IPsec is
required, but is not currently completely enough defined for OSPF to make
this possible? If so, I'd suggest using the words:

   Consequently, an OSPFv3 packet
   transported within an IPv4 packet requires IPsec to provide
   authentication and confidentiality.  However,  further work such as
[ipsecospf]
   would be required to support IPsec protection for OSPFv3 over IPv4
   transport.

But maybe I am misunderstanding what was meant here.

Re: [OSPF] Jari Arkko's Yes on draft-ietf-ospf-tr… Jari Arkko
Re: [OSPF] Jari Arkko's Yes on draft-ietf-ospf-tr… Acee Lindem
[OSPF] Jari Arkko's Yes on draft-ietf-ospf-transi… Jari Arkko