[Pals] Kathleen Moriarty's Discuss on draft-ietf-pals-p2mp-pw-03: (with DISCUSS)

[Kathleen Moriarty <[e-mail]>]

Kathleen Moriarty has entered the following ballot position for
draft-ietf-pals-p2mp-pw-03: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-pals-p2mp-pw/



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

I haven't sen a response to the SecDir review, so please point me to one if
there has been a response.  I fully agree with Tero that MD5 is not adequate
and hasn't been for some time.  What is the plan to rectify this and deprecate
use of the TCP MD5 signature for LDP? RFC8077, says that LDP MD5 authentication
key option as described in the section 2.9 of RFC5036 MUST be implemented.  I
asked on my ballot for RFC8077 when a deprecation process would start in
support of Stephen's abstain and would like an update on that process.

https://mailarchive.ietf.org/arch/msg/secdir/ga2pIVcGw9WEgBX5MXA9MCmSs_s