[pim] Re: Paul Wouters' Discuss on draft-ietf-pim-3228bis-06: (with DISCUSS)

[Brian Haberman <[e-mail]>]

Hi Paul,
      Some follow up below...

On 8/7/24 3:19 PM, Paul Wouters via Datatracker wrote:
> Paul Wouters has entered the following ballot position for
> draft-ietf-pim-3228bis-06: Discuss
> 
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
> 
> 
> Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/
> for more information about how to handle DISCUSS and COMMENT positions.
> 
> 
> The document, along with other ballot positions, can be found here:
> https://datatracker.ietf.org/doc/draft-ietf-pim-3228bis/
> 
> 
> 
> ----------------------------------------------------------------------
> DISCUSS:
> ----------------------------------------------------------------------
> 
> I find it a bit odd that the reason for why the IANA registration policies are
> changed to Standards Track is only listed in the Security Considerations. I
> think this belongs in the Abstract and / or Introduction.

That isn't the primary purpose of this revision to 3228. There have been 
new fields created within the IGMP and MLD headers that need consistent 
policies for assignment. That is why the Abstract calls out revised IANA 
Considerations for these protocols.

If it would help, I could add a sentence to the Introduction that 
explicitly mentions dropping the IETF Consensus method for allocating 
codepoints.

> 
> In the Security Considerations it lists that the justification is more or less
> that middleware screws up unknown values, so by making it harder to make
> registrations, this will reduce the bad impact of this misbehaving middleware.
> I guess my question is if this is really the appropriate action for the IETF to
> take in response to badly engineered middleware boxes. I am assuming the old
> registration policy had a justification that is still valid but now thrown
> under the bus. Has there been any discussion of this on an IETF list? For
> example have known middlware vendors been approached to try and get their
> implementations updated?

The Security Considerations section is virtually unchanged from 3228, 
modulo dropping the IETF Consensus path for IANA assignments.

Regards,
Brian