Re: [pcp] Terry Manderson's No Objection on draft-ietf-pcp-authentication-13: (with COMMENT)
Terry Manderson <terry.manderson@icann.org> Thu, 09 July 2015 14:16 UTC
Return-Path: <terry.manderson@icann.org>
X-Original-To: pcp@ietfa.amsl.com
Delivered-To: pcp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D72301A9232; Thu, 9 Jul 2015 07:16:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.431
X-Spam-Level:
X-Spam-Status: No, score=-3.431 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_NEUTRAL=0.779, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QyXkmYnK9AsZ; Thu, 9 Jul 2015 07:16:25 -0700 (PDT)
Received: from out.west.pexch112.icann.org (pfe112-ca-2.pexch112.icann.org [64.78.40.10]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8AD221A9172; Thu, 9 Jul 2015 07:16:25 -0700 (PDT)
Received: from PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) by PMBX112-W1-CA-2.pexch112.icann.org (64.78.40.23) with Microsoft SMTP Server (TLS) id 15.0.1044.25; Thu, 9 Jul 2015 07:16:23 -0700
Received: from PMBX112-W1-CA-1.pexch112.icann.org ([64.78.40.21]) by PMBX112-W1-CA-1.PEXCH112.ICANN.ORG ([64.78.40.21]) with mapi id 15.00.1044.021; Thu, 9 Jul 2015 07:16:23 -0700
From: Terry Manderson <terry.manderson@icann.org>
To: "Tirumaleswar Reddy (tireddy)" <tireddy@cisco.com>, The IESG <iesg@ietf.org>
Thread-Topic: [pcp] Terry Manderson's No Objection on draft-ietf-pcp-authentication-13: (with COMMENT)
Thread-Index: AQHQuSnoRGSEQtOMfEyjGEIz521abp3TpYQAgACoyIA=
Date: Thu, 09 Jul 2015 14:16:22 +0000
Message-ID: <D1C4BF3A.64909%terry.manderson@icann.org>
References: <20150708025739.480.3240.idtracker@ietfa.amsl.com> <913383AAA69FF945B8F946018B75898A4788BA7C@xmb-rcd-x10.cisco.com>
In-Reply-To: <913383AAA69FF945B8F946018B75898A4788BA7C@xmb-rcd-x10.cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.4.9.150325
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [192.0.32.234]
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha1"; boundary="B_3519332178_120483002"
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/pcp/oD8pQA6NbjLkqAtbYfFqrteFU4U>
Cc: "pcp@ietf.org" <pcp@ietf.org>
Subject: Re: [pcp] Terry Manderson's No Objection on draft-ietf-pcp-authentication-13: (with COMMENT)
X-BeenThere: pcp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: PCP wg discussion list <pcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pcp>, <mailto:pcp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pcp/>
List-Post: <mailto:pcp@ietf.org>
List-Help: <mailto:pcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pcp>, <mailto:pcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Jul 2015 14:16:29 -0000
Hi Tiru, Thanks for addressing my comments. Cheers Terry On 10/07/2015 12:12 am, "Tirumaleswar Reddy (tireddy)" <tireddy@cisco.com> wrote: >> -----Original Message----- >> From: pcp [mailto:pcp-bounces@ietf.org] On Behalf Of Terry Manderson >> Sent: Wednesday, July 08, 2015 8:28 AM >> To: The IESG >> Cc: pcp@ietf.org >> Subject: [pcp] Terry Manderson's No Objection on draft-ietf-pcp- >> authentication-13: (with COMMENT) >> >> Terry Manderson has entered the following ballot position for >> draft-ietf-pcp-authentication-13: No Objection >> >> When responding, please keep the subject line intact and reply to all >>email >> addresses included in the To and CC lines. (Feel free to cut this >>introductory >> paragraph, however.) >> >> >> Please refer to >>https://www.ietf.org/iesg/statement/discuss-criteria.html >> for more information about IESG DISCUSS and COMMENT positions. >> >> >> The document, along with other ballot positions, can be found here: >> https://datatracker.ietf.org/doc/draft-ietf-pcp-authentication/ >> >> >> >> ---------------------------------------------------------------------- >> COMMENT: >> ---------------------------------------------------------------------- >> >> Thanks for addressing an aspect of security in relation to PCP, >>especially the >> Advanced Threat Model from RFC6887. >> >> I have a few comments >> >> 1) I'm sure the RFC editor will pick these up, however there is some >>comma >> usage in the document that caused me to re-read some of the paragraphs >>to >> understand. The Abstract is one example of this. I'm certainly no >>expert so >> perhaps have a skim over this: >> http://www.grammarbook.com/punctuation/commas.asp >> >> 2) s 3.1.1, please consider rewording the text "Section 5.1 updates the >>PCP >> request message format to have a result code." to something like >>"Section 5.1 >> updates the PCP request message format with result codes for the PCP >> Authentication mechanism" ...The wording as it stands seems a little >>non- >> specific. > >Thanks, fixed in my local copy. > >> >> 3) Basic DoS attacks (such as state bloat) are mentioned in the >>security section, >> are there any complex DoS attacks that can be leveraged using the PCP >> authentication mechanism itself ? > >I don't think so. Attack on PCP authentication depends on the EAP method >used, for example if TEAP is used various possible DoS attacks and >mitigations are discussed in TEAP protocol >https://tools.ietf.org/html/rfc7170. > >-Tiru > >> >> >> _______________________________________________ >> pcp mailing list >> pcp@ietf.org >> https://www.ietf.org/mailman/listinfo/pcp
- [pcp] Terry Manderson's No Objection on draft-iet… Terry Manderson
- Re: [pcp] Terry Manderson's No Objection on draft… Tirumaleswar Reddy (tireddy)
- Re: [pcp] Terry Manderson's No Objection on draft… Terry Manderson